{"type": "bundle", "id": "bundle--6cc68b0d-0814-4bd2-a5eb-55ab4a92964b", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--085ed28e-a91f-4f6a-810f-edf915c10851", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--4d09f7d9-f833-453f-be0a-a14ca49f18f5", "name": "Vultr Paris", "latitude": 48.8566, "longitude": 2.3522, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "FR"}, {"type": "location", "spec_version": "2.1", "id": "location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--7bb755cc-4909-40c5-a849-c15a007666d2", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--a3426867-bad8-4602-90d1-15b25c998990", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fea7f521-cf40-4eae-981d-8faa068cf59d", "relationship_type": "located-at", "source_ref": "infrastructure--a3426867-bad8-4602-90d1-15b25c998990", "target_ref": "location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--0eac5c76-8cdb-4908-a675-08a634d5fa9c", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e01e0ccf-2816-4133-a213-f9b30f2ad45d", "relationship_type": "located-at", "source_ref": "infrastructure--0eac5c76-8cdb-4908-a675-08a634d5fa9c", "target_ref": "location--085ed28e-a91f-4f6a-810f-edf915c10851", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--ce31f175-508e-4e99-9048-a2106b9c266e", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--b25b50f9-5a6e-404b-9776-364c2f8b1445", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4359a66d-487c-4120-b79e-b7c33b203b59", "relationship_type": "located-at", "source_ref": "infrastructure--b25b50f9-5a6e-404b-9776-364c2f8b1445", "target_ref": "location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--f583d80f-d38b-4c14-a642-18c6e6cdc2f0", "name": "Vultr Paris", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5b4effd-a4cb-4d2b-90a8-77ba582120d6", "relationship_type": "located-at", "source_ref": "infrastructure--f583d80f-d38b-4c14-a642-18c6e6cdc2f0", "target_ref": "location--4d09f7d9-f833-453f-be0a-a14ca49f18f5", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--419392ce-f152-4835-979e-f654af5026b6", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe54fb7f-9091-4e9e-a80c-cf6bfc8ce4c3", "relationship_type": "located-at", "source_ref": "infrastructure--419392ce-f152-4835-979e-f654af5026b6", "target_ref": "location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--a8ac0b2e-517d-46dc-b147-52122c9eff5f", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--2efe2558-81ad-46e4-b75d-1084cb911660", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--aea727db-892b-48fa-9748-7045eb52004b", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--476ae9a6-3d8d-4ed6-960c-7a6ba87e9e22", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5b62af-9e3e-40c2-a3e8-0ca8a472c9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.12.229.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce3b58b-acfe-4969-8b72-f0a951ddd56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.162.94.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20af7f5-2850-4883-836b-062f56a3c1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.20.186.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e370ba-54ee-4abd-b40a-7fba4787ba06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48825735-c81d-4fc2-a33a-39f93611196d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.30.231.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fb8881-43a0-4ecd-9409-e53256d3e48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.10.10.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02efd33a-3798-49e9-9694-546806511931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.103.171.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c66be5-1647-47f2-bad5-5fcd7e3882da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.24.34.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3af70c2-2b41-4851-9313-80b8279468cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.24.42.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c1a9b6-be3e-4e3c-bf3d-0201d0e9dbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.25.213.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885af9cd-2939-4d6b-b7ab-22eabb48ef18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.3.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e947a39-83d8-4a6f-87be-9051c78b0f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5015dc81-aee0-491a-90b2-94f5b69ad8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acf3c85-2080-4374-aab3-c474a1d34752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb41b9a-a600-44a6-b8b8-047e9330b7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb1b881-565f-462f-9966-ef40d5937960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a04f267-a7cb-4646-a8b3-0d8fe3a27676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9c24f3-af06-4727-a54d-a49b43f18479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d449318-c2df-4cd7-9ce6-6b63c2415e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a88e1ba-647d-44af-8082-b48809d2ec7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e498110-aa48-4fc3-9dbe-da655280bc19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024016e1-56b4-4a11-897a-cd0b72dd8827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da77f43-1cd7-4666-953e-5bdf850a2adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2f68e7-944e-4bb1-b684-d686ab2f1011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067c9f13-1207-46c4-b69a-b0e6b9da9db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e714e3-0c2f-4f12-8e4b-47b691fdfb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d160c9c-2ba8-4184-88da-18002497c6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95940b39-0528-43e0-9bee-4ff945570883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207061d2-af4c-444d-a554-d40b85f35ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2332ed-da62-4385-afab-023a94916e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ef8353-916a-4c39-b503-b840d67371f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31df25c9-4856-4111-a44a-adf59f2f7934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19ec401-a7c1-4335-8783-9c02ef7627f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75403637-61d2-4b6b-83f1-0088d07f0717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6ab4b1-3fe2-40c7-933b-2a132d3116c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109ec750-6c8f-4655-aec2-58621e2477a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898c1bab-747e-4cfe-a64e-c65931679b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f28988-f681-40d1-bc17-98248621c769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10960d3d-0fd8-4d49-9ca3-a986bcde5c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d292ce-99aa-4568-8033-b4abb5fd73f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11736b95-51a2-4c04-bb88-b8b67a7b7f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a953e10-e01d-4273-a50a-b20b274001e8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c64cab-c2a8-4738-b88f-5faa7b837bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21adbfdd-d2a7-4e6f-8d65-a6dc399af464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c50a74d-bd4e-49e3-aa68-46c6e74306e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.236.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b649be-3d25-4fc5-9c2e-daa892fab229", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.48.197.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcc79bf-fc8a-4c42-a148-2c5446ce707b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e54736-ffe4-4911-b555-3a6100d30d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079f32dd-9c30-47f1-b7c8-4276ae8af9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e26ca5-f835-4192-aac7-8c4eccbc2648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.53.98.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd290e71-05db-483f-b6d1-c7c7c74b1ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.108.206.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbc3942-e5c3-4aa4-a7d5-9fbaca821af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.135.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39642f0d-e963-44b0-a1a0-5ad5bc399a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.55.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3978c3-6ebc-49ca-8350-281f0ab2493b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.91.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f0bd1b-8894-46a9-9907-5a277ca7aab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.133.171.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3aec91-a75e-4bc3-96da-5747f5f94367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.204.251.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8a1b19-7082-4747-9c46-e60514845792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54827892-2e1a-40d9-9b46-cee3680af516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.226.179.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81b1ff9-a7fa-4f73-923f-cdc5282789a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.249.63.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f647db-dea7-43ae-930c-8f96e6a491e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.104.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52fa47a-b584-48fb-ba65-fff55ff8622c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552e6055-d78f-45e6-a3c6-0f51e079781b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62326363-29b6-4cf3-be77-f0fbf73a2e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79614625-2f22-40dd-9c10-796f0f5fb1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81cd2aaa-697a-4ec0-8dde-ad06edd81200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5052bdfe-f8c2-45ac-8f05-ab8544078348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3146c29-7271-4010-b33a-1722b5824404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d0da4f-fa4b-4e1e-8371-622cb2b01b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcff5069-d17d-4749-8993-71948829ef40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4995c3-552e-48de-bb8f-28162881379e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db091bf-9c31-468b-9f03-a295c669e264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603f2188-6d18-4fec-9dc6-18ac1b8f61bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae103eb0-d45d-4ca7-8d34-22a3c8353762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca8861e-a9ed-452c-a511-87ead7571b85", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c9fdc0-0b25-4a27-9eea-2bcc338a402b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954beb98-75e2-4510-99c9-8291750f8b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f828ab4-39b7-4740-b778-8e33784094b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387adfc1-c847-413e-8874-1ea0d1c7b9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d61a9a-a0ad-4a66-9d55-5538c24868a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5e21bc-9bf4-4f1f-b8b1-525ffe68a769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d25ac3-4bf2-42cd-ad39-d7148d8fa59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0c96b1-74be-4b03-9984-c2bb339f803c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580f95a5-d6df-47e7-a8b2-bbba7110d3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfe71f2-4d95-4c9d-9718-bf6df26e5c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714ca27f-d39c-4621-bb38-96705e41757a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42ee0c7-131e-4e2f-8a91-b38909d82578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae015279-a0fb-423d-b527-a7571fbe9db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfc1910-bacc-4ac5-8cec-431d71906d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b94a38-7e4e-40ea-966b-d9a8cde57f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0784132f-e3fd-4ce7-933d-c8745063ba8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.12.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b834f17-75b9-4da9-b7b9-dfdc1a7202c7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.156.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c54dc20-8059-43ab-baad-3c4665e209e0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.75.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ee5be0-0723-4d78-830f-2aa233f148b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.47.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630bd0c1-be0b-4165-9830-eebc913f18e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.89.116.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac26772d-a691-442f-b693-463e5261a706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.202.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4341621-1958-4134-b1e7-9ad407d44b44", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.202.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4417cd1-e9ef-4a4c-b090-d12497d555ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.203.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fef1277-f5a6-4baf-a403-aa193a743475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.203.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08ab556-8bb7-4ee6-b5d9-d09736120831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.100.176.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dadbda0-8181-479a-8398-5a14d7452d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4370383-bbb1-488d-af3d-d5fb08e20f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfb2943-5ef9-4b32-9438-9ff3ada3496f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e563095-ca8c-43da-b361-4c70bae4083c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.79.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0ef7dc-a1e2-4c8b-82d5-990d4ea611ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.81.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aef8a7e-9bf0-43b7-ab6a-3712f53c180d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.141.211.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5156c96f-5dc5-4431-b1e9-b2b437ff8b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.141.44.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248a70ae-61ab-4bc3-ad70-34994d47e917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1d70f5-521f-45b2-98bd-e0af7946d79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.178.43.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9174e4-e6f9-4260-b215-114e3a50694d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.180.109.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52915e8d-ab2d-49ff-998e-107b6a4a6dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.204.4.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7839a18-88a3-402b-9ae6-d1a7b3d8c7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.206.123.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34758151-5709-418b-b172-e4274c24e1a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.149.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87393caa-c516-4ebc-b734-7e4baa5e0fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.4.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2a180e-1e29-466a-a628-9ae342f805f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.214.117.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58199363-8f25-4e97-b81b-f23798f14bcd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.169.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841f5f3-2a41-45ed-b42a-2da0dd9681d4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.22.81.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890bb91e-a1bf-4ed6-b063-c31003357f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.221.220.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db2b215-13f2-47cb-bf75-ef5a7470112a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d7a326-7b41-4da8-8cc2-0c692271064b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.38.104.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb95aa4-40bd-42f4-928a-a9e0274b7f02", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.53.12.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26919667-5ce0-43e8-8904-9786eb165250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.69.167.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b9bf4a-3f30-49c4-bb93-7ccfb36bf915", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f3bd58-55ed-46b3-800b-4090926eff46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a94f50-6035-4e0e-be4a-7ae8d4bb9b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ed22f0-6215-4413-976b-673efa87ab17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.62.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0ce0a8-f4c9-43d9-9384-f3a4fe7201e9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.113.39.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e76527-dcd1-4b1c-8369-56ed477d851b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.114.147.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2546909-aa6c-4d49-95ef-0505f5893d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.20.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedcd99d-d4c5-4289-9fa1-1bdc61b2361c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.116.145.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fcf3b9-7b5d-400e-9932-2626e18fc666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.29.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d42cd8e-ae3a-44f4-8f91-91b6ed8ef709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.204.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b05309e-e57c-4718-9b82-80931215279a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf07f45d-a24f-4f51-9544-778f2fcfb863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.66.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511c852b-a58b-4087-94af-7fb0b6094089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f13f79-23bc-4ce3-bbd4-07cbb0ab0734", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31fa668-02e0-4303-ac09-79a2dbe4bede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.126.173.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bd9cd3-7784-4d8a-9cf5-a5b5827dc22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.13.88.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3998840-12e3-413d-8f45-f2f75c6228a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58878e6-e59b-492e-a24b-0665b5dee94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2643e8-d3e7-438e-becb-cc235ee12a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.140.35.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c95ff9a-ceab-4f15-91dc-31dec3cb6387", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.238.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac188c07-67a5-48f8-aacf-5e8bac7be9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.144.156.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36aceaf0-64a3-49cb-95b0-d173e7613e2b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.159.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5d066d-973c-486d-8dad-b204981ef2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.246.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b711333-8cd9-4abc-a9dd-902eefdea073", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.148.100.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456056b6-bc9a-4d91-978b-f8672874d429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.100.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac139cc-22bd-40c8-8d29-17cc858c446d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44d9517-b5ab-419a-8525-0b1af3fc7720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5897c9-fabf-499a-8889-b7b725c3f52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54905a76-8247-42cc-87ff-e0cde1b4c305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971e7c1b-00ef-4d36-9f63-1473f436858e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.110.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e44a82b-e5b8-44e8-9465-0b8f9e8d7baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d441bf29-1e8b-4953-9e43-ee3de59dbc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.53.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154d36e1-366b-4ecc-926f-599c7a66a696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.155.197.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0670d9-ef2e-4a83-94c0-7aca42ef0184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.155.197.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab7cc8e-2aa2-42c0-84de-51b142f98568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.156.16.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccee1e34-ef44-438f-ae74-d9926d046b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.209.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58828e0-4acc-4949-902a-dd5527149649", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.40.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0137af-5372-4741-859c-c2c8c6433883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.158.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b66008-aca8-4fb8-8740-1bb548a20499", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.182.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b1e2c8-9c91-4235-a9a2-0ee0d86fe0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.183.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90892ef3-5d6e-4bad-9d21-cddd6697b08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.65.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d582d58a-2955-4a32-a197-a0e4a910ace3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.169.194.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08276bc9-28fd-4ae8-810d-cbe2ecbff5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcf3f23-a283-406f-8e32-4c85152999b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd7b08d-7c99-4e37-99ee-36747a565467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd9a13a-4e1f-4b21-8326-ecc306ba5638", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d88dd5c-eba6-4e6f-8ba5-a2e42b4c77ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc29a4b-378c-450b-a623-cea3c6cd4da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc70f395-ac24-442a-a34a-6aa89342d73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9466f541-fba9-4425-a282-a05116d662a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.178.194.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed45d79-3019-4b58-941e-504472e092b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.178.21.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1ce4e8-054e-4835-af26-56261821d54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.126.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff59ba76-aa3c-4ccb-967c-af6cfe3fc3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a803d0f3-eb1a-400a-a9b7-acee25577d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.255.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88719571-355a-47e0-9417-e73aa98635ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.188.169.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd05654-78da-4118-9f9f-374f08618520", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.234.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc75544-6813-4153-a034-0aa4346d22db", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.235.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcaad6b-5d95-416e-a13b-70c54c7684f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.88.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20061fdc-b35e-42c2-9127-50f64183f11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.96.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7bf799-2797-403a-9990-5af65960365a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.124.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b149bd-d30e-4abc-9c18-2a770e8fdb88", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.14.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc550ea-2b26-458e-9205-83b91a98bd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfc6f61-5927-4e8c-ad5c-a24678c586b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.107.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75d9b4b-1214-4032-8c49-dcf0f97490bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.243.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde0788d-6dab-4307-8808-a8b489b735be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18da43bd-3908-420e-8a9a-8ecad10caec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f959a514-5a44-497e-a61c-1310308d1750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e466992a-509e-45b8-a94e-a7a40bf59378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc134b9-4b57-4031-8645-2cabfc776949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83fab07-ae56-4001-900a-d918b5c91334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6a3f29-890b-4b50-a6bd-faf7a0c511c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdde7d1-d44f-46ba-87fb-b51b3cdcf7c7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.208.219.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3893e4a1-5191-42af-ae2a-9ed2cc5eb281", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.21.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5fd461-8448-446a-8c87-b579c47f96be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8a75a2-d410-4102-810f-73bfd9a53734", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.5.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c0dfc4-0931-4d3b-8cb2-5047d945c768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca01814a-1702-4887-92c9-eec93e80bcf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.153.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235a6e40-e229-49a2-a066-b05501c11d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.226.154.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccc0580-50a8-45cf-a3e3-5129e6c89069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd80eb7f-9f13-45da-8474-53b3e158f841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb48f26-c637-4fce-9947-d79f84b9bff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f559111a-13e9-419a-8817-5d9cd1a493b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab8702f-3305-4b47-af51-4d8a849ed3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4207ec-4eb4-49ac-86ea-a605636a2ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a8b3f5-7a73-472c-a707-ca8ce5533063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7589d9ac-6e3f-4e36-a25e-b8e0a1122277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55630e07-8108-45d0-83b9-544fc4ddfd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02c5ccf-e402-4d40-9597-cb4497753a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cdbcc2-1865-4b49-bf68-b559faac53ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a0a2ae-1364-4205-8000-5b0e8a29ac8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34dbfc9-9222-481b-9105-1840a2d538cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d47b87-af85-46b8-9aeb-4b981f6a3084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e147ae8-10f3-41bd-ac72-c18b0dca2144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e54811-a6bc-42b2-a031-4b94db290ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1e984d-dd55-4fdc-aef7-e0a154f402b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f265e5-bfe0-412b-9b8f-bb391d75c510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f9666c-dab4-4e50-93de-e67a472ddbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a43bb7-40cc-4979-90c8-8149163e27f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.194.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc81bff7-29d8-4adb-8daa-e11298b4a163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.239.175.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc606949-e4e8-44dd-8cad-bdd57bf2fe16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.239.41.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cbfa6c-5462-4c3d-a673-184350465ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.116.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaf4452-8d22-49c7-83fd-a3d61c38935e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f3274f-90f6-4d73-954d-60d7ad4c758a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.86.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5f998f-2c05-4a98-a430-23bd7ee1c971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48f5c5d-098f-48f8-984c-9f8e374b6197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c33fad-2109-44d5-97af-aa610b44913c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ebd1df-b10c-4f8b-9bfd-da1ee339c1a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.30.1.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90210f83-f9a0-4fe5-8168-012e18bd67c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e3c596-605f-484a-9c2b-2d3470e0e387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.58.96.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a858c7b3-d70f-46f1-b033-8642eb06cbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.67.198.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6e21d6-661e-4fb5-a91d-7c325efdec51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.11.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b57d172-f911-4f43-87de-4b5c1794db63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.180.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2795ce44-b526-45ec-a574-8949d201319e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae8b080-df74-4e5d-9c39-eb8898a5f992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.198.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451f1864-2930-4da9-b292-581e5f8060bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eed0ed0-ce03-4613-9763-9b053d0ba7ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.107.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea5c64f-dfaa-45b7-a7d5-4341de73a6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324b2693-83c3-42b1-9630-17c39ecf3d62", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.210.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bc6b0c-1701-49bf-ab7d-86dd44e2f27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52259f7-ed6c-48cf-a99b-a26e977488ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.1.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bbb3fd-63bd-4ee9-be0e-e4100536d9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.3.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2f8531-b5e4-4ca7-a994-b49c470d6c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b9075c-d730-4e44-8bf6-f0b6921b133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c11267-5c36-45de-8522-c126de29a254", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.198.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade14ec7-afd6-4d50-a0b4-0d1b8f4a22ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.89.183.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e9716a-29ff-4757-82f1-ef6ab60ba39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb31ad18-d99c-4a71-914d-9f4f7fd3b4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.99.36.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f45a96-1dac-4b8d-bf33-49141b7037d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea6e943-2a49-4a8d-a01d-4a3cdc7fd160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcb937e-ad33-41fb-b352-708fd76cd20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.188.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ee2512-446a-4f2b-9c85-33219b29d0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.49.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd5719c-b2eb-43a2-b162-7c196556598e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c6c299-fa97-419c-a284-d2c6f74055c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e018b5f5-1c1f-40f2-928d-e698b188c2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d4199d-c4c7-4a30-945f-a60d05ff957a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daf7114-113d-44a5-aeea-5b3e55d745b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd693d1-16be-4c52-9d36-0155d1f6087c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f9523d-c914-47c5-b2ff-1e8962a27209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520895eb-b787-4ae0-bc83-ed760ecf0fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c37afb-05ea-4c34-9e25-ca1d9db1a841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6747ed17-825a-4649-8dbc-86f58de591b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b426eac-1e7e-45a5-b02a-a4112762e732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d32dc0-71ec-444a-a964-9043099bce36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01666153-3346-493f-a6ba-d2dad2663ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53916004-3bcd-4da5-8c77-9bc6bb6ab94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720b37cc-d54d-483e-9b0f-20026fae61e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4365b07d-b971-4bf3-88fe-2c2efa5772ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31220226-a140-4ec1-8d0a-7f51a76617c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ae2e75-9db0-4c0d-a51b-6dfa7fed7906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.0.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e514bac3-9533-4ad7-b943-c308505c32e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537a6711-4370-43bb-87d5-d217aa2842f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.20.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b4d16f-670d-4b5f-9aae-708e1bbf349f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.35.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5146a43-2aa5-44bc-8528-d83958e21f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3444a0-50a3-4119-b4b7-ab330e7ae6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e5756b-da2b-4e6b-86ff-7ac2ad6ca5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.145.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d7023a-7800-4004-bd0a-39970665b3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.147.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df684f88-745d-4389-a2af-98770e3a8773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961e0921-60cf-44c3-923d-faa2d7f017c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.8.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf93dd16-0adb-4b88-8035-4546193929c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61ef9c1-33f6-4b6a-b7bc-49080d7a2d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.235.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3408e6-c2ff-4b4b-b475-37c621f2117f", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.4.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e57b1db-ef35-4a4a-9ca4-38454c5addac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.206.128.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1669f3-9dcb-48e3-9463-caf9040c17ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4679da88-e245-44c9-b926-c160d2a8e2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1987cd04-250b-4e63-9f3b-5e80f4cf5bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.201.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bec1ef-2c82-42c0-b6a1-4764fdbc8ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153d8e63-f744-4d00-968b-cb6446c1e7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.75.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7158f150-0759-4bc4-82c2-36331791ee25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b3daca-bb12-4154-98d2-b9b170ca36fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d2ecea-77e2-4ca4-9da8-6bb6b01d8684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3ae64c-e436-40cd-b23b-0dd9dc361b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60410551-7f74-45f5-8270-df2fe15a3764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660e8959-8ec3-49f4-8df8-76750387d144", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369ef73c-b1e6-49db-9a38-5e465d09c1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77372dd-3ac2-4a05-8e07-c6035964a1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2f940f-7521-4f7e-a3c5-168224c68d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56d25d7-56ee-40b6-a389-4f479914ea96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371dda67-fe1d-4d46-a5b9-82f2aefc8491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a463762-fb00-47e1-bb62-55950a62231a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.129.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e136940-02e6-443f-b935-9ddece2e04dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.142.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa89516-c4ef-41b9-ae74-4e9b5991b51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.157.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851828f6-2815-4dad-9356-0de7cc7cda53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.158.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d454df-52d7-4d95-9f46-afcd39360f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd81f46-e7f1-4032-bc6d-445576ed9d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0caa365-2996-46b9-8b12-1c200f32d8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.53.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35657bf0-7571-44bd-afb7-330439b6adba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.67.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c635954-138a-4a3d-8aca-b07a23cd7598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7f57a6-763e-4cff-98f2-929df0e58fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.113.242.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c125c6a5-03d6-424e-b0a2-74738b6e0630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.168.133.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb315909-e847-4aed-847c-ad564b69fd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.168.65.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad75b46b-0b18-4c9e-92ad-04b8c65d2c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.216.69.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfebae2-c2cc-4627-a716-0e6b3a3bb6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.106.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b7a159-7270-461a-9471-cb844feacb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.120.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e4dc26-0ecd-42a5-ac1d-c6856ffeeb01", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.46.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11114e1-2c1d-471c-bff7-f0a42443dfaf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.70.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457a6bb2-8e55-432c-b3e9-77cea4a07123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.75.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233bf244-cb4c-4517-a1d7-77a0ee06d5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.40.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625a60b2-b939-4dbc-9ed4-7b147d4bf2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.46.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c6d743-4fb7-4aa5-a643-8fb258133ac2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.254.54.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63c460c-8621-4323-b2a4-eb76b6b1bf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.65.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae57f67-d292-43bf-8ea3-e293d3866e8d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.92.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b96d31-e49b-4530-b583-2785015a6690", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.49.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06a45f1-aa39-4a17-aedf-21dba82fd6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.12.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc2e237-027a-4513-b33c-6545112e74e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.13.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d49d40-4380-451d-8a8d-5b37e33818ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.14.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0a5084-d05d-454e-bae0-2eccb25048cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405a2ed5-76b8-43a0-98ad-40726c75b88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bf5547-1ec0-4c15-bc7e-6d9bcea79f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05342b69-8493-4f2f-b04c-a13041ccaadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae8f4e6-a3e5-4ed9-8d07-554f263b3b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ecb151-1967-4662-b4c5-7d3ea4d9b053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3446b83d-0efe-4c9c-8088-5b12537a7677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cece743-d540-42cd-98f9-2fbe0dfd4d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e1f707-3822-4aee-b42a-0eec23e1ac9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724d1917-85be-4f26-b905-6cd4d73cf4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e37361-f170-4014-9347-ba80e72e35fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4740a7-c39c-488d-bd6b-4743ac962316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.5.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33dafa6-be3b-4904-a99a-b5dfd6691e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.9.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b13ff6f-5099-4361-adbb-00d210b1dd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0091b6-fe24-4094-97b0-393bea1dfbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9263eb1c-be55-40db-a15f-aa8759cb95ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1892ee53-4c42-44e3-aa1d-5480346c9e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235a7ad9-2136-4506-9831-f0320601ac5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cc7f43-2860-488d-b416-b3c7199b9583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c5bcfc-1fb1-40a0-9624-0a5dc102703b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f7a140-7a3c-488f-9a8a-a8f0e1220900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96746794-82c6-44fe-8f7d-dbf5cee5ff44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45876d0-c2bd-4799-9d6f-06831de37bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e973b9c7-0c8c-4acf-a76d-5372224dd0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ec34c8-2325-4215-a988-0b4918737b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a2b529-297d-4d65-8d00-462f9ce5b86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4be4df-55bb-453c-ac17-c4e6668fb8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0dc52d-5af8-4e4a-a72f-bd4f04b0db10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea35601-ebb5-4a08-9851-e1d58c93dc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff6e742-c017-497f-89b1-43b0466e5659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4110cb-6c1b-44a6-ba5e-4e45bf046574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3796bed8-b024-411c-b39c-f89365e80622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb41753-e02b-4e48-8c26-c3b30a526081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d42611c-9cea-407e-8026-a44db0f587ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bf0507-1c4d-4e58-b867-fd9e3206a2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9da3ed-cbd7-489c-9eee-6252927a6106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c484bd8f-f581-4675-b4ae-793d14288913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5bcf53-50d2-4233-afb3-a9f7282f083a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf77cb1b-3c41-4494-beaf-13ec86dd5954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc648cb6-0244-45bc-a569-ca657cf48ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fe9cef-0a0e-444c-9ab1-29031a0a5d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.119.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a58d6d1-dacd-45fa-8962-e6c5f1df4058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4dc2e9-0c7b-434d-9e83-04b48dbe9f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78a1ccc-a61d-483a-beff-c393442139bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d200f5-c94f-486e-a729-c25969ab7105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfac6e9-295a-4c79-80bd-00f94ac71910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7241b274-30d1-49bb-9dc9-2ef0f3e3703c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5afc1a-f0c0-4801-a935-5e85e78596a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec14afd-07d6-469e-ae3a-f5481cb753e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8730df-1ca3-413b-92dc-a501dd8fe2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e29150-27e4-4ac8-9586-0ca2289ce223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711e7b41-cb3d-4958-b9c1-476712463f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6bd208-6903-44ec-a162-042b57f65907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14943cfa-d8c7-4859-9d0d-2f1d8256a70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87725899-1a08-4cde-ac3b-d191abcaaa77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.230.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f10598-167d-48ec-925d-76ae58c7995f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.80.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cbbafa-92c5-43ff-a8d8-31486ea03360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.88.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a24c165-5680-400c-ab1b-59f68c8980f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.122.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2a8989-adf2-4a61-be77-d3040a79d753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.146.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d9071d-3e0f-4574-8dd6-5efe27226da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5677fa-530f-47fa-903e-8b1980fbf78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.37.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f55c13b-60c8-4686-a2d2-a08f29aebf54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e5ffb3-97f0-474b-8361-0207b3cbeaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.141.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055f970d-e699-464b-b9b0-d3ee062a8df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.212.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0c22e2-030f-4317-8a0b-7d2c371b638d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.1.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66052d62-dfe0-4506-b2ab-afe55b9a3536", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.176.102.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b04c26-cb8c-4985-9b3e-2e5c47d8851e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c27e348-467f-46c2-9b5c-5f7c94f2724b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.2.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb83efd1-361f-4683-9387-8d3880a73cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.22.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6841eddf-6b17-42ce-9bd6-ddd07d761032", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.21.95.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2170fd3d-3cf0-4b2a-aea6-c06dbdcd9377", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa065006-4f70-4a0a-b808-5739008e402e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19281fdb-794f-441d-b046-1ccb2b63481f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f343fda-b5e1-40c7-9301-504745bdf7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1377b77-c3a1-49ba-b034-96f7e6bf4302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9de3a0-fe2c-416e-9217-9409d9b80fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea372b16-2c8b-4b66-8d84-d46262192dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8973ec1c-aa5c-4e4f-90db-0c181a1e74a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f9a7b1-60b5-43b4-b6f0-9859a3da73b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af009e4-fa58-4ddb-9b4e-d0c133a7d14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.172.54.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab9093a-4933-432d-b048-5b9fc052f6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.172.8.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b53b74b-e051-4d33-89b2-0a4455853f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.186.192.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8052da3c-08b4-4ea6-94da-e2e4e9dc1949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98169d9e-91d7-4fac-af53-942e513d0c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0e830c-0737-4ecb-a554-df9e863cb368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6486834c-3a3c-4e4d-a684-a07e97471b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.238.224.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff92a9d-40e8-4a57-90d8-050863c1944f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.63.88.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a650e8-8c9f-4795-9b6d-5fb28f384113", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f370aec-0cb7-4246-be4c-b83e569186a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.138.2.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c306b6-fe44-4af4-9f14-247d65bcdc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.138.37.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9da0353-d1e7-4f36-8675-2b4cb037e9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.152.20.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70489782-3bd2-49a7-b335-119034a19c4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.180.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3156974-643a-45aa-9704-e84970e9137c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.225.255.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85745a3-4ef7-4713-a9d9-0b11f8442495", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.240.237.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f6606b-35fe-4b9f-8587-2ca47c677f68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.201.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991dd1d0-a65f-4305-b7cc-f0f0f768f958", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.202.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fe3044-59fb-4d14-9d77-ca015a96a051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.18.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e13fbf9-ba97-4e1c-8c7c-67e7b8dc0b46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.42.208.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d47e390-ef48-442d-ba2b-3367129b53ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.5.98.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c525f9-b76c-42b4-b624-eaac30e2cf79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.11.95.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb301601-67a7-411e-a6fb-853a26edfdf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a60f3c-f431-48e1-afb5-dd270913a6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.118.181.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836e9074-14b2-4b6c-8f50-065b1c09b7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.152.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a67da3-f4d6-4167-aac6-3a5f24f69392", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.142.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6449074-643b-4e56-8d1e-9ab995c619f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.48.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d34b98-52cf-4ec9-b175-4526375c4384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.29.38.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0489e92-2c7e-454c-a0f5-8d561149b1d9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.32.153.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37caa7a4-0fe3-4b74-807c-4da202f10b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.33.71.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869ce96c-f1dd-4357-8c38-a1d5d3421cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.40.50.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efacd84c-479d-4b42-965e-5de9a9a1e9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.53.0.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9c79eb-5fa8-42df-acbe-e4eb38412a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.68.107.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9259aa82-7b00-45b9-8cce-efe1ef6d8b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.159.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9616e7cb-8cca-45d6-a6ad-244479cec338", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.73.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e39127-36e8-4a53-abf3-1b750cbc1c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.121.24.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f17662-2b2c-4715-933f-af5d07b5d742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.122.236.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59941bb-a861-4284-87e2-5deefc5cae2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.208.185.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33191f1-9bb9-4f5a-857d-95a1f93d8be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.208.246.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d5df19-e595-4169-af39-7ac92dbe6824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.209.15.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84cb64c-0685-4e1b-ab27-7aa8123e42f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.217.203.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714de926-3611-4275-a3d0-b8ae99831742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.26.50.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d376528a-3a0a-4688-9f70-e72763ed37ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.27.178.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de79164-ca0a-4a7a-b36e-a8cd0708fc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.28.234.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d286bca-3c5c-4a10-b9ae-f54a7a997b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.38.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfeeb69-4cf7-4c8e-b409-a2120547c004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.96.234.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1590b26-5c1f-4119-8291-a5d2200298ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.121.105.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d08770-ceee-4229-ab89-585d86e3453a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.222.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9321b806-bf58-4bee-8e07-c8aafee16c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.172.115.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7e3b54-819d-4614-98d9-02baabd597f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.172.85.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05ad601-09f2-4dbb-b22b-15dae732df84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.173.203.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d223b675-5067-4ca6-a4b9-779922fcf8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.113.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f641f5-4ae6-4334-8b46-94501d9cebcd", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.248.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdec89e-ca16-42a4-a9d7-27cff099d7f5", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.249.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52097330-403f-4723-9c55-0f2b26d7fe2e", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.249.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d4893f-3e16-4ab6-bf68-5797fec5fca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.188.24.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bdcd0d-0065-4c61-bfcc-a0ed26a21832", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.193.234.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cfb437-d67a-4a00-9086-6fc2b7ae5423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2767ec92-e808-4aed-a780-4529f73868d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.215.188.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086680d4-ebda-4fbb-8ae7-1293c8360757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.44.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4fe199-1852-489b-aa9a-bfa946ce26cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.44.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e007a0-715f-4803-ac62-23c8e4de5570", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.47.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d32d456-49f6-4ccd-92cc-d4af0d4e0457", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaff2b3-81ca-47d0-b1a5-ca92d04fdf04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5897b4-94ec-4979-97bc-61f3533016e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d8fa67-f985-48b0-8edc-fa33f108383a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdd7af1-e357-4ebd-962b-f09ce1b92336", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e79dad-f497-4c7d-a6cb-179f94189f91", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8c1724-d6e0-4cbd-9024-1c414dfe2afc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeb2b84-c604-4698-96a6-94bac4554ad2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f904230-dcbd-4ca8-8636-8c64ba0262ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb9063c-7112-496e-929e-8442e00888c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57390da-19f4-428f-a558-c07db34117e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1927e458-b019-4cca-8956-5c1c31748942", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdaef35-ed47-4b18-8b1f-1508452a198c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d745ec03-5577-4d0a-ae75-22ea3412b1d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39009421-662b-492c-986e-935f09e5c0e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2ce32c-d0b0-46a2-b34c-1e0ea2e49426", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e578a133-c848-4ba3-9d84-95970ef2cf1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eccf4c4-63ba-45d5-a12f-0b56a2434dd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe773ac-b95a-48a3-b322-445a20c3c4ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117b1363-1245-49da-8d22-c06886d88a1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8feb4ad-d8ec-4e5b-856e-bc41efc5225d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.149.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc2ed42-9839-4cd6-8249-792652140870", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfb08f6-8bdf-42f0-a442-007d5a4809ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deae25f6-a64d-4750-b935-f845f0db070c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67df55be-dde1-4023-a633-b909bb2de5b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58eb3c0-97a8-40f6-a029-f3518efe098a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc957d26-4cc7-48e1-84be-2e19b27c26e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b59a4a-62d5-43eb-b75a-6433472066a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a5ac4e-22e3-4cea-8b02-301f2942549c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b98a1b-b29a-42be-9600-53a4a99de095", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4fb1ff-955c-431c-a7a7-effdd840d3c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f824c254-5961-4c09-875e-7c9122c02b52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1510a46-2b8f-4a14-9c61-94f17603d3fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4ffd90-3bf0-4fd9-a4e7-827b5b470b71", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03785398-4780-46a6-b339-fe09ff4dbde9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae324f2-09b8-4313-8af8-961c70d46629", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.226.237.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256ef5be-e5b3-4833-9c28-f612319bc4d7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.103.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fa6179-9a7f-42df-a18e-bee913afd3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.34.8.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710d2997-f988-4064-9af1-12b3bc349735", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9d43d1-db84-4598-b486-871e0b58f710", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.92.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bc6fb9-afc9-495d-bd81-d5baf68ee265", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.92.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae57c1cf-8f87-4976-94a8-bc4bae7e514e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.97.190.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3999ee48-6eaf-45cd-86db-4b29147b041f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.98.177.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5601ddf9-5a0f-4024-b5fd-ffd50cb32d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.98.177.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725e4346-c51b-4382-a7df-2f969ae2bf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.129.113.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42022415-d14b-49a5-9183-0c7b217f22a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.148.205.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1255897-50ad-48d7-81bb-831eef8bcbab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.143.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d924b57-09d5-44f2-a1a3-ff0cadbe5a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.172.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23c1ee4-cf6d-4079-87c0-a3bfc232de7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.36.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a6711d-c545-4dbd-a097-7f8e53a786c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.45.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4342119b-8faa-417a-9794-016d2175ac97", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.46.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3657e86c-68d3-4c00-93ab-a44fc44b6d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.52.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5130cf5-683c-4208-bb7f-d3ec466d9bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.36.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce40817-6826-4de6-89ae-6da0a6de4c6b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.196.24.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34ed270-9d83-4e4a-89f4-bbec2a1e228e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.198.44.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c259c4e-6fef-4860-918f-af254d17fc47", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.199.212.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d348e0-bce4-4aee-8a97-9229e6874455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.206.232.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f67e5ca-28ce-4b11-8588-37a29afafe6c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.10.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85f3ea5-d05e-43f3-9c22-6c767f944578", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.217.68.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce5f38a-82c9-426b-8aed-19d2d8597dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.44.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6424bc-ee7b-4fc3-8852-f2f48e55bee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533e8cbb-b5de-4a4f-845d-076a18df5c64", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.74.224.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a339fb-9d2a-4848-8181-62bed6c81485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.104.51.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160baa7f-eae9-4dd4-bfe2-6b23dd0cdbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.15.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018942c6-c3ea-42d7-a7d3-bbd6d738c663", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.155.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75abe6a3-24bb-4b61-a1dd-1b4ea35aaea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.208.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac53072-825c-49fe-947e-260822adb303", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.214.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2e0f37-93da-48c5-8b9b-e365759eebf8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.9.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e025c1-0173-4f9e-a09e-c1bf7b16d3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.130.171.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370beca9-29f6-4d69-89e6-408fb5b3906e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.147.107.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71a9156-a3cb-4ee0-a16f-93acf2717b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.129.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10b836b-e387-4d16-924b-c9fbe3e6d67e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.217.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e64c0b-8bd3-4a9d-a1a7-547b4432734c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a4ea40-1711-4960-940c-1c1c061d9fdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.37.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a8e92a-82d5-4f39-bf15-7910f4ea0bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffeb0ea-c517-416a-bf1f-79363fcc1a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.211.150.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9c395f-2257-4df2-b35c-8c6777b1ebf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.254.112.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2069838c-1015-4724-98a1-688b58b32d85", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.71.136.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f1f91d-6ad0-4123-abf2-21e9b8215038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.90.227.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16347b1-6a4f-43d7-bb6a-2e9a9317402c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.168.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f48fef6-71a5-4453-96d7-af8441fae07f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.175.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f2011b-3bcb-43aa-8732-1d7c53a32632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.13.171.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec54da4-d167-44fc-928a-1793ff2175db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.177.102.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b64337-9c93-446e-97ac-4974990091aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.183.131.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3534bb9c-1836-482c-b15b-fd57efb445eb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.191.91.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38dafb9-e054-441f-9611-10a3be1b3cd8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.216.96.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f43cb99-5875-45a4-8f77-65db019fcbc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.242.120.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a3c55b-6719-4505-a416-1ecfd2301e86", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.142.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1b0db6-6fa4-4072-b555-031df5293951", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.247.81.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399686f0-3893-4443-b325-bcf41aabe8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.46.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2a3ad0-1da2-4b76-a5ba-dc04a8e1cb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.70.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c085d0d8-7ff0-4cb4-8aed-7a809e446358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.76.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e388010a-3bf4-44da-8dcc-cec42486aa10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.110.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe9e496-0423-4b33-9c9f-a266a07e027d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.215.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b321984-8247-48f8-ae30-7a6f3c7b06fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.51.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5fa421-8a12-44c6-a323-759d0e279800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.226.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7710a8c-34b7-4627-9389-abe73be6bc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.232.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc816ab0-6d45-4c98-9ce9-0b4041d3ed47", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1e8880-b7fb-42ea-877d-3018164098ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.122.119.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636385f3-6f83-4af9-8b7c-0d2c71e5693e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.164.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bf81e1-3764-44cf-9d5e-2a8768a2fc96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.116.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b50e608-dd5e-4ee0-ae45-6c0ba7eddaab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.179.102.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbc4508-2b50-447a-b971-b1b176ee46cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42938e8-c007-4871-a177-d0e542f502f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614bd20b-1ff9-43e7-81fd-2cf969c9a946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46c0091-12af-4785-863c-15264163a962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f210c889-8e80-487d-83cb-89af95a1bc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c4a4ae-4893-4ba8-b832-b00e2b2fe919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20da6c50-95e5-481a-914b-90078ac55cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bb4c75-e541-47b2-91cb-0e7cc5f5b334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcc4a0e-c138-48f3-bd7c-d330c6c97694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fedeebf-e1bf-45c0-a957-0d94df524ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e1267f-d0b8-4a0d-a5a4-41027ecd1eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9356e4-144b-413c-8ac0-0136f687f375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ad50e9-ce46-417f-80f4-e3e70a102f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9a0829-3d1a-473a-9ffa-e4a88295ad46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef39a5b6-555c-4a12-973c-c01a7caf12fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eb56df-7da7-41c5-8b85-337ea2d56959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713f529b-086d-47f3-808e-3629729c7241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54766f36-9172-4121-9f23-b159c214b2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8164c1-ee6b-4b8a-a0d6-f3c849f2ec40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81bd635-39c8-4611-989d-a687f39daf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269515ab-ea34-4435-af74-13de869c625d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a280a3d-98dd-4a9d-af3e-aef97a59acd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0853832a-9ba3-482d-a070-e1f7517e5900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257f0b8e-76b8-4e22-9beb-cbbfed65da44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3002db-a127-48d8-92c9-6353b34549db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1eb156f-cf6a-4850-b058-b589988e0562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78e6b34-b41f-4263-a0c8-5982907c6656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328d4f72-8b96-4881-b8d8-c7e4197a3b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d79497-cad8-4743-b3c4-06ba343f5bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5b3ce0-c33c-4d52-a0a6-a1bc205042c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ded22de-a8c9-47db-a5f4-a1495f6c0679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a07c30-1752-4e23-9b5d-d9fe08732daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d24ae-1597-4206-a311-f172f1d36625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b479fa1f-f634-4dbe-9eea-80b0c5f1d0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789bbcb7-9d9b-48aa-87fd-1b4eedb03902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa95ef1-abcf-414d-8bcd-8ef34c1dfc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8b60ae-b985-4c8b-bcb1-f00ec7cee6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649f8080-ef7c-4775-b37b-975b36c9b902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6356cebc-f6ba-4702-86d5-ae4a64d14419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101276b7-b31f-4bef-acec-44bce509ad9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5073a83e-0532-42ea-9493-6b527b6d45a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db77f317-21b2-401c-8463-3aac4e2153fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028807c6-f53e-4ddf-a54c-1a0a22e9faee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63faa99-2858-4cdb-8a04-04a2c2f9eedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c43b10-607c-4411-b651-a6b08c086b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ce63f9-52a5-479a-9efb-a9c266db1784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b836a2dc-1578-486b-9e05-2494a84f064a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.92.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3894863-fafb-4373-9bf5-6b1940279dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc0649e-2748-4ae5-9a8c-76e7afcdf811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.122.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7ac3e5-ef48-4bf2-8cbb-d8caefaa90d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.25.186.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e883714-8f38-4c57-84f6-fe4bd46d15dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45638662-777b-4bfb-a7b5-9e331f25c4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d89e81-4cda-4e0d-8650-4bd9b9aabb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f357266d-716a-4254-94ef-4ecd6547c391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cca757d-94ef-402a-8da1-d38f1ea05edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e9dac3-1159-42c2-a56a-ca89a00d4e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb73e7e-d4a4-43f1-a951-393807606038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cf3e96-8756-4738-b51c-0f14b8796de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f109b5d-3281-441d-a7a8-f665c07432a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.37.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4abdc5-e43b-40d4-9921-44f28da0b948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0620630f-9a9e-4724-8f07-f2cae0587ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.35.127.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962e9b9c-e710-4fb0-a425-97d6e5633880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bae2fdd-8c6c-4fe2-96c8-ac874ed381e0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.72.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d19556b-365c-4bbd-b476-f0cc48c52034", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.96.201.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d02575-ea06-457b-8495-4cb152135820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.192.210.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0b01f3-dc24-4c10-9096-10378f9b8e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.247.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e965b60b-d750-4ada-bf98-15ab71677cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.48.134.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d5670f-f48e-480f-822f-67a1fa8e9a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.53.186.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e84b4ac-fd91-41ab-9001-f0ff04caa38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.92.231.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13e03be-87a4-4b11-8388-9eda06a5419a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.92.81.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037d4656-52b8-40b1-b52d-b695b81b9873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.125.93.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2f4beb-2cb3-4786-b3b7-0c7ce46e7ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.79.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d983c83-7d80-47c4-9fd8-6ffade27d9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.25.208.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57340c68-e43f-4ba7-a2f6-41d5063a6df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.138.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7f0711-fc35-47bb-8850-25ed523aadb3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.199.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac9f7b8-104b-4726-bdb3-b7ae402224a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.70.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dd73e3-039f-4004-a729-1293c061787f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.29.109.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96d7fc3-1b7e-4862-844d-0e0173c34c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.84.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea4e6e0-4917-47ab-b3f5-d4deec21a74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.97.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb6d2d4-58c0-464b-a141-52803182018a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.59.16.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b396665-c850-4b58-81b4-36de6f437f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.85.116.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490ee41e-7798-49d8-86aa-651086a4dc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.34.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0875f15-91d1-4ef2-9824-3b4e776b559e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.14.17.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f830fa89-76bd-41f9-974d-7476b25dff5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.14.2.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb16d80-3d85-4258-a711-51dc66ed3f16", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.153.60.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058eb705-8c1e-4ef7-9c9e-41b1e9f301fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.158.231.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17308ac3-dfaf-4379-85a4-674359244736", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.164.64.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5e46a4-6df0-4eab-9721-1dadfe7202b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.162.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9be2496-f789-4dec-b8b1-a6c252923709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.4.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56606083-42de-4f5b-b297-16b701855243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.4.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5019a6da-9416-43a7-ac34-b8e6acabb0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.85.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5b821a-bfe2-4d6c-9dfb-2e200afaf16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.19.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0f206e-6705-4ede-a01e-0aec0b1044de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.93.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29529284-7964-459d-a245-c3c5ffed2ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2935c14d-eaa7-4524-a5af-a7a903093ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.158.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936751c0-ca76-4dc1-9d40-17bd7e199449", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.10.115.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f15450c-b21b-47e3-88fa-8baf3c6b27c7", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.114.46.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdbf8b5-0b9e-41e4-812f-5a7041410dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.172.225.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4618c0d8-7d70-4159-a270-926750341556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.84.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d489637-2c90-43db-8f0c-5fa23409b6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.2.101.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9689fad0-2be9-47f2-a384-66d1387f0b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.2.96.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dc1e71-ba06-4644-a87d-7fcc6b4a5788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.225.49.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9512a8fc-ac73-4d05-a349-b7a139d78a99", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.8.151.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7df3574-103f-444d-9dd7-135e42dd837f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f84541-6e7e-4ff3-9ae8-5f23fb0077c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fc64dd-535c-4db6-8ddc-57d8f2368b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513b6745-f7b7-4243-a2b6-ae6c59cf3790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.79.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbf1f98-3efc-48a9-b3dc-d1932059cc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.124.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabb2946-c4d3-446b-9baf-e71cee65263e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.154.3.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276f68e2-71be-4717-bca5-b1b3a84e41f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.16.178.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d701e8-317d-445a-a437-3c9c50f5b74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.175.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655997ee-eba0-43f9-9981-674f3af10f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386dc165-0823-4566-8c79-544c0bfc9af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b115cc9-638e-48b1-9359-845e123ce3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d965056-962b-44fa-ae99-f83ef627b59c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.182.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2226fecf-f951-47a2-a103-56643f561edc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.189.23.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363267c3-d74f-4c43-8a13-744f8a1e2a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.201.19.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad9409c-74ea-4f67-836f-e3435431be16", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.209.210.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0da9318-900f-483f-ba63-a823af9505c6", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.231.166.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c64e95a-6d40-45da-be0d-349a420c3ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.23.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1172ff18-2b88-4932-958b-d1a1188f0ec4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b2ecf2-4c39-4b22-bc84-4ec1f513d701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2361dc5a-57a7-4d3b-8d7b-06c27eb67a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.253.50.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a800b2ae-8a6f-490a-be3d-4f5c3da1e536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e173cf-9403-4adf-acf5-543b6c734efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911a3819-6f91-452f-8340-fc4e15a4384e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3829133-108f-41de-8cd2-96cc727a2f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f69b7c8-4949-4f2d-a290-b56e3f162a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249ee162-45af-48e2-8507-304d9e1100ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53c2dc6-be32-4bec-a0df-0f1568992df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a62dbd6-aa03-443d-b601-39c085e71727", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd694f6a-dfa2-42ca-ab24-919fe956500e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e4f49d-897c-451d-bf63-acef0e637192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.105.49.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0090e7ee-c6a6-44b4-9786-6bb37a2ecd51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568bbb00-5046-437c-a82a-c95567c234eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7127a595-76d1-42de-a38a-c45299aa5a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.106.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f13d1f1-1dce-4b58-80a3-4ed4b2e7e81e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.226.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb6bfd2-1870-4066-a89d-063941fd7547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63be2ba-fc3b-4a94-b873-7e18ddab6ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.217.24.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c420f509-8cce-4c9c-bbf3-c16a4f9ea7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.217.4.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaaaa79-d8ce-4d15-89fb-d649c77d3c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.217.7.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634d7ab9-bc03-4ebe-827a-5f4d273128df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.217.91.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea827b75-632c-49e3-b36c-85dd41f613e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.42.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaccb27-ca81-46f2-bfc0-15b0971199b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.6.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf2d128-2461-43cc-9d6a-1f607c1863e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.227.31.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d019c7a-2a91-414d-8c9c-210c50a35941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.209.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac6aa8f-6049-46db-aab2-bca42ffc24ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.21.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f621544-9a8e-489f-ba2d-28f5b00eba4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.226.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00deda04-5db9-408f-967f-91e851a0470d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.163.60.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33febc7-051e-4286-a853-acd99afa502c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.21.59.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0682d92a-f576-4971-ab82-070d7d63c46c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.228.32.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddb66c8-dd49-4b60-97e2-297c4b082789", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.182.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f3da93-ffa8-446e-ad40-699ff2e387aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.23.248.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a99e84-dc99-4414-99ac-784e24cb3da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.162.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd7373f-3bc4-4ca6-951d-9b8efcb6aa9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '126.209.16.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d25bda-1a59-4cee-8c4b-b82dc56ca463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177a94f9-5894-4b6b-a3a0-46e02598c0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b06c42-a045-45a3-ae3e-afe917e3ba2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f494fe-0709-4b53-8472-96c0d17f6160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd2fc44-1825-4356-903b-6ee24f7ba456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9796cb-084a-49b9-98d1-a94e79749754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78edbba3-96f3-4860-b793-eafb825e79fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc3152a-5f51-48b2-849e-503562b16719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305b52f2-ae4a-4326-b82a-8a6d2d9f27a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.231.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38f951f-12b1-4d5d-abdd-3c62cebbdc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c4d7ee-429b-47de-a7da-1c505bcd6450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894ad7ea-0f5b-4196-b2eb-0ad23c22d656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a4c7bb-6306-4862-85ec-b1a13c686492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24096d0-34e9-45da-8470-d47c4df8e7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a50d3fe-ada9-47d8-b38a-9fb203f45ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756bea45-5d58-4988-8073-e712fbb7dc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933e4a84-9637-485e-8928-b8448c91cb9d", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ece0dfb-13fa-4922-aa8c-c2aeaadbdb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74930b0b-0bb4-4407-a701-4e98183da9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d52380-2b22-49dc-a4da-08090d9cb745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67174f6c-ac29-458f-89ed-56cf02a52681", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.65.182.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720cf360-d1ca-43ce-8ab4-d606d3dd897c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.88.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25de97e7-4d96-4706-ac97-8af5fd22de43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.28.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b81c235-94b0-47e1-8e5c-74b7ec7ad061", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.150.38.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8909139-eb5a-47fb-988c-34d95860050c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.109.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20487454-1b85-48ec-9562-bc5d0fe79148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.109.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c7631c-1fc6-4bb2-a0de-c32544464df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.109.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383ad881-ea41-44eb-8521-fc2d7669c95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.147.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed979d51-e968-4dac-8156-8acdeec725f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.206.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efb7c34-f390-4904-96f0-135ebfce1a3b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.213.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dd558e-2ecd-40bf-bfc4-b6caff31efe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.165.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9b9e26-411c-47e8-a040-2a6932ee2758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.217.169.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5607d097-b25a-420a-8b74-e6a4e9724fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.113.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04689fb2-9f7c-44d6-8f02-d7f02543575b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1c9b35-2fba-457a-9360-bb8f950b20e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.193.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ad87ae-76ca-4de4-983d-58a74cd02937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.165.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223dfd31-9734-404d-836c-96b4936fe89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.210.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8dbacd-b8c8-431c-8bac-c7bedc6aa3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.252.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3cd87f-cfd5-416a-b0f0-01272bcb4d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.250.241.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9bcbdb-4edf-41b1-85a6-281f074469c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.162.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beddd500-9034-4a15-9ef4-9d9c6c61c027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.167.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2cc667-9800-4d92-9321-6eea38dd0e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.71.232.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe50492e-215b-40b5-90d7-ec1bba8e2970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2895929-05d6-45f7-9d62-15d67a177c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654374aa-4151-464e-b041-8ee5523498a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dea951b-80e2-45e1-a3bd-dac0d1ec4257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8c635e-20f7-4268-93c0-6ca830fe3dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bb1b93-d436-4c82-b99b-1bd2cf09336f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4594d939-83b1-4e9b-abdd-4be82f3fbb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9c2a10-b694-4a28-855a-9b30b501392e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef06e0a-33a5-4f67-9f43-d051a9211d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b02ab3-de5f-4854-b951-dedc7fa2c43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74820e3-436c-4538-9eaf-714c796295a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82193214-4129-408f-aa6a-45d820abed43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cce60e0-3c51-475b-80c4-e6aa6cc10c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a593e3d-8872-4376-a63a-844c1d5792d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c061b18a-6c87-4082-b7b6-046b1effe776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966c8cdb-b050-44e9-a622-ac9aa8ece512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac739772-16b8-4b86-b8db-0d7fcf3bb749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4af5f8-0dc1-4844-9ae1-b5b2e1ac6211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.163.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74af6320-10ab-4c48-b7e2-6b2001ff91e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.80.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d0b142-0d62-49f1-9d62-60b417e40b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.181.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859e87b7-e369-42f7-a632-9f4ab0f5c13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.159.24.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d44063-19b5-4021-8f71-32040383e5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.247.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae060aa6-9c5b-4cfd-941c-c5413f70d9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.252.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1dd3b9-1fb4-4ee0-b03a-db08890a801d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.147.97.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169f973f-eee5-435b-9e6b-95d0151e25e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bee604-1a72-4d6a-8c81-6493d980d774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.13.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad38ac8-4583-44e1-8df3-df66e73c7cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.19.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf67ce37-479d-48ce-8dcc-069c2d44dfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.28.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104cc10d-d462-47dd-817b-9937d8f9b2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.43.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf57d64b-25fe-482d-9b4a-66912a01ad85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.79.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c2d1d2-7af7-430d-913e-a343816083f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.93.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1044875-847d-4323-819e-33f09279049c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.185.86.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c29e204-6167-4818-bc3e-fda8175d661e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.19.179.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f78852-b8ca-4c8d-a3ec-0ec07e05b3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.173.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52bd5f3-0bdd-4cfc-b465-071c5b470b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.127.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e0cb55-5ecd-4447-9350-0aed47a48f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.252.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7259eb-b06c-46fb-8e40-64589d097e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.3.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf750ce-31f3-4dab-a502-ed3d7df5c27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.49.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848a35d4-639f-41e1-98d4-297ce8c16cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc788347-3637-4b83-99b8-a31bdcb2cae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380cc156-75c7-4572-b203-705460975d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b21ed2d-9e20-42b2-9b02-ca1c54dbf468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8f00c3-3ef1-4773-bd99-e995ebbca58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc261c7-9201-4869-b018-c2f9c6d9cb3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8775ab6d-16f6-4b53-b7e6-edfe1c59a173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a23732d-38cd-4795-96a3-1941ebdeea57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.147.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5c6314-f5dc-4f6a-ba03-b400e8127c76", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.14.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebf6605-5bcd-4bd6-9446-a294cfecd581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.171.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec89296c-c3bf-4bc3-9a09-b34a138fa84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.177.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a21cc2-fe7f-4b2c-a3af-ec1e97b29f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.200.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bcda7b-51ab-42ef-ae3a-ce00d336c6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.201.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71911d94-8080-4888-ab98-227654ab0f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.201.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc04338-6cf3-4f99-82a3-71c2d2163bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.220.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7775b9a-038b-44fb-894b-1ac72d97ac8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189815c1-88e8-4daf-93d3-ab2f1a64a50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f954f927-9a50-4b75-b5e9-092025794ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b1c3fc-b92b-4b19-81df-f0de51966552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11cc3b3-281c-4a09-95e1-f9da96cd2376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07af827-29c6-4459-b6e0-57ec72f4a442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c94739-9391-43a4-ab93-f5f84ec83ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.97.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4f5e05-7906-4c23-8fd7-2f54929f6f19", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.138.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088c55a3-69ff-4e85-91b2-c621cbc5e4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.121.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8cdf98-dc70-4935-a419-dd099be99ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df63a89f-7e95-4746-8de4-eafc2e3e6004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9845a4-5639-4540-b3b6-bf33f0a060b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f278b5-b0c6-44f9-b82a-fa1f766eedcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e771729b-b6e4-4995-9a34-c766ea0a0670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3ba57f-5b2c-4d76-b3fe-fb4126c9ce93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c80483-bc76-41ab-84f7-a77a4e458b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9a638b-09cf-4308-ae3d-31472666be9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1216c55f-4428-4b6a-9e4c-d01198573f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da4ef04-4931-49ae-bd96-c1f8bba8b870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce170099-62e6-46a2-924d-81829c830808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30ee336-4389-438f-b657-0f0b33dae81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d896b4-657b-4834-8583-34903d50a817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e415b27b-175b-47fa-b2c5-0324e7a923ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c5c593-55ee-414f-b4af-d342e8c912fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a1fb38-662f-4dfd-90f4-5adc802bc3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20841336-17cc-4cf3-8970-8839d7733b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4ad67f-c691-4d40-ad1d-af33fccf3026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccb1a4a-8e06-4a5f-b188-93c9526119a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2996b5d8-ce9a-42ca-b96d-b5908bd2c95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481bef6f-fc2a-4abe-af8e-b772b9b4cdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6ed6d4-82c4-4e83-a775-ebcc54337ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1892af-72da-4d68-afdd-22eb80fc5604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219b1e91-7a5a-4e4b-a282-13d843ada813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d064a17-0807-4138-a7a8-9f658a1344d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c8bc4c-e40e-4c9b-894d-82818ba11b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1b2c6c-c5ec-42f8-889e-0c647a7369aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.116.198.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c127cbaf-ac11-417a-a4c0-849d65cd46ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.117.232.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c91bafc-a0e7-4409-9166-715884ea0448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.119.34.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e71032-8aa4-466c-a89c-a6dddd92991a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.176.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e752edef-0473-4afa-9a00-048e0f28b1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.120.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70fe88d-0589-4fbe-8204-916ca4304955", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.232.11.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451020d8-f056-4395-a900-f3c52ef2b91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7b84f9-9c86-42a5-a746-9a6e3e1d8628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.121.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e58d56-c5e2-4eb3-bd03-404043ad2dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.160.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e54b066-9bbf-4d05-988c-ee1382ab305a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.180.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59d11f2-785b-4c92-8800-a4baff61add3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.226.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e798983-368a-4a49-85ea-fe98261dd569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.25.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479b602e-f95a-4c4c-9a65-65ea6cc30e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c47d29-7141-41f9-b487-57022982064a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.83.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9d5ad3-3ae7-40f3-a1c2-2a0a24f21452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.114.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4b2d74-e583-41b5-9ca9-14856ae21a44", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.200.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcb7d7d-aac2-4dc2-b13b-58ee0dd1d19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.205.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116771a8-2240-4090-8750-82b1bec6486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.222.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cd3153-cdc4-4da6-accc-4229b10e74bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.75.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa73bf6-f7eb-4a71-aead-46337345f184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.204.36.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5f9a3b-8392-4528-a32e-f3c42d34accf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459e511e-7248-4c06-9080-f4521e6ddb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b878c7-e35c-487e-bdd7-2345a66d8796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6759666d-f6fe-4279-a941-e781b6cd2963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6c9eb2-008c-4041-a4d9-121c4d42b585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.249.132.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5755d311-430f-47f7-a2cb-58336981b856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.214.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6009b88d-d46f-40d2-97e9-ac1318ee1f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.11.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52af5ae-dbf6-48c0-965b-990693c26cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.190.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8262d6f-528c-4d26-b655-1e1db5534914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.225.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbff163-93b7-4547-a50f-9caffd7ba612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.27.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3751de-b836-4612-b140-af2ba0ec52b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdab908c-003e-4327-9882-3ab2a48f4738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.84.62.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb104edb-0f0e-45ca-b3d8-d954196a9526", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.44.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f27e6d-7ee4-4edc-972c-c853283ccb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b1b10e-6e72-4973-b504-cd071a5ffebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6b80e3-8141-4cb5-86dc-b22a0af6e1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af0eabc-e3b9-4dd7-b823-68f6dadabf58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc358ef7-3541-4104-8e22-805b0aca77b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef3f0f0-6de3-4d16-8690-f44e65aa1a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.154.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213013f9-917e-4b59-b4e1-c3f5d2f99e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba78a1a-d898-4e6c-adb5-a1b9e8013e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fb251a-f397-4c92-b5a2-827d388fb399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dc7640-71cb-480f-90bf-1dc83096d466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a26159-dfd7-45b0-94a7-bd09763173bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199e347c-aa4d-466e-b6d0-1f59bd3aaa25", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c128ba8-d227-45bb-95d9-e8c203eaac00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.71.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258d4dbd-ea88-43e0-a715-b36c574712ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.255.254.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781c3f6b-25a4-404d-bc84-17f6fc83f9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.49.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfd01e0-0dcd-4beb-a3e7-e44a0a1597c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.0.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe1ba3a-2604-4816-9893-d7eb35f1a867", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.100.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8163f605-1968-456a-be91-e8b40d15117b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.12.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053765d4-a242-4b8b-b969-7b24d2163218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb2bfaf-b0ce-4660-b929-7fe873eb6a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.56.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de0bae1-e1d8-46e1-a1d6-83f95a0c1d1b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.6.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520cfe4d-1eae-40a0-8d68-9170df6429cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.106.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30f117a-f43d-41cf-9712-34273633e23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.91.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbbe098-14b2-408d-917f-a797ea6c4dc4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8829b308-1b23-47ab-9418-c0e44f2e5541", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae3930d-aa70-4efa-9fe6-c6ccc9aa74a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874daa48-a879-4c19-91ed-31216f91c568", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.124.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9048bf2c-263c-4822-b680-82556e994c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a78721-1d98-4d97-a62a-3b85c13fe9c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.142.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ffcb4d-1f9d-486e-a911-49d33cf24189", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.41.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5318016-6127-44aa-b423-626c60a0cfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.74.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3258d7d-486b-4956-8d69-e63104b14a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.219.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1854d73-87e7-46a9-ae74-b7f30a035c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.145.47.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d68d13-7e44-4294-b9aa-996e02aacd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.177.234.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a5b5f1-ebd1-46dc-97b2-5e15af1a5eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.107.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a79b6c-e0b7-41b0-b9b9-d8fd3f60b703", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.207.141.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33939da0-1c65-4090-8341-01ca6400070c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.173.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402e3c78-3d4c-4d30-a6c4-24ea9e71d1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.239.196.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef26d42e-a1bc-443e-890f-782f50239fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63daea9-2a80-4422-9f20-4e5221dcb482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.213.202.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b18d9be-ecc5-492e-a890-fb3b78540698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7eca95-6740-4156-8025-068920af6bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8cd9cb-d479-4ccd-a8f0-84ca976c2afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ab2b26-6322-4b6a-a213-4cef6ad7abb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846019b9-e8ea-4c2a-be49-b786390f8870", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3219509-8f7d-4a1d-95b4-360eaea155d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad0a374-2853-4646-8ddb-cfe827be103c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d6d310-c8b2-4398-b012-e1173f9c50d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.137.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedafb7e-ae86-470a-9c92-4e9c594be16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.19.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7cf6065-c0b2-404f-ac26-12dac9c6264c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.20.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7619f7c0-ac31-4e73-8832-46ec2019f718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.72.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82e8422-4193-42b0-9644-ee6f636db09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.133.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782663eb-ad71-4858-98b5-8f003b42e261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.145.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517b200b-9ac4-4fa9-b691-9cfde411ae18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.152.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cb840b-d652-4615-828e-bf0dc27bf6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.161.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9da563-e5f7-4908-9f58-6cabf47ca3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.209.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60a9853-4283-4d8f-b1c2-1aa62cc76292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.233.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e102a6-7346-4d0b-9b76-659d9d55e60c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.188.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ebd95c-c039-4bb3-9d52-c6a370d8754c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.195.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905970d2-fdff-4269-b646-d77cca452e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.114.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e2cb73-b2a1-4ae9-a387-612b1f28e3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.130.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5842359e-876e-4213-8666-5cbf64989e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.132.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de139d88-473d-4a73-b6dd-b925398f4219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.134.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4696c72d-5539-42c5-9b25-aa2cad1df505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.149.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfec02e5-6714-4568-8fb2-677dd04ffa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.211.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2c89e3-888c-43b9-8baa-b825b185c4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.219.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b5ba19-12cc-4c01-8ca2-50605e4b5c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.23.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae0837a-98f3-4387-9729-7d08745750c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.52.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88e2651-9bc9-43b4-a11f-6a83b3c909ca", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd2803b-fbb9-4fa0-a75c-2279ecc3f391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.130.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb04f6a6-0950-4de2-8f5e-5ef47b0eaf13", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.161.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8df533-da94-4bac-b920-3a14937e8bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02c86ce-03f8-4e40-aa48-e9350b8399a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9e665c-6dbd-461d-9091-eb19e9cedf39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfb6dda-e393-4bab-b238-d69129c4a836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3c223f-0022-4c7e-9510-9ddea7d96d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551509bb-1722-4d6c-8120-51e8c601522e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee12fa3-99e5-4e09-bb73-3d806583aff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a536517-24c5-4749-84ce-9730cf9a4ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a4fd37-410a-419c-9bc9-d7bd57cd9566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48599767-dd4a-44b6-b47c-67c61339c0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5754a996-fbf5-4a1e-927e-6830d0160643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae966d4-2430-4811-b206-d333322d0908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56080eca-475d-4454-b14a-615280620997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99712048-ea49-487b-9b83-5aa649bd3c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a25a8e-8d83-4a46-ad15-dcf95b3d9b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11fac90-8313-44cd-8c86-5f7cf416dafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b7014a-11ff-4f24-8d2f-f485a261bc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3dbe97-7cea-4b58-841d-234c6223d02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc52428-0c77-42d9-9fdd-0a333f3c56bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef71ef0-6c43-4b3b-8045-92c3a1564eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a932e2-db2d-45e5-a564-352b75f61172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18054840-381f-47de-a35f-89e97716a76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.188.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e596d5-c382-4b78-aa91-6be5528179d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.44.132.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9152199a-79b3-46c9-9c4e-72b33f080919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.44.192.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b123c3-6e1a-46ac-80bf-5fb5d7973ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f94ccd-ec35-4f60-890c-857b194a5a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.234.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97bebb7-a42e-4e6f-9e46-01ca5f9a30e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.239.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d9518d-f6b6-468c-882b-e2383d876cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.99.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb23105-ff7d-4b9b-aadd-22681b8752c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8da38a9-3af7-4877-a36f-a04112b066b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.1.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308be8da-0590-4f81-83a6-c5a18b799242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.132.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90acfa08-9f2b-4e3a-8527-e8a973d74692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa392011-c9e7-4a15-9532-ac06e7ce2630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.86.25.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7c099a-4665-4299-8ae2-e521e10584db", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.75.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135e4dcc-ccb4-4a1d-837c-aeaa6cdf0a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.91.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a654092f-cb28-4f1e-99a2-cd9c9236a069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.14.128.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d894659-13ea-4a6d-899b-b5cc5452aac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.79.4.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddafcc8e-cd6a-48fc-9838-05a72f77c690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.185.219.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713271f4-2220-4a31-ae2b-5c820d2829b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.125.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac62db5-ca95-4e68-ba03-06e2140ffa92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.16.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67d9a69-9686-4165-9ee8-aa362fb5b6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.215.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67832604-da1b-4304-86c4-b5e8a07973ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.66.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc4dc4a-c20c-4f4f-bfa1-0c4fc41a0fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.78.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226fb765-67eb-4b1b-af54-28953599832a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.83.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e5b4d1-679d-49f4-a242-15baaa463d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.89.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e27027-9aff-4dc8-bd8f-f8818d3f0c14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.199.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40dba079-0274-4b25-aa31-91b910a3ab58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e12ef4-bac2-4483-9d8c-6b006397c930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f4ed89-d686-404a-a0ce-01af308e5355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10497657-c114-4b58-a403-d9af85f99635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2480e6a-cc57-4463-87b8-4b3a11bae517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650db530-5e55-4a2d-9978-b2439539774a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27174d51-9a54-494b-acf4-b355311a5973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.124.212.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9abee8-0ec3-4ef8-8e3b-61f81da1921e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.147.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071c4e2e-28ce-4434-8c06-672c7049a6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.157.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3077358-9322-478e-8e35-cd2edb39abf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.161.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519a5b8e-e20a-47c1-aeb2-622b78fcfcf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.197.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e84d8e-716c-405a-989e-8c690e1a25f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191bcc2d-faf7-488f-870d-735cd6d62124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf95eeb-5c62-4a40-8b52-dd893ddbdd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80474be9-6c19-4b7a-802c-e6c94811f35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2c9e06-956b-4a76-b2b1-2f125ac0f89e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ffe8c7-16e1-4db7-8c8e-589cbe668777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf667a68-3940-483d-b238-7d821b442ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cf3fc3-128e-4d94-b1c8-3a3dfef791e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19b28a6-5e59-49d7-8b8c-aa33c1ab3dae", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4884facd-3493-45a4-aa88-d9ceb10e2625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804cdee9-bdb3-4753-9d75-777d68e36d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e4d93f-6f78-4f63-8e2c-dac490fb1399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793da670-f262-4e92-9983-4ba028b5234b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f544d7f-4f2d-4752-8b8f-3dbba4219f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471e99ea-6b50-4e66-aec1-5e8b2a4ed2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c5ff1b-d9b2-42f6-8c75-64f31986d8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faebb0ee-765b-4f86-bcb9-bcb5d38fc7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3097d2-5a49-4ea4-bf8f-2f19e00cb18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d823043-4d4b-4333-8e2e-e3bc6eefe1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c45cc8-e22c-40c4-ba35-2b1386e47331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458067d7-8f8d-4582-b4c9-5fc016bedb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbf6c0d-ac7c-4997-a60b-42d15bf3850c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b18cabf-ebb0-4b98-bb2b-d0189173bfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624885f8-04ae-4e53-853d-854883eaec53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a1f292-fc47-42ed-a496-349a70ef0b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26380de1-f247-4b12-a9fc-0c41c435742d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed076b85-0b1c-4670-99d7-66518146fab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b398ff6-d58d-4ac9-90b9-11d6d5fdfa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40131604-f846-4fd8-9543-05c180b934b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7009d8c-52d4-4ead-84e7-6b0ce908cfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787d5274-d820-406a-9aed-a6b300cb1df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b600c97a-36e8-4a7b-925a-a7edcd81e85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1ad3d9-3301-4214-8a4c-391e185e0419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d577fd-be39-40b4-9da9-59c3d3f48d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3618ee1e-8d8a-4bc6-af68-2dc8e99a07e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4298e2a4-f25d-433f-bab3-92aa8dde3b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdfbd02-9a1a-4b84-be5c-fd1a42506211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02588f0-cccf-4873-86b8-4d19821f734b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f26ad8-d515-4e23-bdf1-8e0a09f9dbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dad501-da44-4c96-9491-a87440852f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7371be1-c5ac-4df3-947e-b2668e40f7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e579547-fa11-4ad7-a3b9-807aff831584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a30e832-be90-45b1-ad6f-cbeba92ec02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046eed86-3177-4b6a-978e-0dea5d28bbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c115427-77c7-4d49-97a2-f2bd8752d81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619db3c1-a46a-4ab1-98c9-dbb1e1e5dd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad290589-581d-4c0d-a0a4-cb9054ef7ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0ec183-1846-4ccb-a752-6cc4b65379c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5352ad6e-6cf7-4809-bd34-f5f3cdd25413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a69c46-1d6f-4284-b551-1c9af05188e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b91af2c-9451-437e-b48c-cc07d62fe842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54365082-158b-4935-8014-b0f8b1bb6446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a05571a-aeff-48f5-b819-634255f27438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977763e6-2135-463d-8fc2-db9e142dbf98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fd80dd-63fa-41f2-aaf4-cc3aa38e208b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c31e57f-984a-4bef-950b-66d8657f6b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf60c15-ec75-4f4d-8432-bb2e3689faa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79a5ef0-7298-4a4f-8978-8e6298307601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35513612-c34a-459d-98e1-2e008e1b4430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8772f2-def4-4c3c-8a31-480c325c73d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78ec38a-1b4b-4b3c-9d35-aaba21ab638d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02b9a14-a006-49e4-83fe-ed463bea6807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc22fc9-7c4c-46f5-b4b6-a6ca721879cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509312dd-3c39-4b73-8750-192153652dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ce7d80-b37b-41c5-a07a-97cc60ec2de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c528eab6-dac7-47fc-b888-102bb1afdd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8ea2f6-b79e-4b07-9270-1cdcd6ab4746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b364a613-4cee-49f8-bafe-708851653157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9358f-a1e9-433a-935b-7813a039331b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de3bbe4-b1cb-4666-8763-ed9833674651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8c2d35-4953-4b1f-8c54-49fc168eac84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdcbfd1-e49e-4e9d-87e6-549703e5d381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2736328a-fd46-4098-812a-c2dd97aff577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf96c244-bf34-4a64-a1d4-97f53e7e45eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dca45ce-5b92-4c67-9678-b338995331f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289364d8-94f3-40d2-9e5d-de4569fed0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6495e3a5-f0e4-40b4-b576-86edc07989eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801cc6c4-8ba2-4867-be40-7795c70c2a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae94306-635b-4d4a-9cbe-061d226f4571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821ba972-1b1f-4cb6-b9d7-aad9ada99acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c8c2a9-d4ba-4e01-b722-95fe5fa010ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369672c9-3b7e-4e2c-b220-a85d65ce0733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019684b3-beb1-4760-9edf-eff29b651fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7ccad1-4ab5-4bbd-ab87-5b231f30ea85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ede866-af2a-43c6-91ee-4807b9a4d554", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b90c655-dc85-41c1-9b8a-8940faa6bd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f120108c-650e-404f-a11f-9e7e0336194e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf89a489-8821-41dd-91cf-ebce9e850f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45e46a5-5399-403e-84a7-ed2c6428708d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ee20b1-0728-4f74-a6db-fa8db0e177ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366726ac-542c-4406-a306-3b4acb0b6f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0f4f05-79b6-4580-bd6b-3b04fb3cd7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b51c9e6-9d43-450d-9b58-ad779d3d6cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d3d34a-a6c1-492c-8428-a6273ce4ba28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91508e19-c7b1-4c1d-83b0-6387dc3e5c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52620690-c8e8-49b9-a49a-0d2f4f33a63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a73531-0f5e-4a33-900b-6cde8fd3e98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c1157f-6b59-4b43-856e-aafb188ae490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1844ec-f112-49bf-b7aa-b5509e1c5f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cb3c83-f0b2-478d-8798-a3421c7bb094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4782f3e1-45d7-471c-9f87-665257dcc8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9435bd1-9c5e-485f-b257-63baa886e7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302a2e8f-1079-4497-8a6b-4ff0313858df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b122554d-9303-4975-a464-c4a667193082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af31a6ee-a8d1-48e6-a096-f0947ac72c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2406776d-9c28-4bfc-9780-9a97291097ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c7e6da-d6d6-41c5-9970-593fddf6947a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e4aded-7a34-4827-bc9d-b5f58f522c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcb851c-b1a7-4c3f-bb38-4f6639cfb8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2898075e-7b26-442b-ae39-bd0063474bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05ec194-4fb1-43ae-9d25-8b784c1100a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b55ee6c-496a-4e9a-9449-c55bf7ebb68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7a0621-ed16-42da-b964-f13b89e70495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35d5d47-b5eb-48ef-9ebe-5d5616c13f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f69b691-0610-4a19-a580-79d49a17ed9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8becc1a-6bce-4991-9df9-0f58925bf5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7e0319-0c49-41a3-982e-da173ea3e28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf6a96d-90fe-49b9-a19e-558d797a0dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a394c7-9b08-4273-9c82-a333313d67c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4a281e-0462-41e7-bd58-e1d05f8f1d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759a166a-01aa-4986-8b65-2b70c625ab03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c726bcf-80be-4758-99aa-8a93471af141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e169cf-49e4-42f8-b0dc-8c93a3957e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44518d94-f235-4a65-9316-22fd33e1f743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffe1a0f-a7cf-43e8-9090-cf4b58f460b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142aca48-fe74-4429-b7bc-aaaef749978a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ae3b0c-0980-4218-a1ac-79b3b15af4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e816c3-09d7-4c83-875d-2f7c3bc32081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce69341-9baf-493c-bc74-f8d180c765ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47766a71-1543-4da6-9329-948864b179c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3426337-461f-4e4c-8384-b0eb5348a38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cc9460-cf67-4c80-b83c-d6e983356cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40edba59-1bf9-4087-922c-094d5c216d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a330db1-121e-40f5-b87a-1757203739bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55e27fc-453c-4fe7-b240-b08ce64958fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e73861-e32e-45be-83b5-ce0d5e44040e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c69befa-b3bb-4b8c-8038-3cb868fb16ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec00b15-3541-484e-8128-4f06caf8ff1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2e7f8a-79d8-4d7a-921a-e33258ef32a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8621d007-4465-44b0-b073-17133f8b2144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32236f2d-8faa-404f-9cc4-5f222334f79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f4b950-bebb-4984-95e0-1248b413693a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bb06c5-dde3-4498-a891-c43995453f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8ccbc3-3ca6-4f3b-be56-b565fa3845ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edda10ef-48db-441e-9117-6cc6856f1fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1670af71-8839-41a9-9005-5fd668d2cd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d2441c-f976-4434-ba05-b13973ae6062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d20795-117c-4423-907b-a0b6841da2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32f8999-d369-4020-b3d7-de4bd89beedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e77e6b-41cb-4eb2-8256-35b6b43d43b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e029a98b-34f5-439a-a788-62118fc46ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc3c501-e2fe-4224-9b22-0fbc05de3180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27189ba6-6623-4fad-8a8c-ae6316fc6e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb05722-f5db-4109-a1f4-8198cd77c171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cd3ced-7182-418e-a006-0fbe73bab13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26c334a-26f6-4bce-b7db-47dd509d358d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0d5814-a321-41cd-b2e1-568e6a835f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d79072-f6a8-415e-b841-0043ce624a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38888698-93c4-438c-a723-98734273324e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55aa96ce-bd46-4b51-b54b-10630ff1b87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86cacbd-c7f6-4fa6-8cd7-fecd25e9a472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a542333c-6f72-4e8e-bfd4-591037d1941c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcd8249-1b73-4918-b0f1-9d8de333da96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee5b0d8-684d-4bae-9094-1514dbbc5256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e5c1db-6ae4-4178-ad34-2ab37e6fdc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b813ef5-5a62-4d24-be55-6c2b55600144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dc80e9-98b1-488b-a42b-7265609bb512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2594d9a-12eb-4905-b2ec-604558657cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0116f7fe-3443-46e0-936f-4bc95247ff0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92379a5-804c-4809-b36d-ca603d750a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cc99b1-4259-4e12-ad3b-9ad9e76b8763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d77b814-6ae1-48cc-a2a2-7c15e362226e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6ac7f6-69bd-4642-b86b-0d55d19979df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3d471b-22e3-4d6a-94dc-b4b363f975b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7128aea-5119-49bb-a2eb-11cbe8431c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e088c2-1038-4137-9c84-7d5d9092d85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f5ca4a-fd8e-46ea-9bd1-3d851c02058a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d650a6-353a-45b6-947b-46b2c814fac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452d4731-cddb-4da7-a5a6-ba3303975a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1b2f57-5724-4bf7-afd6-260fc37289d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba1f11f-b3ae-41e7-a149-976b56662ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76fb9c5-9179-4597-b124-793d1fa01ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4584b986-a88a-4ef5-9a36-88783fefc2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65abb4ce-0f45-410b-82c1-c0071d3188b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f00710-930c-4265-a6fb-2bad04ac2293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1c90b8-d005-4eec-8291-99c1fa88997a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a61198-9688-4384-8651-d896a3756d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.189.189.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736eb1e7-6d60-48bb-b181-f2f1b492e689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.197.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf68c678-3745-48c0-94cf-017acf687e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dab766-b2af-4c67-b2f7-83b6fb51044b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49b0ab2-8e28-4f5f-8e2f-725798a39774", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.50.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849193d3-03f2-4db8-a426-5b5f50c5381e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.160.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f45da3d-5511-4797-bcab-dbcb02911d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5251093f-939b-44a7-9bc5-312dad4c5795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad47172-6048-41d7-a791-fa3afec17b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9eb76de-ab56-4ba8-a8b6-5e527a3a3de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4df9a36-381c-4771-a672-1ffe54709d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f05ebd-b0cd-463f-b4aa-6c03c8098abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1c5edc-5c23-4748-aa70-e2ef2cd2e13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bcd398-327e-4b63-b7db-8290100d6971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edd8043-b572-4567-8215-0ee02218fd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99240a5-04cb-4e2d-ba8d-5654889e3852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba07940d-d6e7-40ae-81d5-2035a306625b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.133.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab7b779-76b0-4424-b17f-939b7b204284", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.142.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9796bc-f3ad-4eda-86ee-f95dd7cfef2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.50.107.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb14808-3f1f-4b59-8188-3b61fc9823cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.152.76.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a685ea-ceb8-403c-a0ff-2ad203971fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.234.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4464e1f-bf03-4289-b755-11689794478f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.135.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092a3235-f24e-4a0b-ba72-d58285890498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.147.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86a40d0-c628-497d-b877-94c5521ddac0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.156.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4984ec3b-9b7f-4704-8bfa-b8e74d1e4925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.163.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdbed2b-871c-486d-af6c-08087d71298f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69df78cc-8abd-486e-a44f-1abe8dee4152", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc6ffc6-9d7d-46a5-94ce-a5356abf984d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.151.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523fd8ca-8512-4610-a518-93cd0dc96050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cddb2d-b6b5-41ba-a70a-0b937f5ba743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cfee90-d3ef-4a7a-bd21-c504b53d0af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c21535-226b-46fe-96af-37ace667b289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b652b3b-34fd-439a-aac8-e292f804de6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270ad08b-5044-456a-9047-02b3aadff1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921e79dd-969d-4985-9955-eea913ba3731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94711dd-73d9-4c5c-b054-fb9bc48fc7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71b7a29-0319-40d3-b7f9-ef46ccd64bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0de28a-9481-4195-8171-943c2a1024e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226d08ed-4d5b-4eb2-937c-1b74b97c22a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fbb836-dbeb-494c-bb00-10e0489c2941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab7e2f1-8c6f-4b98-b06f-6c20df75427e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34caf326-43d1-4715-9f78-7debdfcb822c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e2f8c7-c700-44f9-9bea-719579d6be77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a3310f-9df9-41bf-80e4-730bc9060077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c662149-80ca-4962-8c31-a0a398ab9b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b5ceba-06f1-4c70-9827-cba77b806a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f34557-9d76-4191-918a-514bd45c1d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef06090-cb98-455a-9f05-dd0d368de7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0984bd71-5636-4019-8920-004bf0b80d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b713f8-2243-44af-b05e-460ba5136424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a733477d-ce86-48c2-9776-98522c772d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dc09c0-a624-4561-9eab-e4b63dd1ebc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bf19fe-d6d4-4b31-a884-807686a777c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f86bf0-e891-45f1-996b-69be236c29b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0367a3b1-63a8-4ed5-a2e9-ef3135abc98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ccfca2-976d-49e5-be04-a324b28a8a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9323ff6-d5b2-4b64-8bf1-5fca01f1838a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29a9ae8-4e15-4993-b3bd-7d3890c061a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020e5578-d55b-4dbe-9dfc-ccfdad33ba11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7392607-5fb0-4e2e-b3a6-ece49b8fd24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31135724-547e-402c-91c1-728b61efdfe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d8f77f-8064-434e-a757-7553d1eb0e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af63ee1-64a2-477e-a84e-d15bdeb8c10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37be02f8-4967-448a-8e4a-d95e61edd454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490422d2-a391-4205-9f21-3d312e6b61a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d9610f-4e84-4d13-a49c-7c7dd2483e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78b4dd0-6f9a-478e-8876-86ca41e0261e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7b707f-b388-451a-bf0f-845885213ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46aaa42d-2420-4f11-a426-99b5b02f83eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f52b6c-2c41-452c-a0f9-be333b0e23f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ccc581-2bc6-4fa4-ab47-e49033c684b5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.129.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e1f532-906b-47b8-8242-127199c8e190", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.221.241.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8796c168-dbe2-4f0e-9e83-dfd761606c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.197.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691b7276-1c94-4cbb-b1a2-13dd05956d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.197.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526e4cad-e384-48b5-af97-f2669ccc991c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.135.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad63aca-4192-453d-a70f-c2de713b3450", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93393e1d-fb50-4ebb-bded-5e4358f647ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.115.91.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bfc8d5-9a7c-41dd-bcae-60bd1f58d99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.237.79.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a135f7-aaa5-4e58-85fd-53915c25aac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.241.122.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d54a3a-2e9d-4a41-8089-836112a2a74d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.63.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd3e531-aa11-4762-b576-3ce2558f0b91", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.40.78.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b3f828-319b-4b28-bedb-f35330263b52", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.95.83.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac17226d-529b-49e6-82f4-f69cf463a43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.100.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea991b4-91d6-4050-b237-6d215a8f8a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6891062e-f5ba-45c0-a00c-b0029b54b671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fe915b-225f-4a03-9e21-5e0c73f97b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444bc9d1-0f61-40cf-aee0-9d8124341b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1112a201-0dba-4c93-bb25-827c1e45ba79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f480b7-6595-4a3e-b2f8-2b476be2b543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d0b755-d358-4650-991f-1532deae5574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5cc6c5-93cb-40e6-9aec-f4646ecc21b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af616239-45ca-46c4-ba63-0d5f22cb2d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4d7e21-3378-430d-9139-8df778a79cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fea99b7-91ef-4ec2-9f67-7a15b13ac045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7520d9-cb83-4ec3-848b-102d40080fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f1807d-6b97-4b21-914b-deeb7dce9bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51ec2be-5702-4b09-98eb-aaa4a8ed66df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e67858-3378-4bc5-9ea3-cba401c2bfdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489a2b8e-f839-45ac-9336-9554b73581dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50da90d4-de76-486b-9ca6-d5032665ad48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f2b7d3-bc9d-4cd2-8e35-d5039dfa5e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbd6aa3-09a3-44df-a078-6d9451184d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5f34e6-c21b-42fc-8452-9964830c702f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830246ae-a313-4475-a81b-611246f21788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c44afd-35ab-41af-9c32-cb6aaa2a4a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f65db09-9f15-4ee1-8a1d-9660affd8287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be46bf2c-a44a-44ed-90e5-525a1caee571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b9c630-cc62-4a1f-bf84-b8a708751e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c15cdb2-a584-4456-8bba-cba0c7cd15a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5d3340-1d7b-4378-bc39-1334ca0060d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5012652f-9c37-4038-b0e2-e162fee11daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f63806e-6531-4b51-9238-265c589b13b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0decac13-f69b-4271-a56a-2ccd4f56c5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55749e1c-9c0c-40ee-aeb5-8dea39fbe272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432a1a31-55a3-4956-b50c-34e2423cd0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e18855-a23e-4a2d-9b34-38d5fba966b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.145.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52b8265-aebb-4922-a7ff-ee1fddf2675e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c0f596-9abb-456a-af3f-223111b777f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40584739-d4ca-41b6-83fe-d0ddd1092461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941ab5d6-bc84-462c-8025-73505b9bcb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd2290b-f85e-41f2-be75-20af5be47cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9830c701-e0ee-4ed9-a5af-8c096fc0fb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4484895-5a43-4e63-9c29-cee4230e478b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4be766-6063-48a5-b2ef-832df544472f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2f05cb-2ed3-4546-830d-166b9337377e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b419104a-b786-48b6-ab89-89e400430e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782dc386-2981-4ca4-83a3-02a2301e0e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd76b39c-27d0-4b53-8866-daef0466b702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac506ee8-c378-41e8-84c2-4f758e1e8699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1391407-9da1-4b27-9ab8-ca33a5a2eb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64df6813-82a6-4014-abee-dbb057905c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a661390-5e8d-46b1-ac19-6b161fba64f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab12860-f38d-4039-b926-23df95c7dfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d296074-8c53-4934-95ed-ed57ea325964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41484126-f458-49ed-bdad-31726d4adfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d049258e-f666-46fa-926f-9b799a17b10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff132d0-4f91-49be-9d9b-e3324b33fdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394afbc8-7701-4117-9df2-b2af5d57b30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e030a6-00b5-4410-b85a-534e1a7b0fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974d8388-2104-4b04-8124-2b7562492632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb805bd1-d7f5-4c26-8bf2-c6a92d38daf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af89cf74-6c64-4a4c-a803-8c802d004056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be41e14-b7f9-4674-8629-573571edc19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65be9681-fdd5-4779-a3fe-ee4810fa5235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bb0e00-d127-4ffb-b35e-93b78abbd4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7925e0cf-da6b-42ac-8845-c031f1741fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cec6d2f-3be8-494a-9863-b0a3c6e0277e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ae4b8c-8bff-423d-99f5-0c3c25e0d99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8562b69-ecdd-42e9-8383-353da7be7e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6a0f1c-ad25-4857-b0bf-e6e267287673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9002e68-6426-4b1f-9ed9-6655e5ccfffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5433f84a-ecb1-44dc-83be-8a34e166e275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a5f3d7-162a-4f48-9a47-ee870604420f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18742246-98ab-4719-b36d-6090eb2d02a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df27742-712d-4a11-b9b7-d7bebbe9eb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4b50e3-df2b-4971-b45e-0d0209a52bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c552c106-068f-4e86-9e48-6bb39a8bc288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7167817-da9a-4293-a3ee-0fc34440cda5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065496bd-a9fe-4bbd-9f99-e55972228853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ca9606-2bbb-46f3-975a-e7ec5f472e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d781495b-51fa-4afd-ab8c-6652985ffb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8289a87e-2c49-47e1-beff-b7d05276c4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461f71b2-b5ba-4fe1-b6ce-456198f17255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd82ec38-b079-4f48-bcde-7deecca3a8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df05d349-3629-4e38-892f-3a122aa8107f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f178fe8b-687e-48e7-a9a9-5284b88563ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfea2b1-c58c-4f92-9d40-d6b4171318fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee10912-a55d-4074-93f8-c9f868ce76f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927f3115-f09e-4782-866d-3e5f4d533fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df322751-b077-4969-824c-4449d4440a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a6607f-a350-4c29-85de-59cb76164058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d375d9-91e4-404e-99e0-514b0e135b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a42d631-c0f9-4f02-b8a0-fae307fdc9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac23fbae-7a2b-40ec-a21f-d113d7df4950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8af9bf2-b427-4108-82e6-c6cf7c156aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcf740d-3512-4776-89d9-5d4260503392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec85ce5-e115-4036-b1d1-9dc621f4bbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04327356-b549-4018-8a14-54882764aae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b543043c-adbb-450b-a09e-38e59d067aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e18b9e4-b061-40c2-9f1c-8ad849fbb6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6b7a96-cf88-484e-a280-b763855a437b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb47d96-0fed-46ae-a3c0-2fa34a5ee4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00af0233-fc24-4b0c-a6c8-91cba89992a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b099bd9-2167-45c1-a5a5-f0bcf18872e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b66116-7250-4eae-91a5-d9eb367eb726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c26650-c74a-4c6b-bdd1-f94bb0907795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb61388a-368e-421c-9ba0-9935e9f4533a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66fa469-0e5f-4b10-8d73-ca6ea83d0857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e308379-a87f-48a6-81b0-9e7f1efbb0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5024f3d3-75d1-4b8a-ab1d-8a5a7ef57502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b8d522-e8c0-4225-8075-5db96384c862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cea25ae-5810-440b-a443-e46d0a4a6481", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fd7268-9078-4f99-89bd-4812f7c43adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547899c6-b1bb-4c35-9067-173f52009fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13ea905-7acf-4392-ac5f-79420f40fb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc622bfe-4e47-4c63-a206-b5ce133a05cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e92e305-6d27-4a1f-811a-fee75ac04b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75c917b-97f5-4f65-9005-0794af5e5079", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df18fb5b-8dfa-419c-b84c-e9b3e53b0bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b17694-59c4-468a-beb0-293839f12cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f135e476-907d-4fc9-9334-a82e4c177884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c733c7-0ade-4c48-a01c-a9084169d79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e25a29-1ed4-412e-98f9-5e075576e2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc766b8-564a-4f7b-bfa5-4019ea6c7842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e700a4-5eb2-48f0-b60c-0dc3237b7f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d36b6b7-f0b7-45ed-a390-b155c113ad49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6146bf21-6c37-40fb-adbb-2ccea9dd81f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cbcbdd-63e1-44a2-99bb-a9ca8954ceee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6f7fb3-ea44-43ad-8632-f50787009a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd94651-e27d-437a-9d9d-05a969000a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beebc60f-73bc-4a83-96b4-a5ad6910de5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4286f7-b23f-48c3-9a86-f369b1e4db13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bb95dd-7a83-4d54-9b99-e256e98773f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d34e42-0ab1-4fce-ab9e-7d004c2eb1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca657bb4-9ad0-49b9-b719-871abc29640e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeea7fa0-5037-4e80-9f28-466ee48f41d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf41972f-93f9-477c-a4f7-5afc57ba6929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fa92a1-f578-4b38-8c06-50c735139114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073d6bf2-6b8e-4202-ab7f-707b9da30b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79312cb-bfae-4dbd-9e76-6b72d5e98939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9704704d-257f-4870-9b9f-277269a11b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047dfd96-bf7c-426f-90c4-e124a1d6e781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95ac0f1-73df-413a-9f39-2eff90766923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16789bdb-0da3-420f-aebd-7d2f35dc48b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.120.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ff0699-9bf2-42c6-9f72-15e02c827e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.140.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72a095a-f7a6-4abd-8c59-f1baa476b5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.177.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd526b4d-268c-41d8-bd08-85128ebe0219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cbe5cd-a645-4783-ba16-23f2396fc843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.254.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5816e6e-d2b8-4bcc-a000-120fadcf8907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6b22a7-498f-4c98-a3ba-62b4e0e6f6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.58.1.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce854090-099d-451c-8202-7f5a399a9991", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.1.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0543b2f6-49b2-4378-8c25-b87e919d1341", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.32.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314f7caa-84ac-4695-b180-5db715e280d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.122.19.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2541c12-efe6-429b-a654-029a8647f77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.13.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ace0847-ced1-4622-b1fc-4be4807087f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.171.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c636edea-7f34-4eeb-a8b5-e8981ee993ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.91.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a913991-fbaa-44c3-888e-ddab7cb049bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.91.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98411d2-40b3-4619-841f-c9ea073c85f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.93.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec22b8a-9401-49e1-b6d3-3c634c2516be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab80e0a2-9401-4ccb-837c-fac1a14e2950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.115.211.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5422a1c3-25a9-45af-a272-d0461ff0256b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.62.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f78796-c41e-4210-a99a-331d2905e94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.62.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a0b854-776e-4a00-a68c-11fc88196843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0d1124-d1f6-4834-80e8-a1b9f3833350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.159.252.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fe60ec-9a20-49a8-8422-8d901e47cab0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6b628d-70b5-41a1-a583-d886e7e706ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9bea40-b0c1-4846-977a-7d80a5da08b3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.18.197.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39488a5-267c-44ff-b5ff-6463cf141194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea0f3d9-43ea-4fae-94e2-a2f32e94d1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09a1485-583b-41b8-879e-a2d54d4daee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05fa6e8-9d47-4809-82e2-276a1680d772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386ba358-3a3c-4687-abf8-d1569f9a87da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbf76c9-1308-48cd-945a-1dfb3fe10f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904ee0a0-5a44-4c79-8fba-5e1a44940419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7823f390-6f6b-4c8a-99a4-dad34e09291e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b85d00e-73c6-46ac-8be4-3400bb8a4be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7785743e-1f5d-41a0-8e60-e6d0338d7082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373a8642-d63a-4cb8-a9c3-6685dc78afa8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.198.162.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381999ec-82f8-4b64-a82a-e5a90bad6c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.23.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7f9541-db4a-4e11-bf69-bb466618d21f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.23.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5b615d-8995-4d9f-9ea7-1a5f6f9024fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.57.216.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7701617-d0bf-40de-a89f-c57374ee6e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.7.228.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1ba02e-6b5f-4804-bf51-a5fdf77cbfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.163.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2743f7b-9f83-466c-ae3d-440a865fe74e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.13.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0775ecd0-ad73-41b5-9b4c-c753c509c64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4450d4f-9f4c-4379-89ae-710fafe3067e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd8d828-6228-40f9-a3fb-d0dfbcf88be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae636c6d-6080-482f-9f5a-75ce68b996e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea075639-8ef8-4ea3-9a80-811bed478c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8a1922-ab53-467a-9169-bb3428c346f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04bac2a-61de-45ea-8adb-9660363515b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfa0044-7ec9-439d-83e7-4d40aba49d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2df1a3-9abc-4a46-8dde-228b4e01e5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5898d785-e7f5-43a2-9f98-7fa495db6c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f701ec8-2a6f-4169-b8d0-9e1822ca1f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89138e2-2293-46eb-a822-d836ba041790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3ec1fe-2a69-4896-a0fb-d671d97792aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4c00c6-68e0-414f-a6e5-ac2cad4d9fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694f4785-e75c-490b-8f67-2952323b39cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc15a54-153a-4276-ab9b-185d3539b769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee70ad3-cfd4-4219-82b1-1afd383106df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a965cd6-d252-46f7-a379-0b31f812ae8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a95646d-410a-43d9-8390-230f716f370a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fd923e-904c-447e-8467-c953fde284bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb821d6-7595-474d-9632-8381060952bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe03acc-e7f7-4610-a0c4-36effe189ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73557c63-cbfb-43ab-b191-18b035d6973a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb939d5e-0d3b-4db6-9dd9-c5c0b32469d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5556c3-6881-4b7b-9716-49e83f137588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e03b19-b6b8-43c4-b4f3-98d7527cecd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4317f7f8-363f-4d23-b0c4-ef444c9bcb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90226b89-7d25-40cd-970e-18d7fcf5d97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6048fb05-d5c9-48b8-9de2-0c3b4869dcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6d5528-ca2f-4a53-b03b-8a1150830909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d998f67-7db5-49b7-bea5-85a8e3b2dde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.191.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e98a9c1-7c0a-4b58-a1dd-9ea8d4931741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.28.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad539eb-aee7-4e92-8705-013a0ce49159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.29.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113b3989-774c-4634-9755-b34c9cf9faa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70d10d7-65e4-41f8-b43b-db725327824e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.100.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5995aa15-40f5-4a00-84c7-5a2ab5c964e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.227.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1699e3e2-cd0d-4332-8a8e-f0fc53cc3817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.236.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbeddd03-cd45-4879-aabb-8d3e21f6ecf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.205.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8039ba19-07e8-4e33-aa46-75b7306c1bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.246.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5936f6-b11c-45a6-bfd5-f0e65dd704cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.248.225.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb6147d-c752-4c00-84d4-7604ed9fdcab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.38.73.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f058c1a-2cfb-470e-b0aa-1bd975bfce2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7bd4f2-d3a6-406e-9256-dc85e3527999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.97.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a080022-11ad-4fde-9bea-8d625f7fd1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501f2132-1f45-4d90-bd7b-7f564356b558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.112.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1659106e-9f0e-4db9-9dd7-484cb69e032e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.133.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f352d178-69e1-4a59-b03f-47e5f7e08601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.166.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45188a97-ec30-4a32-b3e0-1823ef0754f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.171.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08dc898-d6bf-444e-9696-7abfd872ad1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.9.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb9969a-3a11-4e7b-8b57-9338a0ca6348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.105.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9478d375-cdaf-4dc5-802b-e5ea37ef9b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.123.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa21fa07-5fe2-47b6-8d29-7b78fba149a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.183.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e579e4de-788b-488f-b749-c0f751f99e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.186.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9831de82-f50c-4947-93a5-781264419303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.220.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f98c41b-5a90-43d3-900c-6512a27328c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.229.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a06feb9-b28e-4699-af8e-793f31ef92b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.251.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c59220-6e17-408d-80ab-28deca9b420f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179b20e4-3efa-4813-8e95-93360f32b794", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017640f4-5d9b-4c8f-85bb-3bc72f4458e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eab5ad2-0008-4c3c-96b7-c7f19fb69477", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acccbc3f-c3ae-4c6e-824f-d18d37f99b3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e2e15b-2f8d-47af-8653-9c9216a5117a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95830d41-db92-4707-b4d9-d209862c1077", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7241d8-8552-40a1-b3dd-21aef325ac60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b95546-1188-422f-a068-68e234781ccc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1866d4c3-b271-4e0d-9eda-3e3a1249c725", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413ad9fc-23e3-4979-b6d2-c939bb082300", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5104a47d-47cb-4833-86a6-8679b3fac08a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00761966-15dd-4fa1-9f89-876cabc21029", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35198955-fcd8-4262-97d3-39cefea1b606", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660fcbbe-8ad5-414e-a66b-e823a2ed56fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487548b3-4795-47d2-b089-98751a23890f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b565e9-ce03-4501-8b9d-8da7398bde18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701fdaa2-efdd-49c6-bc10-200248044946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.184.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fec1cb-bef5-4462-82ba-547f1636823e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.47.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063b67c9-fe8d-40d3-aa14-28da2425c0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.160.175.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85eb5e77-abb4-437d-90f7-9ba33ed03a03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.241.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f7fac4-37c5-452c-87f5-e9102d87354b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b92c70d-a0c1-42ce-b7d7-d5559febaf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36468051-b4b8-4ce3-a337-0529c3a982ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.24.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97154e7d-e0d3-4c3f-a013-cd04f65e0e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.209.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3465322-8645-43f8-93ce-6e9b7c8a7609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791d08bb-23a6-4059-828e-e8286bf379d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10bb0ba-4bcc-4af2-9f1d-37f9fcb25b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.136.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cefdb9a-abad-44de-a636-22cf32d82346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.111.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4599a6-01ff-4596-92fa-81bce829e7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.119.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9974cdf-a3bf-47b4-a638-3615f70ea07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.230.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00b10e5-d9ad-4b97-a160-2786519f286d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.232.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0515a9f1-513f-4e0b-a0bb-540d1222fdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.36.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555e53b3-b478-4361-a6d6-8d19aca8ec41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c19dab5-2e0c-4574-b815-bca522ade099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.232.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d011901-e5ad-407a-8372-44afe3b70f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.68.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339cf0a7-47df-4f38-87e1-6be1f968247d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.100.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8d0069-c09c-4302-a81a-8ef81885f974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.17.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626f95b4-2d15-4e59-94bf-d79aeed5b747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.187.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1578e3da-7585-45b6-b017-5d3efb4fa895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bcc900-d24b-43e6-94a7-c697e5f8b8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f534bd9-b4fe-4799-82e7-43fce650fddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.55.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5175cc91-4829-4e18-a6c4-7ebcef8fa0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.55.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a9e908-80e2-4def-b6ff-6b9c138d606f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.84.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a323eb9-3743-4005-9c72-c318b0a3b434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88974c1e-7881-4fc4-85b5-536f06977a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.59.38.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dc911c-628f-4701-b057-bca3ee8c4adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2226deec-2abb-4237-ba99-b1d6c620187d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d3fc41-cd49-4c47-901b-5275880044ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78761fe8-dce2-4848-bff5-85d9f1ad0f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a2fe6a-3ae9-45e3-a351-3783a0c2c8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.19.206.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a87aae-b3a8-4653-bf56-0ae9fa0bf359", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.54.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebd3f23-5d97-4aec-b311-d7257688fda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.202.130.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6640a422-7b36-4f82-a0e7-642eefb3a80d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.193.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c809c5d-393b-4498-88e0-87180311695e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecfcdd2-b639-482e-8483-98d5c3d23aa0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.101.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a8b208-3f7b-41ce-b1d8-38c3ef1f9ebd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.185.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd4efa7-6f28-4734-be0f-5de5a0b593c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.141.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f299b497-d5f2-4d49-b13b-583886c0d0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.141.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ea835e-a826-4754-8931-f83513760b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.141.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef8a210-79b8-4301-9701-b14334404dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2d94a1-ea23-4a95-b700-716ef048b62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff66fd79-5212-48cc-8ad8-fd89454f7217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e35100-3033-4f6a-87b2-2d3fa467bf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e72de14-7af9-4143-a353-0f5cf8f4c8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.172.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e4cbf0-2595-4dd8-888f-941772f9a659", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.118.210.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2447b4c6-acdb-462b-8648-cc55b04d4dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.103.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5051eddc-aafc-4ed4-adc7-4b60860ca6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.128.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fc5466-6962-4758-a09e-f03b0302eb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.145.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76335ecc-1511-40d7-8b98-c759e3151fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.223.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6cc570-8c50-48ad-9543-e60045defa4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.230.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edf385c-df53-437f-94a0-917ba9af99de", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.65.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09894800-7aa7-4c4e-b2a6-2ca4a84c54f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.74.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc56c10-3dcc-48b8-99bf-457d80fb8bde", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.8.192.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0833b7-8264-4982-872c-ae4ceefcc719", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.114.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3b1dca-e981-4f32-bf4e-7ef815ca3ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.232.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdeb270-6c34-4626-97e7-050b46e59e24", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.153.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99d5c8a-3164-4a5a-96bf-cc94fc8c4248", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.98.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8bdb44-4aa5-4282-afb2-2b7bd89ca048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5552ef-3b59-4bf9-9634-42fe39cd0ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792a3dc6-6501-4f81-b61b-380f47fc08e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c0777f-b639-44b2-a187-5480044527f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627937cf-17cf-4c31-98b7-ba441add39f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842a5f15-b760-471b-8cb0-7e267c24fd86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40331807-5457-4272-9037-5516ca116ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675d2070-f832-4fcb-94e3-5517d0f7093e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5beed2b2-8fe3-447b-9c13-da9e75d291bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89225e28-d243-49ff-825d-e80ae630c3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90457ec-7a0d-4868-9dbf-42fb9dfed15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd7d203-afeb-4ce6-bfe7-cb069231f775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f263591a-e328-4fd0-bdae-8dc8ebd5d1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9a0c62-2119-488b-8a72-8c9f4a38e416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e16be3f-032d-44a7-b941-793c7b4234a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea950b45-3338-4a1a-b34d-67a24737118d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac11afc-14d4-4957-8f27-e8b0d92b5d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3724b264-2e3d-40e5-bf0d-5e3013b760c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1d6636-5847-4191-aab7-e458d1856873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4d77a3-d9f3-467b-8aec-5720fc474549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cf2d53-6c6e-4dee-bbaf-abe45ba98b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98acf4e-d5fb-4957-b3f7-58d2b30c419b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500cd14d-e1f8-4662-96c2-178b39739c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df59085f-ef44-4fec-9718-e48bda633008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b7a53a-d307-4394-a841-14792031e6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceed330c-8cf8-40d1-bd53-838939cc0eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0926922b-5e39-4c81-a7a2-39aeefeb68fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768623e8-10a1-43a0-bca6-e43ccba48770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a928e11-0330-441b-a133-c3a13eefb0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0257cf90-86ae-4e25-830b-2466c4ad56b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9215a71-ac60-4413-a3ba-3cd08461ecdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dccd5af-a722-4acd-bfa5-3c1cb5c3d46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff03d93-47fb-44d2-ae13-b4a22eaff0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5705748e-59b7-4e2d-bd26-eb513cb863c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6824b06-cd09-46af-a3b0-9660ac46fe2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241fe7c5-fcb4-4071-888e-132010ea286b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6fea02-c1c8-418d-8d57-35e8ff3ca5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d7977f-aed6-4bc0-abfe-cfaea0cdf6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd9518e-8072-49a6-b64e-6b6268a9d5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15c1b68-e18c-4fee-b3eb-8e5fe1c1803e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989427d0-d678-4531-9b0f-6d997682deca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceeb165-fa6e-46b9-ac75-ca0f4d71226d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f22fd3-0d21-40db-9bb1-4ee81c157cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6fbada-5493-4a31-b666-05ea1b161c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4594a031-1b5c-4ba5-98a8-5e3bc7ad9d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006af4c1-eb5d-443a-92ee-f460aee15daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfd1b35-76e2-4cc9-a77c-b317cc855054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dfd5e2-27fa-48af-b446-f9901298e11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b540389-618d-4796-8371-3852b0edd7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890a6186-41f3-4512-bae1-435254e9c890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee444f05-dda5-4290-a857-68e6e69ea997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6958c448-8cd2-493b-9b86-cbd79b734c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803ddc13-6ba3-4f7c-8acd-3c682242bb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692c8d59-7a7c-4979-b9df-8d25087f3026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbbaf7e-1750-4b32-a9bf-73ef6610cb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ac2de6-0e2a-4ec3-ab01-2e23045b03e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa8464c-39dd-4496-b80f-9dd36c0559fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130c8942-20b3-498a-8fed-7debce50bc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64eb0091-ea7e-4c8c-a780-44ae59d02a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201212b6-8b0b-470d-9168-b55704e61dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f0a10d-9239-428c-92da-875a1181bb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a821f9-a765-4d6a-a418-2721fbc530cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebdc9ed-47ec-441e-b115-fd876bce20ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ffea2d-ffe7-4190-a06f-ae2f7cd77365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d103019-8af4-4539-8502-03857f6b108b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e1e380-32a0-443b-94be-f7223ed65da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da2101e-86a1-46e0-b579-b94d7b977da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96a9668-f8df-4cf3-ab73-0fe5a2fab4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b1bef7-12bd-44a3-be12-d4b927bae1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0ec2d1-22a1-4d5d-a624-5654aa5f836f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2475d0d3-74b3-4467-b606-2548e7bbc4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ae2288-02ce-41d0-b116-839c8f90e2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b776c3c-08bd-49b9-a014-ea82e57b99f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43575e50-fe73-4eee-93fa-76bdc6579d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f254d2-892a-451d-bc87-2212ca11cab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a411e4-c314-497c-8bf1-7754576a8f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849f4487-a600-4cd7-89be-5eda5b53368a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6021ba9d-fc3e-41b5-b38a-a58753743a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f404aece-8371-4be6-9f0f-a9ee75564a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a29eca3-6371-4dc9-93c0-e27453bcddd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184bae49-6745-4b1d-a6fc-3ff9019f21ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9199496f-bb8f-4ab6-af85-61f8637e0b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0dc490-1e19-4678-9c90-57ab77daae8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1abf17c-bb32-4bfe-a739-d4ec837da1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10b6152-7ee1-49f7-b7b0-4aa80c2018de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f02547e-2a29-4b88-bc4e-5ad09741cde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055ac15e-8514-46f8-b0b1-8c436a7d467c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c7cd1e-4213-492f-b186-de90e257f40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16270d41-0d71-420e-9eb5-5fb22758739d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15425b7d-e5a9-4ee8-ace0-b804a81aea6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e46467f-8b19-417c-a6a8-3a1cf343571c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcabada5-fb98-4ca0-bf92-16bc6f71ef33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddac8b97-2cde-4bd5-a537-6b5e3a1a24f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75484e95-66ae-4b40-8464-c9af7c9995a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638c5e0a-b064-4427-a839-d50bbadee707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bd7aee-1e64-48a0-a90c-8a7479bdf189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb1a595-ded2-4965-8831-5639d4b4d946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac4915d-225a-4fd2-92e8-354e4459cd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef38d2a2-f4b0-4a1a-9257-d87a025720e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4eab06-e793-4aad-b06f-4c15c840d99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d0fae5-30e8-47d9-8b6d-81da0dc2ffd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54736a5f-cf95-4e2b-899f-3028e55efc97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd49487-c4a3-4320-bfa9-b76182ff39fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0461eab-e327-4b10-a201-a02f57f364aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e7900f-f009-4cba-9a4d-f4ac6209bf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0937c174-54a5-462e-aa80-3bed376e63ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb23952-c9c2-401d-b2fb-fd42e904aad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333b7f97-01bf-4c02-829a-370f99c21c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dca0fde-3b90-48f2-86a2-e999dca98316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ff0881-a3c6-433e-a0ae-42206a1f3ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7857f9db-cb71-47c0-97c0-c3527735db7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adfb511-1ad1-4b12-9e53-a6872aea6a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fb69f1-38f3-4532-a58b-c02ba3b3b2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a064aef2-7306-4c3f-9154-e737c5e8019a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1278198e-057a-40eb-96ad-4ec3e4d79be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0272b342-7355-41e9-b050-0cf624341e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87042fc4-3e2f-4a72-a48f-8025f2d2101c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151e33b4-d6d7-4dfe-8ae4-16527190e96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad5b8b9-4913-44cc-a809-4602f36fc6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a922c9-e71f-46b1-a423-40ae9b107c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4493b38d-3e0d-4cc0-baee-d75308daf843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddb3543-ddda-4313-a9d6-febc78b78e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7d4823-1c8d-43b0-b033-a25bf4bc9757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724e0dab-d976-4218-93f5-4258fb946fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad41f926-d57a-4b0f-bedb-2a14b418b38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0b1066-7f2b-4505-84ca-24e59856defb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fd03a2-86dd-4704-b4d3-604323eb5b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59eec32-0ce1-425e-b486-0602fa7527c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93459ea7-036d-4ac5-9553-f59aa9cd5420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b20cd90-d515-49a3-9845-a812cc095638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5b9572-f025-412c-8768-3a0970bd6228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d5a9a3-5053-41b7-b3f7-986eb9b330b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308fd7bd-26da-45e1-87a5-beba7707f90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93d1837-0f08-46eb-8ac2-e4ad9aeee7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a1301a-2d81-43ae-9b12-90997be525a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff2fa4d-2826-4e0b-83f5-50e6f5ed2611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1848c282-83b3-4c4a-8a01-7b14c1823391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229809a6-35c6-4e1e-82ff-ba279e3f7fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04f64c5-c8b0-49f5-b7ff-780335a55be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8548670-2a49-48b5-8127-973cfccea93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dc4981-eb5f-4999-8a3d-6cbf2efca49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.248.103.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97134266-944a-4a77-a9a5-26e52568e7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.4.163.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5922e7cc-6a6e-4abe-be88-8d2f7ea03cf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802ac3c5-a19e-44b6-803e-689d1a64468d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.54.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e113c89-055e-45ca-94a6-42c6ced21853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.91.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4997cf48-f9ca-4e9f-a275-0b74713c2859", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.1.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aab0550-0b57-43c2-8c1d-6670a3f2c342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.151.136.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bf219b-86a5-48b2-88ef-1646c4930721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8642749b-a7f2-415b-935f-afd12ab5d4d6", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.97.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0938e65-398c-488e-a787-e669381ea14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.70.84.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b198c319-957b-42f5-bdf9-33a7ea534573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.138.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0425b4c3-be06-4a0f-811e-227644012c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.156.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c52600-db73-4b8e-87b3-07ef85a44f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e2da3e-e1fa-42b4-8bc9-0a337215751f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.143.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ebdcb5-5821-4bf0-9213-d8ccdfd71e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.163.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20bad3b-8027-47ce-b03c-7ead9e0e9e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.86.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b41aa6-b969-4d49-b357-36ed1a44d8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.126.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4c142d-1f21-468f-abb5-d01e2e84969c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.164.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5191e2d-5fd0-469e-baae-8412068a6c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9659b053-bded-4a96-9ce3-9923eac77087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752f0973-6e48-4173-91d9-4cea2c4ea5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5824ae6c-fd3d-448b-a491-67711855c436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0997980c-7d98-4802-9919-befb8a59d991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e054f851-966d-4b93-97fb-cf1374acd7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc01170-95f9-4618-81d9-0c8ef55313e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def12020-501f-4264-8019-c57b412b6bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db14640-97e1-4530-8b7e-a044ae1edd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495c9be6-879c-4445-91eb-1db1c34f64f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4166d437-13da-4360-bf14-9658ae11254b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9665b7e-bd7c-4759-903a-058616e45ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655443d9-4698-4027-853a-4c6efefc5f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f52a2f3-83e3-471d-a25e-01714cb202cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e33c63-80e7-481f-b972-e14fdf49bb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a42e96-5814-46e2-a5b4-d2efe870549e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6d564f-d2a4-4eea-a860-1fa41559a1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f55b25-381d-4088-9b1c-0c24fbb735f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0be9208-b64c-449c-b00e-11dbaab08be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7d6ed7-6d3d-4a6e-bfec-e839d01b568a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527f28a7-6158-4499-b11b-f9b3b1c741f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bb9e10-796e-4eb2-b4ea-9100a8adf581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900fb623-cd86-4fbd-983b-6d537c9370d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a291fd43-b5a9-4262-92e3-9720db711a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51567c4e-5df1-4e5c-b9e6-0b93436c9aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c894c4-5b45-45e3-a50b-3d457b66d341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28148674-9523-4da0-abef-605f1d9a524f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def0b14e-143b-4a22-ad57-af5233e2b4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b133c043-3b0e-47ef-b063-424aaaba3c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1eeabc-f72d-469e-b9cc-0b285d0f85d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de477f2c-7bb7-4751-a235-43c6c6ecc66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b97ba5b-88df-493c-9bda-1fcbe1866db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27522279-7b4b-4fe5-bf1c-6c73714a8245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e6cd66-8809-4517-8293-b340dd874e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae52ec38-6d61-415f-aee1-0ca0e5eb14a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f9eb25-7eb4-4108-89f5-7a754eae115a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3367a60-f06d-4e9a-89af-fedfb95cd62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994a518e-5042-4211-8727-969c86e2f6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ebeb7a-8994-40d7-b8ca-0fb6926976c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9f9c46-bb5a-4979-9a3e-857d232f11d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b62d630-bf77-4757-8ac1-7d32b217b5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef753f5-6ab7-4069-924e-e2d0cd415c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe30e20-0963-4576-953c-65a3d81106c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025189d7-da8e-4852-a064-dbf56c15a857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae74a3d8-255d-43c0-9acc-0a69e4ccfab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a642bf-cb1c-43e5-bf43-5ce12b372e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e27d8e-2996-4c1b-b04b-bbc1c6c72a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b8ad96-f056-49d3-bc53-c11be19c5133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc568d8f-31a0-4d98-8cf2-cc0d74a02d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d799cb-3819-4834-a439-deea331629f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd73a2e5-9fe1-45ad-b4fd-825b64d43edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b621711-3b71-4ab9-a091-efad5d0ddc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afa1136-4cc8-4d97-98b8-847b48a2052f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a274d51f-6d4c-4762-a3b5-38329579a1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93108ac3-e2b4-4677-8d8a-4b9585f0a9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e395172-81e2-4e0a-a331-f81bce09a9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c302e6ec-ae47-4261-ae44-c0b374b15169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfa2fec-b14f-494d-b1e5-6998c8bbb124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2e38a9-8568-4b73-8267-2f6dcdef473f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e075d4f-a996-4e57-8c5d-d93528434f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaed0ac9-7650-4e9a-9624-2eb28507bbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54565a33-79cc-4134-9696-751da7b3ece8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9203cae-4e10-47eb-a65e-46800c91d304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73e4260-de93-4f58-a0c5-c2c39b404410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e47ff2-498f-4acd-9004-56db64a82c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a202918-1873-4e07-bc02-23e6b2fa4f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43039b7e-b88c-4b3d-834d-1ce0cc8c8c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b54aba-d469-40d9-a347-3390496a3037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222ad803-db86-4d76-bb7a-0a5d85d2d5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9812c55-0a18-410c-8b01-8ce74107c20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5a7da5-5c7e-4bab-8626-cb8b945f4ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bf65a6-f161-4e46-ad6d-2d2fbaedd74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdfe354-4b7f-4d55-9717-4cc551cd332c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221bb832-fd38-4c2f-b3d8-3736269894c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03942d4e-450a-4d29-bffe-3995d54974f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62322a49-8d1b-4763-98af-405b4a7723ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bc75c1-b40b-4d5d-a5aa-ad1f523fbd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef877177-c179-42ba-b431-6d77f5f785e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f27f7cd-dccf-4540-baf3-c60b0b3d983c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c05100-d2e3-403e-ac6c-2c4a6b38a509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047a75db-d1d7-418c-96ed-87a1cc320ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c412bc5f-9bb8-49c1-ad8a-70dafeacc470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29a268d-0a14-4f66-8e88-9d17239fda26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e9a9c8-9c58-4fc5-9b03-42d41b17a0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636507ea-32c5-42a4-8513-5a0096ec0788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935f67ff-3b50-424a-aa62-a65a8b3c5ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6639d1b5-2620-49f7-8396-8ebf0a7429d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f044f6-0f4e-4f30-b45b-bb99610f1a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e27aecf-206a-4588-87a4-d051995f871d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100dc13a-92bb-4b2e-accd-646b3254ec36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e152a569-64be-4861-b890-6a53bc702fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd32dbc-a91d-4e57-a336-7173ce8fbee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc26561-6cb2-4767-af57-34754dc0de66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c4dbbf-11f8-4fa9-8112-c55d22cce899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02615482-a06c-48c9-985c-ed543b612408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b3af1d-fe58-4137-8957-c284274de8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199ee4b0-d703-44c2-ae97-2d00e366dd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d6ecb7-ca91-4876-ae00-7dfee7f07ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422af69c-0b7c-403b-aee2-70c051cb9945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acedcf7-8a12-4164-9813-773fc15acd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ff4b30-6db6-4a4a-b1a1-86ef9b489df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e047c1-4aa4-4feb-b250-a9d60f91f90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66aa591f-49fd-4940-8f36-eebc8fefa67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec4a3a4-f9e5-4783-b370-a7fbbd30ef95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91175d50-f1d2-4eca-ade5-31ae486d8b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c5a5f7-8533-4d93-8fa0-e77955c45ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10a2071-2041-461a-a644-7c8223c5447f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbb0e9f-0c29-46d8-b0d2-ae676c15bb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b580a1-ba6e-45fa-836a-25e7a51e34f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a20a9eb-e34f-49d1-a2fb-4dc5c3b4ee3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ffd4b9-1d36-4347-a80f-f4ec5436ce95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cf03b0-1fd8-46fa-adfc-a22be3dad553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45358634-8410-4786-a72d-9a8270d18d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310d1ebe-616d-4b27-ba79-f85aca533f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b08a17-b8f3-48b7-97f4-f500d17c1cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6c3f7c-7011-4701-9f24-6c97adcff284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03177bc9-835e-4949-b4ac-7fd46ba89c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4874b63-58a8-4cb4-a83a-30acf18b6957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1d44ba-f5d6-44cb-9fe9-73afbbc25b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe52a02-b135-4873-83f1-81da05a6f4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8891639e-0e71-4b2b-98c0-2f9d730e961c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14d1482-273a-4866-ba5e-ebab25778510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8768d39b-93df-4a34-967a-892a76cde394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516ee850-46aa-4721-9b07-e6bbab01f820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2b0c5c-1c96-4c56-b2c2-6199a711e078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795a4f75-639f-4635-be05-fb16b4133129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6bc59b-e60a-4b2a-be1b-6603b23ce3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fc2f76-5bfc-4f3f-ba10-502e14bf9eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b90983-9668-4128-a51b-ed8509d0300e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc78156-710a-4d01-96d8-efae033648ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c004a047-a4fa-4dfd-b735-38fd9e5e4b56", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e947ad-c758-41a0-bd43-4d34acd40315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51e71df-1c17-4e81-88c3-1e7826e312c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c8ad68-7c78-48d9-a0cd-5400cf6b4258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5016704-fccd-4410-97eb-cd3caa8e6465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83cfca4-0a1c-4e97-bbb3-1faf18a18f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0adb398-8cb8-4ef7-b7f2-99f582ff4228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed5e06f-fb70-482a-a1a5-04f599e00985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13af1c7a-436b-4248-a149-77410c50a0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ee91ad-974b-4f1f-93f3-bb2ce27acb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2768432a-0167-4a1f-a533-5e82985793f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf8acd3-e111-4d5f-8d64-021743c263e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3ce087-e7d3-49da-9f80-cf2ab4248e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097cc8fc-5548-46f2-a5b7-ae91879a2459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3290de-61e8-4189-bbab-50c659db4de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7078307-2f9a-48ad-bef2-6f0afc49722e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05945c62-4d8b-47c9-98e3-4ff84dab4099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f8cd35-32fe-4c91-91cd-9b67da3ac6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a635e3ba-1bf4-44cc-8e4e-9bc4467d72ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b60446d-2a81-4c1d-909c-b776e7d80075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c83f5b-1738-49ab-93ff-de377b0bbb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3660af8f-5fd6-4714-bc30-0b1dfc0132ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847c7c7b-a75e-4465-88f4-d5d671ac1d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5c6cb8-81ea-42d3-bbad-508efda24bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c35bdbc-8e0f-4228-965f-43b81b8df405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e571122-0d01-4ac6-8465-df8f7ae647c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e08a579-bbde-4b77-8580-d88110e9b9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aef8373-7a7c-4ebf-b772-ab4994a91ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c686b324-2d3d-46b5-bc3d-6d968ac1a0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71f6cf1-b74d-41b5-8c83-88bdbd95ef88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967fc3f7-acc6-40d4-9400-a1378c4c9d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca54d0d-7b54-4299-abc6-8689b4cbe4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f59e90-c9b0-4f6e-bbd2-f889fe8dec71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c82e472-7f59-4ae3-ba73-1e87a796d941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669d836e-2dd1-4d93-8ff7-23e64dd8589e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86db5eef-19b3-4c14-baea-f6c68ec5d763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b11487-753e-487c-93ff-57e25d311a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08780cd9-8ba4-4958-9777-ea8693fb292e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7819a4c6-c5ad-4c2c-a75a-706523627187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8661a54-6e28-469e-9dd4-0a6daf06fe4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a808e129-2643-452d-9f20-6c46b8ae4c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e79541-7f0f-41df-93da-36fdf9f1346d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0f4c45-b539-47a2-8f9c-3f8eaecd2a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d13a5a-e56b-4003-a70f-f37c28f7443c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b1c39f-a760-499e-ad68-02aa41d5c020", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.227.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0d499b-f9e5-4be0-b1db-debcad464b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fac3364-4de9-4b5d-84d0-4d03a2bd95d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76567143-74c0-4277-b34a-cd0647b49a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8dee41-50e8-4c48-b9af-f5c868babfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12663fc0-60ee-48b0-a318-638c20938e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b663434f-a962-4757-b315-2f817c67f758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d08e418-618a-4e47-be67-5a4df465c371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f629ad-eae6-49bb-ad75-6dd0bbece165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf7cc48-b975-4f6d-b6f4-05ac1308e2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa39ae1-3a04-4b69-a0e9-c9e348e89855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08694830-37fa-48c1-acbf-c57e9489936e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ca945a-efc1-492e-bc4d-5cb4fa01e40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36db19ca-3214-4c3f-80b6-04f5aaf22eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7259327-3497-424a-b30a-805d4784d237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80e52b2-d014-4c6e-aa9b-1c26f56dc4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88edec79-922e-4d5b-952a-0898bda9798d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1877c9e-9b65-4275-8ba7-c911d1d10375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4942c933-d519-4311-95c8-0b79af5e38e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef49d3f9-ee57-4cc1-b620-07f2778e68fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46881386-3465-47ef-a189-77f8b31182a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5857f69-bd7b-4939-bde2-83900cd09207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfa78de-6d83-4d11-8bf5-9176744d1ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dbd244-4aa1-465e-ba99-0a38f1cc9d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc06f758-ca3b-4849-8a68-2dcddfdb7f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe457272-a730-45a0-9fc0-026edb1e3414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5f96c6-c3aa-4d59-95c8-76dc48eb27d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad494a6-05f9-4f13-8eb5-dd43a1ea7919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380aa04f-04cb-4f51-beb0-20448d0131ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f149ab-1849-4ea4-bac7-345123390f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f33d1f-a5e4-419a-bb61-7a4096b46f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4ebb04-44e6-490c-8102-88d48c5ef235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab2e5a4-5ef7-4de0-bd97-9d3edec7d72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330bc1bb-478a-4d23-ae60-6fb0cd8a8f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8ebf11-ed73-43c9-adbd-7a7104ded5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf93b00-e10e-4f4e-92eb-ba38a5186c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1827b953-dd96-4a19-9fd6-b54459010886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254faeb3-8583-4901-8d22-d4cc471654c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82141f7-b20b-4984-964a-f5b2352f360f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4c8672-aa9e-40d4-92b3-4b70e3ec0bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe005d8-d944-4567-b7c4-cbe8082a42bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6508a6-8e07-438d-8e62-c12a5b7fd3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73306af8-0f35-4399-b428-bc1d36c974fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.57.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808981cb-be1c-4f9c-b688-17208ce677ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadd0531-fa12-4f92-8624-16cfcb41a266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46aab10a-b4e7-475c-883a-1436c7b92b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.16.105.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfbe6ff-6f06-4e7a-8498-4ce0404aa8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.152.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3171b4c3-df8c-44db-be79-13e0d902f564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.147.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c431fa65-3e3e-4ae6-87a8-d2b09a67b180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.196.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38bb628-d798-4f75-9c30-f4e6d7d6fd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.20.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa546083-c477-4a45-8e50-63f8a20ef87f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31926ab8-1ff1-4f49-b7c4-0b42dee6f4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.57.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5091271c-b2fe-49bc-af9a-3f0746c2465f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.59.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc9ba58-0bb9-4c08-b48b-e208acca78f3", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c260a5e1-a4b0-4ac9-97dd-ddff80127d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.41.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcf4e49-9cc8-4489-b768-b3cb6f675de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.42.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c5ef87-123b-4271-a800-270989ff4ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd78d1c5-c74a-43e1-979a-c3f3a2b61218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.222.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d90f6a-071b-4d2e-8dcc-0830b5696d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.235.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1bf166-4cb4-44cc-bdb1-6309cfd374d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.246.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442bd5ec-b640-47d3-a6e0-b00ec56e3506", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.41.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d904d88-0cbe-4035-8582-66fee074e796", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.130.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2d15c6-a69f-4d1a-95c7-2dda78eca47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.136.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8831f2-56d7-4aa3-85eb-05daba2eab0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.148.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b305ace5-b658-4626-b9bc-43b7c72881b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.38.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e4c672-c6b2-45eb-b1f9-ed7068cba460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.47.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0008c017-081f-4bab-a0d3-1b577f8a2792", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59f2eac-703e-46c4-8a98-81276167a966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.86.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62726c7d-b742-40ad-8f9c-f014a99a227a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.90.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41585d4b-30af-4fe2-897b-b515e2a31d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.205.0.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a807ef26-c987-4ae2-b377-102bf9d455dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.38.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b360d9-dcb2-4326-ba89-bb812dc5374c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.165.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b1e2db-de37-4b2d-bdfb-759a9927c4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.229.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6019d8f-8898-423e-b173-8ec07bfbed9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6023e7-fe8b-4200-a231-63e3a1cf976d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.248.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7728492b-3716-408f-b482-568ff61dd620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.95.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46355dba-6043-4465-9aa1-30fe6940d75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efa5add-4e58-484a-87b4-2d64972e4f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e7d7da-0b51-4cd2-805e-932db4c6b65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d16cd40-64c5-4295-8779-098c34f025fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf760dbf-f8a6-421a-9864-5eb5e354a169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9938b839-17cb-4536-b98e-55d2bcb1f13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d46e39-a8af-46f3-8947-6682ab2d8994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6cfa7b-b7f2-4850-bda7-ca5545221aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4182c6a-a360-4b28-8b7d-23455c8030f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c494c6b-236d-4320-b393-11a2492f402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739a1357-11d4-411e-beb8-acc37c540d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d30d34-b38c-4090-87c0-4e8304f6fc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d0d510-92dc-4bbb-9248-105be7810cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fec7f7b-3f83-488e-8fb3-6d8a4a4a8963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe31c7eb-ada3-4e54-b347-1a5148bfa87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6414851-7adf-4485-a364-9fa6e8665c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f68c482-c972-41bd-9f17-1c5bdb829078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de67ee6e-3351-4e7d-9ddd-d00524c18754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3fd557-1f0c-4e52-b078-a992a7b38e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6fc44d-91ae-40e8-91eb-6e7f00fcb019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cee10d-b68b-4d97-b73c-d524a8be088a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482d2cf3-db3d-45e9-a8e2-da4239feb18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5a0192-e2b2-4f6e-ba54-95a0725d8bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f87566c-09a2-4201-b814-166ba994fd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13197717-b35f-47bf-8d5b-7ea2df094373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3348da3b-a1ec-41e0-9315-72c680773b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629ed80c-47c3-46f4-ae0d-9d12166128b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9a6cc5-2696-4162-947b-31ec90dcc293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0cdcfe-cd4d-44ae-8189-ceb27b11d778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb2e2dd-f3b5-4b54-94ce-c3d9fd37dc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049f988a-b798-4a27-88e1-5c2b4485d39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a2701e-c59b-424b-b33e-6c217fb11415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b548f4cf-4715-4876-9e19-0bdbad3fd677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184efcae-acf6-48a6-bafc-f4df15a6fe8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5650aadd-c55b-4d56-a385-35cac8368aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5f367a-bf58-4cd9-a7c6-416c7a305ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb444df-ab68-452a-9cc2-27f81a789d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609adb40-76ba-4cb0-8332-d5ecb758d774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d19ee6-608e-45a9-a1f6-b74d1d6dc97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29298da-f294-4f04-b0f8-d2010638e202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0215c3d9-7703-4166-92b1-19fa9cbde4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.1.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6db379-dde0-4e4d-ad01-d6a80c28ac7a", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.106.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0ce036-1df4-4a55-9693-cd79a93c28b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.154.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96564a2a-6942-4d9e-809f-47eae77214b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.169.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4c8c28-aaec-4bd4-93e7-54da40ab480b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.172.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e16d84-3d08-470e-b357-d0159c909330", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.224.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910e9329-ae29-4146-94ea-2b14aa09f3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.237.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0f008a-1737-455e-9a4e-20b44c00f873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc60e8d1-8fca-4681-9182-25714fea1ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.124.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ed4614-b422-4520-9851-3f65b52f66b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.38.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa01183-b6e0-4103-a4a5-7611d4ec8a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.64.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0245ae67-2d27-463a-b530-fff285e06618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.228.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f81f392-ed76-4ac3-a4c5-5ec91053863e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca024bec-a33e-4549-9b3d-1ddcd6d095f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0efe403-6509-4127-a638-acd2e0357857", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.205.190.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d82184-3a53-41e1-9071-db137fffe2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.232.128.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778aa00f-06e3-4aa1-83a0-7e3059b7d5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.148.5.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9117b1a1-eb58-4bd6-958b-5383c987e61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abe88a9-96ea-4bbb-82af-ec0438f009b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.228.66.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b45099a-4863-4a06-a73f-4316d7544598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.239.181.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f363129a-6698-4991-ae3d-6be7e05a5415", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78987fc-6824-4c90-97c3-bd2def5b5e23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.72.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d156396-a444-4064-8d3b-30bfa978a4f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.72.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36e5d71-95b8-4d89-b393-4755192014f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.187.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b10e05b-268f-4dbf-b109-7a12a28882bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.147.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093112b4-bd71-4a00-b1c4-c393e9ef0b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffd296a-42a8-4201-9d96-255cb6baace9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbc57de-c819-44ad-a34a-621ab91ecbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4a4f94-23c8-4727-a3b0-f766bc222792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1a83d3-aed0-4ab1-b5f6-58efafab9a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8480332a-5ac0-419f-bdf9-8c8373ab44b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04692ee3-73b0-4918-9c8c-e9231cb0f3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e5b9d2-25c4-4593-9290-14d1f696c562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f16a406-737b-42e1-9ad7-69dfc67025b3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.239.78.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727ccc15-e047-45ce-a486-2388206bf6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.245.235.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ff73c0-a24e-4f9c-b104-dda691444a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.245.235.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e853545-981f-44d6-8587-6137db5e5136", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.211.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1e0db2-762a-44a9-84b5-670c0bd8b37d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.229.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcaeacca-4e08-4530-82f2-39851ac0d525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edab40f-3e41-48a8-9190-ab781231c0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c752a802-d08f-4758-b517-d577b4d4791f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.239.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba43038-c8cf-4dc1-bd06-12fbc106b440", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.80.64.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd05ba43-3778-4c55-981d-548d27fbb940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.105.76.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c58d6c-b0ec-475e-a8dc-9bd908a9833f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.105.76.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25df6ae0-1ffc-42a9-8327-fe5df744c36a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.227.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2951cdde-7924-4dcd-b19d-4044eacaef05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.225.193.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2e99da-4eb2-4926-a460-c8b9838cf01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.201.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2381132b-d61f-4326-bfc4-53547901c09f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.201.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d896456-0d16-4f65-8115-b465ab4584b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d134dfbb-6e23-43a3-b605-b90ac2c63f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.134.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaa02c0-6287-4ae4-9d52-18826a52f5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.4.216.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33ec496-1a1a-48f1-b452-8a2c12c0fe37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.8.138.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69cfa7e-53dd-46e1-8e62-7aed185d3671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f154e39-4e4f-4405-9579-cffc53a0c075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6111d0-945a-4c7e-9b33-ce3490ec6949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c31eed-3d3b-40f0-b365-7fe452516886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bd0c77-e137-4b3f-bcd0-a469ce2c786a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701a69bf-cefb-4c11-8d1c-2bf0c8a5093c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e504bbbf-3e98-49a7-af66-0903d4557fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca43a2e-fbc6-47aa-b939-cedb939e7de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3260222-30d6-48f5-b5bd-d54d799ba1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3e80e0-ebe9-4de7-bf53-5f49ff64e739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79635d0d-a8fd-4a39-b087-377632f08ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a3b234-4200-47e1-b700-63b4a3f9c6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf6d280-3b4c-4fc0-8bc9-f4685a7e3a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bbb5c4-387b-4b86-b1cb-40f58f010971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94df487d-70ff-4e70-abda-64e61d9d366d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7f1ee4-2390-44d5-a052-f25f83cee5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1d9763-a8c2-404b-9fe2-5d9a87846de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6c09de-e556-48fe-bf83-a68240c69559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81b5e76-c20c-4129-8a7f-3e12c1773e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.168.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd3a476-fe73-44ae-b586-89f94c345180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdd763e-8b07-43fe-a0ce-c35e7b292ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ceb011-18d7-419a-89cc-f6f54a1a7bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.224.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9a2100-a31f-4755-a397-4476125661aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.49.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadce71f-a1d0-4dc6-af79-f5c65c068a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.50.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edb30c3-ed4e-4e55-b172-7be49635808a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f9b3ab-eab1-4f7a-bcf7-a59af298df10", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb95815c-fe1d-4397-8da5-0afe25ae1b31", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2230e93f-09a0-4668-8fcd-da97882e0d8f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ff51f6-0420-43ef-a77d-e48945a168e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb88e4e-02e2-47e8-964f-0b7fc59ca6be", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d7f00d-98b2-4e0a-b9da-86c63e2886e3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cb3ca2-30e9-4266-bf0e-1553652a4f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.127.51.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3439ad4-3d23-47c0-940c-ae03ca92b233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.157.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa280e5-f150-4bcf-a0f1-fab7db0734c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.170.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e29427-48f2-453d-a37f-36e9eec1b73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2f7021-26e1-431f-8eb3-f38a35c13de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.250.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c348f19a-2b96-49c0-9d5b-d4079198747d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.119.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6d6d2b-dca6-404a-81d0-ff74570ae945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.193.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c616bf-43a1-4de0-9317-7edb05b45ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5782909-1aa3-45c1-b6e0-2969601e9041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed61623-3a0b-4772-b2f5-23d9cff47408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f6c602-b114-4235-b16e-db6e4a7a6c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f26531-4d5e-4d40-849a-da268f77f47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea1f472-a915-4940-96b3-9329308d0284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2bc32e-d82f-4cc5-98eb-1b88d07b2734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544f13c8-c269-402d-85d9-9321f46460db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09dd2d5c-6471-4c5a-827e-ea220c9c7ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64873fae-d801-4bcb-85fb-3f295c012164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ba2266-9aad-4526-857b-d3869890465d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cbb88d-bc01-43b4-8ea2-fb470e2927fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.122.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6047ef98-f29f-4282-9bdb-9d29317fcd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40aaa65-7dfb-4c53-95b1-ac602e2644fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9486033c-f059-4868-86bc-f622abec0739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.224.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa35f84-0165-4821-8898-6598b75c8f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.13.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bb29a1-4dee-4bad-b3b4-8110f3a08653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.25.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe982b2-be8c-40e7-9e3b-c4e120966de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.67.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d550d30-4e87-4017-8aef-e984d5be7eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.81.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9abac6-aa56-41e5-bc71-877ddbdff7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.106.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0340017-0fa7-4c6f-b545-a9e69ba557e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b164ef4-b7e7-4136-97a5-1a1e02a65fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.156.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abe6f89-d4e0-41fb-8b6c-f9f1d6c564ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963eb9fa-16e5-493f-9189-1ae20b748d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22dded68-31f8-4522-be0a-c64c988408d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.238.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184ad207-d9bd-4512-bb12-d34531342ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08365881-4689-4f1f-9a0a-c5b9ddee6998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d922294c-c39d-40bf-873b-63db3662aae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1294438-0de7-43fc-b251-3d106ef78e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446e1c9f-39a8-4b09-b4c6-392c0b96fd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023d116c-a235-412e-99fb-c57aca928070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f730afed-c9e3-43db-95fa-884d44dbf89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb3df5a-a4fd-4768-a1de-a30555f0bf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6acfe5-fff9-4cae-9c80-6a10f53540a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e121b64-cb83-467e-a966-4ecdc4643356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58d005c-dca1-4bef-af60-a963a37f301d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8250fdbe-618f-47b2-a10c-c9d6dd3fdcc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3224057d-0358-425e-9bcc-308269a21cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53eda24d-05b5-4451-b1a1-3569043c56c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0ac910-0feb-4157-8603-422bc02516b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3447a24-b0de-45c9-8059-876716133f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7f22b0-79bf-4f65-b530-3b7d8c988fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403716ba-ff55-46b9-86ef-b42b25298e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e02e920-db4b-4cd2-8443-bc75cc466e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d7667c-3520-4c7e-9ce2-46e5b29dd10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd31d3a-61be-4fef-9004-80cb48a9fe1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc907c7-524e-4735-892f-7d11f3f9207d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9e1269-e4d5-4b6e-a4d7-af62c903e405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615ac358-e486-41b6-9fa9-d19c87b5cbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17970e55-2f76-457e-bc1a-e6a7c33476e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed8c0e5-c2a6-43ae-ad8e-929915bf7aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c405f78c-c214-4eec-bd58-666db54f622f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5df9124-61a6-4203-993b-bafb5be23f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976a4213-135f-4fe6-ab97-764fcbe852b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ac6e26-3027-4bf9-a343-ea8baf177f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242e58cc-f029-4ad0-b5f5-d1971aa6ae9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.119.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0c4cc3-6e5a-4ab8-84c5-8c2e132da7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bea8878-225b-4c84-8f5c-9907daa30404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432fa8d4-3f5e-42e3-9107-9d944c3a5654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb48ae1-d8ca-4957-9c91-36ddaf813607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2bc98e-b268-4e79-9bdd-545cdcc6b6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d3b8a6-0867-4a9c-abe3-6c821245f77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759e611a-0aea-47f0-8125-e4784f6aff54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a3369c-df2f-4108-b637-d1d445b0199f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbab942-67e2-44fc-b4a5-21492aab1bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff6a90e-24a6-419f-91dd-486ff5a6fb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d4910c-3f70-45c8-ab7e-f8b15d32be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a1736c-54ad-40d8-bb0a-593be492c352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923512c0-d541-4e34-8a90-e59756441453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379aec6b-1aed-44fa-b83e-363addb9ee45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ce9354-1073-4f97-a223-cc0895d3694e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957c9ad1-45c4-474a-b0bd-564bfbfe6e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d6abc1-25a7-421d-baa2-69ecd7c870a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f35800-75df-4666-afab-c54525a4a872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075566e9-e063-4946-b3c1-12ab7bf07fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4b90e9-214e-42ac-8ce8-fe6426640ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8641d7-9dd8-4518-8a99-5c916a50f5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb010dfb-c1fb-4037-84bc-73f36d52eab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9594e81d-dece-46b0-8f33-42878b39ddad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46f1f65-81b6-435d-849d-cc0692c4f52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e8bd4b-c15b-4706-8ab7-38cdd182e382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf976b4-cc44-46a5-a695-281484fe51f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bd6d68-4afe-44e9-b22a-6e4fa27b1ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c71c332-5d00-452c-abe5-4082c82bf196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4895a240-a3df-453d-bcd3-91dca3590054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c2308c-a0c9-4957-b80b-f0156efab731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.148.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99980d9-02db-4b7f-a8b6-963dd1b945bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41e8612-2135-436c-a8ca-0787f4d396e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.89.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c23d74-faa8-4cdd-b230-594b5425ac73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155c42f3-54c8-4c88-a26f-5449fbeb50d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.71.241.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4935757-6fb8-430d-9686-23f5c8d13c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0797b3-f3cb-4075-bbca-127d3e88a639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea80cb6-3a23-442e-93de-873695eed3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.121.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1208b29f-d169-411b-905d-71575c5bb77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857d1490-870d-4109-970a-530bf1d9a75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757db0f7-ab38-4819-bb8d-fd470eaf51d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e29b19-b3da-4951-85a0-3bcf9a21b813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb960cf1-ae61-4b72-8d03-39847df1663a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f92731-3143-4a9b-b070-73e12cd9b853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608d917c-94dd-4c94-93df-293d143dbfb9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.179.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f94b40-5f34-4646-93f6-32ad8f749dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6b43e4-6d77-4794-97c8-922650dd1372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.92.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403fb575-2821-4844-bf26-90c01f65bc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e470bec-f086-4223-bf08-aa796ea29255", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.244.216.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab117fd4-af64-45bf-aaa1-f0f452c3f49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.192.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa41dfb-d749-410e-a752-f75f3cd2ad8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.204.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4d1a01-37f2-4e27-b673-7375a236188c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea770c3-ea6e-4cc1-b745-2cd398907f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7976f08a-3f0a-4212-9d49-18d1e6b33a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.214.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813fc72c-f245-461e-82fe-47a711743bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a2dc06-a3af-4baa-b838-3553b6e959e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6733581-7c6e-45a0-86e6-0f860fd1bfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb35b08b-45f6-4b88-9a2c-575aa5e153a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefcd318-6a08-48f0-96b2-8c6170954736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddde00e-a750-4c99-a89b-6b5aec9ab9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bb8bbe-3317-401b-b28e-d53033789a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30344e9b-72ec-4404-9246-900f0dafcb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f6bb6d-90cb-433e-9130-e11c2d9b1ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a408d5f8-785c-4283-97b5-d1593a2d6bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664c3a3b-2133-42b3-a206-b15aabbd1887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e338d4a-7cd1-4460-9610-6c927e84d1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.229.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2ff72f-822c-44e5-aac7-7113efc9bc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9b0164-deff-4dc7-9fc2-38e18cfeb2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4b84d0-281b-42ba-bb8b-0eafe8321cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440c9c92-c22c-45f7-a9cb-221455354940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d2120a-bea9-47b7-a5d8-088262f5e57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aed20c-cee8-4639-bf20-6ee41565dfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910ffcdd-0b08-401c-947d-c2ce7adc81b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30968afd-67a3-4129-bae0-24718fe09b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd195ed-36fa-4ce7-b274-c188f97ffa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f457e4a4-8584-4ed4-9167-983f5458684d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173d8168-a734-42b0-ade8-2b76d0526cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0e1421-f04a-4253-9785-a61a0e142c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a51ec2-1d07-4a3b-b6d2-f3b673c4226b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.71.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f73604-e5e1-4965-8e10-697df5b0a98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.71.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acfa45b-373b-4988-91c3-b8b2acf7e100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035ddd28-44f9-437f-a7ef-135aff33f6be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.237.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec42eb8a-35f7-46c0-afc8-2d0e88a7445a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.173.227.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2791a6-ed9a-4de5-825d-bcd0f106181d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.18.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ba2650-3c3d-4f85-a29a-f2c1aa505b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.210.184.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b543c3db-62dd-4db2-9541-02be3a8c871d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.215.69.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5569bd-20d5-4581-9fff-2b64209eb07f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.171.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ffabed-802f-4ae8-9e52-7e31eb2e2078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.29.196.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dffca0-496f-49a6-8be5-9d934f177182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.29.198.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dcb870-e013-48af-ae7e-19021a72200a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.109.97.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c7ca37-c7c7-4857-96f5-c4171de532ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.113.164.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c798347e-ef1c-4f55-930a-53933c836213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b077582a-dffb-455b-af3b-9ec4dd77b0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.202.106.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8851eb-986a-4075-af49-5279e3170d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.205.242.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2234d959-3d67-425c-9839-3bc6dc5c394b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.211.42.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2015ebe7-8939-4d01-a2c3-03e547298d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f58d89-7a50-45a4-8603-7c46638125ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf4de9a-09d2-4029-adb9-36d4219d7caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.133.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57601457-9080-44b6-9ae0-c66daf52c0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df7be01-484e-42d3-98e0-4f170f03861b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95e2dec-99a9-4c6a-a975-071bfa34afa0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cea605-f198-4c31-a96c-b09d6fa87766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3492849-44c3-4b55-ad0d-78e88566bdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6592a919-6e9b-4004-b17c-a5e60cc2562d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c775998-f81c-459c-a622-fad5c1a466e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53db37c3-c87b-404f-b718-27e7582f8a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ac1618-f02d-4b17-9428-e478327b46b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c25f446-1910-45d8-ab41-a9ccc7fe6a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00979eca-d24c-47c8-8d1e-601060c8b582", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53af0b45-c9fa-47ea-9e78-8660d04377c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd7635d-21cc-4d0d-9529-32228733461b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1a1974-e63f-4e13-8545-2d5740e77a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a7dbe7-998e-483c-be73-7e418654f4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4d296c-d27a-4386-b3de-14647a754b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae38fe04-5312-4a0e-b960-489e1307231d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f727cce-8669-407c-8bf6-4f95270d748e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187d29cb-df25-4a5e-8e78-8724e0cd2f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd4f713-1556-44fb-9d39-41fc97a684a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cc5e89-4531-4dcb-be9b-5a0b8669b695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e841ba86-96cc-476b-a4bd-b1e172cf03bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4345e6e9-d800-4c19-aa66-9b40e557bed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e87b6b-1e9f-4bfb-8f12-dfb325ff4b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef277979-ab94-4bc2-b1f7-669ac2cb3c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35590eb0-59a0-44c0-8a7e-ca944a9542e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b16d2a-8c8d-44e5-a89a-f323002d06ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a455c0-c2bf-431d-8cc6-4942992dbbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ba14b9-6b8f-41ef-a3fc-ded0cf0b4905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa71f173-51b4-4f04-93dd-b2bd2ee88e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ec010d-73e6-4269-8eb6-d8de139fa573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f428ae8-8a2c-4c5c-942e-fa1db0659224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7094eb3-785b-4daa-b621-c816412da925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f0c07b-c548-4f49-863f-ef75cc1a9c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceaf084-e177-4787-805f-bf0af58476ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8b448d-fae3-4947-8c8b-b46ffecda669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07efc8c2-1768-41a8-b290-7d89347405cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7b748d-18b1-4eae-a72e-e341755c2e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e8d616-c7f3-441b-9602-32dfd15c2f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3f28db-0d5c-4a1e-bc07-8f5e53cddbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532711a7-7301-4dec-983b-0f735f6b0af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4133fef2-fa97-40e3-98e3-aa191d84af89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc15d91-47b8-4bff-916f-9d4946acb889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe6e543-65a7-4973-a677-043c3a127f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd57613-16d0-4543-8872-74dd6a817eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6690ce4-30ae-495c-83e0-bb1e727bb754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce1f3e3-2810-4a66-8768-92c51dd6638a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.96.131.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c1e00b-10c5-4f1a-9cab-eb8eb2437970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.97.210.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773b3440-2d95-4b5d-8e9d-77cdfff9eea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.88.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd463ce1-d098-4ada-a6f7-051ad727a1df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.141.19.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17e616f-fd6b-4313-b36d-c9e0b778e47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.242.110.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dac05e-529c-43df-9cb3-0a71801ddfba", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.245.249.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9238fc97-81fd-4644-afc5-9015a951bc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.36.214.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cbc1d2-7690-47bc-aad0-f62a3de648db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.55.58.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0566c6-c1a7-4f73-80d8-ae23407516cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.7.21.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c85eaa-136d-4d82-9ad5-e78cdc410b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.81.75.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab9794b-f16a-4dda-ba83-5edcb5598ae3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.104.96.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c4d196-652b-4413-a817-cacb41c61230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.13.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19c20a3-510d-4abc-9545-fd4e69e05764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.168.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0db65a-3693-4a4f-9fe9-b9aa3c772292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c868e86c-8594-4dc5-ba25-10e66eaecbd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.99.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a85019c-d126-40f4-985f-3dd9622e060f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.141.132.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e26844e-e73f-42f6-a4b8-e5cb44977e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e146e74-59a2-46d9-a44a-ce348e4ed39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d44f15-0d9b-4a47-8bd1-056b077bbc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.175.167.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1403e2a4-750a-4c59-bfc0-a7a98e6932c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.18.253.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e560b74-51c3-45d7-b9d7-4ff9af8e40d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc4c6a1-ad74-496d-8763-0d0f35682f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71f7340-0801-4e6d-a427-9b5bb1718667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.208.229.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82056c09-f90e-4ec3-bc9d-5c11131b1b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.214.76.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66638fd6-9c52-4c13-be7b-f75caac3eb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.6.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc81b2a-53ee-4694-9078-80d0365b19a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.86.186.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b92562-7e54-40e5-8eab-40f1bc2b8f2d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.0.124.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1744272-699b-4a89-b90a-e3449cf0cc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.0.182.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b80c67-3efa-451a-9517-c65b34f6cb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.106.89.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f1eecf-5f0f-4c3d-a4dd-09e02a897b61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.184.0.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552faa28-6a91-46fd-8440-2226ec9c5212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.213.0.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2914b0e8-f6f0-4490-9d69-36c9e251253e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.33.210.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ef5a40-fb85-4f4c-ba31-85128607e4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d2b4f1-9597-4407-aba1-a644eff11be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.150.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd184df-fdbd-491d-8659-0d35ae74358a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.163.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2eda376-af96-4193-8840-c7dd17c58517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223a724f-2db2-41e2-8f1d-d431929d2f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.186.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2439c35-bc7a-4231-a676-12c4d2326c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.48.248.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e9b57f-afa7-4afa-8d1d-992737b18926", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a513e9-fbb8-4a65-97f2-ce85342b7d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.69.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f210d4b-39dc-4a47-a668-95cc1eddc500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.118.47.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5ea7ee-f9cd-4564-acc2-fef8aa049ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dab38f9-6ace-42cc-92b7-b27aa5922d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9071d2-3736-45e0-9e7d-cf1e2806685a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.247.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c29d86-d50b-4f0b-a399-c3a790a78dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.140.44.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312a0c68-d8c9-4e3b-9cb0-eb9b3741b49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64490e0d-28da-4c62-a98a-c7ee8c7bcea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4895e57f-c1bf-4c8c-969f-e40337db8e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.207.97.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d9d9ba-2591-4dac-8212-fcac55a418af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.241.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6cabcb-5300-4c12-a8c6-37e324ffabe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a219ddc4-ba43-48ac-ad6f-759cdef86e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.33.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cdaee2-cdef-4ccc-aab0-5e19a940ecd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.82.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0f5ac8-4c92-4981-9475-6e335b07e17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.220.198.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51ecc8c-189e-4ae3-8dad-ea8dfc2bae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.150.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26e7224-bdc7-4e45-9496-a2bf8eab8e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7b5734-6765-4131-85a0-968d2751e58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.224.37.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6db43c-6f6c-47cb-9ee7-ecf79886b07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.60.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d220469-a81e-49dd-991d-a60839df3013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.19.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108f3e70-d5df-4dea-a23e-a21e290e6037", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.101.149.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3c6eb9-291a-4ede-b89c-2e0a4f02eab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb32a46-d0cb-4fc0-bc51-43badacc9ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3eec945-82ae-4367-9cb1-81788eca5da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0a6d73-1b33-4517-b462-68222148b5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.188.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d6f30f-d821-4937-adf1-ab080b9dbbe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.195.72.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab799e2-b385-4d3d-b810-5426cd69eed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.210.128.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d66e4f0-051b-41b5-a139-9affb5fb5fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.241.50.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6593504-af03-4cb4-b052-85647ca6e70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.244.159.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc998d80-0b9f-4584-b80e-5427f026c4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.252.80.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d53371-c332-44be-a127-818501897507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.253.183.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd50e2d-7c2f-497b-933a-42a200a3f8aa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.168.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cf6784-25dd-4bb9-881d-6f2fbed6da49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.172.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81500eab-4fd2-4218-8b45-9277bfc5beee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.75.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d47e67-8a72-4582-8d53-ced174e65bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.118.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18ccae8-1477-4d4a-a3eb-d6a42774736c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.208.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970c9775-3e3b-42db-b730-1508706ba500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.198.192.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6625dc-962f-4d0a-a319-6dc421609b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.21.163.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8d9f11-cf65-489e-95c2-c723b0ae8798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.211.2.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b76f01a-6ad2-408e-a043-8cb2e07ff97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.60.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8406c01-9871-404f-b0c9-9cfac873ebdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.231.217.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90e4810-6108-481d-927d-490885d96b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.89.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d523cb-3b80-4732-b75d-710c3aba04ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.41.206.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1958caf6-1a8b-4a34-9074-88166ebd29fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.17.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e57b2e-2f79-4c37-b8dc-4c672cb088a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.90.174.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a75a881-b306-4cf9-b309-b66872b73e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.91.101.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a9f460-9602-428d-b9dc-6286e15c72e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.98.97.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afecab52-da8e-4106-8033-1daa46d2e509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.10.97.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b115705-9a3c-4b11-898e-9102d338c9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.228.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3f1809-b53f-4334-aaf4-358f211b9d81", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.13.96.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab258676-07a1-4c8e-8915-949ac2d48ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf31a911-5da7-4da2-b644-c903f5c4668a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bfb250-d080-4fdf-94a5-2d17deeb27db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.18.83.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4983531e-b296-4c61-8fdb-acfb9ef6fae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d50396d-d542-4ca5-9033-d39da6c75b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.254.173.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd93daf-3629-4098-8aa4-02026ada6371", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.44.12.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756cda9f-61ca-4be1-b91b-60d29358de03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.78.217.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147386d6-4ccb-4e9f-80e3-c95025a147b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.237.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24addb91-ad5e-4bcc-81a0-da10f483d6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.2.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671bb588-0971-4c58-9906-bd39fa61eee8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.129.86.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391376c1-daec-492e-ba51-9df73a431a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.151.207.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e74842-1a8e-495a-a8e8-d3fa5ed44057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.171.158.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f734157-e2a8-4722-aa98-81d3e8eaa1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.171.242.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b376fb-e144-416b-b079-8e813242c0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.182.115.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cc50f8-c34a-4cac-ae86-90176a5750ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.191.124.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2badb9a-faec-453d-abad-fc48cf7db60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.20.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc23e5e-e142-41ed-b84a-0f826e82a266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7463fe2f-68ce-4539-aab2-23dffa985059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f5a4ff-5c07-4437-886d-ceac250f8d38", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.111.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51edb04-096c-46c6-82b9-4b645326e056", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.87.217.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9376e9-79a5-43a8-b247-6f0a51ad04ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78950420-b9ed-417a-9be6-2f527fff413f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9de1221-9967-4d9c-a5b5-16b9808cc182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d91290a-4303-4ff8-a2c0-6b7a40b2d517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fd6898-1143-4026-9f19-179cadc37d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0c4ca3-cc66-43d3-afe7-c9dc71aad812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5014cd5e-a4f6-4902-a921-eb763f31b196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ab5b51-9558-4641-afca-33559606bf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4735bf-123b-4280-82c3-f898bb2895df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7ce8d8-d931-414e-9609-0c0ac50aa333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cca4931-a0c3-40b8-a50a-428ff5ca776c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5e87b4-2c0a-4ffd-963b-57190b22760f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d98d9b-7af1-427a-a238-f585f75d6a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f58c62-783a-4006-8561-95313839f584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8290d21a-b1ba-4220-9553-8f305e75b242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dca2c29-9a01-4c8e-9c89-d5202c806b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dbc341-765d-409f-b3f6-fcd9b47b4975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355d935a-efdf-45cb-bca7-95ba7ba6bf4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77a27ef-4240-428b-9c4e-17b512f0918a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7920e07-84bb-4397-9c7f-1bda11b9489d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55a3721-abd5-4004-9249-b974f3698626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b08339-c8df-4a77-a637-51c7dc27a8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c467cec1-2a88-41f0-a2b7-1a99526347ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c8ecbf-f645-4fb8-badd-45f5fb3ab096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42069d12-cb8e-4658-b5b1-de1153495e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcda19e-4cda-45bc-a278-0bb32bf29bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c8c70e-6208-4cdb-a03b-eb6d2c76610f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe56b86c-4dfb-4410-8965-d0d712fe3df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444cf72a-52d0-40ce-b174-eb9d496492a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee436a3-2dd7-4239-9849-f74e8dbba282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4377b2-893f-4cc3-b48a-acb0eb961cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84ee9f0-73a9-476f-98fa-e7656aed02e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2490121-2307-4fa2-90ec-a10989a71a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85efd071-4f2e-4f16-b059-3b3669d154fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d67982c-11b9-4bc3-893c-a157b3540919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79b9c06-20e8-4921-ae0c-a60475594826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92bec08-4f76-4ae2-b15c-a396471f1309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d07386e-ebe0-4b36-8f6e-cfd47e957801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0a9e6a-213f-4bb5-a896-435b0b08790a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cc9dd2-27c2-44e1-b6ec-2e0ebe401ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d280edd3-c1d3-4b95-9678-3803b6de27bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0207eeed-2acf-4b56-b4a7-7b88bdf94bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e262625f-d25d-49ca-87f1-1dee1eb9b058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1605c7-b7af-47cf-810e-377ce433f647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd32ae0-3ca6-4430-964d-ea29e991fa63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05b8f9a-4594-40ea-a092-a8c9c680b86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebb9c5a-13a9-4e40-9e0e-f6cb91f7573c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b256e6d2-3c42-49ac-ae17-7f18043ab408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131de8b9-46ba-42d8-878b-049b66c87bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.70.159.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad935ed-06b4-4afc-8ac5-da3c46bef94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e73d496-277d-4cb1-86c5-81796a2c3156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.105.90.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f9e5d2-e463-4cff-b060-47e49f88f569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3889962b-0be3-45f3-b3dd-49b696b00d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3cd513-e170-4d8d-83e0-c3a272a499e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.121.15.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45e773b-1c1d-4040-96d2-a8e984748296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4354fc-ca61-4f96-ac84-637f62efdb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495e0fe3-3d98-413b-b96b-af076264c42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6872b053-f6fe-42d3-b8c1-c4da9f28b5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.148.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56c9d48-dcba-4355-a15b-abe327ded55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28563ba5-5bfc-440b-8f2a-31c9142ede4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be33279-7f52-40aa-9cb2-402e82087f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1f2483-8d17-45a1-acfc-aa460b28fffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8379e4-de6c-4341-bf45-2e5b73386d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0024d0b-9007-45c5-9d57-5ec5ee9b6098", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.14.58.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c6e692-8414-4609-bce1-c8322375035e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.143.228.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f119867b-d487-456c-bcf9-e28921842e86", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.190.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb475f7-0588-415c-aa6d-81beb296c0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e968ce06-f193-4b1c-99cc-9773a18f6b76", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.153.231.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977d1390-444e-443a-9e73-ac8d6ed1c91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793934d6-8c6d-447d-abed-786c4aa5e59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30767948-cc5f-44dc-9809-de4156fe17e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cfc843-4f99-454a-82eb-84bafb7484ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ef69fe-6f04-419b-9364-0b583aa6b851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f7a878-f64e-4d37-a6e3-11ebadafce98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc88add9-288e-49e7-b2e9-5fffc35cc4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.78.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c68961-44a7-46be-b066-3405fd77f178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dfd6bb-710a-4e9c-97e8-f067c9168058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adce7fd2-2018-48e7-84fc-ff367e4673d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.126.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486bfae3-e047-4408-be09-ff08b3d1118c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52612c92-22c5-46e2-b188-fc2dc2154b1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310fc29f-a775-4d91-a314-3861ef455485", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690be8a8-dfe7-4cb7-8305-07b2bd6a37d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91d41c6-10a9-458b-b2b3-9f6f17a3a718", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22e2715-6ca5-4969-b9ec-14d3c1492221", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e01388-1647-4e72-afdb-4f0cce2255a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a51efff-adf4-4cc2-85b7-19a54ad6cac2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e34c384-b620-4fca-9ca6-a0ca0989cccf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25d6695-a976-4cbc-8efd-3c557eb72dad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a6df45-d367-4e4d-ba57-e38c4d8091ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1898776-6745-4c6d-b6b6-d4f6fb1de9b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45ca813-a49a-438a-837e-a7852030dd7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21901111-a24e-4fde-8672-04e087085aaa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647d743a-0ad7-4869-aae3-3e53a98a00ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e17da0-a068-4b80-a74f-89ebd3b14058", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45ccd71-c10d-4760-8e1d-348701f4c652", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83b3199-5b62-425e-ba1d-d846f03c07fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f7acf4-d878-41b2-b5f5-8b2c77e00773", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff48081-e219-48ae-85fc-41fbe393d829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.196.220.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb32e93-3d99-4259-8a92-0d7dec24c6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ee1dee-3b8f-46a5-a0c7-e25094e9eb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e22589-d3ee-4c9a-bcfc-ff3f2e7023ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3554778-8bd6-4bb5-a2b9-302b59da8ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000948f1-939d-48b9-b345-6f6f4a7a72db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcc0d0e-176a-4223-b9df-0ac994d92539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6d4f55-1e48-4b53-9a00-072eac958f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b175a8e3-7255-4c51-ad25-5311e84b373d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35856984-b421-468b-82b2-708299a716f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d9f9dd-546c-48c0-9b6e-8d345edcecc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfa19cd-bd69-43ba-8eba-746e8b6c7db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb498a35-711e-4afd-b63a-e4c35f42c035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a19b89a-d91c-4af0-8eaf-6d74ad33b073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadc1dc3-7921-443e-8be8-1f11244242a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126ff514-f4b7-4d93-88ff-bc32b5fc7596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9eee1d-fbfd-4cb9-ba24-8fbea7896b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ad573d-63a7-4f75-a1f9-e2e4c26769dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d3cc3a-062e-46f9-bcf3-6b57898907d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b645868c-3043-409f-a8ec-095ec4ee910a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9d63eb-396b-41b2-9cf5-ac4e0094af0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6745791b-3534-430f-9ae4-027c589771d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c0f7cb-438a-4930-a32a-12dfb70478a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebb9bed-f5b7-4070-93fa-2ee079ce632a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4772f839-b62a-4aad-8fa7-cdf14f8091c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf884bb-960c-4908-bf40-8235606ee9f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.152.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38366acd-7907-46d2-8866-7e74be286aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3cb899-9169-4568-bf9c-e7fa83bf2bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff1b7d1-2428-42e4-9937-a276d9b7ae73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c455dbe-524f-4991-85ac-e4c420bd43cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329dae2e-cc29-426f-8f09-037b61d827c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7093412-f516-4b5e-8db0-b600523099c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36a54ee-be72-411b-8b18-a437e4cbb7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6f175d-857d-4bda-ac6a-09e842503e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47cfeaf-acce-4925-8f5b-c0bbea685ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8683e7cf-0fc1-4079-9d85-1c5056c13d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79ef40e-7852-4301-9b27-25c0a491ae76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c685eeb-9daf-441e-943c-8b513edbb581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecc24f5-adc7-443a-908d-760e55418365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc3ad10-4b11-4aae-b4f6-32ab2105d8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ffc73b-3b88-4e2f-8a96-a1a1c022ddde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bb86f5-64a9-4793-b007-e8a776b5cfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e95af3-3188-4d2a-9b9b-8ae26f36e987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd56ec17-4841-4965-9227-80221a7384b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39a6bf4-2c26-4d90-8161-8d6cae64b31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b60400e-b09a-4195-8bbf-868e59bb361a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d9a9f8-1b38-4ecd-832f-3e5281a2ce98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eddef46-1171-4b41-9077-754066198b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35834d27-8381-40b4-82a4-bdb897b0bc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dc1d24-6e3b-40c2-bd5a-b8e6a6592f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92178a63-6ac0-492f-813c-52420f1bcbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5739db-801e-4266-8723-af1a9ff79233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d3d816-4259-47b9-8eea-1b89de600392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8481500b-1db5-4d35-a6db-46a3ae594573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2dd67b-74e4-45a8-b7d3-bbc4035713e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85565e40-dcdd-4bf2-b192-a5e6d358024a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80036c79-86a0-4eb6-a418-89c52fb1685e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eca0fbd-62db-4334-9907-7fdeeedf5db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adfc901-cbd8-41bf-bb34-a2446dddf9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ea2208-59c5-4ea1-90ab-b53954240e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1104bf2-3663-436e-ae91-6cc93d09c4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca2fc9b-106b-4bb0-9b01-59c3c2a63c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d95631-84ac-4a4d-be25-2081d80be2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a4747a-2bb1-4ac1-a619-b00892012ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa684bb-b968-4da5-bc72-ac4603423cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6a32b7-c1c8-492a-af6f-fa73e2b40b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf61f57-1234-481d-8bdb-83a89228faeb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.89.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ca5637-53ef-4386-8114-e8f305b5be7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9049f985-12f0-44f9-8b27-d4fe8bdb3b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d3c0bd-6026-4bad-a599-d71d371fed50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.236.22.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a889948-36b4-45ac-ac95-d5da6013c3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f9e96e-bb86-44d2-ac4f-7089f73912b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eaa7116-19a9-454e-9f30-89d4626c3394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4859af9c-2f20-485b-91d3-1f439abca9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8535d5b1-86b3-41ba-acdc-b9b42853d3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e98b202-c830-4b8c-b110-36af324592ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e4bee1-0381-4785-a83c-220fac45c8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c8dc3a-511e-481c-a9b8-0c81082e2ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9482ab6f-935a-4bcf-9b06-cd0df964c146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc73bfc0-f68e-4f8e-b61a-1adde70af966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea411b3-da3b-4263-9137-272a93edff47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d776e0d9-bdcb-4fa4-bf5c-93fa2c1386e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b95762a-69f1-4c08-b7fd-a8827a570d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70234eb-b994-4845-829e-d7ce44928dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3681e0de-654c-4749-8360-8a179e978a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337a4bc3-b2d8-493c-9d24-03e4013041b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17b00c3-a822-4a16-a898-eab7f17efaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28509856-cbd7-4b9a-84de-7bafc546f6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4f5b0b-6afd-4031-a864-5c932aef806b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bdbf77-cf47-4634-950c-3bc0498c9506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998d8ca0-5f18-4ba9-809d-2b4cabd77958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50807b5c-3bb2-4281-a887-c39bdb66275a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.232.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d119161-6e25-4800-b49c-acac280edc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ffd611-e3ea-4f83-830c-8f3885e44deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deb213c-3fc1-4ffb-ac16-e45234d1deb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8732ff-5bbd-4413-a501-500aa5cf0155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31f986f-6152-49ce-9b6a-38f2c7b149b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66c7a7e-67a8-425d-bae7-ffb6d5812593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61adf27-4fd2-48b7-a344-2af92401de08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d32989a-61d7-4f50-817b-1a3d7f3cdc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43714875-8602-4e03-bfb2-a917e6cc775d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8085e887-e4fa-4c63-a2ec-0bd3e4513d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a4c73d-54af-4e11-a038-9e417ca3ea4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c4014a-77d0-4062-a82d-c52ebff5c752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b545145-ba25-4ad7-a458-6311acadd1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099716c1-4f37-442e-ba41-42e8aea63857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f43379-1a72-46ed-ba04-8ee30ab4e907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf3a901-48aa-4c58-b90d-d9c8d69ad4de", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.29.184.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45527cad-0acf-4ad3-8eea-798a0f277945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dab15b0-1772-4720-96d2-9566d16b90c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439bd1c2-f139-47aa-88f5-68ffe29f7a3a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.40.30.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae1cd5a-dfce-4e10-834d-5f249af438b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.56.66.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e8320a-f036-4621-9dd2-5795fe5c3173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0485b2b7-59b7-42ca-8407-a9fbb046f97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.127.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b430f41d-aa9b-480f-8025-74ca14d6a433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb6b827-b8f9-4308-bfaf-e36a192b00ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3135b45e-b7f1-4f98-ae2d-3a48f2c0dd31", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af08479a-596d-4af8-98b5-4b992f85404c", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6a8175-b811-4e5d-9233-ea5e93179bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336b2647-97ed-4e0c-83c2-481116f04ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a6a08c-6463-4c19-9405-1bda81b97f13", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.118.142.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7c8795-2597-49d2-868f-fb9f23df8f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.139.153.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf15d7b-52ef-4905-bb08-4774e355e4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.15.27.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16da5f7-16c4-4806-a321-d95f086e1510", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.167.68.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9996384-cfb2-4bad-95c5-c61819899d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.195.170.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ae0481-91a9-4df9-b66f-9defb283cd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.225.226.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fd7142-184d-4eb6-9cc5-15a5ec10d7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f6fa3f-8e2d-41b3-b647-799f8dbcd7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.236.240.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f855f7-38c6-4f67-8460-02b20b4ef040", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.248.195.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748465ca-9ed4-447a-945b-9464881cd7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.249.45.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59a93cf-092f-4385-b0ce-418acc0fc9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.251.71.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadffeb5-617f-4ac4-8ce5-7e7ed5a969b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.33.40.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c3b32d-811e-4b8c-aabc-0e2bc1439d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.6.243.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c4c74d-98af-40dd-87b7-a32ec7a601cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.96.151.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4025c37-d37a-4de2-aa98-5f0f7b63e852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.109.163.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed2e913-cafb-449b-b1cb-b8291dc9c39e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc7a917-46f2-4d1d-968e-a3102feb0930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.131.201.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fc26a7-5428-486c-8756-3d8f7822cf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.224.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa0c736-9c7b-4ac1-8bdc-d55bd5225021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3737d8a9-27a4-4646-836d-5fd436d48671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.225.45.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee7f66c-7059-4817-bbe1-0a1346a7be70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.108.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb56758-2704-481b-96f6-5500e4b235cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.75.119.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a883c4-2058-442b-910f-76981a2eb9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.221.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b7a1bd-f2ed-47c9-ae4d-7cd462ad80dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.222.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2332e56-2da0-4ac5-a83f-348b87490b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.161.38.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0a133b-9cb4-4fff-95e4-5f12d1b060e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.121.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf4ad0a-ee48-4056-bbf0-fd0e55d29dc1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.212.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4ed8d2-5e1a-46a0-9f12-5f5ee41c2d67", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.215.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842c5628-db35-4413-9dda-b74808bec121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.209.129.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d99381-c0ef-49e7-9298-97158fcf6be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fd2c22-6c7e-4a1e-94df-5508b3d43c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b017d935-595f-4528-9996-763356134369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53627a9-6d1e-4513-b1ce-9b8ddc46000c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f085b2d-513a-4ef2-9179-b0b37665729a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2f12e9-b16c-46b6-acf2-bc598e15d069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38d3602-685f-4d51-9deb-cfb54a74737b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23b6c3f-54c5-4b16-a72e-1bbaa9de9c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f7514f-2a4f-43aa-8d34-d39de35b5be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115df1bb-b701-4c85-863e-3e68da9a93c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9810fd-6f87-43c8-96c6-141d9cf3ea79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f188c7f-8be8-4302-b69d-fcc379011b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecdad6f-9d44-4cc0-81f4-669501a34c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25face4-b7aa-4692-abd0-b1f12911b789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d39dbcf-3cf8-456a-ae5a-d289070a70da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa7a06d-20aa-45b9-8289-d59cd856890d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e26f2e0-07b6-403d-8212-886bccf7f3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d99701-1969-4ab0-af54-27d0c4b495ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2cd9c8-1174-479d-bf23-c47c37a9be76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.40.21.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725b415f-83b8-410d-9ddc-826411a7c355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.71.205.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f79f28-1833-4a4e-bd1b-f536a295cee3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.147.19.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16000d1b-e7d2-4634-9968-fc8f8ea546b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.150.140.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81265b1a-4c1a-43f3-bbcf-cfd0861febeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.167.218.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcf0a51-250e-4610-95b0-89586faaccf9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.195.176.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a8cb29-fcd9-4231-b849-534d542fbcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.51.43.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202f42c9-cf45-47f3-88ba-e5d7d02370fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.90.55.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202edc15-f8a0-4136-9acd-e9eade275cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.112.202.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818f8a43-635d-4ef7-a194-6db889ff1ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.113.115.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd68a367-86aa-4658-aaa7-67313b6adee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.114.104.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1e483d-9fc0-4f40-8d1b-5bfc206f88ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.115.196.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201999db-7afa-462f-99fe-bbbbf315e512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.63.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3629b9a9-07f0-4023-89a7-d501c89ae4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.123.65.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bba97d-5464-4b35-98b9-019fd116e6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.129.122.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00021496-e735-4b15-8966-2eb0ec062d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.133.85.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228d78d4-833f-452f-82f4-94970c0424fd", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.119.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6530842d-0f97-4eb3-9e25-740a8420c0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.4.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa3e8ce-f00e-4514-8a2a-ccad14c91bc8", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.182.160.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf20a044-a3dd-474f-857b-77320abf6c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.205.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2b9a93-95fb-4b38-98af-4b1440d1d35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.214.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d72325-4827-4481-92dc-b391ffa70180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.215.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918a402b-caf7-43b9-b399-47ba4de7f7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.216.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354fdc1c-7f81-4df3-9e75-5e21eefd3f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.217.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39849b51-8abc-4614-81f6-4d9ec1e6dddb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.242.109.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2071576f-e15d-4699-8eb0-0ac78c9b4a61", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.244.204.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1db1e37-58a3-4eda-9e36-92642461f5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.47.228.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d31cb9-3f2b-4690-8b4a-48f93d5f6ed2", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.73.221.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7de3544-0fc2-4d3e-821f-88757980dc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.8.175.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5115514d-9477-4c7e-a221-00ba91866457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.86.74.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e944340b-5938-4e7d-a8d6-58dc59f3da88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.92.174.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794455ee-5c56-4330-b5b2-52a274a93fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.92.47.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be94b1d5-dfa5-418e-ad90-0c42816f28e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20700ccb-c0c1-4e52-8aa7-94f1ddb8dbbf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.130.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803a2b8b-1505-4558-974d-2f74a8ac274a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.177.160.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78616f3b-0365-4910-9d39-52d1f8cd7713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a53084-c51b-4c67-a0cf-b194ab8add10", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.253.105.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df7c31a-e4b7-4ce8-90d5-ee859984fe77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.44.125.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794967c9-c480-4723-85ca-b3f374df13de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.5.201.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979273e5-e25b-4f7e-b9ac-61a762af2fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.99.8.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19515dd-670f-4416-8f05-e1c463c38d32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.108.48.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9632cecf-219b-4bc1-beb3-6771e39956e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff41726f-fe60-4dbb-a7b3-73226f7e7c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.119.111.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d859508-6a45-41d5-917c-fb1ddf7c9790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.141.98.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29019a08-ddf3-4685-beb4-685579c44a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7d35de-dc18-48d7-ab7a-651dab5f94c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af361cb6-e292-4744-bccb-385b2a8a7d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3fef06-993f-44a7-a2dc-7c2c94539841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c7e2be-3999-4c2b-b08b-e8ed56f48f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ce8d7b-f5b3-47ee-b50c-b59327485ec9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2d4d57-1a04-4037-ba71-658eba850ef9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4504b502-7542-4b93-bc9e-c8a3461b8dc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc3acaf-bdc9-47b3-b0d4-473b4ecb69db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ed24c3-c55d-446e-918c-c444aff1aceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.150.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0780d9-398b-44e7-befa-a19f91ded81a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.218.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb1b0c1-88d0-4ab8-915f-be4b7d5381eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.12.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d5ba64-c3ff-4585-8dcf-4e543305f4fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.126.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4980302d-3269-4d12-bfbb-4e1a5ddf41ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.126.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead4befc-fb32-48f4-bd43-6cd0ecaa1524", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.210.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a60e6fe-2ae3-49bb-829f-0ef53625ef77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733b7017-dbc5-4a89-96b0-b85385ceadb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9ff7d6-4a6c-4224-a507-ba807edff454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8606f7c-775e-4573-8759-b8ef0c2c13da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6707eeb2-14f8-4f48-b31d-4e786c77cd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0ebe95-08a1-496c-9c39-15016757615b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2411e62a-f5a2-4eb0-ba33-82bc9c5c10e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07e2e12-c3c4-42c7-af6c-7c77dc949494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c893a61c-d035-4a31-a45a-b9983edeb5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1233cced-8af6-4b2a-a692-43ae8e0605b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c83e4fc-ddfd-4904-81f1-a192368d46b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b525dc1e-9d6b-4599-a3ff-d78dee4bdda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b3454c-735b-4f48-b1c9-a271c8eb09c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0a2fc2-ca73-46ad-91ce-b1cf49fd1b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6ff0db-0c81-4ae7-b346-a91eb6a3b819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad673e2-89fd-4859-bcd5-d61261b8ddc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b75c547-cd4b-4e5d-a7d6-8341ed1cf9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfe6f81-e78a-4e52-88fb-8efc7f6dc193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c133599-2153-4ad3-831b-3b7ed79e809d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c11c382-621e-460d-a873-c4c2cf4c42ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8baa2bf2-4c1f-4463-a9fe-e8fb0492cd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ea82fc-f1cf-445c-a47b-197d79129734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b179ada-9767-42b6-a3db-e6d685587f10", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639b0fce-2b67-4924-b864-aed77a716acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8d5bed-9a7e-49c4-9a97-89af9be9f075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee1f6cf-dec6-4a2a-b17c-e21e0b1a8fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.147.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa21b220-9e01-4eec-ad1b-4ac422ea35f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9baacdf0-9f19-49aa-a4c2-a5523f6ef566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecd4d21-18af-43a2-a5ee-7a9eac88e4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4997eb88-d7c8-4e67-aa0e-7651c09091d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b8b7d5-0ab3-4e95-821e-9009138cd845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b5bdf8-924e-4277-83c1-e0583e7468d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec2134d-d9f1-4079-9dc3-c3449da8f0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17510939-9c73-4582-b404-e76191d79ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7612d7d-101d-4381-be70-161f0a5dfaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5845b3d0-2d65-481e-93a1-c1e9788c5b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a3897f-b311-4641-8570-7d0586a4c681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44273f4-2b5c-4ee1-9dad-e53a010fe5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1383758a-7c53-43f8-94ad-ae1d201168d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89e7100-3572-44c4-8832-af41fafac548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22607c0-9416-4219-ac02-07cbb2023073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f69cdd6-fcab-411b-bcef-30a6a0896da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478e8163-9a54-4772-885d-e24b8c87c393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f04ae7-acf9-44fe-b56d-49d23d35abf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce3e322-5efd-42a6-a337-66b57a631ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6734b157-febd-4ec1-99cc-bdb2520f8717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7647c75a-dcb0-42f8-9f23-e9ddedf7cef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99ddbee-cc56-4e55-a931-c3b528ae22f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc58947-aa5d-4bfc-ab38-e216f04749d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5a460c-c943-478e-a323-5161f31144ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec802f32-3715-46f7-bf3c-dbcf7c16cfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61edbf22-5734-4a34-8d00-7ba0d2c005cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb43f3d-abfa-4cce-a97a-efaeda6b7c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4445b75-b727-4bef-964a-96e9db51a5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bf59fb-4c05-4d76-b83f-9853bd0319bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec0cf2d-792b-464f-8b9b-05f55135a7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8022ea5-0769-4304-a6cd-45a4b6f6146f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a467bf-53e1-419a-9f4b-b2d69ffbc288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3533354e-f337-4e33-9581-de7c757c38e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5f95ef-3915-43d1-95e9-5213d7f2d6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf794e1b-2867-480a-936b-231f5f07e193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f385c4-22d2-4ba3-8aee-7163e1b8dc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91b9c1c-78f7-43b9-9606-75e285a6281f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ecd0ad-3c2a-4c7f-9541-f48532139eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd360627-e9ee-4ba3-bf84-e8f95fbba480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8e9bb6-928b-437d-9729-acb3ebdd5bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c77651e-2a97-4988-8f04-c0a37d2937af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b730be28-5b50-4eae-a02a-1764bcf4f856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d70892-c509-4d2c-b20c-a67c6cc81e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddfb46f-5db1-44d9-9c7a-6d09ed3ea7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dac4c8d-4c5a-4726-a128-a69ad3f43a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dad64eb-9d71-48cd-8e5a-1e029817387e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b999b0f-34b7-4a67-a586-6d5528060c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779358e8-a9d6-46b9-bb29-81d2d39d449c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8f2720-4b24-481a-9a20-60cbed7329a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3d9c26-ca0e-485c-bc43-81c21828bd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dab720-df18-4a4c-a8a5-179ea13c015a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1015d0-69a9-4dd9-a5ed-924948687968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76162d6-0fa7-4475-869a-1e6e8e029b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa80bc6f-d152-4856-b087-12727de51a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25560bdd-c212-4f78-846d-ad6fc17b0836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bedfb0-6cfe-4260-8076-f8b788041d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85548efd-0e25-4931-93f4-5a3070c71f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062017d1-c29c-4439-a60b-e7b876e8d4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11a968c-13f9-4fea-b47c-fe034a790bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52aeb615-f025-4879-ad30-7d4d14bfa583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed60956-bc5b-468d-bff3-ee21265d4c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d41037d-6875-44f4-afb8-c65b0d04bbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fb0958-0865-48e7-b0c2-ce87f673a671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d82836c-a37b-4adc-9d69-663a5100e990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f18100-4c39-42bf-a5eb-a282b84cbaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7186790-a6ed-4754-8de3-86be812f3858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a401f5ef-bd2b-47e6-b7d2-083088a9f374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927f4332-0b20-49a8-a7c5-f66b1eea4cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84f6e97-ea81-4377-a74c-2cec78391492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68761963-0547-4246-8fe8-4623303a05c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee361c5-fbbf-4f09-ad6c-716afbeecd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f47886a-3ddd-4454-bfc1-2c7ebf574202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.201.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737d9346-9597-498b-94f8-97d5deb4b0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d9f593-d243-4c13-b251-c384ac9c6c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce67cb0-511e-47b8-b5b2-1a15f15542f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857767fb-9e3e-4f38-957b-557788dd12ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df8d9c9-ed92-4f3f-993d-e168790cbb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4beba2a1-90cf-40cf-bd64-a1e2bacafa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ec853d-b652-4f62-9009-fca907daf838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd41282-b1bb-4ba2-bf21-2f909bc790a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492006c5-2586-4f4c-bfbd-b49e6a2aea8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873e4615-1bd9-46fc-aead-597c4d221908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343b948f-4ae8-4596-afdf-6276edf16fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f47c4bc-8472-4526-9446-b5ea206a18fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f5215f-a404-4db0-b1d9-746bcfd0ff4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7337bed8-093d-49c3-916c-5a16af37dbda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d35b382-ac5a-435f-9a6b-98603cfafab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208f9ccc-52ad-4859-9078-f91818838df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc63f83-c5cb-4bd1-b7e2-7973c7ea8656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795107f0-ec11-40bf-9b07-fec77e84d803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8b214b-8a01-43d5-8549-9e7260923a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648da328-8771-45ef-a4ba-5c18d20d44fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a143fe3e-9cab-44c3-9abf-56edb699783c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb9a14e-2f6d-4b64-90da-ec3341e25948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fb34ba-15ec-4773-acec-a475ba52f487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef03e8a6-5877-45e7-b48c-453bf86ac974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95dfd69-f8af-46f4-93e7-86aee8f9039d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e2579e-0dbd-4d90-b060-9b4f03509a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef86802c-bf8c-4870-8ac2-a5403e8d70d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb886b6-7092-4f98-8d88-d98d9ced7827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a8812f-95f2-4311-8b81-956698c0eb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d0a860-27aa-4ad5-9565-bda22a70b1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0c2a89-0163-47b2-98f3-4108216e3236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5069ec0-bf1c-4d15-9781-62f82debb95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249beede-1b77-4c47-a695-651297830f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b203a8d-b5e0-4ead-999f-812c4df280cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b736f746-1e5b-4f16-b0ac-71cc7aba493c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5741278a-bc0d-40a1-8e4a-7f10a4f5cb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d000a4-9964-4e8f-801e-44a00925fb54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2016c51e-3e07-48f8-962a-8fbc62578786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a62670c-c2f5-42cb-af7c-987fa29982d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f4f7d0-f4df-4a3d-a3c0-2767f8c1d83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4617ac7-7b0a-4c5f-8bd9-11dd6d5d9047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9306b8-a46f-48dc-bf30-d4afe7f49254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce2d718-c4dc-40b9-a6e6-9fae232f8095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c34fe8-4745-4201-805c-b3267e3bdfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1ec6ad-e024-4b15-8180-e992f3c5f789", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead8c942-7827-499e-907f-0c43273c0f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500add69-e009-408c-a3ed-7b5cd44058a2", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3af087e-4885-4723-8beb-151d513932e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db51126-85c1-4552-8b38-95edd9b97537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3883fff-f454-4c6a-b43c-528d5438eb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed13730-8b23-416d-b56d-347b182ce7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb252ba-1921-4b6a-8114-2dbafbca61cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49722fb1-d9c5-4e95-8ef3-19033c8fb815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbcc697-640a-4e47-b390-63c3ceb3e876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a198c88-385e-4dec-bccd-294baa06e8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d926361-790d-4128-ab22-854fd7328249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e90e0ee-1850-47ef-9258-f52088338a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63962d8e-89ae-4541-a868-de7dc4638a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72775972-6d3a-426e-af2d-106ac8ce5977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f85e390-f067-4b11-a5bb-a37de50246a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b24a3a-125f-477b-88eb-21a07ff1d86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8810c44b-77b1-467b-b587-7b5112feacde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.228.128.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8368797-45d8-4125-abc2-756735668147", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.48.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82282006-229e-4417-9bcb-0b8a99e3851f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2435cb7a-e068-4f47-a141-e44fa40f9614", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11eb94f7-38d2-4f61-a4b2-66b2c7bee898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51da98d4-c4cb-4449-88aa-47c6827cf56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608852e0-5e04-4b32-a0e7-6218418da5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa2b195-4f2a-48c8-964e-4eceede4c1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300d7085-c1b1-4abc-bb88-1d61fb9fc6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fa77ba-ad9f-4e0d-9b65-0ac0e2ecbce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622f4781-d550-42a6-aa6f-3b1627c1a6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01394751-8aab-44dc-b8eb-3a6657ae66bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584e7738-cb77-40b1-b6bc-8f6f0751ea32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7643db5a-2a8c-4bb3-9af9-9850814a0212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3183eaf5-a134-4bb4-8c53-eaa23b12b8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bec921a-90e6-4928-9767-2ec35cc6f2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88adce57-fe72-4f70-8432-6ae3caad22a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed106a3-48be-4bb2-b11c-c1a29454d36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f476983-18ff-4908-aeb1-e842e4c11281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741fea4a-34b5-4507-ae22-0d78def99624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb789fd-d3c8-4e58-9c31-dee987f69ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67261df2-7bd2-40e0-98b6-4c3a40782a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382ce9b2-9afe-41d2-abf3-69b82674699d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5ca164-ad0b-4743-af94-ef2553a73143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c104d24e-e36a-48a9-b61a-197f782653a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f56de5-5bd2-472e-882b-9a557920ccd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108c8e13-07d0-433c-b669-6eb1b6680e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9096e170-933e-4a91-bcc8-8a41fb3ee5fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.33.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1c7ffe-6ffb-4d92-8da2-778b9291ff9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b6a382-7332-4683-9252-94d045a077c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996f81fa-549c-4e3d-995c-8e4c2e220c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093b274b-06ca-4100-9e6b-6fc7cf45d6dc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51016bff-fdf1-4770-98dd-a2b32b4293a4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a8522a-fe55-4576-8a36-6391b90b6a25", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c425343-4e1e-4694-9b46-307ff5a187bc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0371261-0e81-4e2a-a67a-8531125ba57d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50803db-8360-42a8-b660-098a670c6f8f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b978f9-87b3-4db6-a831-2a3d3580a00b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b57eda-6807-4b7e-95d3-22dcb8a1360c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b33cc7-c0f0-4aa5-913b-b2945ad9daf0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f180fd33-aec7-42df-8d75-01044c3d2245", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72af431b-c4fb-47eb-9efe-7bed80a74dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f26d43-96d5-4188-a66f-d3862e3acc2c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.140.199.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee22b07-07a8-4234-b1a0-d38f0cc1dc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ebaef9-4441-4fc2-bcc5-e190e089d8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.160.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85372797-f30d-4054-9833-be3ea85df2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dca03f5-312f-43e6-9035-25bc9d19e1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc84bc0-b5c3-4781-adf1-df31faf3cb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fbd3a0-4bcd-4d52-921c-7b32cb6daa39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e47863-c5e6-4636-a3d5-d63724d00071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3599cf03-8e51-4cdc-877d-2501a2262d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95c68f1-86a9-4438-8e57-606c826972cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dee4f21-c9c8-4202-a5ef-533f00e757c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.12.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5d16b6-058b-436c-be13-a9fc0b476317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8be242-f9e3-4281-9f6e-e75c99440f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2afa9f-007e-4fb9-9fca-a92f2f4e23de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f803574-34ca-4510-b0ee-3ff4a8440e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1f5d1d-5518-4d91-9738-03e9d46d1563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150ab2b4-7806-47dd-abca-8afbdfcda6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8939e2b7-5ad7-4ad8-9d81-8fe1976dda30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e78db9-7a65-41df-b9ff-14cb8aee6724", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5522b6-b00b-4aea-9a1f-d08137d06b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.64.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19bf559-16af-45c2-a0af-71ebbbd7ec75", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.32.87.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c726c40-7f66-44b9-915e-0dcca04a38a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.53.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207c8850-2073-4ff3-8d1b-bbe14d7e28a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db0d3ee-d83f-4018-af07-7d2374fe66d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00e1087-267f-4d12-9f67-4d92c6e36a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4db8138-3060-469f-b72e-5806e4a1a289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182fd81e-4178-4f80-8b48-2a923db5b061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f75da19-a463-45db-bbcb-750aa43a205c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab374126-72c2-4453-827c-4996401d8903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84946237-e257-4a04-b5e5-e78447258954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af598a25-554d-494e-bc6c-ef469f23df39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489001f8-1c05-4554-b804-87a81fb0b073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1601aa7-caed-44dd-9b54-79c02f9c8e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43049a86-50d6-4c1d-b301-71a62b74b150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454698ef-371f-4dba-ba1b-1e2cea512f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c5663f-170a-4c82-b47f-7bd0fd4d94e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3d4d6d-3f70-4c21-9491-e4f931848328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a201a56-e676-483e-a2dc-f170a283318b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733996ee-1db5-4e4b-a9ed-443b29aa2c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8779d4-e780-41ef-a4d2-17bc74295921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b5c1a5-3ec6-4f6f-883c-a3290279ca87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f07436-8470-47ab-b0f3-343d63b8305e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1ab187-f4f3-418d-9bc5-9ed449e6a95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815f8c72-13b8-4967-9810-038d912bf945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4611eb0e-e715-496d-b02d-f124ecd83d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9b8ba6-846a-464f-8e9e-75c81391fbd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90afdfb4-7d68-4067-9531-0f41d83284b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31d2f78-3cd3-4ced-90c5-731cc04301a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caec0f7-d00f-4738-a57b-f8d4504402ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c633a21-2dab-4b7e-a91a-d319d48c4c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310cbed3-99aa-4afa-8085-752a506ed531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9109732f-4b7e-448b-b2b8-d045fc004472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4833f243-289d-4737-a172-f3090c32c8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf1da83-f6a3-4623-962f-13de219b8913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89fa2ac-92c9-4e35-b91e-a86ce4927e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2df7d6-00e9-4a7b-8e4a-139dc0dd08a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01752e31-296b-4636-9228-261ba574f664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be07400-3a49-435e-af1e-62b623672abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30668f64-3f6b-4489-9bb9-da56a2ae4d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c97063b-7281-4ad8-86b1-3c9e0f21e678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4dd556-6dee-474e-b70b-bbbdb213c513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1769594-e53a-4ebb-b36e-2776fd920c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d96356-d041-480c-998d-cb809abb24ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c1e9ac-4eeb-4eed-afdd-a946fc21414f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3ac98d-aa23-4462-91c8-f51edfd8b9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a29e916-37df-4db5-bd62-3ad63bcccfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f5a186-2a3b-4025-a82e-9ce8682cba36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f778a31-d5a9-430f-bdd2-cccdebc38df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6f5fe3-6006-4e59-add8-dce5f61c1bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959e9283-e3e1-411a-a811-fc4c7a94c8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a78412b-e5a3-4c19-87b7-db27a6407751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c271f5a2-f9b4-406d-a513-be04efa578fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd3d9aa-39b6-432b-83f2-4d0315dc457c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5a510e-fe41-464e-8ed0-f84b769e4ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7d324f-c518-443a-a361-137d32d1a53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5ac99d-9074-42c6-a19d-7be5809f4d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.210.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088c28b5-76ed-4422-8292-ab27a698d37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.219.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f776d6-c3f2-4d4e-b631-d35528988bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72c7b33-63a7-4872-9c08-fc01c8511a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd70de2d-143c-4919-8a88-5ba019f28932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbdb10c-b5b7-46e7-81cc-993c792235ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75d0d13-98cb-4174-9cb0-c17f08806527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661024ea-74a4-4eb9-88bc-6b4520a9702d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34374ec5-13ce-4293-94fc-1f90a140c471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017649fb-37be-4711-a5d4-9ca8a2d3feba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87516965-0d0e-48c0-987e-ba959d012003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f667151-c103-4272-bece-bf9a17025706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5eeab44-168f-48af-9b64-b5da2b49049b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9575133-57ce-4f08-9226-4a80c5a9fad8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44814ca5-1fdf-47ec-8f61-e0e635502970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9691e6-5f75-467f-9505-50a24ece228c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfc9cb3-7885-496d-8f88-f746401a47b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9dca27c-4f02-4c2b-a182-707d3e037b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f7ef3d-92d2-4bfd-95d5-e19ea1f77745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733c2e37-83b5-41de-acec-7c5b97d4e92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999eaa15-9fec-4203-8082-42adc3159482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a929b3c-3ffc-46f2-b369-4cd8a14725a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5337d76b-98d9-4994-bea1-01f5e9e3ee21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404adf62-f651-4a41-92d3-0d413d9409df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13843789-2f24-4069-abc0-4e637db9fe7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cdf78f-51e2-4925-9e2a-25c491978553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc68886a-2074-43e1-bfd4-cd2cefeac6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf7daa4-bead-4259-b14a-44970e0b98bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20adef6c-8031-4257-b291-57b00ff13bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b56190-cf45-4769-852f-fb9c00059df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f240c9b8-f4d9-447e-9830-7f6949e01ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15afcff-fc5b-4b2f-bb6d-a5ca0676a4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684ef466-4e41-436f-8d70-48dcdb3d055d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ccab04-2c1d-4af2-8233-6b9d90993c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9265002-5858-47af-81f6-6eabb4e7a987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1797ac7e-ba34-420e-a16b-84cc4902093e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6563f3a6-7f04-4634-a500-bb17ff4bd214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32b0e47-94d4-4e72-8317-5fac04ce658c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ab6641-712e-4e47-b3e0-c4da8e32b99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e037814d-ded9-4c18-81a8-31ef812e57c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857aa65e-8a12-4168-8fde-7f58dbf9caa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33e9519-abc2-4092-b4f5-1e623c33e71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f04c01-46c4-423e-97a5-f162ccf7c29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e7b669-d124-4c56-b0c8-8dd2cb2d02c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e14a689-0a8b-4243-936f-2e5b19ad706e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1a965c-6acb-4947-a759-f6b600046281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b190b04b-d327-445a-a04d-21bfffc83252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4ad0c5-ca67-4002-adcd-c814a59a4bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a121a21-9c0b-4eb7-9e8d-548bd7770646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5bd720-fb18-4395-82fb-308b111255da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6601fad1-d362-4037-b54e-43ddf5e11040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348c62b3-5333-4b92-a42f-f3b72dd5924a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6521af-ab14-4a86-98b5-9e0a98a99e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878d454f-7d33-4aa5-8c16-bab3300fd6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4c3669-6be6-4eda-8275-e1e40802faf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399280ea-3c5f-4036-98d2-f2ba5a90e41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab09478-ec61-4476-a750-85cac3c1be77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a7282b-7269-477a-85c2-6918ba2db09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3151ef-20cc-44b6-9ca6-ec5314029e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73524101-295a-41b5-9a36-10866f503767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e05f297-f1f6-4970-96bb-87b43a8e2e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176c53d5-ac80-4409-83d4-f824a6215880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd17f38e-2c9d-4e15-bace-5f02007c5373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5384cc06-ee25-41e1-b289-a7915324575e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0f8d49-7146-4e91-b8d4-a580678dc5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87471032-f697-4a21-bc56-9efa7d0f9ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ac99b3-b4da-4225-bd7d-104a7073acb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7551cfb-6517-4219-a737-b5faa80b985b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edcb403-9ea6-4651-abaf-1cfef8f01d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bae092c-a6f9-4453-9ca1-25d745ef66c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928f57b2-aca1-44ef-8a2d-ffc6ea761f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33d9a07-9a31-4ddb-8980-c8a24dd45a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d887a8ac-473c-466f-8106-f683f3c87dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d30aa0-dc46-4093-aef3-028840209fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0812579-6ebc-4cc5-9e36-aff4d184f5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318092b7-97aa-46c6-8a14-c612b58bac52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4ef022-2105-44b4-9244-8fbcbc21e0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1145abec-bbed-4de1-ad38-463fa6fb11ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c609cd-8a8d-48be-82ef-0e119e02893e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dec96c1-c4fd-4532-9b3a-d13a0316a79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14f979c-893c-44cf-8517-63938e230f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da735f8e-a910-4caa-8270-8958867036b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfd5670-2d42-4504-a4fc-47168e035281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc92179a-8285-4100-8246-fff760ebcc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87734e08-f43f-48cb-97bf-57e347c1d146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c25108-8292-445b-96d6-bfc82a8b4f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de659d67-3dd8-40b8-a468-97c94600758c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d205781-0b2c-413e-9a50-5110ba9f9660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa2d3e1-ed0c-4ff6-822c-f4af8281dac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8a4142-f4fa-4294-ade7-4268741dc2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.140.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93554501-0999-455d-a48e-6ccae48d5ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4e3efa-bf03-439d-9b99-2c11adc7d0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10acbada-987f-4477-ab85-a0b1b2bdb9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79b4b3e-2a59-4f1f-b92f-cb206e5b5108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d48f76b-2d9b-4d1d-b6cf-8803c5f9685d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36986ad4-ce52-4b08-a485-42a00d60262a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578be165-4e49-49e7-bc45-d8aae9f6d8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92b1aa4-f417-48ae-9637-f2fe044214f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28a8ba7-ef16-4d81-803a-097d154a2624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0a1f3a-8909-4e58-a5b3-610246488260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c34bdb-3de9-4c84-9af0-653f93c45295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009c2134-6c3c-4d48-a9b0-77fb67dbf457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d07eef3-bd45-491a-b50e-403dd7bf5539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced7c041-211b-444c-9c72-1b72fcb47df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e099eda-8605-4d98-8718-14798a7bb10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c54f54-7e63-47d6-b5a6-c3eba674fcce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d60aab-b356-45fe-bd8a-fa8bcc80512b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6a5657-e4db-47df-b266-47953662179b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.211.96.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b51629-bc36-470b-8e6f-6549099240d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd303265-8879-4afc-ba98-a4007dbf8a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043bc762-bdab-477a-95da-c695d68700cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5ab7ae-ecee-48b4-91aa-a8677ace5f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a942a9dc-2601-4977-bafc-e8fe46fd3066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fae803e-398f-4ab9-8555-b345521a4329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca545a5b-4669-4cfa-ba54-0149c6a432f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.238.126.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293a1ea7-aefd-4c4e-b527-5fa71595803b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.239.102.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef5863a-9fb1-4fa0-bb57-4241cc6829d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc161d62-1bf6-4971-bad0-c221a77266cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9728dc0-bc09-4a4c-94b4-bab30737cd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bce96b-8e6f-4f29-86d6-f16674110aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca531ba-f7f3-4c33-a1b1-1f1259809ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbf75b5-31a5-49b8-9bf9-ab6bae64551c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6a5a9c-6e4c-491e-bd1b-abb31942fbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de38f95-27ff-4f20-a16c-776a78b8bdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ca90f8-5a6a-4464-9b07-06359b45e063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.115.96.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f399a6f0-cd66-4c69-b00c-0cfe14a536b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.155.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501ce717-c178-4ea9-b9b8-695152488ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.236.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ac5b95-ca02-4353-bdbe-fbbf021ac347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.204.71.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3305b5-6ab1-431c-a71c-9d7ef922c273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.206.82.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed03648-6886-4422-8d1d-79d4b560b9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.216.60.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1613d9a7-4a3d-4fad-8f5b-3b0eb1e82a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.189.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9f69c9-c0d7-4697-9b59-e0f897e6916b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.240.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29509b4-a413-4622-8bd0-96620779601e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.219.246.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ac937d-0cd3-47f7-ad58-431c64b3c7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.89.22.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af64abdc-23a3-4147-8a3e-820912f4ab4f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.140.11.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933b07a9-0356-4927-afb7-7893dacc54be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.148.45.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1d30da-8678-438e-9a75-f211532e1891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.134.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3780365-e281-4841-8353-0c835ad7d50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.176.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f85976e-0b4d-40bc-bb65-3ec640110068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.186.0.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189e776e-c692-493c-aa38-8f9ca2797711", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.243.14.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47e9b93-0ccd-4cdb-8a44-9c74abb70369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.118.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7c8c1c-1583-44dc-89be-7772b255e409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.136.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916f0aee-ecd9-4b10-ac3d-9db10f854707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.48.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08edd67e-335a-4499-8223-59e654d316e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.63.145.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d695d43-eda6-48eb-a6f6-06f02cc4c571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.180.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c79e97b-6ce1-467f-884f-b80cfbf49123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.183.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b83f58-6864-458a-8478-47cf285fa57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c1592f-156d-4c2a-8d25-c20ccf3dd4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.123.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e22a84-7a4d-4032-a6c0-539b4867aafa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.94.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b9060e-fcb5-4c9c-a2ae-d4cdf3df249e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafd59cb-532c-4d4a-8cb2-2419ddf3f6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51221df7-4447-4bcf-b0a8-de27384dd599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83d6b79-230c-4f0a-a414-30831aa4645d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdc31cc-a319-4879-9f36-d0225437c633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23077e4c-c10e-4c21-b222-4ca3cf1c54bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9569e5c8-ae40-48e2-8321-5fa08aae9463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a4821a-4dc7-46c9-be11-5cf81cb93c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5380c9-305b-4ef0-8789-3c8f139e79ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55de5e3-5623-45da-8025-ddcead4a3cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada92f38-17b1-45e5-a51e-67b1d7dca4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c501fce-eb82-4c96-8503-16d32713dc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4643bbe-2c69-4241-8fb9-b5b21d54d86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e400dc7a-69c5-4c0c-923d-ee154cc7767a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f7a152-863b-46bc-9876-307c7a2ef388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c507dd-2f62-461b-8fc0-805170ca1488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6870a73a-741a-4f7c-9b68-2dcb491b610c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d924bf6-ef07-4d44-b3f3-a3e5b5f8d88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6b63d8-6739-4f41-96b3-5588e8b94d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17bccf7-2697-46ca-8568-35ee4e49807a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b6f3ec-c7fc-4658-8710-bfc0816cc8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b968f2-1ca6-49f9-9778-f5202aa428d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd30ab3b-274e-4428-aae6-59145c826e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054c9fb6-cdeb-47f1-a94e-ee817d5c1db0", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ab67f7-ab88-4ee1-82f1-27ee040995cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe77600-cc41-4a8e-a8c7-fd962c6d9295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0512e6-5643-4c60-8cdb-6d2d34c3e656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1269e4-0601-4edf-8db1-6ff34388b7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3608b6aa-c03a-402f-a911-61f39bc04e62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1933f5-2495-4cda-8ddf-e6ace37fd309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe3dd71-5a5e-43a4-9476-37a5e732ffb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd1dd95-1748-4b88-87ee-88851a5af4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1c6304-bdf7-4f4e-bf14-7cabeac69386", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499739e8-3e0b-4289-9624-ebe8cb726dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc93ea2-0531-4e7c-8e9b-84a7c83ae0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fceac635-511d-4278-b5f3-2741f34be614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99326b3f-ad02-4f7e-a7e1-11861926174d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c404f9-282e-4d22-ae2d-bd5006b61066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bed4065-b2c3-4c5b-8349-f6f6f6594223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb491ef-ef30-48ea-ae55-9d7d4facf160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c283994a-6c14-4b2e-a65d-fac8cb351b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a51d5e-466a-4d57-a32d-2fb1a2f0ffe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fe783b-d681-4533-bb3b-e45dd336a0c1", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a29beee-3b12-46f0-98e5-8a12a38a8d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e315204-e9bd-47f9-9905-36ba6825111f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b42c946-5aa9-4f2d-bf31-5f829d4b9036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8187858e-48e0-45fa-92c0-092b7843ca06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43055fc1-1095-4b9f-b7a8-700753ae80b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c6644f-5cf2-4219-9c9a-66d29cf1a080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8c7f89-7b4b-476b-851f-679b47d43951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae07744-00f4-4ff2-b377-216c1ac10fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452f2b12-9385-4e42-affe-43748d37c0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa4f66a-da13-4c92-9294-668a5fc21a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb5a432-ba7b-4104-b190-b8899d8eae30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12408ede-8881-4955-98d6-852b18755d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c424298-10af-40c5-82dc-b6604158dbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4933dcee-2663-4377-ba9b-50dde7c25b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b34dc92-38cf-4f5a-ab52-048f5de551d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a3b088-ab7c-40fb-8229-b56f17a29181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8de4fa0-a083-46c2-99a4-ef2d76ddd7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede3f08c-b003-4aa4-bab5-53c34fa2d083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af277ea-1d3c-4c64-897e-ac83588dabcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b51068-04c7-4d8f-8d76-6ab90972b098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159ba460-1fc9-4b1d-b871-ab198eb501c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ae235f-4669-4815-b3c6-27f0df9feab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae97a140-1f8d-4d42-bae1-9e4f7003e577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cab6db-1795-4abf-a948-27459f4a628b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baeb671e-d9b1-4ef1-80e0-40935a8ce3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9b52ec-f8f5-48b1-88bf-f14d595c58c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b91ffb9-3021-4efe-b752-a6ca03f8dccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdd4cc8-40cc-401c-82d5-59b948bc7a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5dfea0-a969-4d3e-a29d-be2ef53baeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769b99ba-0447-401b-bd30-6556ff65eb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdc9021-1a1f-48c8-9487-4e3bc10ab1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593327f9-7951-40e3-bca8-bddb227c36bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7829c8-aacc-4857-bfeb-d16b826f6d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb434fc-0218-4e79-9df2-d62e9c2c3707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40e2619-79e7-47f8-bd2b-3974d9ec055f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e8207c-c92a-443a-b735-68214b74c9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea73bf92-a249-4283-811d-77ecb21f45d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28b0877-dcd0-420d-a585-ff72e7465b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8475eb-ba8f-4425-9845-ad8869f087be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa19197-dbcd-4ba7-8915-8e2ac0b0bf9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ff8263-7128-4d65-b257-79309cbb8277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22489ae3-a55b-4585-9ff1-c7e489b889ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e77e65d-2f67-4596-b491-eb5764b21a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54520ff2-f198-4ff1-b98e-8c1f0449ca74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e1449d-f7f5-450e-9df1-236d7a383565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062511f3-6e7f-4e36-8742-884fc098cecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f35a4c-accc-484e-8715-7f5a7a72321c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b83334-6170-495a-95a0-a53eb11fd1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e3a318-d00c-400f-b3f5-3fe86a4cf711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0117f08c-e7e7-4202-a200-d76da91f6d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a114a17-01ee-48bb-ac8c-f0eef374c637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96dfd3f-d45f-4de4-834b-c2ff2bb7aef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eec7b79-c9f6-4d4e-b2ad-fb09f43ba3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30230d35-4233-412e-908c-1e1126a413b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4f54fa-9fc4-4c0e-af3d-2a80deea507a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adb140d-34f8-45c5-906a-1790fede7644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95eca2f2-b8ff-427c-be6b-e360b28f7f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2725a3-323b-4b78-873f-595408a42979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198181c4-798a-4ca6-a207-a1fc8efba1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deefa144-e216-4ef6-964b-dccaf0397deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9e9d2d-27e6-4aaf-9f88-2743d282371f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8130449a-c9f6-41ae-afb1-5947b4e35f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8a93b8-fb9e-458b-bd6a-3fac8939adad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f592647-1b9f-4a5f-aa50-13e77f6d0dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a35e19-f302-478f-8abb-72230048fc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143a1537-26e7-4bda-adad-765772f1c0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f044d39-a07c-4b43-9036-9c6ee7acf7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c204262a-d20c-400f-aa7a-6d1a1004639e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ed7274-163e-4c7a-ab5b-9450ac26cd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4621e1-d1f7-4271-9c8f-c913c6ce1076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a50eaae-44c7-4136-bd0e-b24a54a5b3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c5ff08-c3e2-4345-8c78-4c4f248399a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3307036a-1369-4d83-9577-de8d74089774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e900dba5-0579-4154-8647-387725508847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12849905-5693-49f9-83a9-12b7cbabe5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e776951e-58b1-491c-8145-3e192077507b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9a6c91-3df9-452e-a7b4-b7eda9c554d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3d70e6-98ac-40ce-b00a-a4b056ab57c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6580377a-2a35-4aad-8c79-edad61146500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb50f28f-deb2-48cb-8b92-c643d16632eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3758198-51d8-4067-b467-18e267a0921a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0fc4c9-0278-4378-9883-a189a130e589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8a6fe0-fff5-4c2a-b2bd-edab8e68b778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891cc0ca-2e80-4683-b5f1-06381aca49bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62acfa3a-b2a1-4ab9-aeb0-73c358d87db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be282601-2b69-4712-b4ee-59ca3e9355c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0d3e2d-e5c4-4c00-9d48-e8724ca09e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9205b5-6505-48d5-b2c3-5ab43f42ee29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cea9594-15db-4949-9075-b9b8a4f02176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5f0f0f-dd53-4c2d-abb4-680de175a6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc387b8-c18c-434e-82be-3e5f1e1c677b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48740e5-bf71-4a14-87fe-437d8bdfe613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5679da14-87b0-45b2-804b-6226584d9a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.199.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a72897b-66ec-4391-ac82-1db2120d5fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.202.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c291a1-2126-4455-b385-db9fd2798e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bef39e-0f48-4a6a-b244-bd6fcb04871e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd8ff31-3a6f-4df1-be9e-ab5f0024cc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b62da73-84ac-4659-8df1-5c715a228257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21862968-74be-4c42-b5da-f8dfb47293b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dff1574-2f0c-4a70-ac51-e3b356afc902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b932f27-0878-4a08-b181-d2c6f9453327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dde17d-15d2-4d65-8e2d-26fc3d8964e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a805435d-2689-47f6-afcd-388d3f6645ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea68ebec-8033-4a13-90bb-051f4c873a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.62.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6eff3d5-35fc-4414-9858-497a20e2c43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348c4600-495f-4fe4-a2e6-8c12a894d7af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.244.88.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6ad876-08fe-498c-91ea-c824df5871d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.244.88.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f538436-64af-41d0-82e1-f0c96edde753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb45c974-5f0d-48fc-a7fa-384725e86fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e208ed-5ea6-457f-8932-a436a6700b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d0af29-aeab-49f4-9035-d29b6b2ca306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b88519-a384-4c3c-a056-55f3aabaaee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f279a179-d0a8-4579-aee5-2d955d86be9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67961165-addf-4040-b7e7-b010e0f8f9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00c2266-e199-419b-8443-46d750331dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67990f4-c5b6-4ff5-ba6d-b96db3dcfd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af48937-036a-4df7-9691-410fea009766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774973e8-b895-4526-8848-f1e5b1f94844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c94a07-7ef1-47c7-bfd3-8ca1e40f12f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4b1370-6f43-4155-9680-e1f4753add13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa3787d-ab1e-4dab-8173-55731a04a922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c974931-09c7-475e-8f94-0ea2eecb3914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f273be6-45e4-4f0b-a0e8-5f328fa79181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0332484a-0f50-4c37-bba6-ce7463087a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36f9769-e7f7-48d4-87d5-94448c0754f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd329b68-46bc-474a-b052-cac90fc36612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dd796b-f019-4478-aed2-c912720d8880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b308ca2-b010-49d0-8622-5c92bf365bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c58f32-7073-45de-a8be-17a0a22929b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978f2eec-1acc-4fa5-ac53-59a885a70ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b93b58-5623-4017-b140-6b0a1a7d2aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aea0711-5548-4a0e-9c1d-61325ea62e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bf7a21-00f3-4bb1-bcf8-ddff9a68bd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba375cb3-038e-4215-85a1-4f9bd6111703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05057ce-6d9f-4c8d-851c-9c87bce59f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a467d5f-730c-4d92-accb-79ea9dabb67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561b6276-d374-4a04-b855-a3ba0531e26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4286ed7-238b-4df1-b41f-02e0244a20c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01af186-a01f-4297-8988-3cba857bb86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a820d2-8d8a-4a51-925f-8e949d304f71", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.48.128.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72197854-f727-4527-9b29-ed11e266bf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.176.192.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61059915-29b4-416f-a72e-2ed0279eb61c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.187.250.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6de00f7-96c1-4d78-8d02-1272334fde9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.165.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f96ebb-4172-450a-a613-8627cc7630f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.5.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc2869f-673f-436a-b616-f7f54b58195d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.50.168.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04b54d8-8b18-47e3-9c5f-3df0cc3a0452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.56.30.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c29c1e-8134-4777-af07-7b5140bd3f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f0c67b-3a4c-4400-a29f-84b668fb5f61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d60fb50-3b9a-43a5-9983-3b5d15940f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b072d44-4c3e-4fe6-bbe6-a0de2bb21723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.108.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9481c72c-0c30-49c6-8912-22a3b98e3a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3c9697-ee80-4ec4-b254-7fb5596b51db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43c6c03-3b13-4b6f-bd39-83790bbe58d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.42.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f86733f-2840-4c7f-a132-36500973e8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.43.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41906b29-0b6f-45ba-a780-a72fa10b73ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b31f59-af26-4d00-b467-3d5594942081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.197.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdb31dc-1d01-4351-b359-16681a3fe709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61918da-63ad-4d4e-ae71-998e4a339ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce87c10f-4cb1-4e7d-9974-09f434f6a14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.213.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a5b3d5-5e96-49c3-a524-c984b3bce65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.231.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20aebb8a-cb77-46e5-8045-761e2b7af690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b19c800-8963-4ad8-a9b2-af319fabb078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f3a8a2-0afd-4ebc-9672-f5a9c088d706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.45.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab04fb2-d3e9-4d77-9250-da7269cd1720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf43a28b-2e41-47b0-a8f0-83d0c751c671", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.116.59.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c91d55-8572-419e-be84-689c235f47e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d7db5d-c609-47e3-8f60-4c4c2fd45070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbb3ca5-a5aa-44bc-a9cd-0ed7d1bb1f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b466dd72-4a7b-4b9f-99cc-3c1f430af9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54432d0-b488-43a9-973c-ae68fedb4b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b711ef-0a95-48db-9910-0daf90aa9ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.248.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200fce83-0a47-4a7b-9a97-6a13341ef040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad81a2e-4c3c-4c32-855e-0dd6ff31cd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.74.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ccbae2-d2f4-408a-899d-f62bd7cf8072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.75.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19e609c-fcee-44eb-8f00-6c83ab05015f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc5b5fd-1f31-4be4-9e44-dbd4f3f22b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d575546f-6bca-4d24-bf0f-c7bad71aa5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2d642c-bef1-4ae3-8ba3-7aff10498d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a7534e-6245-44be-bde1-b6fc0af5466e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c15b779-e8c5-443a-b194-7b2ddbff4a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.67.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea827f8d-0307-4dd0-bf4d-cf20f0416a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.84.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cbecda-7e6e-40f9-8ddb-2b99d6200155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439755c3-65db-42a3-8940-f62e7c5b4d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cbf290-c4bf-4694-9103-854d70e23b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.173.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af99a13e-5670-4c14-a2b5-92797b715d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ab8e88-990b-4b93-9263-dcbdd07bfc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8935e7df-3fef-403e-b234-840ba5f8c686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23614d8-722b-4987-9b54-c9a672bf9ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235306bf-7da3-484f-a7f3-42a49dce4a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0864c784-03fb-4fc8-9d2c-8ebb0abb3aa0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.245.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfc9f6f-fb43-4092-8c1f-3d122f6c8ada", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.13.164.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc8d4a4-ef99-40a1-97d0-69083123ce37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae50b50a-dd8e-48cf-aada-3e78a162f663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e94bdd6-a19d-4106-8c01-d40a376abbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f29076b-f46d-4c0c-9531-74685bd19b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.95.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74607362-7cf5-440d-9ede-3d026efe680b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10609493-454b-49d4-a40f-a5f05d7e7e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf27fd3e-8690-4113-b186-d807050e4c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281df242-a40d-439a-bf19-d151e07b1726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24490d59-0d19-4bdf-90a1-555493798af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92bc121-1b23-42b4-9071-471bb729a87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d62af96-e81a-4af4-8634-05ed8ff7a4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb64c1b-d8b3-4358-9c2e-6cc757a3a9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f48608c-747d-4606-9b4c-21b047ee0345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd598cd1-1ce6-42f3-8597-3c058924d0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f110abbd-95a9-4f7e-8c0a-971ec5472be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db19acb0-cab4-4fbc-8394-efedb8fba554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3f293c-f06d-4b10-ae66-d736baf78b6d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278a9a7e-7f80-4cd4-8aa4-e88446bccea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf00c04a-0d96-4a36-8928-03de54b96e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755a6633-c5fa-45dc-8846-9370a0812dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebac0a9-2708-48f9-b77c-b6a6980c9be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.20.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a0fc68-5c45-4264-b0f8-f35424e1a9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab72b28c-f5cf-4e42-b7d7-66cc7b067786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3cac8d-b390-4697-8d83-cdd6e79155de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6524df-90b9-499c-9bd9-5a1ff9a92514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89a1cd4-e232-4c03-9455-5da496467c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d353670-4524-4966-8dc7-1a98ac74c3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8d8b25-ca2a-44ef-a433-3fe0b7ec7c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf38a78e-0263-4d7e-a03d-304d9ba94570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43735ef6-7a59-4752-bcb8-bd0649c3aa56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fda84b-84a2-4ba7-96d9-0b78791b2eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461fc041-0508-4ff5-9cdd-800235d7d002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab7ba97-dd0d-4ecc-91d8-a4ddcbc58703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc14b27-b550-4434-b075-65b7d9bede88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8873aaaf-6028-4a34-b3df-a871be0b8d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.76.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945f76c2-0b12-4f0b-b6d1-749c24b59a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b801711e-0fe3-4873-9976-fb6ca70a1b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66919ed9-11d1-4ba3-b365-6cda5be32164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8691e955-e326-468e-906b-2a6bc8db0fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.1.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b659588a-91c3-4666-95dd-5d8f6ba0c279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.107.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff84bcd-aae3-4fed-af76-519951b6b8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.107.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcead04-3cd5-4a90-aff1-2bdf18bac66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.109.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97478dba-ef67-4150-a35d-a9508f5d3e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.114.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9cf8c1-1fb3-46e5-b745-140c3b7942ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa63c46f-5a28-4cd5-b65b-be02338e5204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81d9dd0-4bff-4b91-9865-75b7ce2597a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738deb6f-d5d7-4a5e-8ed3-8be6e3e453e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67dbd73-d968-4fc4-aed7-a941d708627b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dee9657-b09e-4a24-8328-7aae7a484ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2432a3f9-f32e-4a38-b30d-66db5899b2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dff106d-6f72-4084-bd0a-644e4b958a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10134fce-4e32-4326-8bc7-cccafe847d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8290a59-4da3-4ae3-8364-133f89e135bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77aab1a0-2a7d-4373-9fae-f913ef401918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f0c4b8-367e-44f0-8a11-de34ec5a998f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f5e88e-5c48-45ea-8720-b794bf87bf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdbca96-8f7e-4d7a-83e3-d83bb9d1ecd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71a61fc-0454-4bc4-a322-37ea01c57d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58873101-0f6a-4e5a-a01f-fab289c25081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0b8082-3146-4a19-9387-bcda4d317099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916a9b00-6d58-4d8c-932d-938b0c96eecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56001c9a-a2f2-4e83-b8f8-cabf44fad62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1675a0-d9dd-4d3a-8695-11da305b511d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93659afa-fe23-4d94-a47f-bae83318b6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e491dc-c485-4bc8-b256-bd13b7c189ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d133518-4b7c-422a-8aa6-a99841a16b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879d4730-8834-4b42-8f1f-275524ca071b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17441344-902f-4fb8-bdb2-d38fe4c9d913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b11256a-91b0-4b58-8bc5-64e10c177955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb5e165-cb09-4dd3-b823-c5e9cfb2e053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0fe938-6e91-4436-ac5c-d4e35c03d29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1cde71-2e3d-4cce-b6bd-0f64012c4582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d7dc2b-d5f4-4435-8285-250473f2cfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e89ad34-002b-4516-924a-abdb8308e36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233fa79e-80f2-4bf9-ab99-784773125f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4058865-3430-4b2f-ad2a-61dc48b4871f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afdc0eb-ab06-47f4-8a54-cd1a8a3153fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ee46e6-636f-4d4b-85d0-9c979a765433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebe516c-60f0-48a0-ab49-717ffbf47f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d557d6-aa71-434f-aa53-b7e1b7a069e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02300dcc-31f1-4228-9191-e4226fd2b4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75442d7d-0005-4911-9bb4-6598b040ff4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbd47a4-df3a-43f5-b7cb-887db0db0640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bb8771-ba26-4d38-aeab-b4078756f31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1acfb1a-cef1-4394-a9ba-d555269e535b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429bc5fe-2658-499f-ba76-a8d987ff8bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9df7d2c-584b-4f69-b375-db199ee91d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adc88c8-ddbc-4abd-b256-a22e8aa8e9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39939cb4-28bf-4335-80de-3f96fa7d8534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6689155-e990-464f-a18e-820d738a7596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94c9448-0a0d-4a8f-8868-9f7cac0854c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c012efd6-2590-4b15-8984-b3f3a212b31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6efa41-0d85-4c8f-a3c1-c9f634b45f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f8adde-1ace-47d7-b661-768eb7ddc6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68729097-cb80-42fa-ab45-4a29d9fddd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bc763f-317b-4a33-b200-ad6a87850e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61438241-8c98-4ab3-8e3c-f5acf3208ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f6a2dd-9420-4e15-ac19-f82600ecf9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a98c8ad-bdf9-4b2f-b621-ebd428336f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80add18-c3cc-4521-8b37-5c1889808e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db77b751-880b-49c6-afd0-ca32d7e4e6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.75.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d558fd-7535-45fa-8618-c8a0a34e535f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.80.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35d3909-3eb7-4422-81d2-337367f6000a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcc60bb-7342-45c4-b69e-7b24b72a521e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9998dabf-dddd-4b47-9a04-dc3d34ca3634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f9c114-d915-4f96-93aa-3dcbad81a377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27482da-8de5-4c1e-a792-1dd8ed4f6e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e0521b-2190-4d5c-8f26-e8d1ff31e111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029bdaf6-8f47-4ab7-9a50-6b048bdbe6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.28.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4a6df7-21fb-4514-a5ad-b444b87bf1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee44fa0-23e4-4b50-afd2-1e9f045641be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5572338f-0f0d-4cf4-b9bb-98cdf941f182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f7cc36-94eb-46e1-8fe5-dc391d8bec66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13814a6-a0ce-462e-b60a-aaaf74769535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38fe396-704f-4318-9c31-71e7455a00e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.71.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9361a2c-eb71-4f45-a12d-ff20cdf93d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.187.153.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecac842-5cec-45f6-9f33-4d65c3b996c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.189.181.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d952f29-878c-4b5f-b32d-ac446a7fd1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dab2e88-d175-4565-aa1e-1c103b862121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.12.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a707050-f039-4b5c-a442-4f2963eee4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.213.62.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a52d0f0-2541-427b-9ff2-b3a802cd1182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c538873a-d77a-4d32-be9d-2dc67d7a506b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ef4dea-2a10-4381-80e5-6a4f24c413d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.60.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c1e31b-531b-4a02-9953-2f5e1a6df79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ddf74e-ef8e-427b-a8f7-2d589a8c9c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62b4f29-fc20-4071-ac50-cf09ab528f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5c02b5-d13b-441b-a548-084119211ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614654d3-2d78-45c9-b5f2-a3d1f9c4bc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81da026-9f3d-4719-8dbb-bdffa9b6310e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783ba2e1-caa1-4684-afe3-11587594e33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02da07b-dddd-4a5b-af62-42b03d1816b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8833a363-c877-439d-8fe7-a34aa3f13d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.8.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedd8ad3-11e6-40e1-8e8a-b394d127839c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.32.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b313d3-dec6-4eaf-9cb6-c54592455cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b18e4c-8ea2-4ede-a7d5-3f0a79bc0edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a32242f-ce1d-445c-9d4c-d860a6f07a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c32b76-becc-45ca-b5e6-6ca1e7732038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0be21d-517e-4590-99e9-61936c1e31b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.104.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84d14ac-d307-44a8-bdfe-553504bbc2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.108.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376e0c6c-1aa2-4b11-8d84-957d21eb6ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.115.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790941e6-9860-4cf7-a237-3c01a9f32d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4ed9bf-d49a-40ca-bec1-40840262c49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc53f68-cf47-4e15-8808-2fe69d932b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.232.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2909b2f-0350-4b80-96d0-ce6ac4f2e94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf44cf69-5a0d-40ee-8f40-2fa484b5272c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07cd3dd-bb0b-40a7-8c57-3a4de16e27ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cceef86-5acc-4e57-af85-1368e9809b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c013c1e2-583c-4c02-99dd-32a418c0455a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.14.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e7c705-7f03-428a-9780-5a8fb8154b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.15.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed483574-c0a3-4095-aa6b-9cfab06c5c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df382e6d-5693-4f08-ae1c-bcf958ad2393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.24.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4b6e7a-d84f-44a0-8250-1845e69cc27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd68464-deee-44c5-a7d0-6afcc18ad883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b1686e-6dbb-4d55-ab4f-7e2752aa308b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.87.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd412838-c479-431e-bea7-b59fce5f51fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.87.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d737bb53-db54-4e54-9ea7-7be069f17bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.99.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa64df2-fee9-43ce-b14a-46f7a5c6ef73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf624625-bda0-4382-a7cf-09e05911693e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5daff7e-dd88-4e46-9145-78f325bcc815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6227796-2d69-477a-9949-9e3eefe6aeb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97783b58-4086-4c13-893a-b0687db3f680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c89b12-669c-4944-a6a4-25d82f078485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0852af-8c69-4a3b-96ed-70e2071dc361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4234a5ef-c6f3-48cb-a6a2-15a02dbc0eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674f3e46-7b6e-4389-ad09-609214952b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d2f3ea-a982-46fd-bf37-f5e15545da8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d112b69-93c0-462b-a41a-1b3cda771921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0962523f-28f9-4201-a39b-29dc127bbb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dba304-1476-4c6a-90d0-3859bf02f374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650e96ac-941e-4e2c-9a24-baa83cb6ea07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7720a79e-4c6f-4edb-9cc8-59f1e47f66ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973056c4-9e87-46d8-9708-b36bc4146190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc304247-93ee-44f6-b200-f44c41ee50a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd060379-0549-42d8-965d-536eaff7e3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422f644f-16eb-46ec-ba42-f4b2768be9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb5fdf7-aaf5-41ea-ae86-be8100ba47d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ddcba8-2dfe-4641-9536-6a34cfbecad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0762dcc-1aa2-46d5-9a1a-3be7fa285295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98c09d3-f4df-4071-8b52-b9bfb3fe12cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3504af73-25be-45f8-adfc-f9281d72bfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6b6d7a-928e-4cd3-bf6d-6740c15d79c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f787d0e-beee-48a1-bebb-f3e86b7488e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c62df8-fa7f-44b3-93e5-543d3a746e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61401b6d-9df0-44b0-a334-d8e3fd590ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace379c5-58fe-412f-ac3d-e83ad207eeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1619a5-5b33-4f5a-8bec-ce39c890fc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e39076-a888-4a8c-bce4-8872ef2eb8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ffb2df-35f3-43ca-9318-9593cc8de291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d6c247-0911-45fb-8fca-7af101c32df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddb9f88-b1ef-4be3-ba03-00cd752450c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae66dafb-37a5-4aed-8986-b95158087a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c591091-0861-4fd8-af7e-6aafeddf9e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3c6ed4-ef35-49ee-87a6-0ef129654515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15eb512a-1f04-489e-a39f-4169c7aef3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348c56ff-f418-4dfe-b71d-3e11b11f0d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d3716c-0061-4585-9ac1-dd1d8a24e4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6aa025-0a0d-42c2-884c-6cebbabbe745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323f6b7a-6f8f-4e69-9872-9ad55d1837f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ed6193-fa6a-4cd2-b559-992c1755849b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bef8d4f-088b-4e53-bdf9-5601fcb34d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29b52da-b2bb-40a2-9723-8ab038f9cd8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e191e0f0-edc2-4e5d-8b27-6dbd80936ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2502ae-fc71-4d3d-82d5-464edec64453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff700ac9-29aa-4f32-8524-ba6de07c3c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd4d12c-5f7e-4f7c-84cc-1ce5cde6b688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0ae36a-9a32-43fa-af16-68ab943f9255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb653ba-1b9c-43dc-bb35-780aa04928bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59197232-5569-4715-8842-1a28e9679e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc71b805-53fc-469b-93c2-d098cf11aad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f4df20-0c19-4968-b539-146160fea9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbac544-9498-4504-9a47-d548a7315651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7129d8e8-3a88-46ec-8609-0f6842be4f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36c8198-87d6-4b48-8750-bad297d8c4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa63acec-b979-480b-abf3-bc23403d9ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28ca4bb-d6df-462e-8ed1-4eb8ccb01c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ec1ac8-af2d-4d3b-b174-0f874adeb38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d471e9-5873-4011-b990-a29cf0912f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a1561c-4b69-4ae4-a8f3-af41515d77d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33815b3-38cc-4dff-9d82-30cf5c9de7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9684809-424f-4dbe-95b3-4792fc8b22a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bf2164-4b56-473f-8694-b937c8e234eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a54f37-069d-495c-aae5-275b062c7650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff1c9ce-7729-44a1-975c-f194b9255825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d78e160-9c65-4b0a-9c2e-6463117d1646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2ffed1-dd5d-4182-8ffe-291be2557fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faa7f18-5aca-447b-9267-5029a01a0c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7872fd43-c93a-460f-9795-c2360fd385ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa7e37b-3cb1-4369-b30e-372078228dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a70cbed-99da-45c8-b1be-dcaff6f7e139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317d9b89-71f5-4fb5-81e2-f4819137f137", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1377c9-34a9-41ad-a004-57ac6bca7bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91c88f5-18c2-42c4-bdcd-ba337e48467a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef5af3f-be4c-4b09-a784-ef2e06c084af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583a3b6b-a94b-4037-917b-9a0a414278d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4eac0b-2193-41cb-a761-8634df2f1b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf99fe9-7191-400f-a344-30df1031d9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608b140f-3ea8-408e-b3a4-f1ca214d1252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f251ebe-c6fc-481d-95ae-79e871a4bb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc0a936-b667-414a-b3f7-b086449e8997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945cf5eb-9f19-48af-b59c-d64fceebed90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaa9eba-5c8d-4fbc-8311-3736d8644062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91de4c62-7cf4-49fd-8125-529b6fb853f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5f4b79-b7a2-4f92-95ad-e60cddb0d404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bac8e4-69ce-4eb9-9b4c-50f2d3e75740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d33c54-db10-455d-a0a7-2d9f26ad979a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2353408d-2e95-4b1f-96c2-ce48872a8660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.108.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24e4108-9096-47ce-8522-10334fdf0a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a15f934-0603-41ed-b285-2044c560db51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f86b7a5-555f-4ddb-b8bd-447fd36f3c9c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f327ea-4f49-4f45-8e07-244acefc1d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3ea38d-83e3-48e9-bc84-e0a5af5abf59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1ee5c7-90dd-46ab-b3c9-333c06328a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.174.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a6843f-e820-450e-a466-c63548802df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f4548e-1adc-473d-b6be-f64636afc16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bab28c2-bc1d-4994-a61c-907505752e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.40.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49132e9a-546f-4b59-b06a-c4e8a9463eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.118.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c04d46-d53f-4da8-b51e-c6655747afaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da83d47-7f7a-4d0b-bc8f-57c634e88e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67f5c35-3cad-449e-9c21-77f6e025873f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac695f1-d6a2-473c-964b-684f3a3fff9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cfba69-3a03-4866-9cff-2c9f34cbcaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6cb8ee-2ad3-46d4-a192-68eee04f8b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.162.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfda9ce-183b-406b-98a0-8bf992658bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.78.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b804dc5-755c-43e0-b85a-3087d700cdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043dc574-015b-401b-a3f3-96602210bbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aca5942-9069-419f-bf5a-4217eb14db07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fd3499-b59a-4b0f-8308-cd36594747eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.164.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82226459-c763-433a-9a3b-df87fc5814a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.109.232.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e4d9cc-97f8-4172-aac0-faa9a375e9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.120.250.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8335abaf-7165-4d25-90d5-311e89d39f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.163.119.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dfcff6-8259-4264-8763-f053167cb1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.196.50.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38ce50b-0b46-43ee-bffb-3155b4120da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.219.9.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff68786-4e03-45a3-a219-8ca228aaebdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e7b945-5d94-4057-8f40-91c0afc57ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.52.157.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201cb40f-0c0f-4a59-9420-995e3c8e9d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.52.157.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b3866d-13c7-490f-b361-28bcf8c80ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.69.219.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2f8f7c-d7e2-4668-9d5f-310e86d1ea52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.72.2.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe695f6-b09f-4cd4-80cb-82a8badb477e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.89.69.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2f9a31-0856-45ab-a5aa-8e5fef1fd29b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.179.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615a37a5-742b-4b12-8d6f-2b3a62780305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadf724d-ee53-4333-b151-6843943a3aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.221.115.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca5f480-c8e0-4d43-8c47-38e94579114e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.238.213.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c566a57f-3c6a-4ed5-907a-5b74a530369d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.243.145.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e61a203-08c9-4cba-8864-fa4bfefd2ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eeaa71-01ba-4bfe-acc5-f1caa471a260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3a1804-f4af-4266-a482-2cef9c800928", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.123.26.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cf1d4b-48f6-4de4-8830-027f291809e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.164.133.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861e42f5-bedb-496b-a2a9-edaeb158fb7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.165.95.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8661bad1-0a52-46f1-9886-732c8fda2897", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.175.179.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ffb0cf-8eb6-4fc1-808b-cb613bcd36b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce62a73-65bd-4b6d-a12d-9dc6495a44af", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.4.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c56e34-1611-4b9f-9df9-7ca0fc756241", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.53.94.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9e7d28-572c-40e5-abab-69fee6e7b7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.60.110.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77966216-6f22-4996-b01d-d5f34c549200", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.60.229.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bee647-56cb-4806-a24a-a536826aa7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01215dcd-00e9-4d1e-a6e1-fee77f81bdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.82.33.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c46652-c3d6-4cde-b1c0-bf7c2f2b84ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.121.40.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb50752-cc02-48b1-b6f7-e390d7abb1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.159.90.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436e620e-804b-4430-b83b-029ba01eb95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.160.54.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0233285-a814-40bf-9ac5-8ad36547abd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.161.39.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a823b4f6-7ff2-4cf9-bdc8-9e3bf96ae321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.163.247.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9610b5-c8d8-41a2-b64c-80e84bae912e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.192.232.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51518cc7-c5d0-4c27-a46c-ae06961bb9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.242.185.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6304631f-1945-48b2-be13-7b93acac464b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4035c887-c2c6-48ad-8ce0-c1aa40dc917c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d8067e-500d-4ecf-8079-b7f4e3cf8c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a088d68-6453-4ba6-b9a9-60ca9d4a99f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.99.61.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02da579-5019-4fbc-aa62-12ddef736f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.157.177.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6316b79c-89b4-4bb3-b7a7-2f6e1437fa61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.236.215.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185fa76e-d1a7-4549-9823-bc1cd9ea7e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.22.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d5cb3a-3c70-45b3-bdfe-17c14bd0cc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0bc672-4d51-4f68-b5db-98e72e06f708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609fd57a-0738-4000-935f-95f8a8d4a2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a28499e-a9a6-470f-b7b5-41b070387802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7d53ec-0954-4c40-9441-5db9a2001556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b5d385-3f2c-40ee-a1d9-8e10bf566ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.127.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088813fc-0b58-4e8f-ab3d-87cf64573ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b8bada-205a-488c-ad12-e0377da91343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffc1fbe-ec7d-440f-9b96-d10e5795af69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75979d36-1821-4318-b132-b910ddd78493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b345361-a01b-4bb4-b9ac-4b43ee85f597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1fdb72-9a84-452f-aaaf-24cebce295ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b18313-acd6-4b59-be19-849d11420d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84dbc56-027c-47c7-96f5-bf0116dc6e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cf7aca-b828-439e-a4d7-3e6aec367c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818e5595-6527-4059-bc75-ae01d275db72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca99aa48-113f-4f6f-a323-9cb29d7a8368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4752910-9497-4f1a-8d83-2f850055d65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55c8365-8b5b-4727-895a-83289287bdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be638e3-cd6a-445f-89c0-a39e5e8ff19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0e38f6-984d-422e-b13b-829a278ffef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c5d76c-26fe-4157-943d-e6a3a2adff0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196ddff8-b906-4c0f-8351-eedf9ce07a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40641c4c-53d1-481c-aa02-64e7a74d05b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7aad24-a398-4929-98ff-548d96bcb1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f104e8f9-ab9f-42a5-88b1-63457c1ff1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b132111e-8846-4d71-a42c-a2abc1c0fc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f0fd62-9d52-45eb-b196-01119b7eeb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a31817-6291-4d7c-bd41-bf906722f944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb398dd-4137-4f5e-bf6d-dbe3296334d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e2a5f0-92bd-41ac-a6ce-e92c96a4a845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2de261f-5757-488b-b294-98844b192e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d1c5d9-30a7-4117-8f47-f8b213b7120c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08b9b6d-232b-488b-b947-151ddd479e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b964389-d13a-4c1e-b9aa-6430749efd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a17c9ff-4384-403c-9ff4-fd280244a733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830c9a03-5025-462c-964b-1690b1475765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84c2f08-4a14-42e6-97da-7c73b3e12a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df4f5bf-94e0-45e7-8889-22cc24d87532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb907aa-e0e1-4ebe-a436-a3c909d999a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6b8cd4-6b48-4849-8ebc-157d9e42ba0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be75f1f-c5b2-4def-bbe0-a245a482fadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5aa74f5-aeb1-4fc8-9394-a52e640a04e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2af3712-05dd-482a-8592-1a310771784c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95585951-4d69-4640-b7f1-f2a816029150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e39bd3-2dfc-418b-8db1-5ad2dacd4cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c83ab6-58f6-4f1e-83fb-244139bf178f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659db234-709e-48e8-9a3e-961caf092a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6279ea67-1b94-4a13-98c7-4a79f9a3f405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5087624f-ec0e-4ff1-ad9f-9021be3b00a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0b6fc7-991b-4cfa-8f3e-6f1efa2d2e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5799b14e-ec19-4d46-9f3b-bb66a6204a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a11409-e004-4d40-bd50-6e223841fdbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b8e493-31b8-4c12-b5ef-441bce6300b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5db0a6-44f0-4423-8c30-322868291414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1644a9b2-4742-4930-9643-383b5d9208d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811e5ab3-02bc-43fe-aa0e-8ffedc136a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb7cff5-a486-4573-b989-628470924db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a604640b-775d-45a9-aaa5-8a3b379c9644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173f8764-481b-4581-9c0c-32d0268356b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c77316-3ba2-4739-8277-a90c411aa4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f949ee1-0ff1-4d4a-a888-739f95968c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7a53df-b6e1-40c3-8c82-e76446d6fc41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144a54af-bfeb-459a-9369-70e19c898030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f926ad-2f12-45f4-a4a3-ffb97c6fa9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f22196-6b6c-4ce7-92d9-13eff060fc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a005e419-44a8-45e5-8215-eb55976420b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b4949e-4815-437f-9b74-f3097eb0ccad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05964516-7f53-446d-b5e8-aa5a2fec8538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f44c7d-7745-4318-aef8-2a2bf0df1800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9c0357-2c41-4026-9c55-d0a1e4231969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662e8dfb-02d1-40d6-9e9c-0d0c7a4a1527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5051c61f-68fa-43bb-aa57-cf88dff3c095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76bb422-1f26-490a-8cc8-1d2bee3793a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f691c0-4823-4b99-a40e-6eb9e1784d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b768fdbe-f777-490c-8656-4ef265e3b44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a771073-0b07-4836-8ef4-f3d21bb9be7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c79aae-6c40-4e2c-9828-76667465da83", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6519b359-a8a7-4278-a0cc-7b8360afa17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d555134-c490-4fcb-abec-98a398d6229e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc22ae31-da58-46b8-811c-d55ac9acea7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0419bdec-8351-485c-bc3a-ccd3ab0c6c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7b3067-24f5-4230-8570-e4fccd4437ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abc92cc-9e2a-45b5-adb5-8ab028472f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0574e6-65b7-457c-8952-af594eb72057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cfcc45-5c5b-491e-b4ea-fe0145f5a0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dcf8fd-aa89-486c-a5be-0cbfebfeed41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6035faa3-388d-47d5-bb74-0545265bd489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94c7c83-f37e-4196-a007-42e5b2e6348e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3d8385-0d72-473d-9db1-78d3b217e5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367b0de9-6992-430a-bc7d-c0ad7fc2fb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8797d8a-5443-43b4-b5bc-8f5c5ff679ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01184a39-4dae-498f-b05a-c8d2228e88e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584b8506-4ab4-4fa1-834d-b73494b345be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d5e1c8-536c-45d4-9ac5-7ae90f06f7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8879783-c4bc-439c-87df-b824b82365f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a34791-b240-42d4-8b90-69a164bc7fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1796fc53-f861-452c-bab3-e74fe6ba2bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f1f106-0d75-4e14-b04a-9d41d0cd5edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211e96bc-ef0b-4f43-bf35-d8b029ae3bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ed6685-45ec-4f02-b6a5-b7af0e672e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199d850d-5c13-4b46-8f13-0a80f69c3fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5591a74-8c80-458f-ab00-37838680b816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f38ec69-6b5a-44b8-ba6d-2302f2526d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df0e288-095c-4aad-87a8-32f4ba2d6113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302f60f7-7a6d-40bd-b93c-030864e6b551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158bfdcc-1b46-4e83-89a5-a94e47b459d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51b4044-2d33-4240-91b2-ffbd500f12ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae768dc-66d6-4d39-a5f2-c7ca0ee14265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8422f8dd-7e65-446d-ae12-268eb7c6db96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a592761-99fc-4449-a3dc-9b3072d58721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbf381d-e889-4c84-8d79-40c232f4e7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f416f9-2d54-41a0-88a5-7812b9c2f6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07a5d2b-7fe5-4b4b-a351-a385aceb3f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4819c20d-0375-46c3-9567-232822984967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba0ff1f-5595-498b-8c41-fd85bd06ce2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae2c26e-aabb-4dc2-8aa0-57f6800ebc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d371ff17-1422-459e-9074-0953a531dc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c469a0e-7a12-43bb-93a7-d1f224072de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e86f54-6506-4928-8f2c-3c6a4644e7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ff4b2a-0721-46c4-b48f-c3ba8e8ad3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dfed49-b69b-4650-9da6-e318fcdda227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b258e5f8-cd32-4708-9095-fab92b4bb9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9e32f0-09bc-47dd-85b2-f0b7925362d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e8770b-7e4c-4479-a123-84c7ca2c2610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cc4230-e3b7-48dd-af17-67a27db51775", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def94e02-8c49-4c80-bbc8-5d5490652564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15149639-47c9-450e-affc-f8955d522f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb13643-f0d6-4f76-be1a-b925ac6b52ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5517f701-959f-4a1e-a056-5866e84fd114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f412f9-c9d5-46bb-b3a9-e199486dd6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09788485-4084-409a-835a-d770bbc65637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d80a654-138c-499b-b913-8304c579f482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb45f187-8cdc-4958-b2a5-3ac21d05c246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3bbf68-d6ec-4e01-b94f-8a0e4548389a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f114601a-d598-4474-8e34-659a45f8acc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acbb87b-c878-4651-96fa-807a37a63a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574e8a65-cff6-4f42-b88a-20ca07ad3eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd018a26-cc55-430e-9421-c22f02f0fc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be9817b-45f9-4e8a-a489-9d5a45d28721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7193d2c-a46d-45c6-9c0b-9f7b25a3f1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9ce340-70df-4b49-a195-6dfed058c95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.158.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1752963a-ae31-4477-a7cd-c32b6b629b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.191.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6d9b23-b7be-4173-9e41-f7c0d04c8d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.218.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b75abfa-d830-495a-9ac1-99770d5f961c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.220.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e290f8eb-ff7c-488f-9b84-602eed07c9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.230.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ef9eee-31d0-45dc-a69f-dee69dd7c18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.34.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d7933d-c025-43aa-b726-abbd7962b87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b6cd13-dc13-4280-83a0-1dfcb644cfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.70.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dca79d5-96d6-4d44-90f3-6ac3a5a2edc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.72.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e3c9a5-d932-4941-97d1-7d57f4a3bbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d336fe9-fc00-456d-a46a-fe16a2673e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30b8013-e966-4144-b42d-768066b2466e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.206.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1b3d11-c060-4217-bff8-bc3b5e405f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.212.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57563ee-5602-4a12-badf-b293f8d8ce24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.103.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a3b65e-c955-4668-b2d3-8448eb5252cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.15.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90daa2ef-40f4-4a96-a7c8-950bbe192256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.51.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a216b2-0011-48d8-a164-f603c58baf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.67.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b491b3c0-be3c-49d2-bdc3-5fa1e541b70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.229.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7197bd19-6c6b-4c7e-bde1-ff7b6ace4a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.231.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e55d21-f87a-4c93-a6f7-fa726cb65c1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb154fad-0d28-4c00-a1dc-42c5b0959afb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6feb0f10-3664-4bbe-a3d9-be3a09336e19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc29a4da-7f9a-471e-8d6a-857a606e5a8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5a5807-53fc-4fc5-a317-81ff439cd366", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0510db1d-6004-4524-8060-90cddb0fa02e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ea94a6-e06e-4e30-9adf-05e70eeed423", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609e721a-6847-465b-ad64-846e09c8a85d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba64040-e81f-4f78-9a65-c71b6aaa29fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e53ebda-bbe4-41aa-866e-1ca76065ff74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad88b59-eb60-4065-a3a6-9d7094e07757", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd588d0-ba2e-4c4f-b909-fc298cb90ae0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4852ccd-d427-4e45-a8f7-6fff9231e0b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d0bdf5-b149-4fba-b92f-d34d684b6234", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59ea815-d741-45b7-b2d8-958c8f0175d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db62de2-eff8-442c-8203-7b61489c1f19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7399e6ee-3584-4c71-89f5-d6c92c4d11b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7548e2-df2a-4cc7-b6e3-a5b502ce156d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc452b8-c261-4012-bc8e-6d7c9be4defc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3697c74f-ee27-41fa-b8fc-c3084bb4e5c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38022f3-28c2-4c94-a929-21869542fb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e580f0-d319-42b2-9b3e-60aee60cc6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221c5c43-488f-4cef-b50e-a700c9ef51ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd407ba-207f-4cab-a7dd-1ec01dc92319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61142aa1-7397-4bb6-aaa0-6ad2cf718095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c90beee-394d-4e5e-85eb-13de9724baf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75de174-0488-414d-ba40-4b3dacce0ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dc9c0c-fcce-4c7d-b48e-54f3c9afea4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5d48a4-898a-4acf-92fe-7d72a4b7d438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.68.38.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a8eb20-d501-499c-b29f-e9b688157d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5b11a0-1452-4313-ae62-fb91d1f13468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f448e3-4c8f-4517-94a6-619ac0daa8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5403679c-761e-4d97-a74f-94f7cfbcdd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd882d38-62a1-4d2d-b325-cb76ef533d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6dbf3b-ec9c-4726-b76b-0152ef43f229", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.122.41.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58c17ac-d59b-403a-a25c-4afd30e5725f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.45.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e997c63-43b9-4309-b9a9-dce6f7a7c217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e95ddb-0ded-492d-a112-485a23eef963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3931dccf-e515-49d8-a788-fbc847ca03e5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.182.233.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabca47e-0c31-45ac-b069-ee38ad6bbd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff9aa5e-0cf6-468b-9a93-89dfa0043314", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.255.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad67c8f-ba96-4515-b9d9-f67d5d3e8c90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.50.168.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a73fc0-644b-448c-b5c6-19e2fa7f51c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f7924e-8c68-43cc-be86-302812d3c0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabe5f6a-0dc3-4c38-8305-7e7c33d5d530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94eaf2e-3f66-47bc-80ff-c4c6d292e79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5d570d-6d82-4e84-b299-a82b0b651369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.174.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7fccab-dd08-416f-bae3-9de3e836a84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adf7585-2d3c-41b7-a5d8-08eddff91546", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.16.168.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f850de-0328-40db-8894-e61bf3db6662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54aed53e-bae8-46d6-ac99-ad10b8c180e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92059479-a76d-4e52-b73f-cfcbd37afeed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.212.136.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb1f18f-42b0-4915-98a3-0e8df2c04318", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.51.55.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa645b6-74f8-4473-a1fa-81f6a22c4cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.79.142.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50db23a3-1f5d-46e0-8387-cd87a2dfa1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d52be23-1ba0-4811-9be2-c6379bae6294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.216.58.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4567417f-5b98-41a4-bec2-696cba567dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.22.25.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b70d6c-1f6d-4f6b-9817-a0c9abab5be8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.253.37.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375e83b1-7315-4698-b59e-d39ac53e0420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea19a90-22ec-43bd-af4f-0cca7e0f429a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.53.113.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5181b567-0e79-4206-9bd9-63ffb16617fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157d7483-80c6-48dd-8976-16e754053917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.126.108.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d79d2a-877e-4dec-b626-b57f76c0dd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c39e3e-0fa0-416f-8602-b09c55017199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.134.90.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f0ee93-d6d9-4083-a5e2-685c82b918a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.135.210.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890d91f2-6513-47f1-b1e4-6dfbaceeabd7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.184.119.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff4ddf5-6a1c-4f56-833e-704c7b1046f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edc7951-562f-4abc-8125-594e7996c86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.253.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb55e9ea-1c69-4e37-87de-42689a1c0fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.224.86.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14659970-eaa8-4269-838c-d51412ad7405", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52842da-d47b-425a-97d9-866ec54e6dcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aedf509-4559-425b-be9b-c2202bcf87a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eb6970-68ab-4f4a-8801-3880f5fca902", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.216.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fb0084-e2e6-4595-9778-455efc993fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.74.39.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4e9823-64d3-4b75-a556-c0403c383b1d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.87.199.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0196d1-b5ed-4d6b-b743-c3e4ef69475a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.87.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a13c059-7855-47ce-828d-2375de0d1d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.152.161.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce5d4b9-8d4e-4353-b480-a4368bc37146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036e8ba5-1753-4ce9-8296-ad6b9261ee7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4a6a7d-2e2c-4e94-853b-f5f429c6bac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107257c4-3215-4468-bf05-0b693eac086f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d3e6f7-e950-4381-a448-748e0b6e003c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e4afd0-bbb4-4619-bd24-a3767243dab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dfcbbf-5ef4-4152-a4bf-8bacff9bd894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e031b1b-e0bc-469f-959b-b64b457b5653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38cf86d-091b-49e0-a5f8-034b457a5632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cb03ea-948d-4b1e-82ac-ed6712847f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8265a35-b8ec-4e9e-9159-b41227c886e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b747cdd-afc4-4f64-abd9-d66ed912ef4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae661f90-4232-4b16-a595-3e37b24c9c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21f71cd-308e-4dfa-be73-0ca446af6bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d41a756-fe72-43cd-b66d-fe1e1f03b910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838b5cab-3fd9-460a-878d-37d68ececdea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e7ded9-33f5-4fab-a822-7775f6197de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cee976a-8616-48b5-a920-00b1242237d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c777c57-6a62-47ef-85d7-cd48d6d82bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051a5efe-2778-456d-8324-5d13b24a7182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed2e2c3-b65d-4a15-9664-2240834a43be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8792aa17-6103-4ea1-8cef-507b59f00e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f649ee-fcc2-49fd-b5d6-f365530f9d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747de5e2-ba21-4ff5-8f1c-c99d9ae192f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b54785c-9250-4642-ab36-a9f1c7c1fe06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bd358f-6b4b-4e11-b63f-dbb6253f9186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ac162b-43ff-4634-9578-ce854ee97445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84225d6b-ddc8-4cf3-bcfe-2068a1914759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b7cdcd-1621-400d-a3e0-93bf2b5bc1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30af7986-b179-4453-a762-82aa1bb8949d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad75b978-214f-4ebb-9e6b-ed313c486282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019aa41c-1b31-4b99-96e5-39f2b811ce46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ddd81c-b7bd-4191-a44a-2740aafd717a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0528135e-48d8-4c42-848b-aaf2bb2ddbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173f43e5-93ed-4444-8d54-f717e9b13ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9eaab5-2d5e-4490-be5f-8dcaaa84e64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea06018b-9dba-449a-bef4-ba81b352af6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e717dcf5-8e21-4b68-b03c-ddd085031a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8422d64-2bdd-4da5-b195-7a5c470074db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.43.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef0c394-64b8-40bb-acba-70fbf798d4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.200.31.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778483c8-24fa-4323-aa29-58efb24fc552", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0391f3a0-77f7-4058-9dd9-05dc401dc194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec39aab-ba0a-4029-9945-9b9a7380fd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894e9dca-b5bc-485e-baed-bb3bcc76c220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6ec52d-cc55-4aac-8fa8-a2436cb9ce24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bfdfa2-e681-4722-9e27-ab3d7e031769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdc9553-8346-4e8d-b244-4051c0ba59b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4aba93-32cd-4da1-9d96-3ac8a717d70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f920a98-e802-4cb5-874c-2ef111b34c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3adf23-d54a-4462-9701-e2d1126f9722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ff5424-2760-45e5-b511-aeb8a40210ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.254.134.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ca6b1f-f6c9-40dc-9130-93360d0ab23c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.43.8.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf0ff48-9771-4a17-9738-510c7b8e21f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.224.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79290fab-176d-48ea-9cf8-1fc063a3abe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.225.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3cf845-ef17-4438-b0a0-95f35855cb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1e02b5-abbb-4a25-99bb-5b070ef4b93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7282a9c0-9775-4ef2-88b0-99431e0f3373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03bebf8-31c8-471f-969d-403f02a8be08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec9b94f-6a0b-4b46-aa88-813adbf87d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.202.170.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335da592-2509-4353-99d4-65bf9599feb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d24e351-ec07-47dc-b3d2-292f2d7f5b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26270d71-7bab-42a7-ab66-7e4ccf3ff11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91652dbf-f942-4fe2-b96c-22cc37a1f9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca3efe9-63da-44ee-8e28-240f1ae3cdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc5156a-d99e-468c-9253-5a7579181a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34930765-1b7a-4569-a92b-239dbc3708c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5a6034-5be6-476f-98a3-9bca0bc6b1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89bffe7-53d6-4dd5-9b4c-6f521c21efab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237eb1c9-677e-4c7d-9264-130b105ce1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0aef18-2f41-4919-a2d8-ecad745057b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da35657-ec2b-453d-99cf-43c62785dbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea53eb2-f9aa-45f2-a7d9-418dd6d48da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1913cde5-f298-4af8-ba90-18843b979fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0c00d3-3f7e-4e4c-a795-34f521354f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7a44f6-19d1-418e-ae3e-b70b69d71a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a2c1cb-db17-417e-952a-8ef31fbc9e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9186f1-6f39-4e8b-bd38-15210d08ddc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dfc9ca-9aec-4b93-8e04-06f3e00f233d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d95c90-6712-49d6-b9a9-c6f9e7ca71b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4157ab46-c3cb-45df-ab6a-10f896ef5da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21748158-550d-440e-96ef-c955c49684ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.234.211.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec962048-f2e3-4301-995f-15b63f4f6c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.238.91.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec54caf9-953e-4657-8348-920e70346e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.238.93.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f58f85-09ea-4cf8-8b39-a2471b13f54b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.65.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ce608e-1212-42ad-aec6-84a26e00750f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11973d1b-efe2-4d53-9692-80003219af25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2027a89a-6202-45a3-8114-88ed66f5230f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96e607f-3d3e-4ba4-85be-676146b77bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa301178-76ba-4a48-83d1-819aa5df6696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a93525e-b21e-472d-bcdb-90cbdf316faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c1b8ba-a1eb-4a89-8c4c-728955ae57ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64600e8-3afb-4332-b4e0-9de3ca6398a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f653d702-176b-4bb2-8a7c-2e519b6692a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1f8eb2-25f6-4a91-ab6a-2e6d914dda59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60ef118-7bf7-44ae-bdfe-8a6f89feebd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4152323-a1e4-440d-9c21-174e299ed95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eae7338-e727-478a-b994-7f804493c7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8846cf18-7c4d-4fc3-bc35-e0dbcc095ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919ed7d8-2149-41b4-b3d0-4cdad1e1b21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33d8926-872c-422d-9b2b-3427c883829e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5289e07-2da9-49ac-9738-cbd8cd019e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a38969-deaf-48dd-a5d0-731596def889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc37957c-494f-47c8-aa3f-d646597b408f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582302bc-b2ae-4b32-a047-aa3f913e95cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa30d079-1751-4e25-80d8-54bccd48ce59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63e742c-ed10-461f-9e62-42d975d4e885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345efc88-07d8-4e15-9978-a12cfda278ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2d4a42-0b04-42ac-b17c-08d1b5618cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edaef72e-cdbc-4157-91c6-1b9a53cefeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709b8161-4ad7-4f49-b387-faa18d354a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b95138d-035e-43a8-a268-6d8d0a0556f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61a96d1-5943-47ec-aac8-1e061750c526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f094e639-15fa-4bc2-8232-672498f9f530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf9ce22-1ee7-40db-b16b-af0f55956fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db710b9-a0c3-4b84-b13d-eb00799463be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2050105-7504-42d8-8617-66c81f1313d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de58c336-8dbb-4414-a98d-2572c54b5592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc2aabb-f352-4fb6-a395-53feb42c525d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c81ff2-6113-4184-87f3-5afe237ebaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.28.189.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df357a8e-9150-4bf2-9050-a7a69f3fe1f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4342af-3dc6-4a5e-896a-88631f7a725a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a959a9-91bf-4137-90aa-70ce638013f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab2c270-96c0-4ac1-a517-e2627e1e661e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58830b1a-f7d1-44c2-8f83-fe7153605356", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d779e9-eb78-47d0-870e-e48887490911", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c80d5c-4fe0-4abc-9b29-697bfdec4d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a72b95b-172c-484e-90ca-713b7347887b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c0f115-d1bf-4748-ac0e-39558f9e978f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93d055c-72e2-41db-a969-b49e40d12b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a9a012-86bc-46b4-9b25-7f86e0019533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c5f0b0-040c-466a-8447-11c309d2ef0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b670f8-bbf6-450e-aeac-e6fa13f8f909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf50755-2f28-4789-83bc-b8798e9f7ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653efc85-0103-4adf-bb97-72622356fdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c7dd26-ebcb-4e54-9c05-cbdf3738d67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58510bc-7046-4269-af7f-6bcbc2e6fd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6919e3d4-5d87-4b99-85b9-c950633de38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b9be5c-40b1-47b4-9ae6-59d19366700a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ace2edf-eab8-4d6c-90e8-8ba5b52dc308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b84263-b65b-41b1-ac6a-e3212d06faf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0515056a-7066-4543-a545-da7d8381d5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3666b44-c4e7-4f12-a591-447aae71d47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.173.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f631333c-f9a8-4d9e-bad4-685eae828866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf2ebbd-75b6-4b0a-b243-f72ec7b799c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.66.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7fecab-3e81-4e95-9317-59def3811f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1747aa4-1091-4c08-b9a8-4d398b4dcb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.139.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ee1de3-e27d-45f3-bf37-e5dc8faa31a5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.245.1.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f530b16-2e8c-40a6-8188-1b0ded131a08", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.250.28.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223e4aff-8527-44e9-bd1a-b18bbe62ac3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2b057e-1445-497f-b1e1-3b2eb052b098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.165.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2891b42a-aac5-40e1-b510-fd52b0bf2924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.141.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090a2eca-9da9-4894-b6a1-dbc9e34be4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.176.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d3fd63-0128-423d-85d5-dc30bad66ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2461a95-e32f-4bcb-9bb6-82342155018c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.91.140.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90aceae-56d4-44c1-b57a-0632eb0eee7e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.118.129.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98314267-1671-45d6-8a1b-1668d177671e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec36903-d65a-47d0-810b-f38fa84afb27", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.134.77.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb6e7e0-9e6b-410d-b636-109b48ef28df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.158.232.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61844322-bbb5-4268-b487-564a7e92d9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0d3ce6-da4a-4f35-adcd-e348daa89464", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c567c0e3-f397-40ef-8103-37a95b6d89dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddca39d6-8465-4cb9-875b-4d8a16229585", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6123678c-1359-4dad-bffa-978f8fc02aae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90541d02-412b-4774-b6eb-490f52cc701b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40607e52-ec5c-405d-9f89-b6b17af9b4ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3faf7bc-dfc9-4bda-87da-9b72bc6e34aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03565a5-e969-44e3-a584-a3034a95b353", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe207bd-6603-486e-86e9-85414d3ef0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48eb49c1-7476-47bb-8669-9f6348f3cf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143f7446-247f-4886-9050-15bdb6f79d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.248.25.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2b248b-f53b-4b7d-a4e5-b3a4b585a3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.73.136.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cafb9ca-03cd-412e-8727-ade888dd729f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42ad231-6e53-4a8b-b097-abaf1182fe3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053dcdb8-e9ce-4fa8-a6cf-5c09096c8e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.2.109.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a152ef43-dbb3-4212-b4e4-85ce67b9ff76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b983fc7-5b0f-4b42-9350-06244a69f163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b862816-0e84-473f-a246-d79d1a13c3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.103.236.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0c006b-9fbf-41db-a9d5-3ea203574008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.109.76.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d23a10-d66f-49b4-8393-8db1633d18e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.70.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdff04fd-2317-4772-8963-faed936606eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.138.178.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d201bdb4-eb40-4904-8765-3bb886e51caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.155.63.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3dd1bb-2ab6-4d32-bac6-6f530be6dea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b6332d-3101-459d-a87c-d81cbc748473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.252.30.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232a8900-509c-4eb2-8eb7-7df7416b2289", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.252.99.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f9778d-4eea-416f-8556-686aa1260500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.254.78.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d2a309-f5dc-4499-a35c-9af702081949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.89.169.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b87fc2d-4fcb-4241-8127-25936bdfb0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.95.168.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11074df6-7966-4572-ae34-ffb48cb6a370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.95.168.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a302ac-af06-4346-a3fd-6157e4f836be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.104.84.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b3002f-8e75-4337-8fae-a290b4866ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.125.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcd742d-96c2-41d1-9286-db46165a6a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.35.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec6fe11-ca4e-45fc-88fa-5d80be4a3a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.22.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ff1592-c19b-4c6a-bd5b-b1c431099170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae5d0c8-9d38-464e-9cec-7afa81b4f424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.206.62.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a08624-8b03-4f09-8f1a-ddade7d1366b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.178.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b308b71d-79ea-404e-888c-8af97c4ec1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.74.194.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9056e8f-2c9c-4ecb-afeb-d4deacb6bb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.132.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa62b36-f78a-423f-8c03-ca8050c9ae23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7c1f55-62f1-4142-94ea-9491733cf495", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0ad954-8da1-45b0-8257-6b9e763ae920", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.153.72.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5087ee8-c37f-4e09-8044-80c84d58225c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.20.175.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4742d3-b5e7-482e-aaa7-775e519854da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.227.147.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add5071e-0d92-4d56-b762-156f2fbb8a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef082c01-4209-45ce-9712-1b14d1c20aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cd3f45-336d-4a09-b983-2cbd810881af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.29.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063a9cf7-ac02-44d5-863b-27b41442a744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e5d882-081d-40ae-a19c-abbdc7810953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82dbd718-5253-4f2c-95cc-1d9b377311f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.251.137.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6a8dc0-58c7-467b-9839-7d61130f06eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.166.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d53b24e-78e1-4778-a33d-305b0dc6b1d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.81.81.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22db5f1-733c-42ac-a9eb-58b229b4bd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5404be-e436-444d-a944-aada5e558e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57adb7f-0b3f-47ae-9e53-2e7a47faa13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41cc838-416d-47ed-8e82-3c77c70ac944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3599c0-3fa8-4afe-a340-be09afd6ed1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e95e13b-e4c8-40e8-ac65-a0a706ea9a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05be0a64-2788-4e62-a111-69c4292c99d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.104.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3f6fdd-03de-414b-92c1-2f11fb996f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698bdf17-81a2-4ed0-9774-164cb3de5926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.213.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1c3ff1-f49c-410b-bb6f-0126e01a9127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96293a5-edf9-4a86-8017-eb8779d03baf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.191.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f185314-6c2c-42df-a6d8-d789a405151a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.20.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acb646f-ee20-42a6-970b-7782ff9d8196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.123.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52847645-edd8-4ae3-873d-61fb7f13a6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.163.114.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ac087e-7143-480e-b8c5-eab5ce88dc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.54.95.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8330e8-959b-4cbd-ada8-0bfbe6792a1a", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:80d:1003::2e']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb2e240-fafc-4351-a210-27e8b8ec6a79", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:fb54:1400::120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e3f467-4a8e-477f-8325-448fac0210bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.155.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bb2e1f-8220-4f71-b3b9-131b057d2e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.219.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647b168d-b95a-449d-ba51-3fda99dc7824", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.185.41.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec96a227-c605-4b58-b655-baa1ae779e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.185.96.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0831fed-92d5-4219-8ed0-c1f144fca8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.43.206.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0753eb15-a500-4c06-9de4-8edf848aaf95", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.78.70.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1756151b-d306-4d56-be70-0856464c974b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.0.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a590ed-8519-4338-a5d5-69e0a40e6055", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.41.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2199d4e-ee55-4aad-b014-80bd275690bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.125.168.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f1411b-9c93-4322-96e1-2f6911655333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f407e9c-52c5-4f8e-8751-b9b5272057b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.136.154.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246b916b-7b9d-4db0-8f09-79a7612d6535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca36dac-837d-46c6-a932-764476ed72d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.148.105.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efd5d21-4464-43a7-b0f4-a40dfb752a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.148.228.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5e2ddf-2648-45fd-9019-443276d5d83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.222.177.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41945058-2028-48a5-bee1-620ee2815a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.237.204.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9347579-d3ed-4023-b510-e408d7af7487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.239.166.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0afb7b1-14a6-4d22-8500-70fad1aed16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.6.89.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02818711-a795-4338-a4b1-38e6b4d59cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.70.126.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b324cb76-20ad-484f-b204-af8d3b8e3b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416fab02-2ef6-4022-842f-e76e1cbe4b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.217.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53352b9d-741f-4211-bc91-f786b7791b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.152.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e6573a-23d7-47ae-9055-601931eeede2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.246.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b93c110-3a5c-4635-88bf-48f73d60d52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.52.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe8c834-7783-4700-b10a-76a2d157c3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3c5be1-f26e-491f-b8a3-88a24f6fc8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.42.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea05d723-25fa-4603-ae4c-c150772791cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.219.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad4d502-7a88-4a44-9df3-d920ed1448de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.220.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b286caa-d3b3-4eed-baf2-d86244d0feec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.128.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbf9056-8ec4-47e2-8dab-20eb45ab214a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.204.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddf90de-977b-45ab-a078-be28f3faeff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19f2726-df02-4de8-8793-7cb62748896c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8195743-068e-477e-8df9-44b22b5c15c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8eedfc-5bb9-4e62-a40a-61f5eea70f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3e4a66-6d9a-4a35-a585-1b4b90340268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c1664b-dc91-46f1-a25c-6d498779fba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8dc7b4c-c6f8-42a7-adf0-34344f845c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b487773-c1df-41d1-80f6-4ccbbf87904e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954ee49c-3639-4a46-93eb-67af29d1332f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc692abb-b530-4ca0-afc6-2d94ab15a77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75234df9-90e2-4286-986d-39525194f959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6ce505-15ce-4f74-928c-4825d2f0b0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0a6c6a-7af2-417b-bbe5-873141e53c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3f177c-0b26-4766-872a-0d49418592ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6705173a-9c88-4c55-ad6b-21e3dc31ca51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c07051-e425-4bf7-88b7-6553eb1ab18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea91eb4a-046e-40c7-9a18-dc4342f420e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23679f8b-8d67-459b-81fc-7d12c56cbb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994707d6-a262-48bc-a8ad-d07bf77e035e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac41fc4-fbe0-4a45-aecd-aea804c3e021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adece47c-9f66-404c-8e42-e3e0217458af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af0cf5a-b823-4f2a-863e-9c2de3e2beb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62f0e29-d2f4-4a06-81bf-29e9f6677dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.163.227.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560ef02b-a386-44af-a72e-5ed1a5e38445", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.81.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0901d04-1688-49f1-9289-e4941258879c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9947f22-f611-41ad-b7e6-5e95f42625f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0f6f00-4b80-4d5a-b532-81869a620a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.190.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c773e60b-bcf8-4bec-be0f-f8fa46c80851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e803094-a956-4de0-bfd2-ed72902095ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70dd62f-3f0a-4bcd-8a8a-9ab320c1a873", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a4f569-4476-435d-a143-bdadcfc2addc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f9a4c7-b3ae-4f6a-9316-6cf9e21eda1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.144.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1990f2ce-837a-4f59-ab65-1bf08e808444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404abdd9-b275-44b1-afbd-fbe324105879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.192.237.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8badf68d-11e0-4e99-b77e-b3a82414b557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.192.71.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7fbe41-7f33-4ce4-a041-2b2ba8f68451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.156.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9bab7c-49a5-49eb-820a-9274631f5514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.170.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6644259f-f68e-4538-afb7-0dff7ec03cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.107.9.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf39c81-f5b4-470f-a779-65236c8fd76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.144.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2646f05b-d8f4-4585-ac87-a1a790964f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.27.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64442b6a-9f39-4bc2-9ab5-5387539dff2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.12.162.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe916ea3-5b36-43fb-bd5f-4f2669cbfedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.123.189.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affacbe6-e1e9-4e3f-a076-bd3d6d8cae6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.139.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49703804-de11-4c19-a1b3-b45b7f368370", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.114.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6be281f-6b66-4668-8ce7-dab5f7dd0ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.15.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0160a1ed-85b6-485d-99ab-183fb41cdd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.21.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fb4bc5-b6a2-4f94-a64a-bdfd69974d67", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.33.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf59fb8-1c8d-4c5c-aa3b-c6cdbc1bad8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.173.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfbf927-40ac-4d9b-a8bf-42ca259173db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.180.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e1e0c3-e116-4183-a3ce-173f14941f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.183.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fb9267-1cf2-4ac7-8718-3d826d28620d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.145.139.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad612534-2905-47a8-96f8-484e9517b62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.147.11.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77427b2-6a2f-4e11-af8e-8f15b988c27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.147.197.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac74b5d-da0f-4094-8d28-d19dbd6f9625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.66.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505fcdd5-3366-4325-aaf8-36e14c5a55da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.119.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43985d64-be86-473f-9ab4-5795388ecf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.63.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36bcaff-47b5-4e1a-8945-8a5557cba903", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.162.249.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656a84a0-cadd-4ab4-a654-503501ecab74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.174.38.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dfce13-d11e-4833-93b0-73f8f62ff4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.182.1.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df04f3ad-ee3e-45b3-9498-aa921e1abed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.182.216.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da4b251-6686-4717-9bb8-0c73b71c75b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dfc8a2-dda1-4f0b-84c6-a925bede6698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e19224e-78f8-45a1-85f3-9c484059d7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.20.177.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba05232-d1d9-4734-94c3-6cf4efcbd677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.20.245.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2132cbf9-58a4-427a-aaeb-b0b9161f467a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.202.237.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c64a625-5413-47e0-a00e-f775eae535fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.48.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94173b61-de23-494f-9f18-cdc9316df8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.78.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23477eb-1ef1-4656-877f-9fbd559980da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.207.131.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3199319-9ca2-4610-bc95-09b03bba2ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.207.87.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d53ad9f-c8a3-4d87-9b4d-62dae965ca46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.208.194.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4de637-4469-45fc-bdfc-becf5997b430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.145.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e9ecf3-5548-41a5-b38e-0ab6ed5e694e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abce5ed-c9e1-49b0-be45-2b3f5175d9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.255.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983a3aa7-616b-4fe7-b884-4cc93ef2f9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc451f93-d9c3-4182-aceb-587c3b5266c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.237.242.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f415cb0f-e5b8-4e4d-99a4-0741c974583f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.118.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5d0598-25fe-4fe3-9d0b-93524f5c1659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.14.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcb3501-3842-4860-8bb3-e86e2aa93a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.127.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f036bee6-ea69-42e3-883b-c5bcef01327d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.218.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ce766f-2650-4214-8e0c-8e19cd46f7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.212.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577d91d7-e19a-472b-810a-01df5de943d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.48.100.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458bc7f5-d50f-44db-9110-4b932d074d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.48.140.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d229b7b2-e597-4bd7-986d-6fc6c40dd7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.23.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e38676-4c21-4bb0-9771-37be2ab2030f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.57.71.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da310ee-1deb-4a0d-a3e3-46870b8c4904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.150.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7b111c-78f4-4d91-a96c-b27ffa114b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.200.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e0d426-5f8d-4993-8886-e59f4d4fd337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.33.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baefb2d-5c07-420e-bdd9-0810792ae2cf", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.36.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2b4182-bf74-4719-9d87-3cef54aa9593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.75.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72839150-cc2e-4150-9c55-51b24260b751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.208.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6605bf4f-a1d6-4d51-94aa-0d53d8a52ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.73.199.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9afff64-0096-4dfa-a3c9-1d2e29bb79d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.59.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22edc413-3dd7-401b-9335-a89b607b704c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.204.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd1d3b5-8847-454a-877e-a3d094486d1c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.217.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abf2546-6d11-4698-a930-515550ac2371", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.251.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc09b27-8fc5-4ff5-8ab5-9242ab45b47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.16.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ced69ab-3f53-406f-9643-86e1f1596797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.169.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fc7c08-c406-4a59-9ed2-c213c1157583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.186.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd176e6-ef2b-4d41-bbe6-449c40660582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.81.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b111a3-181c-4764-b954-26a50cd52275", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.177.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9491ad-7fad-4b75-9df4-33422459ba3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.43.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9df9b41-bace-4129-b458-5b3dce6bdf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.126.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670bc077-20e3-4fe4-b015-a577c268c212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.91.243.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80186833-519c-4a17-88c1-81c8b9acd640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.96.35.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c220a8-bd9d-4527-adb2-4fffde71d922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.124.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7172aad1-953a-499a-9fec-c3895927fa59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.191.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea672c2-7ce0-42fc-aa24-6c92274e17fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.249.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dc8f0d-82a7-4828-821a-8edac8439988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c176a18-48bd-4003-9fea-14c32ef37879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.174.172.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bb77cd-b8fe-46d1-86c7-35fbfb605ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.175.116.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e6661b-147f-4906-a386-70910ecbd41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.175.131.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c66c9a-97ce-45a5-8c84-8de17f7ab51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.173.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20325168-bead-4f2c-8c7e-e1a809ef0448", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.202.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf0ba50-4a3b-449b-b8f6-35011801ab7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.219.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52b6c73-f2fd-4815-adfd-6dbe7c141a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.244.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4053cb6c-dc58-4542-9dcc-474644bec230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.190.195.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adb9865-20b2-44e7-b49a-baf2da19fcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.49.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9b46c0-f507-49dc-9790-374ded6916d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.196.12.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b286fe1a-44ce-488d-b362-5ed7e820f0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.198.148.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4da9be-d244-459c-8cb0-7d6e70a5d832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafc641a-d1a5-4a70-aa4c-689ea00dd3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bf0b26-c2f4-4f42-a5e8-42228f9b6e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c198c8fd-1222-402e-a21f-cd09f26e98c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce9ad29-1f0b-4253-b83b-8154cde4f913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeae56e-7655-4d16-93e2-e35f0bce1fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b46018-257d-431a-a0ed-76976375cc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217fb757-746f-45c6-a6d3-37180ed31c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f91ffc1-8c48-4a43-a4de-e06d2a2effdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5753b17-46ab-4036-a511-1a8ae4f62540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716ce487-a120-4132-b088-f5f31967c34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b968e2-02ab-484e-a0f8-1a0139a43eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1b611d-87bb-4d0b-8ac9-df69183e0a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334c33bf-8448-41d2-a1ac-790d7f710bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8584fd79-2593-4c5d-b1b3-6b2573e4c731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d84d49-5411-4fe4-98f8-d73af60d1439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b127c8-1b9e-46be-9471-886234633c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586fefcf-fd74-402f-9422-6bf117440167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01d3ec5-c7ee-44fc-909d-2eabb89516a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c0eef1-d908-44c5-b3e8-aff577bdd1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6e8c44-1f56-435b-b26f-1d90a6ebc167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b57389-c33a-42a5-a9b5-c142d77c6722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d1ae33-5f8c-4099-8c14-a0f0f384b2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89244c62-805e-4314-97fc-785cd4765b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9680626-36a8-4182-b6c7-f538bbf28c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fd1e8c-ad93-4f84-a7e3-7921c6632c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230b58c7-4e93-460d-b4be-f7ac1a8ab2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5532b2f-72cb-486d-a6b9-f31a451c1619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26602b02-e4cd-40df-8e0f-e10af550de30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d06f99-a640-437e-b51a-8259421bc2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a1d42d-44d2-4779-a9e5-85aa53c12d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f468900-691b-476b-b465-74c222ae37df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfed75af-02b7-422c-94ea-5082fb8ea7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcaea8e-f533-4164-a512-6a6dcd6f1e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2185687-66ec-4496-b4db-612e696a4a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e43357d-6ce4-4aea-a618-6e92dd589e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541aae2c-a7e1-4591-a1c0-b4876ec33cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa807f6d-7c9b-40a1-85d1-b332e6ecb728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031696fb-146e-4256-92cb-9d4c13c363cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dff314a-da2c-4c56-b902-d192ca7d8add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fad5ab-e2cd-4d73-b0e1-72f1cf4d9402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b772ec4-92ca-422c-83ce-b3738ba2d76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232dcbb1-5fa6-4997-b568-489ca11fe535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae9f726-da2b-48d2-8c75-eb9cf61c1da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a42e48-3f7e-430e-8ae0-f772c86f48ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa0a549-9086-4b36-8d0d-651bbf2f802a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bc8845-bf78-4fd1-9e31-5c07c28c33c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ffe28c-0525-44e4-9e05-19ad1921e3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7309c14-5084-4861-95a4-e94c4c01441f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea5a989-8607-4a51-a705-f77e74710655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a345ad0c-024f-4c19-8241-9f20bd6ccbb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386363aa-2e2f-4c95-aeab-f89a225a596f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adac84aa-4bc7-4b54-abdf-43f220b08141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66293339-bd06-4402-be41-0b0e62ffd93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b43092-fcf4-40df-83d7-419c78b0b189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e1394a-2cec-452e-9a81-5f9d609d419d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d26ffb9-b41a-4e24-bfad-916b40e5bbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a01b5fb-7a5a-434f-8209-2d8630a41dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d846ec-21a3-4ecf-a3fc-1fa2e6e09001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67a23a2-241a-4ce1-bd46-6f8735beb463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cecaff1-ef6c-4a07-a8f2-119ffbd7373f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b979fe-9884-4266-be51-48d240d679e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6a57b4-d0c1-4aa4-9ba3-e5a97e381931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db90077-74bd-4265-aaec-7ef076678b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba281e5-d098-490f-a091-cf1be0abbbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5f4807-4d57-4473-8ddd-8ec3860d51eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6a7f9a-3b05-406b-ac8c-3b08e09b05b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db62508a-1968-466a-aeef-1d79e8edde23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66e93b3-4dd0-4715-a391-4a9687708b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae729f8-39d3-46f1-9f0d-fde133dc084b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacf5cac-f968-45c2-bc4d-61f0c7ed50f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87995d77-bc24-42a3-9e78-4cfb5085db86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b7ced7-8a9a-4881-a817-dccaf898ae18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bb3507-ef96-42b6-9c3f-86febaacdc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751684b4-5828-4b7a-9ec4-3ee18dbdc33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9941af-713d-4677-a28f-78a095a21a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d5353d-0046-43f4-b42a-b9590cd09287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6353a2-c1c7-4c5e-9449-a2af5ea0d4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05a939f-d13e-428b-a5b8-eda94d433a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391769dd-4412-4109-ba8f-b0a9ef2b3189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b64a015-f263-46f0-a0cf-ca25d42ab98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91323bc3-b9c4-4f9b-b4de-c5fb47b5e268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01141838-94cd-4cc3-af5b-9a7ce9372160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488cb7b3-5932-4dbc-9d8a-e3a3b881725c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8145016-b9c5-4b29-b577-e192f8d5f6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74e35a3-8644-46ab-b9a9-f59a5e86d646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634bbc92-35cc-4f7a-a2ea-0fb672c506f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9cfb96-2033-4041-9e77-98c32e570bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd53779-02aa-44b3-a6be-d8db74540dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d87918b-f5e8-4dcf-b856-e24d7b31902c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db062aa-da20-45c4-b49f-b286e9fbd79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8c8d38-6b10-49c0-8cd3-e3cd43343ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8723322-192e-40ba-bdd5-e70e1a41cd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99703c73-d746-4303-9f7d-19a4ca70e298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c3e560-ba0d-4cd0-b211-e3d894dd1987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd80722c-d6a2-4377-80cf-474be19a56dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cf5c68-4060-4427-a76e-5191bdfa03e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57a7974-3cd6-446f-b9e2-e055e69bd188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8475fc-40fd-4f0f-a502-2a0c58e9a2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ca349a-0196-486d-9bd9-3c3b60a8101e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce938236-0942-48a6-ad4d-e51738c658c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafe886b-da57-428a-93d8-18909b9b05f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d65ab37-2ed6-4735-96dc-8c042a3549c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e206397-9706-4d0f-804b-236c7809b4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7cea8d-542f-4d41-bbbf-5c0f4356339d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cb0a43-a0a8-4d0b-8ef9-2fbafe0fcd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2dc44e-ae42-4fc1-969e-4f74fea8ebb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9ad00a-3750-40e2-8f91-a339e25f313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d54c05-b275-4dae-a643-344dae9e0ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c8b15d-6562-4ff0-9344-20375adacb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0907151-da57-4892-a134-39135469f7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f966a705-9dc4-4760-85f8-6d6dae7b9da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d593b7-6d1e-4773-bc29-e6b84405473c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bdb1c7-2070-4d54-bc5b-1923a491a26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe488807-27bd-471e-99c8-92cc1465220f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da3a5ce-20d1-4938-ab28-90225c840279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2dee9d-552f-493a-95fc-a145e2a9e5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dd0703-20ce-46fc-af17-887a8677671f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e4eded-41b4-4ae2-b8cc-35eda44ed53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190366d4-a644-43c4-933b-f202642678c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb7eb51-63a6-4d70-a589-6e60f6f7b981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23ce699-2901-41ab-9135-32d8e812c828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2988316f-6add-43b7-8122-19e84b5b0ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d11c7d-6e62-4ce8-b6e7-033ec6b7384b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538cc916-3fa4-4d33-809d-1312c12da3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a8d696-0421-4f40-94c1-71405685e8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b18e3a-57a5-41ee-892f-01cd4a423e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac490fdb-9867-4d53-90c1-1532baaf4849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f30aae-94af-4140-a1d2-3241bb39b8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8debbaf-6bf7-48a8-b487-2b3f14c46f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f285029b-debf-407f-b42a-e631423077d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f949273e-a61e-4837-921e-a988ca04fe1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dac1fa-90fa-4b29-a2db-a9ab6cc38682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ea2912-15b3-4ce4-a213-190825e27200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9307982b-fede-41f7-a07c-ddb4f69f15a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df1f93e-32e7-4af2-831a-f47b585e9732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4930511d-bac2-43d1-bdf3-6ff85f3c9511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39930efd-af83-49c6-aec2-2a9394af4424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5014b1ec-557d-4870-b0a6-f90742e84461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f80c411-c4a9-4dd2-8083-6bb09a4167aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31c9798-08ea-484f-9027-3c4cb3b5acf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ad2c3d-aff1-4c7b-be09-587e6013eb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2ef913-b0d0-4812-a940-e52ba9fed38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c65d5df-d43c-4f52-b8e0-85bb26590e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa09943-8c08-4972-9a0a-8e5a0e9d0362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1089ee70-3028-4a14-9471-e6ff28e227b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c813b4e-f83d-4df9-a57d-7c3442728d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.204.118.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9cd731-eef9-4058-abd8-9dd982a8acd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.156.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f375ed-8812-472a-a1ad-2bda60dfa90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.165.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b161b31-de18-4c91-ad72-e6f4e119f29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.87.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ba39d8-cf37-4c09-8728-d09f15f3d874", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.95.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e040d7-c4b6-4734-878d-fa9280943909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.207.192.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cdb172-11ef-464d-90fb-d218105611fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.140.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5807cf8-3f8b-4ed0-9ded-708372bf4fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fcddf2-375e-40d8-96f1-ebf5b8c97fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.223.55.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69597b0-4fc1-405b-b9fb-ae53f8b29943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.43.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba56caea-423b-47e5-90a0-033240d99e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.63.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5747ff-30b1-4ee3-a1ab-fb69e41d772c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.74.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1e3be0-1191-4146-bb1f-c1e5ca2b6994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.121.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9ad6c9-71f9-4e12-971e-605bc3423f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.4.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b2c746-84a8-4122-a644-d14fef1bfcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.87.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91824e86-0e17-4a7e-99f4-7572f8df6d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.166.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6598ff9-91e1-4121-a02e-eb34d72c30ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.170.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f45ee-3052-4499-9809-5ef5c92541f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.214.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179a3488-2446-4491-bab3-308a5e0609ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.84.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3875398f-5b55-44ab-86ce-91e3f2ad7e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.217.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674b51a5-a767-4da1-a2e0-db6889ac9ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.255.150.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f579532c-439f-4112-9eea-e1cd1e5d5548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.103.243.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a03656f-2361-4cb1-9291-e4af8c70e4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5564caa1-1a0b-46bc-88dd-4a1f6e37d3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.108.175.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f2ae3e-cee1-40c1-b77d-9d1c658fae4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.112.30.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e312034f-8876-4091-9635-da1c2fd85cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.132.34.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c53faf-fdce-4759-81da-a60b978486f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.208.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f64ccf-1b59-49a5-8613-b8bbade14b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.153.42.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b120a41-3302-4e4c-9119-712ce8157ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.156.154.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933c9242-c676-483a-ab4f-85765ae9864f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.213.97.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6238fa75-22d1-4746-ad08-ccd3a4677120", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.24.24.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116ad9c5-7161-40f5-aba5-258e9e24b5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.24.48.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dbf132-feb0-4a48-a359-bed06c6f07ce", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.25.9.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b08050-8d49-4b6c-8db7-258ae76a0181", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.66.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e90fe7-b597-409e-aa89-9d7af7e6512a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278f0224-c494-4892-bf12-819bbd8c2879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e69307-0c0e-4584-8ba7-4154a72c2969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29dc309-7f83-4c63-af3f-1e56f8c8aab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c29b845-7e9d-4bb9-b377-938f48f65777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9dfee61-07c5-41c4-9e2d-f91fb7c5e209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be91fe9-fa9e-49af-8058-5a0211f2ec50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6e0dd8-0141-4f4a-b980-b03ed5cf402f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02482fb3-8f77-498f-bf10-55ec93c18846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb2f8f7-d7a0-4354-bdb8-d6dd5514ce03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766664c0-5061-441f-9385-d17167e120cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d55f33-174f-487d-96ff-5edf0e0d8667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b8f628-b79f-408d-9e2d-0e1ec98bd146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bb4b00-181a-478e-8a30-e6d148214257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef693e2e-2c33-488e-b5b8-89ef0d628346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a1f40d-095e-4eec-9237-e4ed069f50e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86b2526-b9d0-4bb8-b829-8076151dffba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde78fc6-b8a2-4933-bb8a-af311db9cc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c203b79-aeb0-4704-8d5d-f5ac7f6f1989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add92407-df95-4d0d-bafe-68bb9b76e0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd770c05-8c95-4af9-8e06-2be30c010aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88734931-6ef3-4db5-81b7-ff2c51111ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69835e4a-cc2c-48d3-b85c-94099be2db9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.7.129.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c82dad8-1296-4894-b486-bf8cf540acae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.76.187.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542431f7-e96f-488d-b334-0f73946214cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.82.45.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b260dbae-40ac-44e2-8b30-9916b47189b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a459ec68-adbd-4921-b32b-8a86252a03b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc50d121-ee9a-443d-8d82-05db4546e66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102fd1b5-0b6d-4be5-9cbd-6117fded92e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6809bce8-527c-4ac7-b925-75f01bf46f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9c010a-16ff-478b-b8e8-556b1221f51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03a751b-d9ce-4126-90a5-36dcfe3dcfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0ca0be-3023-4c97-aac7-127e06baee1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7643f5c6-901b-45e4-897b-352c3b969854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.148.216.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefa5f08-a47c-43aa-bdd4-caa1060043b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.150.120.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2500d4e2-6be9-4a51-b309-f7602a6ae42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.170.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024c81ff-7271-4eb5-bdbf-22341a1107c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.68.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124b0a9c-82a7-48fa-993b-3ef88699ec9d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.203.11.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21673897-03b0-4e67-abee-c1d9439f8030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.205.118.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfaecf6-6952-4aed-a115-8f927ff17ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.211.73.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933cc0fb-27b2-4fb8-b6aa-72c98cc0576e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.232.11.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a219fa1-f5e7-4404-aca4-cdac8c36391d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.101.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff598f76-86a5-4dc2-b22d-21465db6c76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1543e9f7-e878-4593-bde3-250972716e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.41.18.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ed98ef-fdd7-4fb7-bb27-5536e5eb9300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.41.72.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b75967-a48e-4366-9f39-8c6cabf2d002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.44.238.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2245a6-ea2a-4d53-8d3d-1a5bb281c73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.46.113.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f5f2d2-d67e-409a-a268-b51ab80b810f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f822a207-afd3-495a-8545-1ee987d8f304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.9.13.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7558ce-5ca1-4466-b5e3-c500ee21b4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.129.7.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9576aa8c-d914-4599-89ab-8bb1a1dcfa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b56be93-159c-44fe-b722-db4a2cd80117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.237.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac2074d-ba8f-4f3f-baf9-0440ae941590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.159.53.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5957b1-d25a-4278-89d8-c4729accb48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.196.176.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f8132b-beb7-43c7-a7b5-33367426fd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.224.164.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca35ae5f-c83d-4440-be65-b33602e9df5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.128.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3facf68-244d-4a69-842c-96433e53162e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.227.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81188b8c-2485-4f6e-8638-97c8ab10d70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.248.81.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fc8c98-dec6-45a1-b1f8-97f879ddfef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.65.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf68029-0e61-4e55-bb91-b8dae9c61427", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.47.220.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34883b1d-3952-4b03-8501-43872335cfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.51.167.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c42da1-ef95-4415-ada7-c8b7cf75edf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.55.104.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f32825-1aa1-4103-91fa-9ef2872b6bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.7.55.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3ce22a-69fd-453a-823f-b9c46aaabec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.212.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541cbc75-d5d0-4dfc-a2d6-36cc12488ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9087673d-2d40-44d0-a642-3ff63f3af7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.103.138.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6041ae-a814-49c5-a9c2-976b578238f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.64.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d0bcb5-5af7-42de-af92-01e74a81a4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.76.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfefff7-a1b2-42a4-b6c6-37ddf5ea8c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.56.68.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bd8475-c7c5-4d60-b13e-18bb3b0d2084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.159.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f9112f-1b05-43e4-9fc6-ea03a40fb1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.192.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a0b3ef-c791-4489-9713-1f5cf7f6c108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.195.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ab15e9-b8f3-413c-974a-d1e07896ac20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.54.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66391f76-3bef-40fd-b272-f8e8e51d66c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.190.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d4856c-a195-40b8-a8f0-b37d5c093129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.191.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39852971-a4c6-443c-973c-c8538d159b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.182.219.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7574c4-7dc1-471c-9637-44473792ce3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.194.153.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276d7420-e9ff-4bb9-90a5-50ed8e7fb1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c205aa9-d0a2-4e63-9551-47433e895779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9dbd81e-26ab-4fc2-b37f-a4f014be1e7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.228.83.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09fe1c7-7dbf-429c-8568-7d0a6517333e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.135.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2869f751-f909-4a72-a7f3-8ba72281ebc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.231.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844f78c0-c84a-47b2-a752-0ae59de94e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.61.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f3847d-2097-4810-8492-d95380fddcfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d7eaeb-7bba-4b2d-b085-3fbae2d5490f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.32.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54895ff-4fbf-4247-80c5-8c2a507eaecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351f450c-4c09-49cb-a3cd-bda037088864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee87c704-7323-474c-8c81-77bd43d6aeb8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.121.200.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f6f7e2-75c1-418e-ae92-a8c823f0f03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e889f3e-a947-43a3-9aea-6d2dc60a41cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1316f709-3ba3-4e8d-818b-c0ebdaf586ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35dd92b-eddc-418c-84ef-7943a26c8eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dfca7a-5192-47f2-a054-87db5036986f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52deeab6-03fb-4a47-bfae-5fcc71c56365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df1d4f0-e47b-4f1f-a07c-9eeefd96bc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe483d2d-82a2-4d69-a38d-4a22ddafcc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1669ef00-2b6b-4f34-a8f9-14e9bb3d13df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757cb709-71fa-4f88-a189-450a5cf27bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1715120e-6853-4c72-9ba3-486d1ff0d09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c151bee7-885c-4f0d-98b7-e283974b686d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62fae93-2546-417b-8b22-d007c4dc422f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f373b87-223f-4902-88db-140a88d13237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbe12d6-d5a9-42b4-b03c-926bd56f613e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f76e64-e153-493b-b874-2d90d8d53989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b306b2-162d-4300-b79d-4490dd53701f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e87f41-8c32-4acf-8850-0f9aeddef6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4661a3fb-f078-4490-8639-b2afbbc993db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef88c65-a437-4f13-891c-8d6ef14f2bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dae8d5b-a11f-4651-87ed-c4c5f9415a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b950bc76-d33d-49ed-bee4-94dab4010716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca0c58f-fc55-43e1-a45a-6a0fa0e9c356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef5a313-cbbf-460a-a8a8-1333c4d8966c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c30f0f7-5672-434e-b309-75e8549ddcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c313f65-62ac-40f3-bf02-3e10311a7fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b4d7c9-edd3-492c-a104-f69d6122f652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f187c1-f46e-4528-ae9b-b611d7e413ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f21684d-b48d-42c1-a3b6-136ddb776eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658c705d-00b8-489c-bbc7-c88f53c43f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42b7257-1b6b-43e4-957d-2273f755ba42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f0794b-fe2a-402e-aeb7-2c6d0234f16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.86.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a802ca62-f362-461d-b2cf-d5053d102922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cfd161-5e2e-4be9-8bdd-0ceb97f19e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec6f41d-6add-4e86-9435-ed3897e85967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb865e1-a16c-4834-93d6-6e330abcb0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.177.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f928aaf7-73e7-4218-af76-c7d0b77ce33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c7e231-9a16-47b1-a9f1-31f79adede79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.75.94.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4503c5f8-8c3f-4088-bdeb-93c78d551378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.137.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a55e9b-3691-4194-8261-ac1b4b947775", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd916a0-ea89-4b26-a31c-6b1b72910513", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8778e4b-2a2b-4dde-abf1-0019dab018c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7152425a-c56d-4032-ad98-107051c0996b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828c8e30-f161-40f2-9fec-080eab5cd34e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1223947-1730-4f05-8f8c-ba397bfa7623", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e6944f-5e8b-4170-aecb-674d6e0b4c61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c076283f-3cc2-415d-b3c6-ef9844f8700e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b2bb86-9084-47db-a3ad-ad693f6be9eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c7c893-afd9-4c57-8316-62cb59fcac43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69560675-2c48-4a8d-8ddd-23f871ce132a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9fba48-2dca-413e-b9cf-9545ea3fd80c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33592366-8ff0-4949-acef-677fee65c990", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3644eb0f-a33a-4b18-9f9a-0b3449d8f402", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f70ad34-8673-455a-8f07-445597337fe8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c13f106-5a37-4223-9127-2550dba81f68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9155fac-01ec-430b-ab98-85491d121c38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72197b2-f8d8-4eb8-9c1c-834dea8b9b03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c7e7fc-642f-4ed2-87bc-4739b075681e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2160a9b-8f24-4f5e-902c-da6c551a880b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bb4e36-fab8-4d46-bc23-f2d137381675", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2908199c-f871-426d-9286-081bc45cacb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56b1f57-811c-464e-b597-0bcf052e8955", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dc903f-582c-4fa0-9936-c94ea20f2845", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67044120-6a51-4135-b72a-b8b1913e2be7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2438b35a-c17c-41c4-9363-1ad3bd62fa89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa497268-cfae-4208-bda6-bb73c84a8e0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc13f2c-d79c-4ff7-a836-a09afb95a29c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f734f9-5870-4604-97fb-b543b592e710", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47d0078-db34-48f8-80a4-969ac4ca01fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b30b4ce-83fc-44f3-a770-32bbff2fc402", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058ba301-e4ad-43ab-b619-e61b4d1aaa61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de330cc-8e7c-4dc2-8ad4-5382074958a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b97132b-db0b-4131-9bd4-c7fdc82fd94b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded58156-7724-4c4f-82f7-9919a1fa33da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9af41f-5255-4495-8bbd-588ce33e93f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08367a42-0181-4543-a094-ba54aa259be7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dfe8bd-a230-4510-a54e-59d2b6a4465c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc30b90-ca3b-4acb-89df-700ab65f5fd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cedd3d-48a7-410e-8b23-bc30b304006e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbac9a2d-6811-43d7-b8b8-d741c7510f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.203.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f4a01b-686b-4586-9d20-30870f4fa84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5538e249-3644-4036-8e7e-d2af77bb3c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.207.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98c4f0c-8dc2-4ad3-ac1a-0da8655fe198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee85c168-fb08-4b37-8a2f-c062a4d73cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.106.128.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e5dc36-3bb5-4946-8c7d-7ead1c529993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.135.58.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941033aa-64d9-4939-bafa-6a304f78cb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.158.159.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b361f0-395c-4728-863f-cc2d854d1975", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.177.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e5215b-9079-4ff5-b3bd-abf8f241bdde", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.147.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d450d979-c5fe-4f61-a9b3-838163bb03be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.232.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b841074-41fd-4949-aa1e-52202d2370f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.21.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09620da3-f99a-49fc-bbab-c0c7bdf02366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.180.54.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7161c031-2819-4c09-b1ad-54c90e60c9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.2.22.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d61b941-1658-4258-b2e5-f91e7e675e53", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.234.158.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5633af5-fb3f-4d10-b10b-3167018f0e0d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.234.211.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3513bce-6959-44f7-8ee6-4a0034e0f1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.7.247.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2102c8b7-eeab-4204-bbb9-36a8daf48e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.85.103.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32615199-3928-4f2b-8da3-0c9b22d7fa82", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.98.214.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b823cc61-312b-41a8-80f2-4a635d486dae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.87.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a90a080-bac2-4a5d-9b53-8bfb4493beb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.207.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4912bcf8-d7f7-407d-bf50-e1952b5fe0ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.214.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf251f3c-bbf3-4f29-9b37-942881e4ccf1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.60.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e782a782-bfcc-472d-8460-984212ad4501", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.61.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6c4721-0d63-4a90-8953-3de070452e3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.69.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e74d815-eaa7-4904-adbd-3d9b61b02e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.112.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7103753-d1ad-4855-9ca5-90fe95bf7ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.114.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdce478-f437-4a97-8937-f8822bf8cb2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.53.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d8550d-6edf-4298-85a7-c71c1256c653", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.211.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fe0e50-8a75-4c10-8d5f-eb9654b4f7bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.12.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fccfd68-d55f-4ca0-9819-4b247a9c315f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.26.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66003a4-2e1c-4788-a32f-0b67d4ea8ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.179.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ae41bf-f92c-43a9-8c9d-a00dabb2c85b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.116.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570a0e08-4669-4ca1-bf8c-3147fe0c3f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.158.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a181d8c-b523-43da-ab47-43ecb98295e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.168.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5208521f-6a1a-43c9-89a5-9c18e1352b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.2.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2a0ed8-cec8-47e7-8f11-6c810e2b1e35", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.83.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdfbed5-d004-4a5c-98d4-7a31b9f9c56b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.163.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0de760f-5fe7-4608-a076-620b861d12e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.96.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca029683-973a-4dbd-a9b9-7bd4a7b739bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.109.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3b2f06-e4b9-4210-807c-a2a298812013", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.99.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c886416-0384-46f2-8080-1b7e53b47681", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.104.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f00095d-6097-44ba-b01a-f4d10a2741cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.107.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940c0a85-cb5a-4e5d-9bd0-dc53df9c0397", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.5.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a401d485-d4f4-42c2-aaa0-f3a055ae6165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.191.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3ef623-c6fb-4f89-b4c1-dcffc9fe04d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.125.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1df2d8-2c9b-4add-89d0-9857fd0aac15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90a1ade-a235-4b2d-95b5-f259ac9e7252", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.3.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec069d7f-052f-46b7-9d20-29ff70f8dfb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.244.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94bdf47-de21-4f1e-b2f0-d871e0e904fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3610b2-c71c-401f-ba22-3880afab414c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b6a8e6-e7d2-4cc6-96b1-1e6f323a7129", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29d616c-dd1b-4d97-9d72-62da8da4f05d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05c09c0-a8fd-4f36-b231-75a724322752", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bf69e5-06dd-4c4c-bc87-4393a7c5afcc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de318a25-3567-4342-a254-dda034483032", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be108bd1-31a3-4545-b530-813bdffa8965", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1635b5-d170-445c-878c-24babe8cc26f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.187.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c658ee3-6379-4235-a1f0-a5bc1fbdbaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16685bfb-efc3-4ccf-98eb-d4dbfa453def", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.36.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f51204-71e9-479e-b625-c8bcdb1cae92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.39.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1beb23de-31d2-489d-940d-698403155862", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.45.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b19a247-15fe-47c7-9741-b6401a48002e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a0eb6b-9872-4cdb-95cc-a38fdabc2132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dbf987-8827-4124-978d-2bd2ae2e49a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2c5258-ceec-4cd3-bf38-cfbe4e2bc528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2984c62d-6b0c-45f5-ae57-b7429e0dec23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce84d9f-1140-4580-9d02-833584280e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8e02c4-7915-43ff-bb0a-4238a54e7bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7369220-9516-4602-a08a-bb2e9066c26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5e407e-c24c-487b-8ebe-1dff8ea1694a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc1f547-893d-4926-a01a-a5dc593afc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87faec33-8614-4878-a449-6b1148f5f6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4776d6-55a9-4e45-8a9e-33bf8837ebad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7adb942a-43cd-4cf5-bfef-c57c84fc2ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cdb090-1769-4f29-bdac-141568a7b663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06c4f92-2494-416b-b7dc-f4e516abda32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3393f76c-aa91-463b-a17a-2b80661c9095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50681a44-1fc8-4be0-9ea5-4c9dbd7cb862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab347d7-f006-48bc-bdf8-31a4661d12b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85391e1d-06cb-441b-8255-5cd3523f8418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39d1bc3-828d-4937-9802-0b2ab59a3ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4b010c-76c9-4aae-bc2d-68b01edb0441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3e0643-b250-4bec-9e7d-5f800048b67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99077513-ba19-42e7-8ab3-7bd83faf6e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8bbc55-2705-423c-9dba-28a9555cd712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3e8ef6-9f7e-44e2-9e89-0343b96d1c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7901564f-a722-4ca1-9a19-a08b2c1a0c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673abaea-9d14-4333-b660-4d4b4ca44238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9882692-7398-41b7-95a3-b5ae3a9de84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ca3757-d9f9-4a75-91f5-53c1083d3cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017c163d-57ed-4c1c-bf35-d9a896c590a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea50f02-6566-4084-be4c-9deefd217be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d285731-2104-4718-9e7c-14c22af82836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ef5765-18b5-46a1-9813-58c9748b2976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f646a7-b3d4-44ac-bb0d-43e73292598d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9796328b-6b03-4a96-81bb-0864a890c47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bca27b7-abed-4b8d-9c7e-f366a4e58ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83411dde-32e4-424a-bef7-44d425935763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109b5ec7-2f48-450f-8b79-5ec2c50ab788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb568bbf-af22-47ff-8017-7aab0674503e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd9a3c5-e857-477a-b6df-dedaa3d795e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedc5a90-6db1-413e-844c-6ad40fc0c402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82aac72-f688-443a-8c1e-cd80eea56639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c29f4dc-d4c3-4f0c-a95f-4fa17e3ef45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101de45c-3ca8-48a6-a3ab-fa2548c0f3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391cba39-46cd-4035-9b61-55870b7333fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a547397e-9f59-4615-9ee2-d3051880f8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878dba39-4f7d-4cbc-b534-f2c9853ada18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f4c4b9-4a4e-42ac-99f7-d95a737d22e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9089e711-5361-43d0-b50e-4b2a96deef5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66917d97-123c-4aad-8bb4-80d2ab1e40e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebea8da8-a71d-435e-ac5d-8bf95fd7dbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90a115b-3c5f-48ee-8d15-ed90e4888d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84dd97a6-c4cf-4daf-93ff-d6657fc12f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2534140c-0c8a-4bc3-8207-24f53e5384d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccc64bf-e94d-43d7-81bc-19b02e5b90a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4ca12a-da34-4b5d-b369-f6f67a9c2ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799163fa-2cf4-42ee-96a6-8f93f577de7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfd5b0e-3ca1-41b9-a7c2-9b55675c28b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128a851d-a3c0-4480-ad08-869b98fecfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341fcebc-e66d-4810-973a-828585444fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b37c2e6-720a-48d9-8831-935286d48122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48de0abc-4f09-4231-8d3d-76320734c4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589c86e0-463e-4bea-926d-9ac88aaa95e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63874561-9b10-47d6-9774-aad140188c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73110e83-8b1e-4df0-a9c5-9d61467ba16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b251232-9ca7-476e-9a27-4753b7b27089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db83d01-c9d5-45bf-9e72-5c84b051258e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d005e53-bea4-4c25-a472-a63b9af6d3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273f32e8-05a7-490f-8ceb-46ceae6090c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48cc4fd-41d9-4d51-906c-4ac3d809afc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8909aae6-32db-4949-a141-ea013b7b8bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d638a6cd-f7f5-417e-b833-382fd2ff1d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e8546c-2383-4475-a496-b026d4c033b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deadd5a4-25b4-460a-9fd6-5b3534724839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a7e53e-3228-405e-beff-d823ba5bc9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83f6bef-b4aa-4660-b5b1-154b5db1a3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37ba455-1580-4265-aa7b-c28f4227ba30", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.193.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454019e7-7865-4704-ad8c-b018f356101a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.64.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fa8fda-acfb-4184-bd17-d0d8fc36aab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.242.211.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b4bdd3-f5e1-41c5-85db-3225974ec113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a211b79c-874a-426d-bc80-7dbf610e78e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7ab680-90b5-4ac9-8157-b5bb070a4ef4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.185.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd9365d-95cf-4ec2-994d-8264e035e6be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.193.102.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc7e1d7-4503-40d2-bd3a-c7a4d2c71159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.193.2.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31a8717-fa93-4c4c-82e1-1a4a85419a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.198.180.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9108cd-c113-48d0-9f19-38012ccd9d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.200.34.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5816e9ee-26d7-467a-b332-4a9d90c66765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.175.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98df4169-ca20-4bad-8178-c413d805c67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.197.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaf1e4c-f41a-4aee-9ced-15b00d6ddba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.217.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3e1e9c-c29b-456a-801c-111d702022bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.93.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f2086e-b8c5-43bc-957a-c948e89b410f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.103.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa50dbc8-8993-4ca5-9299-72b35caecf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.204.139.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31c5138-78ef-4b55-904b-1396642d8c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.49.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abe13ef-5edf-4348-b934-a5bdf9959c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23c978a-1a23-416e-9e59-0baaf99b42aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.217.24.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f40467-4ae0-41d4-9b2f-4bcd74a6c36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.223.73.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afc1449-3f5e-4e05-94ca-6a185f6058ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.47.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc66c837-2a94-41e3-a659-9122411b94ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.59.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a3dd23-4329-4dd4-9e28-a4b369025a42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.12.3.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066dc392-5125-4c77-99ba-dc38791b53b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e18947-7bb0-4666-add6-95a5990a09c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ecf42e-9f96-4b89-94e0-bcf19a6d080f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ffd53f-e8e8-4e5a-8f89-56ee8f6259f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c74e2a5-5e26-4a68-a619-65efc5414861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbb745b-bd29-42dd-b2d1-22b57cbfcf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0488dc76-d9db-404b-a0cd-fd8cb9406954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bb6d6b-b27e-43e4-8644-05c0cd856334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497d5002-0e19-40d3-bb55-e33416baaf0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23596100-9cb5-4815-a32b-e9677ebf6c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d5ec77-f195-432e-9a15-ed53adbf79b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8d6e95-9dd8-4363-9f2a-c0e0e1065f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e273f07-73cb-4b09-8d6e-257949dcb60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9742b0bd-1bac-4df6-b5ed-75cbe1b1f107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c89f3c-b19a-4e02-a99f-c27fa8369804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4921bb29-7f99-4d91-a1cc-e9aef1ce872e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78f6493-df22-4834-9f22-4b00b6f7099f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b03ff8-5454-4b88-9a77-d456da3bcf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff77b31a-dfc3-4c5a-9a03-625d738f9776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585a235f-bc36-4403-ab30-78ff7f2fe81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48aa96f9-c608-4f4f-85c7-407d9dce7f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4edd723-5593-4d45-9133-1cdd99e379a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53472a5a-52e9-49f1-9c0a-ef5be0329b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c8f84f-9af1-4585-89d2-6e34d66c2274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.3.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849c7743-138b-4b27-bb2c-6e595828f393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.31.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a3a87c-0aa2-469a-a670-bcb4c22fa78a", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.88.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9545b2ff-5de0-4813-b22d-b17beea7c201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.81.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cc95db-07ad-408a-8e71-918355c83e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931d181a-2fd4-46d5-9777-36407dfdb4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2695ce7-9b23-4605-abe4-799fadcc76b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8730c2d-a330-4d54-928b-4c56c6661926", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd18866-170c-4145-86f6-e8776d457b73", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e385875-dc64-4e5b-9156-cee1ebb2cbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b1d209-0ea5-4355-8559-54e312007baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629c9e22-f970-4241-ba6c-302711c3145e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a40d4d2-f944-4128-863c-d41465c1a65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a20bc57-9d4e-47e7-b755-0c3940075913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9056df8f-991d-4431-8578-cbaf54624e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.145.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdaa503-623d-4ee9-89ee-e58cca091331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7d2b49-d65d-49b1-a09f-37ef05ed0b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.147.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedbdf55-a18e-4324-9d93-d4ca89fc9a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37827f9-9434-40a9-8c3b-2153de1feba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfa1083-702c-4f3d-be19-8e695a50b7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd40eb0-5e31-4727-8914-17f200550d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3797d7-0389-4eb4-8d24-1a8ba02dcf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774dfa45-08a5-4486-8d17-a16541a63dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf83ae4-e6b2-4b33-8d18-f2e088f47112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd04ecd-0f1c-43b3-99c3-b0bdb960ea72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9a95c4-624c-4278-9c2c-0296247af653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76dd1a46-1a67-434e-a678-73e3baef0d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d133489-9709-4faa-9abd-6361b6d63328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ccb057-4422-4251-9d2d-1f4716995770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de773d85-9106-4d52-bb54-2f680390c422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9313c99-560a-41f8-b2c4-2864cffc9f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a65b7b-3aa4-43bb-9fa3-e3daa3a97b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae14feaf-5801-45e0-8ca6-b9239c0e87cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b65be7-4c49-4510-83a6-64720055dce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fccca9-5d08-4a8b-ad12-7c5a942e3b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5a0d9d-3ebc-45ec-8d65-5bf8e8e73164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cea642-001f-47d0-b108-c06e8709910b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244f26d5-b55c-4a9d-8d27-1f6e1d40c0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54a10c2-dddf-42bc-b584-5c45c64abdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b945a957-ecfe-4a8b-b10c-8455942d511c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60a586c-0b09-4d36-9c93-3b5e3d9f36c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5873d7-775a-451c-96cf-1f03e1665912", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93feb618-c64e-418d-9da3-91926840ef91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4877f7-8c4d-4999-91cd-07876fb8c10b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c651cef2-f05c-414c-9ae9-1a899ec79130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42da70f-06c8-4f40-bba9-b976aa994e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.157.112.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101d3318-a06b-4944-a8e7-f78db1aeedad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.157.112.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f46003-24a6-4350-94ec-4e833b779cf7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.39.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b332a5b-b97f-4c42-b5be-4fc69c6cbbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.167.1.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7cb411-0b15-4fb3-beb9-362421f58a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.173.73.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7a40c9-9f4f-4c0c-b4db-057106ed6af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.110.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b42347e-ae2d-402f-ad1a-3484b8417a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3a9a0b-1667-47b3-8a96-ac7c6051bf9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.29.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ff1ece-e5d2-49b4-95d8-cbe5519a38d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.140.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca65405c-5901-43b3-8a04-1e50ebffc7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.187.7.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849d453d-2a5f-4b04-bac4-29b2030bbc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.189.17.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68f4de7-55ff-4254-a134-e88f99174f30", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.189.94.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b91af4-9c9e-499b-8361-d3b49c1a797f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176aa52a-d93e-42a3-8c3c-8ca753b2dae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b9a99f-c9b4-4bf1-8b7e-1ce31ee4b289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6223d749-10c0-4d5c-95a1-33e616985345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da6f1e6-fe31-48c8-8ba4-7104b8492742", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594c7dab-ac0a-4992-bf24-58193e5b649b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.236.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88bb383-45a8-4b1d-a3e0-55a8a2af72a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8b7337-a921-443b-bd41-2b02e32d7f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311b2b33-8a9f-4ad2-b100-f126e004ca69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f7e2cd-d1ce-4e4a-885e-2c3ad0e89538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad94e504-7843-4077-8d84-bb7ba9106724", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476f0a27-b8a0-46c9-9c02-2f50c034aa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ba6c85-2dea-4e99-b650-10fba5a85789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfca68c-e6cd-4316-a802-e9722775815b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ab6c2a-4c47-4129-a0fe-422abc2644b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.221.118.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63cd426-d916-410b-9ead-74e956913cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.104.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09f31da-b303-4725-8b41-e456c895b8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b8a97b-362f-490c-ac12-c4292fff184f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00160b1-957c-4a7f-834e-b737eb643156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2edf002-014d-4e2d-80e1-be4e51f894b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba571c52-c45e-4a82-a91d-8f905ce9b376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.171.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fc88d0-58de-478d-8743-13ec42f8080d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.206.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1379dc-6db8-4824-8605-c13ae4dd49a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.206.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c04083a-fcea-4411-825d-7f297b4ee872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.210.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab10233-3bf8-4349-992a-86283c7cd9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.217.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf14f59-3482-49f9-ae87-a71984513da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.8.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59244f5b-8246-40b4-8c9f-ab7f3604ee1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.239.202.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cc9446-c9e7-4a66-92d8-0f89cf40fec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79921f12-6a77-4ff5-aa08-68130c6ea833", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b53a34-4994-436e-bd7a-3351112346f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff5b98e-0d35-4d1b-b5e4-01dc8223e82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6ceaf4-1e86-4fc0-9a4c-a8af4357c4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.251.4.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d636b9-9d0e-4546-a2bc-7d566f59728f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.251.4.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce95898e-02a2-42d4-8f84-004e17166baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840e4360-6585-4a77-bad9-c24c8f261c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7a71ea-faef-4d22-8976-ca1454d1e2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971aec2e-1735-4448-88f5-99bd8599d436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1cc131-c373-47f2-a06e-0b530761fa53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306c2a6d-909e-4a67-9cd4-409f8a2f393b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda5baff-b540-4755-89d2-db33658d3a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3153f5-59e6-4be0-90c7-e26887efc5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd8afe4-c69e-4ab1-a504-36072d5b03b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0efdeb-20a7-4d8d-a5a9-c9144a2ebfb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3798e7ab-be0c-4c83-9d59-231af5eefa0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b30423-f1fb-40e1-87be-738f86a57aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec31a6a-d68b-4e54-af47-fdf454c413ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b240c0ff-769c-43d0-841f-b4f180db5d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a30df3-73ee-471f-bc7d-9b519e38ef0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca7451e-12d4-4fd5-a495-36ada9f293f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.65.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b401c3-8af6-41fe-bac3-c39894f6a6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.65.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6adae0b-a2ef-4ce6-83b8-77b68c6b12f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.67.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90b0534-252a-473a-ac6b-e3b713fc4c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.67.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2476734d-f35d-4619-9da3-43837c419635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.72.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39bbbee-510f-4644-a274-1e63999acd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.72.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4aaa0b-379a-4a44-8f20-2f6049cc0258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.75.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d98d43-ff88-49e5-9852-63b64187b88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afcc466-1f60-4b60-8d92-f0c196060089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5818ab-d044-41ce-a8dc-c1726f37998f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.80.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fc36c2-6dff-46bf-908c-d04d29461f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352a4f3f-0c79-4341-9be1-bd0736da3933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaedffaa-e878-4e8a-8885-5c4c3a693051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24364ccb-d0cc-48b6-a3a4-57506072b698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0d466f-bd55-4c61-9ff8-97e40ed47c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3ae626-a1aa-45ba-8475-e41be145302e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb39bc85-b814-4b7f-8319-5af7ce15612a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d50326e-1852-4847-99f7-eafbb55078ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b46de15-e91c-4a93-9ffa-670e8985c777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a246fc7e-33dd-41fc-93a1-9a89f91a3df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd5149f-c58e-4bb9-b859-67c497866e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d430e8a5-607c-45ad-8a40-c27750d301e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3624e8e-dd97-4465-9370-7a36827168b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7f8706-2b5e-4df2-b8ec-18e6c20dff84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975cfd8e-3151-4515-90ce-fa38760cf6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfa81af-ad04-4b13-8567-db892e9c48c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.3.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6073483-6208-4cdf-b269-351497a7c712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.45.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ef4a40-8be0-4a92-b110-1b5cc7bfca7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca166de-c6c5-4b6c-8bc8-eac7c3ec08b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51855d9-e5f6-4923-a606-f83dd9e22764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac73831-1008-4fdd-8965-2905c2b27ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3048bb45-22f6-4fe2-bc6c-061cc45a0e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dca1a6f-2117-43ae-8e6c-163cac57dba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ad8c6b-05a4-46df-bc0c-dc4d71bbd86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7a9383-da61-4e78-b94c-ee8c5209d71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0ad1f8-073a-4539-afb7-cbe507986f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff128112-c966-4cab-8cae-0272d09f9a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af943fe5-afd9-4e9f-a3f9-866072b0c712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e0aec6-0907-454f-92ab-7ee6d25a4b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.158.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa096d5-09bc-469f-b26d-c80a9f0840d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.33.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a8fcad-20d8-483c-9a76-34487a696a72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.55.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daba9792-df93-4d4c-99b2-ceb82e6422a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.57.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd0f4ab-6540-472a-a3c5-eb362d258202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737f0599-9ca6-4941-abe4-14729db45cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94382f0e-3315-4783-b45a-03850fe2a0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8ec6e5-4838-4594-8c8f-a6059541bd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f500f502-15c6-4637-81de-fff10b565413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f60c7ab-4aef-4229-bbc2-4a32d9dec9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f532aee9-d3a1-4924-9e32-72cfeb5173b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62009c3-5a99-414b-84ce-360c51f80016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f39fe5f-803b-4d6a-9dba-e3ca4b750c2f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.118.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943be684-665f-442f-9cea-ba57bf6ce16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ae7d6d-464a-42b0-bb05-37107236ec7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba5d19e-36e8-46dd-8c64-e35cbc62fa07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b092be2b-9753-47f9-963e-61e22144c351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33375f4-8194-4c26-a6ef-e735ab173482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8527470-044e-4870-a6e1-6dcffada219e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.139.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc4233b-328e-45ba-8d09-be2bb1ce31b7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.148.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1171bb-cabb-46f0-9cb6-391c51204998", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.187.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56af5ce-dfef-4654-b78f-45260420383e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.58.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945b15d5-c588-47ae-9baa-40185123a4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.64.248.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d61b06-ec46-4e48-9e4b-8dae9ad23ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.7.98.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdb6532-4998-4c42-92cb-50435c538dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432cefbe-9baa-4b39-9ba2-435fc44a633c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ab1810-cd85-42e2-88fe-37f8d439b650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2220480b-2431-465b-b13a-10d8b43626a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bed13b-ef73-49e7-9722-b8cd3eb03215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06a51c0-dec2-46fa-8908-66d53fa0cf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40aa9da2-9433-4888-adfd-35d40b37bc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbd7371-a95a-452e-b651-ad036edd1835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232fef5d-162d-4cbd-a0d2-6b220960078a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af51197-2609-450a-bde7-0c22e6427ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276ed2cb-24c9-453f-b041-881f958b1f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35aca83b-985c-494c-b298-9f50f4bae010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b513b4a-c173-4ce4-ac63-382420805ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b214c1-c69b-4a45-8219-b496ab12bc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1ee82a-bae7-4137-b01a-13da2ee02109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e71218-588a-4c2a-967a-36e33da52aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29913e43-260c-419b-bbcc-03dd5868fa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471d041d-32dd-49e5-af63-6e7604c7f22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672d50e6-7611-4b57-bcab-a8967516e2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87df2332-ca07-44af-baf4-6630dbba6758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047cf75f-fcd8-4113-a901-e66f6ad8b7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87729e82-f731-4f2b-abbf-e28a51b5fd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c6384a-3079-4122-bb67-b7efd80beb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7b4f3d-c57b-48ff-947c-88bb8b1456dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b45c19-26e6-4943-a822-ea6a7936ddc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048362f8-9a76-4c46-b932-92f581dc63cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625bc55a-ee11-4945-a75d-ac694b5b264b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c300291-5322-40c5-ade0-f40d1f0a2dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b70aa83-7550-421c-a958-b0fd75a3ebf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4301dab0-b13e-4400-9b53-fd2af67e7cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa24bfe2-599f-4592-aa3c-6beeea86b612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5268666f-4da9-46a1-9e55-b8d2f2cb6d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44394e4d-983f-408f-b65b-1c9609820a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a42a1d8-e387-45e3-a6d0-4fea7da604ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb10d1ab-fc28-47fc-abdd-1ac8cf22de7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.170.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4521689b-b1cf-4bed-be84-a69e209c9d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afd12d3-48d0-4c02-b1e9-712f1756e076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f004d9c5-716f-46ca-a03c-a21456f99f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d68d44-de19-472b-90e5-a5c10091cc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bda779d-b57e-471a-9990-6fdde37343ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd7c502-fe3e-47bd-b283-6ad2ba6937e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ecd686-b5d1-4cfa-bcfa-313e4c229cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2aad011-1b6c-43fc-acd0-106dd55588fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadf3744-c81e-411b-aa1e-395614624a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04954a28-c88e-4059-a044-6b48f02126f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb733606-a084-4212-a10f-3337f56bb1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812c326e-8124-4c39-ab4b-62444512a665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec92828-93ac-4c69-9827-2a4f20657cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af217b01-cdae-4317-8416-42a1c4c9cb52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.2.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ea4dbd-54ab-4571-86f2-39d8792dd978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b3ed26-de60-4adf-b5b7-448fca279583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2af0648-fdc2-4732-a04f-c6175173acbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91afe54-b63b-4dc0-b9e3-b84702f5ad78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f97267c-0889-473b-a827-e9b314ab6095", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5569df-30a7-4256-ba69-738e77dfbfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea40dec-d8d3-4337-a993-7b01ced48c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a149e376-7f7a-4ab6-8e28-e62fe16e04c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c38c54-7368-4c6a-b696-c2db2bdd4ec0", "name": "Malicious Host", "description": "Observed: SSH activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.218.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe526d33-c756-442f-bb08-8976263514ac", "relationship_type": "indicates", "source_ref": "indicator--d5c38c54-7368-4c6a-b696-c2db2bdd4ec0", "target_ref": "vulnerability--a8ac0b2e-517d-46dc-b147-52122c9eff5f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7ba85de-22e1-456d-8650-b23cffe23ab0", "relationship_type": "indicates", "source_ref": "indicator--d5c38c54-7368-4c6a-b696-c2db2bdd4ec0", "target_ref": "vulnerability--2efe2558-81ad-46e4-b75d-1084cb911660", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--199189bd-5870-436e-af4a-0a56a3eff76d", "relationship_type": "indicates", "source_ref": "indicator--d5c38c54-7368-4c6a-b696-c2db2bdd4ec0", "target_ref": "vulnerability--aea727db-892b-48fa-9748-7045eb52004b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e80d40-5995-46cc-966c-f57f10230d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233549ce-8de9-4006-ad81-e3dca7671ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760fb423-8d19-430e-83d8-50738af4c35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0935387b-4ae6-4f8c-bd0c-61f8cbc0f257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4c414b-dba3-4d5f-b2ee-4195eb44afea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8443dbcd-87ca-49e8-9eb2-16161425966a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcdcf5c-4875-43dc-8bfb-88ae934977e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.17.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7384578f-54c6-4c3e-86fd-5a93214c63b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73db924-da27-4036-8b32-b74ab2c3c5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558340af-e600-4954-8217-fd20535a697e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53854a92-4579-4a8b-b022-2757d2ed5b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b4cebd-031e-44e8-8650-eff5f4423370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4619b35-6b61-49a8-940b-9dfee5f88e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a06b6d-1812-45b9-9842-f1f6fba537ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606c3c8a-f1a1-4eb8-a4ee-58c8813a7b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaef0ed-d753-4254-a267-8cbc3ada9f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcc965b-46ca-489d-87d0-094edf0e29ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728eedf5-6d93-44f9-b712-c4e1da933c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e62899-71d6-4787-bbd2-4c23760473fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb1949d-c645-4619-b52f-97a83369868a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1180b8d9-eb25-45c2-ace0-06099d692434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303eaa27-e80c-4264-903a-affb5ce3c949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddbb08f-82e1-496f-a7b8-cae9522750f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d680fd5-fa37-4dce-a358-277c5a16a86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6a05a9-eb4f-47ed-a4e8-617a978beec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c01e60d-a89a-4b99-ab8e-ea2dc4bfed70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4eee6c9-87b4-491d-b6e1-5e20cc59f21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf5cf5b-da2b-4fa5-a25b-319b5170dfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17e4d72-214e-4187-b08b-6051d3cf434c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870495f6-393c-4967-9c7c-69d511d90039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7f0dec-dc9b-4073-a775-854b5555bd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2eafec-bec5-4267-9bf2-6356a8fc719c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afb8269-229a-40f0-ba98-5501e49bd889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baaebaec-1567-435b-af81-2fa7aa32c25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e3a3fa-a5bc-44f3-9130-8060e1f2e05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdedff96-3fbc-4fc4-b4e0-e1efd07d532d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c11f0bd-e295-4466-af9a-3b153d5b8ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b5326c-ffe1-42f2-b633-621ecc3e2e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592eca62-4b1f-4c23-9169-371254de3f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d7b661-e66f-4819-8961-689c641273a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c649921e-c897-410c-b8b0-73d76ba95b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055ceb66-6899-409f-aed7-36bcad27b957", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.107.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af68b003-4b47-4aab-ab4d-bd0cd4cef59a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ef034b-a3a5-428f-add0-3b77c0ee8093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.0.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0409de06-08f3-4189-9189-3766ff6b8cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.89.30.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99935ce2-e9e5-4e49-8fb5-48b20aa9eaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d979fa57-59a0-4bb4-84d4-c7f1a0d0207d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.193.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88741d7-fee4-4614-8494-94c5e00ac065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ba1082-af4c-47e1-b16b-7e6f21750eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3352054c-32c3-4260-ba02-c45192527626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf490cf-5d4d-4ef5-af65-580f6b00fcfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.31.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafe356b-699b-4efc-934c-acd9eac442ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a44302-39ac-4c0f-89aa-251d5bafa640", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.198.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722294d7-8edf-4529-8ad8-eecec93cd1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cee8e9e-54db-42be-9281-01841835c523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342feb55-243f-47df-881a-5793d81e348f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab419e3-7dcc-4b47-9df9-cf7e59c739d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.34.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6968fba0-b203-4cfc-bc4d-43c55a5cac33", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.162.36.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdee734f-e2c3-43c4-943f-e487465355a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.17.217.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03db6747-a5dc-4d45-b62a-0316139434a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.171.195.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26429f08-b355-4e36-aa57-610fe6028407", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.184.163.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3fc964-800c-4af3-8a12-bb568a7d7446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1de7d4-f663-4c3a-a265-1e97646f5fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.193.68.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47c0d71-63f4-4809-96d3-888f2b6842c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.210.233.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04154617-9b07-4349-80ca-381689b9ba91", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.210.83.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ac55f8-ff21-4422-938f-69cadd677a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.249.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c2010d-697b-4152-bc30-5d65c5248157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.43.73.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab51429-e6f3-4a84-a128-1f38ef421373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.60.11.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72bba65-3683-4aea-a427-9d616581d085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.157.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9f2292-bb81-4a34-8d88-ee610273a596", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.193.48']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb53d657-86a2-4c81-9231-d9a927a69209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.239.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2daa987-46d1-440c-93f8-c02ef2affdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.100.91.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64d2f8d-95ad-436d-a31d-2542bb742806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.11.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e044761-f333-4752-9b69-2ce233ef22ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.102.128.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c72ab1e-2f1e-4eab-8b5b-b603025c11db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91bd72c-314e-444a-9a25-d3de2d474acd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69342cda-6c02-407f-bbbb-0c327bc66a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.181.122.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0946fda-e43e-402d-ae0a-07356ee69c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.167.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c642d3ec-ac19-4f1f-ae55-ed218bec1a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.169.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7035720d-8a2c-464f-8a38-a9995b6c5d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.179.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc570f0-1443-4f57-8866-6c9fcb8ab2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.194.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb55590-0686-4de4-8455-a9c0848e21e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.206.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f0b86f-7edd-4f45-9c2a-f7fb662551b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.37.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb254a2a-96e5-4887-846d-4fbecb487453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.190.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2516f4e-4ff2-46a1-aaa2-8ba684f57c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.193.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306e5e86-a4dc-46bf-b00b-d26f46cc6bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.193.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d336dc8-43e5-4f69-a56f-2005f1515ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.201.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee8c4f5-1872-4afb-b592-c98e10a291c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.215.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee27ea0-d199-42c7-b2f7-a60e5667cc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.221.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a4c019-3859-4356-a39f-fc6c67d6a428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.223.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9447e782-f2c6-4ad0-ad8b-25c6d14ed629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.71.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7797134-208a-4135-8990-b6084f362f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e0b3e6-2cd7-48ae-909c-cbd0cebd267f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43eafabf-f45c-41c2-bd24-36aa72d6ab3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.111.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae6eb08-1e3c-4d58-ba0c-4b1463da7625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.153.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adf408c-4d5f-4d4d-933d-d67ce7309545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.212.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0389ed0-bccc-4e0d-bfd1-315662f4175a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.220.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d526b81-33d0-4cfc-ad5b-eabe14b0a626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d729241-ec75-42d3-8255-944e56963026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.13.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c38d48e-f28d-4d35-8201-ce6b06651ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9aeb955-f611-4ebd-b8e0-44b482ae544b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b6a0bb-7a54-446b-87ad-fff5c863978f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae33099-d8ab-4f93-ad65-e7966e8fc0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd8cca5-fcac-486b-b40c-06234d5e5e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975d59bb-5d64-4d91-a683-756f29d0b62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce33e53-feb1-47b3-94b1-78de2fa630b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1d1d99-628e-4928-a31a-2e0440cc096f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7e257f-0f9e-496f-849e-0564e2c18a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6601c6-eb23-4a3f-aab9-b431656b3466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5c0bd2-1d94-4d39-8d55-f3ca603b5ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecaa01e-3bb2-4219-b938-a41a07610ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f28c0e-4c4a-4d29-bcdb-ef6c300f16b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1250002c-480f-4fd8-af34-d2df4797c373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49354a0-f7d2-43cc-9c48-5152cc5d28c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0142d23-3967-4ef5-ab97-fc390eda315f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3718c207-e761-475a-ba3a-c7d60ec3c182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a751bef0-626c-44ee-b070-e2eab7ccdbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d632ad-cd4c-43b4-85bf-41270efcf1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e40779d-c440-4fbb-9c90-a29f234c0a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5588687-56f4-4e29-b02b-d0459c68ab6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22b0f07-2bee-4976-8d8b-4744c66a5fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.82.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787423ea-d4ef-4e60-b7e0-77e619c04d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.114.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31cb401-2f46-41f1-99ef-7462fc2959a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.117.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43e63d9-6d11-4f8f-aa72-5a406480cdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac73842-47ac-4d13-867b-422a08d2b993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8839ba0f-1aa9-4c68-8798-4b4063de9594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1433dc-7cd2-455f-9f89-727284d6f274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9470e702-729f-4110-a450-feba7516fb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.133.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d201a78-3dd9-4769-aac0-654cc8dc1a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca12b17b-8963-43c2-afbb-1463c51f167c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75019361-b2fb-4dfd-8c98-1669be42ed7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7938b616-998c-47d8-b346-a25bda96fbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.140.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa493d4d-7474-480d-ac09-a348faf4c0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8a387e-6bf0-4e8b-be68-232fb55956eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7efdf97-6590-45ac-978d-8e6e2e4d764a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.148.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91f8c84-17d9-45e1-9043-b9929483ff15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f350699c-f9ab-48dd-90c5-e965565c26b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f6960d-2ee9-4013-a0ae-93e662132103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b98a6e6-a614-4805-a6af-2f7c891e4bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93fbd33-506b-48f7-986d-216ad9e7cd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4e880e-efc0-4d9a-914b-45a66447e011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e085c38b-d59e-4b0f-b645-b8e7a5007efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fb34ea-6c7c-4169-a89e-f09befe6beba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc18302e-3598-43e6-a765-de8baa26f47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1651cd-ed85-4faf-a279-5d54932eb2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.182.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4847efac-2799-4b46-83e1-7e3fe86ae372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.188.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad0c8fa-67cc-4a4e-b45e-c14d12c211bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b673c84-30e8-4f73-af1e-54a50086a2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb6a7d6-0c4a-4007-8f92-822d040c1ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca00f8c5-6890-4a4a-949b-1c17fa161508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a35eade-1454-4c72-8823-ec554f2b5a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.40.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efc8d05-ba8a-44f9-b57a-322baa37b529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.42.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3654ec59-326f-4eca-94b3-03c0c11ecdb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d49eae2-65db-48ac-80c6-5542ba745fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.50.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3eb988-465d-4088-8bb2-154c961cf72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.50.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a2219d-a990-4c52-a4a5-24cf173d4b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbbce4c-0270-407b-9ce6-9f6abbc4cffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639a4d8b-f450-463a-8072-4cdf552753cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c663756-7be6-46a0-9241-9ca6b7103f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fffeb49-dee3-4b28-a471-64143c8271a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d41d0af-e9ee-4178-a016-52042ecea386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bc4990-c562-4cd4-be86-ac1e8bf4c811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd081aae-dc4b-40f6-8588-0d16979c849e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.1.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4fd3ef-33f2-4742-9f90-ff096c63a6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8a18ed-e854-4990-8d97-3112a0f3ffbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de52f2c-162c-4009-9b5d-38b46044e8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.108.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59469d73-fe38-42cb-bd1a-5e534a1812f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.112.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b1852b-a9b4-4983-bc0b-c9f65c644f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.113.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b11d04-e082-45ff-bd56-6a1206f809af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdfcb98-5749-4d18-820e-586171777b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd313aa2-b004-482d-9db4-24a4de2b55ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7a7e93-5cf7-4658-bb76-3570f77804a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c3732c-1466-4051-91d3-00da3908b0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec403f5-0b97-4080-ade8-22c950a4a1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6699943c-bcc3-4e28-8fb5-add4b65d7fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a38fdb9-fe32-484a-9c7b-0ccf6636cb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bbbdf1-310a-4038-81bd-e7dd19fa3a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feffada7-96d2-4128-b6e5-d2819e546bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cd58e9-2e2e-4b5f-a940-586ae3a022ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da21544-42c6-4acb-b7fb-47e75b69c5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1719179-2d62-408c-85d1-3a109730eab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdb430e-eb9b-4780-b4f4-e1aa9d905e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3f7f73-3fb3-4abb-be2a-e35f7eafc0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8317fd2-4d04-426d-99aa-dd2675e6498b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50e4eea-9617-4e23-8053-4f4fcbce8def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af16b979-470a-4101-ae83-323bd8f1f01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5316993-7199-42d6-8acb-b9e1934fbdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a59132-5724-4098-b635-67093fcfe74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc753b1-7417-45c2-8769-54bdfc1d47c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0bf925-2eae-4e80-a670-d2158faa81c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9972ff6-2521-40f1-9d75-a15b6af30cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e32485-d033-4df9-a9f3-6969f1451954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.167.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c46f26-8996-4620-bcda-03d09bc27ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.167.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d47d40-361d-4730-ac75-d8d254461b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edfb3ba-2567-46e9-9ea2-0cd49e457d85", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adb0bab-274a-4e44-8942-9f9322ef8926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b3ffd0-6cc0-4801-9a2d-2efb3897467d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82f9318-3155-4986-97ad-298854d58d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a902c19-b834-4972-899b-4e9ff05f3d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063d61e4-6562-40b7-b8fa-2dc0b8dde2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766b728f-eb8e-4e1e-89dd-ae27f15664bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21a12e3-0e12-4705-b461-566a24a39dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29da1be5-45fc-4aee-a829-cbf20cda8ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.189.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a1cdab-7fdf-41a3-8af2-9b3fa60a092f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1703fc0e-4dee-49e4-8b99-d9feb9290eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805bf1ed-09d7-4def-9504-9a0110f9b8f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.241.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3636bc-e2ea-41f1-9ccc-ed20835a7d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dcf1c4-116a-4fa8-912e-a52b8126ccfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d912615-a877-4bec-9322-79e9aac9e23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801e75ad-47c5-4d83-9aa9-9099f844a049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.245.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff164e0-3c0a-4cee-9ae4-c48d89c3f270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ccdc5f-50b0-4d87-9cef-e665b94dbf7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912e1568-26a3-46ed-a614-84fa318f9806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fd4efc-d2a3-4ad7-b2e3-b5c68481456a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68385f4f-a525-478f-9bea-665520a50940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ac1381-7af6-439f-a149-2599af93d80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c81e42e-2df3-46e5-9c82-d74e07d6d4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.34.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff192da-9e69-4edb-a3cf-3a17b4a7351e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.37.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bc8aff-e4e5-4ab4-a233-1ff7d2d980c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.43.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abafc70f-df6c-404e-827d-63c4221812ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.47.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515aafab-ed88-4788-b210-b5bf95f15491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e98a2cd-78ed-4a79-b34f-e36329c83f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22041885-9644-4bea-8553-9eb09e9a9070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.50.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64948b3f-9e49-40f4-bee5-dd19fcf13a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.50.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a98677-50f3-4740-be7f-5184563fbc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.53.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d04ea0-ad2e-4863-86fc-36f95949462d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813c9063-8450-44ce-a0f0-1b46e41a3265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574c88b7-e7f0-4bde-bbb1-cf32cb08b29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a664d2-8e48-435b-a874-9bfa9c4dffad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.57.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fac8c87-f1c4-477e-9dea-c2d56bb992fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.61.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba7a12c-505f-454b-b284-b8c0d95a97f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.63.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28f6ab8-cc78-46ba-b54a-317b24b27cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4f826d-1cba-4f0c-860e-feaea5b4ca7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94fef29-d9e1-416d-a866-e6e5dbf48115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ec2db0-8066-42d4-aa94-500b6e2e03a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.71.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6655c049-cbdd-43e2-a300-e6bedf450f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.72.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2915e5-816d-429a-8372-ceee165487e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.77.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992ededf-c194-4e9c-9ac6-42f13b24ad37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d72dd4-adbb-41a0-a7db-7b44ba0ea2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.83.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d33ea49-4db0-4a58-888a-41d87df429e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab99233-fd7c-4336-8969-24f49eba0396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdb8944-1a65-4288-8f6a-40945ba8c1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247bfd62-3e5d-4723-8ae3-a8dbc4b9bca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6807dcd-8ec6-46c5-9c67-ddb0158636f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a24ca9-cb6c-4c9d-a454-d7941df7c8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb14863a-1551-4f7b-9bb3-147867b95887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ad029a-dc64-42be-94c7-11ae0a5522ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf83b345-838e-4254-bdbb-65369b197a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.41.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9294aebc-7c1b-4b5b-b531-ea68a646259b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cc895c-e1a5-4975-b513-59ecaddd5800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95656d99-b3a9-464d-a670-41df96ec4f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.14.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255f72ed-9ff3-4c6a-8d40-06b4ff522666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1308b135-0366-4f71-bf0a-03b294b28ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc389d8-9cd9-41f5-97d9-42a55c4e2665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a89c497-bb98-4920-adf9-ee45cd5f86ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab522a15-e805-4734-9adb-919e8a41a3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1d789c-b0c9-4b6e-a5ea-3fcffe532484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c700e29a-b7c5-4559-9261-2886df71baf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56551281-bd51-433b-a011-c0bbac870e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c60073-a338-43dc-b8f7-5c11400b1a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115f410f-cc05-4f24-8ab6-30a27cea10e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce2c86c-21df-4af5-b88c-c32c247f77a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.178.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008fc77b-c0e2-44fe-8f71-1be9a9d1853f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd5f2ea-134a-4c2f-9cf5-8e4b063717ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46308d73-fdbd-4024-861c-82d3618d27fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.182.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c68acb-c6cc-4c25-89db-cdfc965dbf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44f723d-0cb0-4795-82c6-d5040f33d222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45602c8-8a55-4bd5-bd4c-e0132d44922c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.20.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8734b169-38ff-4544-860f-64cde20243b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64423b99-45a0-4933-b54d-67d3b5e3b817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e593cd9b-827f-4a32-baac-029996726b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d78c349-4681-489b-9adc-3ebce94dbcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.207.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362a70d4-9e94-421c-936d-88d83b594373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d94881-6de2-437c-b575-ec0426c10737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.215.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec7577c-513b-41a0-819f-5c7149c749c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981f1a2a-7660-4b1a-b760-d12151fd357b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88e001e-4294-4933-a8da-b746fe6ce94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cba627-d2bb-4d83-aba1-cd0f70dad79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdf3daa-01a6-4690-8c1e-5d4f9eae3ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c892ca-d1e3-4b2a-be71-8fa06184551d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.249.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646dbd10-2211-497a-bfe1-0e49fe69fc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d126ae38-0b41-4ee7-baf2-1eb33b394d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4050512a-cf34-42ac-8861-64e9544874fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfd1b51-7fd8-4463-a3f0-03c26139a87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9879c16e-23bc-48fa-9212-41f9cfaaa84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c3f7ca-8e87-4bdb-b1f4-9908310075f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c996e02-c8e3-48f7-91cc-108c122c0858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.41.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ef2e8f-e159-4d80-a809-a36454415bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e241608-1367-4d1d-9df2-4480470fa8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d070de34-e2d5-4d40-b2e6-0c20cca88a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.67.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af44b76e-5728-44ac-96ab-aa1de304f204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3190a0-607f-4e0f-b62b-2491824ccfe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149156e1-1304-43a2-a817-28b271dda8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.71.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f48077-a5f9-4d82-b6c9-c70ca7cc4313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.93.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1d84be-c9d2-4eab-a5f4-1c2e69587fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.1.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8453fbae-e3bc-4820-8741-39b2a2a109cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.26.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9006a214-8c07-45bd-be61-e848b33f1e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.54.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fcaec0-42b8-4246-ad91-e66fafc8bf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.56.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1b7eed-5cf5-4004-8084-1a4958158836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.71.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0107f09-69b2-45db-98f1-6eab0c40e262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74925ab5-7470-43d8-a076-0b4150f6b84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.192.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd70d58-40b7-4f01-a10d-299f74588d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.194.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4a7426-e43e-48e0-bce1-4fca3cc51edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.196.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d345cf3-b5c5-42cd-b921-23c288799b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.198.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be0a528-a5e9-4218-9dec-3952a13494ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.198.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4240cf1e-d09c-4a75-a4ec-9a5a3329b504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd06812-c08f-4af2-aed5-e96b965bd084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ff3a0a-1724-4f5b-8678-4230bda2c2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c18b6b6-6751-4bda-b136-861f63b275d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ed9705-cf17-4271-9eac-5ef9c5b5dfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18387211-0d25-4b84-919b-e4e5765910f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d262f00-b559-444c-a8c4-6ad4be936eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13be8549-ef7b-4c91-860f-9c6e71721e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd0cb1e-5a3b-4059-9f36-979a4154846d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d153f6ef-fcd4-4b5b-ad19-edb7e9843e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67124ed-2efc-4da3-b088-37df23a6a53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5279e7ae-3bc0-4f91-b88a-64ef99cbdbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.232.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a97ac6-3ca2-41c6-a174-72126a195bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4221c5-0370-4da8-9bb4-33ac4b00c069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844503f3-c2da-4a92-9e20-04a9ed80ded7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc74452-67ef-4ed8-97a3-dbc022666375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242f4b3a-bb28-4ca4-aad8-9bbbe4e5ddec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9b3879-ffa7-46c5-adf8-0fdfc569af83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82a6a0e-0bd5-4835-829d-c7db5862d595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c409259-24f0-4b5e-8853-0461b7455027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e229b6-b3eb-4ccb-829e-e8cb1972dc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5b508f-f462-44e6-9195-f1e81c975d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b4b385-2885-4339-801b-2f1a39e31aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf426d0-dca9-423c-b287-e3800f9c1f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7834ee1-ca16-45cc-bdfb-112abae2ca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbde76c-b0ea-4514-8a5c-19a8131b6989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9f7ec5-1f18-47af-9a36-7b5f771a7fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a224f1-7440-40d3-b07f-20295fe95020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915cf61c-4784-465f-beff-5241ad735b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.104.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5466f0fa-a12b-4ad1-aefd-5afe5aee9d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1b4b2c-1a2d-4489-a8cd-a2128d7b2d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ed69f5-cfc6-4b49-9e83-a360adf31e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a03293-b2a1-4d36-a1d4-a757f164f136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb031949-659f-4b06-b7ce-c7f535dac0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d32e05e-63b7-498c-a112-d6255b47244e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef6a76d-4dc9-4c8b-a86d-f82ceb40bf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37fe967-3a40-4bfc-9deb-3539e072541f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497ec135-0aff-4e63-97e3-bed8c7520cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5f1fbf-a85b-4e91-a8b1-e8be68f61dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75eedd0-071e-42ab-b0d1-388371dc125c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9621a88f-2b50-4fad-9248-55a35ee19267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.128.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3a7b6c-f320-4317-9911-c26d466edcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95321da3-4662-4cf2-85c1-b9d2e3e4ae18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7390245-b521-448b-b985-ac44ab59911e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f84ba6-566f-46fd-a271-aeeeb27c56a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a70604-8e86-43bb-9557-d132e6bf5efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2cf737-e24d-48b7-a979-0b0150b02126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d11eee2-97e9-416c-944c-e72a25bb9e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615493ec-9e9d-4d18-b752-edb9fc474efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddbc409-836e-4420-a69f-9809052b8250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7637710-099d-4915-98ac-50618527c4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce557703-012d-4c0b-84cb-c7f221d894c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde289e4-a69f-4ac4-98e3-6da6f857057a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb7ddf7-0d75-48b0-a78c-a9d9850d81f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a70f28-3c05-439a-a2f9-bdca88b7e61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b50e340-1597-4501-9c40-15a6724b1d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd90d1eb-4df3-41c2-a430-871abb1d4f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10518a59-41ec-4bfd-b6e0-915359115197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7d769b-f975-4e90-96e8-7d1dd69dfd2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48fcb06-fbfe-4c1d-8579-dde7b5649aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9deda762-7c32-4e20-89c4-afcc850493d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a83fb68-20f5-4a19-9bb7-68ca5044f743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029aed3f-b9bd-418e-9336-cac2e040e3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fd8eb6-5146-49b4-82bb-78d0ef397287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f94e16-38ba-49cc-b0c7-12e2a6063e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.176.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cabffb-6837-44d6-a118-7a0e9aeb8d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.177.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf437cd-31ba-4f5b-9b66-c1a2c78f4850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.178.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc3fdc9-c11a-40e1-94ed-616ed0710e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.180.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d8191c-6aa6-4d5c-b157-1b9bdc85ccbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.182.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67abb1dd-2105-436f-95e1-356942f9da75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe7b374-6f04-424b-a215-6a4b1a1ae60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.187.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc85a5c-1b1c-420a-8658-b2290d0879b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.188.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd21bb89-7c16-4961-b224-9b17bd94c8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ed4b57-1771-481b-982e-1d4a9b9f2f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.193.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac8422f-5563-4a3d-9f07-d5d21ab50102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ce89be-8baf-4433-85db-28f175e220ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3348a7a3-3e08-4f51-bf03-b1df1def091c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa031c25-22a1-424f-87aa-3dc513326acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c378fd92-03b8-4221-bb3f-a0e6038a50c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973102dd-3ee7-44e7-8110-1c9b860f6ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcb844d-8eea-4c3f-b752-ffda92318ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1b99f0-9262-43f9-b468-5cb0758b284e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14661354-4eff-4f1e-8739-ad5bb4f4a484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.235.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecb8c6f-73d0-4593-9a9d-950a74729bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.237.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b46aae8-9b05-48c2-96ed-67e24efd7775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.15.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6a28d3-b24b-4af4-aaae-4cec47febafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.30.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f3c257-a03e-40ab-8a00-6b3feeac319a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.48.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabb5172-575c-4a70-98fc-5e7480623bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.5.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea869875-b6fc-4c6c-8684-212d2929c9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.55.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd877017-5324-41c5-b22f-3a08c83aaa40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.6.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d8c7d6-a50f-4745-9ea4-cd9f8e560eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.136.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6985fbc-8455-441a-8103-7697f4531227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69904a39-1e59-477b-baa1-43405a407aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.241.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7dcedad-e26a-432f-95e4-487812d4042c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.251.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49b9562-df82-4246-b522-5079c82a2adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.90.225.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51feaa4b-b999-47b1-be93-dfecd4452f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.125.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4c2ddf-cc53-4dc8-862f-9c23eaf9d6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.21.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e84610a-a53c-4eb2-a9dd-6e2cb0fa9b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.25.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e045b4e-5a2b-463d-9b01-0b30edc14bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.29.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95869dea-55d9-4d14-a651-ccb1d8d276d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.31.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c62b2f-c582-4a16-9516-c2d6d3e9d59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.72.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca228df-dfcc-4d84-b7d9-3e2f11b01c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989c5147-bd1b-4682-88ef-c9bd9c6229c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ff2c84-a3a6-4f9b-ac19-36e320b07934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.93.82.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3e253c-ab7a-444f-8136-c5ce117b19ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.166.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88666de-fb1e-4605-9da7-afa8c096e437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.97.127.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef04eef8-be8d-4f61-8b78-d248d1886d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23917856-6e35-455d-9f24-4a494eb8edb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.54.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fddaa7-8e2c-4ee3-9682-db9cec952521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a22957-999c-429a-9f8c-a6ceb22b0b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.83.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1341a01-ff29-4c68-87f5-d7d6eb247301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.222.11.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4575cc7-51eb-4fca-a9ce-176fe691aca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.144.9.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0099c679-2e3e-47bd-9c5b-0108f4922889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.148.51.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92283af-28c0-456f-9397-067d34a98fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.149.173.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763f480c-7ea5-4851-85d2-0d7d3f7a921a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.40.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cffbcbd-142c-450d-b9f5-cceebe1baac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.228.241.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f460db02-83a5-43f1-aba6-2b40e1f4be0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.247.36.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546c40bf-0447-4dfb-8d4e-0e390538fc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.205.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25df705d-ba63-4e32-b412-436f3732ad0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.132.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595e5413-3ed9-46bf-9703-e42199e808ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.39.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949aa5bf-61a5-412d-8e36-73f47cda5a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66787919-adb1-4945-b7c4-a60cf8682e92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcdd63a-786e-4352-a742-1ce3048de138", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbad021-59d0-4599-82db-4a43324c851a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.173.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067c1cb1-ed14-4853-b4cc-1491b39dc811", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.71.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d60603c-be22-4af1-afc0-f1d357aadb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.101.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99096a55-5c6e-4715-b424-7c77da205f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.147.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4408571-76f6-425d-8004-6016f1012001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.153.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc40d20c-3aa2-41fe-82ca-6d35b4ac42ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56482c4a-f068-4cb6-96f9-0d100a18a48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.180.45.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9688ef1-02d4-4cbd-a2db-11b0d85df834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.27.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0d5399-c00b-481f-ac39-81801b380edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.86.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4672c2-6d9e-4385-b5d8-26dc850515da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.183.29.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef49d63-7d50-47c7-8d5e-1cb67524bcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd05f78-5d4a-41ad-a598-006443830c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d37a2e-f6c4-4d5e-94f3-5a14c29b778f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.108.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e5e28a-eab4-449b-941c-1a744e06fd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6601c6-3a60-4bad-b573-f59afd11c818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eacc7c2-16f1-4fdd-98f7-d7870f178a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc82e664-e3ac-4593-9f77-41d23b6cffed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec21db40-b54c-4da1-898c-38fd2d229d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba53d994-0fef-48c5-b9c8-4a7097960741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d494da-38f4-4b5e-8201-b91b34e86197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.190.4.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb231690-04c0-4e8d-93a2-f6193b42dfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.215.242.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f760b7bb-c7e4-49ec-8fe5-178f2d19d640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f61ea40-f359-44bd-9228-7215a5b4bae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b0e1ee-8402-4b8c-b470-d04062471ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b9092a-8dcc-4209-9357-888e443270c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d85903-1050-4258-8a3f-078ed6b1f47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41eabc0d-c4ba-462a-bae5-2358a486b102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a2f4d7-9251-4776-a142-5f8f4b7a63a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f702ded-f4f3-4313-a594-5df7f6d11498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e7e0aa-f847-4fd4-80b6-bee7f6e03103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74a9c32-54ac-4504-bcf7-6df05d4467d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1e650c-7b31-4c8b-9dab-0877b0308370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96dd3ae-0ca4-4a4d-8f48-f46be3a7a511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5185550d-e8c7-481a-b518-b53a34e0104b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615bd400-ea75-47dd-8d0b-20148c72c6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4035af57-71e7-4d4e-b3e1-176629b3084c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f062cc5b-261a-4a38-817a-cb5b84c92eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c33242-1823-489e-b6e0-a552da175bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26298b1-3f63-49b8-b58d-5104a97c6ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29ad98c-d3e0-40cd-aabb-8468d576a4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9638e63d-e9d2-40f8-9435-b8df6e74f9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab71c378-5b47-44a5-8be4-ee952655cc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acfbbcb-99a0-4ba9-9e4b-b1aa8b0d4bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c828115-ab6a-451f-80c1-fb512ef3593c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f49f07c-8f1a-4346-a09e-6b79442cdf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.230.201.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f642b266-79b5-4d6d-a415-3efdcf7a523f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.34.178.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7f8cf5-f421-44cb-adc7-521171be8d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.34.182.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613cd196-c0aa-4e94-8aea-b190db45163d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.37.209.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf722e5-c866-47a9-be29-1f22ee11f48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.12.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acebb4ac-c06f-4399-b1e7-e7630b68d00a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007e27f8-909e-4489-b4bc-e156e88a1a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee59a44-c2d6-4505-a064-08dac6086c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95fe7a15-515c-497f-ad96-7ba5404ae073", "relationship_type": "indicates", "source_ref": "indicator--8ee59a44-c2d6-4505-a064-08dac6086c53", "target_ref": "vulnerability--476ae9a6-3d8d-4ed6-960c-7a6ba87e9e22", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ec5173-0561-4442-bc66-0e954190e7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dd8cec-d2c1-4f34-82f2-9495bac4ac76", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.89.75.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ffb57e-5737-4618-a239-cc649005a2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.12.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428e50cd-a8cc-4b46-a163-4d59f306ff6c", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.12.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91257cc2-4a12-48f2-9896-05ff0a20eef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.23.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3790c14-9b48-443c-80d9-0f6deb51bf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c304cb-6132-4eb2-a7ac-7ea1a97518af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.32.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df338f9-f4a5-4d75-b3cb-2b5a118dc762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.33.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551bd8e2-8f91-4100-8438-f504832011a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f729ca-312b-4c30-8dee-03271a5ea1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29711e69-d288-457f-87f9-a9c456e457af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f146867-b247-4863-b684-8059f1618cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0226c884-7e47-448f-9b69-cd9c8ffd4b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ebb053-14f1-4469-843c-cca8966c76b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9480e06e-34bd-42dd-aa88-dfc2fbed75d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.58.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b6a660-6387-4a1c-98d9-394e836f9790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.58.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6222e86-2151-4fe5-b4e8-0549ddf23099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.58.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ae064c-aad2-466d-b951-4188bfbf3489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec30f29-2553-4878-8cc5-52ebd39b4b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa274e8-bd45-4f53-ad36-d1eba0a727a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ac7a5b-96fc-44ec-a735-f52056b255a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb6e282-b498-4c05-a795-cc83d5a48035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbab953-a460-4bdb-8bfe-00b19ac99f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd154be3-ed9b-4b85-a8ed-c14dc18ba1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9f763c-6c2c-41da-b309-42ddc2a04662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765fe65c-35eb-4283-839b-56d84cf558f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8702f43d-88d3-44db-a6ee-2f7f9a3dd8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.231.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5719f440-d57a-4e71-8004-20c6b119b691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4628d539-349c-44bb-be42-badc95c0745c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c310ff-35d6-4c36-9a0f-2abd5f7e4162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.20.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861b0421-2445-4c12-a866-54e4b05679ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373fd1e6-d2f9-4f7d-bfe0-881b55bd43ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5832ca84-effd-40e9-b834-f2a06120bef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d4f443-11ba-4223-872e-e79239050113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03204457-1ae7-4ba5-ae70-e75e74657aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.177.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb47060-12a0-4834-8a0e-167f1b4165c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b46076-a339-44c0-9e67-628469d0b865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.198.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feae8e15-308e-49dc-bb0b-a23954e57c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.28.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448066ca-52bc-400b-b33a-123bcbd0e638", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6988dc2d-6e00-4d40-98ea-a22c2241bf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.96.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4986f499-c4e2-437e-b44c-8678538edb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.102.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ce46f8-2b10-4783-a300-07fcbab86a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff66206-1915-45a3-a945-cbc766cd1352", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7d29c5-c373-4829-9a96-92ba1a738fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.36.221.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4c41b6-c813-48b6-b2dd-34df5bb14e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b39e762-0167-4b1d-84f0-1ebe27d44e72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2317ff0-a32d-4df7-8874-6d4bf9981a75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0967d4-d0c4-47c1-8ad2-6affa8884750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.126.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28a0d56-b70c-4273-8119-b24438473bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cfe5b9-7d7f-4dcf-b48f-e9b8347fbc47", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.161.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de60960a-5a80-45bd-a066-88e11f881093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.222.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9085f147-fc66-4b9f-abca-47fb49bc8359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.131.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22033b5b-498e-4f56-a799-d6eb5b7c5658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.85.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6eef53-5e36-4163-8fe6-89bdd3c7d158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288b592e-b71a-4180-afec-21ec4378a057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802d5759-06e9-46d0-abd4-ec6d5bd35507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.161.69.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4b9aad-1e40-4bd2-a532-562c219a3eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.250.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b75a26-2dc4-4a3e-aaf5-a39ec8d77d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c796cb59-7b4a-4de0-b5dd-12680ea1e849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5d8a4f-5ee3-48b8-b589-543601b71834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49a4c9d-41b9-40fc-bef7-6ef83032b007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5341a91-86de-4cf7-bcb6-c0e28f2f4d6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e53a41f-d6a1-4d2b-b9c3-ed713fac7035", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031389c2-257d-47d6-9cc4-05e3839eafa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce35f2c5-6d95-4fc2-b80b-4832299b3df5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57728303-0251-4be6-8c74-e032a91e827f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5164898b-cec5-4eb6-affb-e1c52eb1caab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203281f9-f1ed-4998-ab7d-bd4e445e4f6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144f5e48-12c7-48d5-8244-62d1f4134555", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4bb106-3e3d-4a7f-bf9b-9e9e082cd4db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9012f6f6-16ef-4e11-acdc-3101dce38c3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a340619c-99e5-43e4-beb6-532e6c9fe9eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa9131b-2f89-4c5e-a7e8-b82c6af6fdcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610f3e73-498d-4d64-8f73-af9db4f0cfa3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad27a7cc-6a61-4b3d-88f2-8ad4d4f25eb2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8beb8e06-2271-484d-857e-25605cbd4269", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e43381-e6dd-48e3-a0b7-befb194efa1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df46e7c5-2720-49bd-862e-8fd52a612bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ff5509-f8a0-4f5d-9ab9-b73236047d99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98c5c07-f1d1-4fd9-9997-9d04ae500090", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03062bbb-187a-40d6-904c-b0b2c1742a1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ec9051-eef0-4b6c-ba02-864681a1ba7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd660fe-5146-4f6c-a8fd-473fd3e3bc77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5946ef1-7fc4-4abf-b1ae-e79f26b5e864", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba24cdc-ae54-410f-b27c-a2d47fa928bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ce1514-a430-41b0-a046-cb9dd5790745", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e0fd8d-3ac7-4887-855d-4a22c58e8633", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312750bc-9e60-4941-bc57-0dde3cea9ff6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5e972f-10ab-4eff-8c24-a8d13ab16eb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68445c97-ab0d-4562-b984-798203249d4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8693ca8c-6a44-4908-85d5-da2d9474900d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce93867-76a1-47aa-82e2-b365a5c60cf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae37f930-4abc-490a-8392-45a0162948f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd38932a-869a-4320-831c-fa6173514777", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea363ad-9db7-42c1-b5ce-63d67039cbd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efb8086-a213-4ae4-bc16-9e59cea9319b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b2990a-2763-4926-b9b7-ca87d0ab6dc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67481c6-55b0-4d76-884c-839b44bc4c88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9d1c34-f761-4edd-b896-29a4bc830975", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f60256-8b01-440d-af72-90fbafd35147", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b6e8d7-aaa2-420a-922a-ba2815d75b3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b2b0a6-bb60-4989-ad34-4f162c73a2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.176.138.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ba7be7-c6dd-42b2-880e-c8bcaf887422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4201d2-51fc-4948-8717-5ae332dd229c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6393651-09e8-4dfa-8a16-41bfee05de08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f06e3ba-886a-4f3e-b78d-129c762d99d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce4237d-2952-4c4b-8a8e-e6b0bc3e803b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ebd8d2-a065-4b5c-b715-f26bceaa4023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac80cb3c-14fc-4e86-9f08-396b2cfc659a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.224.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d66c908-c863-4021-9ec9-929acbcdd997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53610f17-b87e-4c1d-805b-d060793afaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30740d66-7a31-42f2-b02a-74b6e7500f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78345e04-1c82-483b-9117-16f8eb301050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.235.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9afb23-55ab-4c8b-af92-3e0ed594eefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.234.41.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399934f6-7500-40df-8676-00e2c2f4b6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.40.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6de21ce-dcaf-4bb8-8233-06230789af52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.249.221.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b529f040-6036-4639-908e-2ecace0be1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.31.105.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a7d2ba-6df8-48e8-99dd-f9e96858f55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.42.138.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53038be-81c6-48f1-9307-c83951df5d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.72.125.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d27f3c-16ae-423b-b434-9cbfdaa857a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.252.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0660f1e2-fa05-44b7-aba9-6ec161de3434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.177.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecaea27-e9d3-45c4-9fda-b18dde92de56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.177.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3321dd-796c-466b-88ee-30a77a65a481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.162.56.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91763356-7ce1-4f55-a95f-a5f9adcbeee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.171.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a174f3c-2352-4fd7-b652-10e13dd17b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.219.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404d7a71-6dc3-4756-a52e-7e5679009b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.164.42.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a22dc15-bbd5-4e49-b72b-e8bc4bcc10e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.173.154.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4590fb8e-7f75-4a6c-8530-98431dfbba05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.196.176.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbe07d1-286e-40f8-86c9-c3cdac4bf179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.188.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac63a7e-9b60-405f-b3f3-b1a61b61427e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.27.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f77f177-81df-432f-9552-e509a2ac3449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.19.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7891bca7-607b-4491-9f96-1caaeb21be0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.235.57.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac05283-63df-46a9-92d3-3b93a0e9f03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.236.21.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc4c391-95a2-4a13-96e7-470a2047c74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.236.40.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ae9163-0db6-4a24-ace3-a7b73277e174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.237.251.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fef4f93-7de1-4a93-b959-d7d1d4d7731c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.4.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11462047-fc40-4dfe-801c-b8fdca30c9b9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.92.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a850873-a170-4926-ad0e-0f60f66a8f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.39.52.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92995dd8-8754-4bf0-8c96-13740bef09fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.5.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8cc4b4-695e-411c-94ae-08013ad3b052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.83.105.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b72c094-0f54-4d47-8dce-e4c87e0c548b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.83.120.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ba99ad-fb4f-4d17-a05f-baaac51cc96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.84.179.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9020b2-f698-4575-85b5-7ade22710b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.84.2.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce4a2a3-f584-4ad6-aa72-387315e18dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.86.44.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f24d436-e7ee-4b7a-9673-f90fb139ab6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.87.136.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dec39f6-2c76-41b6-826b-9bb6802ef084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.92.199.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c3fa12-ddd1-4bdf-9860-f9e0580526d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.131.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b77e3f-6494-4ed8-9c35-0665fcb21717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5133551f-e4c3-4899-9d39-b102adad69c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.99.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2c2ae0-8e3e-4879-a993-d373cca69e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b66b9c0-8b7a-472e-81c4-885abe9e3adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.11.88.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4244140-5d3a-4971-b6d5-15e30ad32e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.218.37.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f41d244-ca0f-465b-91ac-f4817585818a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.220.39.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1eeb782-2d17-4055-98d6-3eba724aa26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.222.33.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b418115b-1ed5-4033-91ff-46fd0c6352a0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.240.17.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc25ab4-d3de-4844-8742-a8b569d47536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.243.121.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3f07d5-51f4-4e21-bae4-fe1f660cca76", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.253.129.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed2dccb-ba63-42e2-b73d-1093af34ce6e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.253.179.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c951e3-e2f9-4f13-9894-717cc5f908a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.37.50.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4fdf6e-5532-44a8-be38-7599991ba4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.69.1.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1480a5a6-50a6-4db1-808f-f53b522ab6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.33.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa6e5d2-90c3-40a0-9c85-93f63239efe9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.180.151.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3ac31c-20ee-4a9a-be3b-376f414b15eb", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.36.162.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31853b93-7cc2-4c64-b2a8-6f94be560396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.100.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e3da75-1efd-4972-9d5f-a509354e454d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.53.166.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6861d0b-fe39-42c4-9541-a11a7a649775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.61.184.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a605419c-dcce-4fe7-8a7f-982d3ad6859b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.167.166.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae4d41e-e0d3-48e0-aafa-3642ce5a5236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a67363e-6daf-4c1b-bbf6-0f982233b9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.205.57.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67dfba0f-13fd-415a-a803-587bd1ce6565", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.219.63.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb639dc0-0e66-4f75-969f-a5d73bd3a020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.221.207.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764b7671-62a2-4b0a-82de-88155398b474", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.222.211.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754fef7d-16d2-44fd-8183-a227f0f8b703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.245.12.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1380c5-19b7-4712-9490-c7b86791e346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.132.18.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90b2487-790d-4cff-ba23-a7b93ba105e3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.132.18.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0da343b-e5a7-4234-bb6f-3b20869ddd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb15dfb4-20da-451e-b7a1-651fb6cc8c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.63.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d930ff-f9aa-4504-8200-6e939126564a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2aca8c-f3af-476c-ab42-3dabd3456d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.16.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922dd878-73e5-41c6-8483-be9cf5a5e690", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.143.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f2ccc0-4920-48e9-a36e-fcc69ab2b365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.201.254.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee35d2cb-fde0-4083-a523-0ecb334e80a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be008a34-b7dc-4966-ae41-935d75c4c11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c483ae3-1aa4-4710-a6b6-98af7094eb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.220.124.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913ef655-b596-44dc-a4a8-1dee1d75b506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.131.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb2f81c-757d-40b4-84dc-3e54da32a247", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.84.183.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cbd053-e6ce-480f-9e78-d6a586bc94c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.141.195.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec46fb9-6d49-4151-a3d8-9010f2af25cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.115.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71df49b7-0058-4b25-827f-271a5029772a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.27.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2fdc09-cb07-4cbc-af81-b94140d29cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.47.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c6b9d4-7f74-47f8-a283-b9642d5a59c6", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.1.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b417af6e-2eb1-40dd-92d1-74f214ae4280", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.107.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fff81f-5b80-4f44-a3bd-fd9894a34177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.109.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb65685-ca34-45ac-980f-4427130479a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c052040e-ed4f-41c8-949d-939ef94bf0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7f68f6-9242-4852-b9c5-f992e6a23f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9364fabd-cd8f-4659-bc31-6fd767f58a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.164.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7830949-38d0-49d7-96d2-a223df796059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.180.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b81935-c30e-4fb5-b597-19330fe289ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.2.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97030ca3-3f44-44eb-98c4-2e54324bad03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.26.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ec45a2-cc38-4794-aa7e-b95e463ac52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.140.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc093da-b17b-4bbd-8e24-2030a944a465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.159.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebab3db3-55fd-4944-b7c4-34c65f325def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.168.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bcf48f-fe72-4b9d-a53f-c784dd54e0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.140.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1577277e-51a5-4a44-9f10-5dc87e9b9668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.160.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc75583-bba5-4e5a-b447-f6ecd6d82244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.201.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbe2b5b-c402-43f3-8d9e-2519cdbd9f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.253.94.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f646f1-2e87-4476-862d-a9a6c098d201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee59b89-1242-42a8-9434-90bfd370728f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653933c0-ba8b-466d-9d4e-ff71c0c5872b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e1d414-bb06-4f71-89b9-4be71e46a599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219d0ccf-82a0-4475-b71b-b8f07be5a7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae0fc84-c0c0-4f0d-9433-75320a3d992f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5e3a64-7260-44ce-ab7b-a19503d167d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e99728-8922-47df-a3c2-f44763ed63b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d628dda-c79c-44a9-9e75-60976f918fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74aaf1c0-8128-4aad-b996-7b9e671bb38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96bfb21-fcad-45e6-8ab4-112787d3dff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1c98d5-b4c3-4d29-8fbc-2ad42dce0b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6388ecb-7413-46e2-8a56-56bdd1a73950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859cd973-d3ee-47e3-a1b1-af386018d933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bc8814-6ab5-46ec-a7f0-00be8bc1cc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aa95ae-9bcd-4c83-9c38-b2f022eae416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f4fe62-607b-440e-918b-951c655c603c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644abdc0-f70a-4f00-a7c7-08bd8882ab23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06feb6e7-c41e-4275-9e17-f83579367543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dacd10-10ad-47f4-be99-7cb835ac9f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc575fcf-8dd2-4e9a-81a0-6b720beba87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccb9608-d6e2-4e42-9a57-415b631fdfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846f05f4-de26-478d-a066-ca08f8ecc2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1912ad-4d73-411e-99c5-685a7c044edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8928237a-49cd-44b5-b6c1-40a3b59212f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a4221f-9329-4099-979d-3120630cb458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbb6557-e462-40fa-908a-a0d7aee1e31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500e443e-545f-4d60-8b61-d29afaec7e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cce50c1-5cb8-4612-82a1-9272cb56b96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fd307d-ad81-4d70-8ff1-f56ff331c140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b26084-39cc-4b01-a51b-05a648cc403a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc6f78a-59f5-4d58-8164-e1ce8b8b265e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27191780-96b6-49f4-bf1c-f00cfe405bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75ac417-bca5-4415-9ec0-f661ed832aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa5db6b-2a1b-4992-b9e9-0ee4330a6d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faef48b8-2cdd-41b5-a27e-7808fce47fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f225b81-b9da-4aa0-b321-f4c5e64c8d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdb5543-dc09-4d2d-a8ee-e4bc44f60d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092dee92-5391-42cd-9df4-ddc6abe3917e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7440fc-f8df-485c-8773-e055dd8cbd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e718e3-c8cf-4893-9863-4ae16c785a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a92468a-5cd8-44e2-a52f-a7ab05ad0c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5065264c-bb85-45a7-bdfc-562c796d0c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0fc56e-43d4-4056-bc74-1f21448d7dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289715ff-a938-4756-8dd9-73d3550c971b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51e5c66-cb4f-4348-b838-8eb631ad85b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cbe546-8b5f-4b54-ad1a-403f9060f127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc965fe4-a9ac-4c64-a792-4f682f0a702e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6de3395-c83e-4ebf-b155-001a311ea592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bda253-74da-45e8-b58d-ff9eabd832f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e17374f-dc2d-49ad-a73f-891bc7fecb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2876902b-63d5-4e4b-9ceb-094e6842a08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfcb62c-d6ac-49a1-bcc5-53f488a30cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d14d26-f2d8-412f-baaa-a5f31cafcd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440c7387-5886-42d0-88c8-840a2e880bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdc3c70-8ef9-48ea-a653-74ab5d74a03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669de1da-fd64-4608-b033-b22a08c9b2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2a081b-5046-4d2a-80e3-0a6cbf3dadaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfa0f1b-ea94-4213-a269-cd54c4884878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535f89c5-07d4-4aec-8e0f-9f7b5457ac33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4b7ced-61bd-4565-a810-d9536c7d2686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afb7cf2-d249-4976-948c-8cea487da540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d252a5bf-6ec0-4329-9c06-ef5d1eddcc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57260174-200d-4540-8c2d-7d12e5742401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce3eef7-3570-44eb-ac13-827fc4689916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c741dc-8e0d-4326-9fa4-105d2d9523d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c9b168-c87a-4291-bd58-0baa7a323fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0317c7-4a17-4318-8fe9-4a7c37fcc8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727cf66d-a976-4cca-a086-6c3152cd7c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d82742-b0b1-41ce-a01f-faee0c60e751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febccfb9-8aae-4cf0-998e-92817dd5972a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14052086-3b32-42dc-804c-f10277129fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11212f8-3009-432c-a764-40b46f9d7eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69693c25-9126-47d9-9086-59211f97b667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c314cdc5-c349-46b8-8bec-06504d5b727f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8024e5-0755-4723-a162-0b152dfc8cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6133d225-cddb-474b-82bc-ac8ab78b37c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042f6a01-5e17-48d0-97f1-e15bff3ef891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e827a514-4e43-49e9-9440-4805d5671ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ec47cf-5f00-4b5c-ab0f-72af935429c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a2db2d-28d8-4413-b1ac-4602d8ab3fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356b9df1-95d9-4e3d-96e8-fcc2fdc66de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d1458f-140f-4fe4-a78f-af9b889e267d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc5ad98-c867-4207-bb80-d0cdab1fbe0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5bd169-7a68-4804-b24f-7f61027a41f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43324379-3ad3-4022-8e78-33e9f263b010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d22f649-895e-4182-a18f-6f869c389f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c9eb5a-3c83-4be8-bc7b-7a7f3c1d62ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6cedde-e05d-4994-8de4-74228e221da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c35ea85-cb59-41e8-94a6-8cfbc2b83cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f6dbf8-15f5-42ea-bd55-ab58e951cc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75b1d8f-cfb3-4563-817f-8371a0b0ea96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9244ad6f-a145-409f-b628-bf9a36903936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a898b31-2b5c-48d7-9e5d-c21991e77acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1b9bfd-2b86-4895-9f9f-d716368c616d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f86fdd8-a991-4ccd-923c-6d1880bac38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efdf42e-a4a9-4432-9919-101916a86870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707040b3-d5da-46be-a856-f7ccbd946434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d7d237-d658-478a-91b1-81bb4f946e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dbeec6-46f5-4e50-bebe-a9c79be8d0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff80cf9-21d7-4a8d-9aab-434bd424771d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c5b83f-5c32-4215-aa46-6e4146553cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32f3ee5-0054-4262-93e1-8b7431bc12ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f73403-d449-484a-ad9e-d6b0aabbf314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04244ea-2f41-45cf-8061-94bfe31d6959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6dd248-ef68-4432-a9b9-4e30d0046516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea297bd-0bab-4789-8624-191dfff81697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8283b985-60a8-43a7-b81c-16ab77bca047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4790ff50-7fef-4f4c-ae2a-ce2ceb260c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a06507b-a121-4e94-82a4-2dd938772fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8136799e-d11a-4d54-b5af-a09df883b9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890ec764-f62a-45ed-9f94-c26903cbf328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad85f05-280e-4f55-93e4-21f3acda8ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0494a078-f87c-437e-a3ea-ea1f44d167af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25a7a90-b968-4d9f-a77b-b1a52d4245a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554de2a7-df9b-45fa-b60a-0e70b0b0d6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384c66ed-4ad9-40b8-b5c4-b8e984c07300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bab435-edc0-43b0-9fa2-cf81dec5bbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f59f0f7-8d1c-438f-8ef0-a40669e1519f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54149528-57aa-4991-9ff1-683351f58478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde2788e-909a-4c3e-8c5b-e136b34eddef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5135ac-c3d4-4afd-b130-95caefbba90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b1e307-487d-4469-b394-dc72e9b3a4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756ac621-cf23-46de-ac98-44a66f962b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3202613b-4073-4198-beb0-125b12d91069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f5f3cb-5328-4a34-a0fd-130d81e59107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f95a936-be7b-400e-9c40-3301c31402b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5297a5f1-8b3c-4858-86ab-9c57d51e4d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4d7542-c36b-40be-bc6c-9391a521cca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98abaf65-905b-41d7-9fc5-02247467a23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd5a3c7-0903-4c4e-9046-0ae33df784b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36f4b1c-2dbe-44ac-80dc-ac2db9b5c6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06269725-80eb-48b4-a7a9-a97c11efb223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037e6fff-d3a8-4aea-8d8f-41356e49a3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79642910-8664-4e95-8e93-209762d9e8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ca4bd7-289e-45ee-a6a8-8c24895629d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7f4e14-b181-42be-a777-d7bd89e425f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0749072d-9a13-46f8-8eca-f213277ac640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2aa309c-40a2-41de-9cad-57f72c5bd77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289f2af5-6414-4f45-9c15-b8439991dab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8cc5ad-b15a-4126-865e-67c5be3d5b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe16b969-166b-4f8e-8a36-523d4e9b8d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d5cf31-16ea-4f4b-b569-be7663e58656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bd78c7-8a01-4ae4-97b9-39c0578ec9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4472ac37-b4dc-43a9-b4aa-a9ab6bb869ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d12eb7d-a8ea-4a72-a049-4ef882d17ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33d007a-be68-40cb-9f15-450d7b76e7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c4e6f0-cb66-4a2b-9175-dff40455aeed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1842a338-bc73-44a6-a8bb-a4236453515b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7417ea-ebf7-4d63-96e5-89bec0382a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac69fff7-00e7-4301-bd99-351bcdeeb863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ee18f3-793f-4626-a1fc-ef248e578b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1352ff92-09bb-4912-b0de-56f4e856e9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a8b4ff-01a6-476c-8801-3f908431f971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbae972-4eb9-4fd3-acbf-869283a7148b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ee8085-a899-4011-8899-36380ff40a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d858e80-5784-4085-b198-2f1ac4702bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fd7161-b45d-4a65-98b1-5dee434d89d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feed7c35-a12a-4ce8-9fe1-490076584401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800d2f97-2d52-4bf9-91cf-dbb5f4581377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62985ba6-83e5-4a46-9468-144be7c22bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3de5ee-7b43-44e0-bcae-648df9ec69b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99003a04-63dd-4887-a7e5-85962b838da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af82b57f-a5a6-4814-bb5b-60e7160f510b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f32c2d7-29aa-4a16-914f-cd8ff81f09a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811e01b2-b15e-4159-82cf-99857669c994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2af5f2-11d9-4e09-bb8f-86fe5d97a111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7f730f-a196-4c93-8270-a8348a2b0813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05737281-cf11-43de-844e-3f156bd76a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3ff013-cefa-42f3-8218-297b124821a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb3ae38-350e-4149-b8f2-9c843d65c217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364ceb46-917d-4ba9-ae90-5424959ab074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc1a680-8246-4466-8eb3-7b2f4c7d2bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267aa6ad-41d1-4b56-98c8-a9b9fa86fd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f9afbb-1978-48c9-9d6a-b00604bfa366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94942c8f-f1a7-4e20-bdf4-219382030753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d789d0e-d65e-4c31-a9ab-569bbdbdddfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95059d48-9adb-403b-be6d-0e36d56d9be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196ea033-abe2-4803-a725-c113075011b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd639409-2e89-4572-ad9c-4fad58898d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e9970f-8fb4-43db-acbb-1b11314eaa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09e6d40-bec3-491a-b78e-9d28afec3b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3414795d-f2f2-490d-a72c-d2f5cea51b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2a8b66-bec2-4ece-b82f-625ee88cd391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c462f537-d6f5-4750-b083-b0f520c0a047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d3cb1f-3097-435b-83ee-3d50c44fe2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1797466b-6747-4d64-b53f-f83106fa6281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dcea5f-d847-4902-911c-ebb2a7ddfc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c5bfa3-ac4d-405d-9ab9-a29a34e17a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a748f1be-0e7b-4b84-bfc7-a8e3911d9b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a517f2f9-65ec-44e2-98cf-8528884f6462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b8e01f-d65d-4c67-81c4-aaa038e60218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6249308b-9693-4b76-9f30-729597ffb038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e327e1-c817-4deb-a269-c3f53beb8e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affae3f0-a484-4901-bd7d-6749078bd4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c6e31f-95e4-4750-943b-5522d75948bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fb741e-1d7b-4785-ae3f-2f3340410c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cbdc3b-deb1-4694-b777-3bc751a32a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b64f549-1374-4bab-ae98-4bdad8ac118a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b971bb1f-f266-4e75-89d5-474dc8da6808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40484e87-b4d5-4d36-9753-ff8a6e4ac2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9fc5e5-39d7-4e70-9a59-6546d468c250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c9ec03-f7a9-4091-865a-689177299482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e67822a-8adf-4528-9bb6-be657ef56a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6e0f5c-3a1f-48eb-9062-daa30f26f10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6431aa63-52d6-4c8f-9c61-f98d5abb28f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea86c664-3277-4839-9369-68a69b6a7c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39006b4e-c3e0-49a4-8198-088ddc259207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b73f1db-12f6-4667-99b8-79fe4ce75000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed96fbdd-9ed6-406d-9518-1880ca8b1c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cee148-2976-4dfd-9491-6009c8d303fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ebed80-4b6b-4276-907f-0883464e36b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3de2a11-b7cb-4e3f-ad3b-3216c1a24b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c03f5f-c7da-421c-b46e-fec5679549cb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56853c8-b195-4cf4-b4bb-2978ef421650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b96ca5-5f46-4a70-b002-8f65189ad52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5567dc1-c34e-4b9d-b5ac-725e71a83ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cb199a-d694-4bdf-8f45-2cd8f7cef896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df83dec-0d62-44df-9d9f-494a0ce7e88a", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0d7794-4f15-4757-bf1c-607e6ae40383", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5239f8-c8df-4cb2-9b0a-1d685253deb3", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a0191f-5dd7-4612-a93f-0ee8a0c0d7af", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5584b4-3af9-4c80-bd27-ee8b05026b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9570b9-ee4d-4c49-b1f3-bee95a7b3483", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796d5e63-9445-4869-9242-747976ae64b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432aad24-ce14-42f6-9b20-03c0e977b643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6740c890-673c-4070-af4f-0f2403a12da1", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ae6828-eb7e-496c-bd7d-cf1ed4e4ebab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526940d6-d1aa-41b7-9be3-b72b8b31e8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa90dd1c-49b5-4d0d-87b8-332ce7ca2245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e492e9aa-74c9-4b79-a3da-1247ff983428", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.113.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da326e91-465f-4382-8d69-fd7970843adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.231.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fef81fa-8100-4ca0-aca5-6a4a36d6a3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a8c278-f57b-4e37-b7df-148d94468b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc34fac0-1e86-4a28-b03b-d98d34ba9ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179f3b88-ea0a-478e-928f-9c3f47ae4fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2318e078-fef0-44d5-b9cf-af0a08347813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b1cb4f-70d5-4dd0-9ca4-b1f094d7f3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a023d3-a1d1-4013-975c-7e8c5a2674d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cc80cd-084e-4d02-acb8-afc01b1c6f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165ff8d8-8acd-48eb-b9b2-f2588462f863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a7e900-ab17-48bb-ad33-522e75887d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94122982-3f0d-4571-8367-15a0fff59cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b3c104-0081-4a6b-b87f-5e1a6b53ba99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1f60de-769e-4556-b47a-4671f46c10f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3af7d7-bb4c-4c2c-afee-e92cf71f5e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef753a4f-cf06-4fdd-83c9-45ef461cbba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaacbcf4-4c40-404f-aef0-f6bc0c2efef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4381c70-8397-4a31-99dc-eb4f0439434f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec3b0ea-ebc5-4f1e-a339-dd9c0cf5c10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4b0cac-6289-46ee-bcfd-d7c3db0e9d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14ac01c-309a-4eb0-b34f-a122c7b0b025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bcef81-9daf-47b4-ab81-14b0ae1a9052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98187f33-b601-46fd-ad58-7a012e22ca1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4026d25-2fdb-4682-b3ca-9435c6823c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a38abb9-1e2f-45f1-a3bb-08fa6272777c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37f3c1d-221d-44c8-804b-66399ae36200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ab63aa-cbdb-41bd-a64c-9debde1f1876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6afbd2-4a51-4244-8f8c-b4d3e33e1412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05edbb41-0b79-4c59-95c6-915a69f21a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fec839-7e72-497d-a311-787f1f08d050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6b5d24-cf85-4ff6-b598-2464e4e685e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f654156-b915-4a75-b104-8fdbe798bcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45e388e-ea52-450a-9e35-a4a39cf0216d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb116d4-d9cf-410f-bf87-c7e21054906a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9170930c-26f1-4917-a2a1-d3ba19144a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d057d71c-803e-4ef1-b8e7-3464a2754cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f69d3c5-632b-41dd-8dfc-106a472fdc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76232520-2d2a-451b-852d-b9c6b860e58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9999b8-7d18-469a-886f-913aa2901ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ea3c48-9a24-4068-9002-d7fdcec4ac2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10846487-04c6-4ef9-9048-38598459e061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0465264-5eb8-4f2a-b1b1-7da46be6cf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742190a3-3cec-4539-9710-e498a3b47593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea5021e-7a6b-4cb0-a353-30b739bdb983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8465f55-44cb-4b9a-b369-64a438b2b548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1298ee81-fd86-4b59-92b8-fba424aefa41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31afc942-ec10-4baa-a9c1-37309cdc35c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421d1ec0-8e55-4414-8078-57b783f92b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6520bdc9-140b-48c4-b7b8-795c872b29ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069236ad-1ffc-4574-b7ff-80a891a9de78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d23ed2-eaf6-4a73-bd4d-d34967250e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d446b3-6d07-4369-931d-052fa05f13d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0afce3-1ce0-459b-8640-56012487270d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6339a4e-4787-4f71-8ed7-eae93c265495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8eed36-2455-41f6-8d29-c2e6c6c52e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf20d512-6231-4054-b3c4-8528001f55d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97eefed-c063-44f9-8874-72b6b4540f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68499d9-e1dc-424a-a4c0-a4c5f58acb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a06161-4caa-4311-94e8-c7df687dcd07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b50f48-b3fd-47e6-8b0a-4330230bc768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9c70d2-2bcb-42d5-bd1c-fd40af185409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69326b96-de1e-4f0c-9105-c47ae0c31b53", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bb07c9-b581-4ea0-8a74-539546096eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50417922-71e0-4fd6-bd8e-5a1d417e62d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938485a3-a296-4ccf-92ee-1efc50c42669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f51fc3a-aa11-4c2f-829e-73111802d0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d740958f-b97b-48e6-a86b-6e18ae0036d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e99386-39d0-47a9-ae88-608efb776926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4698da-6a65-4ab6-a87a-d9e26095b0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990cfcae-ceed-47fe-8eaa-7fbda0dc9136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb6844b-f688-4078-8cc2-8a6c69f02ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab7f42c-2b81-467a-b9a2-8a6227850522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bd8ece-43f0-481e-812c-ae87f1c3c068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7737353b-b543-404f-9568-43d8bfce2ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58247cbe-62d8-4663-8157-020a451b4f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96497429-4c9a-4f7b-a3c3-c767f1d47150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1425d60-4b0e-4c90-8ee9-0d85c11857e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce8fbc7-93b6-4507-95ee-d4806434fdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad31356-318d-4ee5-acdc-93537e493391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5e443b-1314-4bea-9652-77dfcb8b91c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c038b9f0-7779-4866-a42e-b81a88589cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4b20c5-ee30-49cf-9c2a-aa57b4f74e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941eaae3-1676-4b42-b687-96fc061f0123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cc8357-a7e9-4de8-9416-6e3f4ac303d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77538e35-03dc-404b-bd67-b700f26ede66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215ff01b-4f71-4fdf-a47f-edf5011984ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b595980a-1c42-47cf-a8df-410524e9f344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e77bc00-30ba-4021-b9fc-7713de6d0cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d81e3a5-5778-465a-8538-6064bb26ffc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7651ea-7450-4176-bbfc-83aef13468e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bf7ea8-d0b5-4e02-90e5-24574126b0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ccfccc-709d-4293-bfe5-88a01130f14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9682c8a-ce10-4e1f-9715-d34c891b2077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8e9ef9-9998-472d-8464-480648aab450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94169cc0-9360-4c1f-8faf-08304692fcc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df97c073-6ae5-4c23-8076-65812879841f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94701ee3-444e-450f-95d8-79b4051966d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3576ea8c-da40-487f-ba70-dc0d119e0cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cac5e3-8372-4170-be85-19ab3f57f957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916eded1-187c-44a0-a5f3-4a035d27cc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd186dbb-1bf2-4cf1-98de-2769852f131c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1279531-30e6-49e9-b8d1-d9ffe597fb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e233628-4471-46c7-b438-7ff0dcb8d3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadbb3de-febf-44f2-bdc7-fd54d0d144e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f918190-0c1b-435d-ac9b-14a9369d588c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaca8993-a3f5-4be6-8a40-54da3450a81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daafbfe-c946-4636-9585-e9e301db0320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5468fd-0814-46b9-851b-20be50b90aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2500ba86-da07-4117-8cab-00dd5055eb2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799835e1-32ee-4b8a-a8ed-fe9da4c22258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc38874-5925-4220-bb4d-2032eaf66d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d145455-eb19-419e-9970-09c3da06bade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567439f7-752d-4663-87d5-1f5ae3926644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4b0d17-cdfe-4240-b656-96a45b629836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b0eb65-d224-4375-bbde-41ee388afb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bcaa3f-68d3-4c92-867d-9c0bfc74a90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4017947f-eaa6-4bd9-a13f-907d5d148900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7abf11-54a3-41a2-8322-93d494d93235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7d0258-45b8-4584-8ca7-c952ee4c37d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d13270-4c9b-4175-a0a4-d1b7169634fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214ca7b1-58e7-4770-badc-7b3ee38c2f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62bf84f-718a-427b-b369-1ce3d3ee92d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14aee471-c301-44aa-a786-42906e634913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3992a0d1-a555-4b15-9aec-ce71640c9b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8c06b1-a3b0-46b0-b059-efb520b5a4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29681131-4140-4b47-8321-a0c58df8ad5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cdab23-be5f-4a4b-802a-e3c3848a6d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a1d953-9a8b-4cf4-83c4-ffbecb1153db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf61311b-c552-4797-b4a6-1ae9d3e2031b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93348f0-1043-44cf-b570-bf2ee8c1277e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4201ce6e-4dbf-4cc3-8b89-b46a1b8f52af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6fdace-ba9c-4ace-9b6e-cec6c31f3182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b7c0d8-7290-4971-8f59-27fb628cc758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3391f0e2-0b3a-4347-91ce-2acae8c8cf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4588ac-1c27-4f6b-9b06-897dd2053c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f8b0e7-f53e-414d-8aea-3cf1a8473f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f1255d-7193-46f4-9dd8-d40c97ba1abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f539c1-f214-4080-9f0b-a03284565c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e98fa2-2e2d-4b6b-854c-f9dca257af37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a4eb51-0396-4bca-991e-a59aa0e3226c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3326b209-94a8-4872-a39f-48bc1af2d0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b04607-695f-481e-92a4-8115dd782a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cb438b-8f4a-4544-ab1e-12958b10f636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07309c99-6a45-41d6-8222-294adab3bf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1065480f-6495-42a9-a1e8-6a07288f4640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf92aa2-df9b-4621-9d04-db84613ebca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283119c7-0a21-4a26-af08-7c4e028188a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5ab562-721c-4528-ac6a-51526054aa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bae32d-58d8-4f55-b48d-709c65b37474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4de5f5-d8c6-4d08-a4c1-c4cecb271e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc1bc5a-3de7-4400-bc6f-4e5026496b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5716ac4-1821-4006-8800-3d6deef31b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b99c69-588a-4850-881e-6fc40d02f992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bd1970-2cc4-42b2-b52d-014b527d8428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9cafac-8649-4b4c-bba5-3c774baf5579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ebabcf-cec0-4bc3-ac15-1cff0f90d48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e756e7-b96b-4d54-8529-aec7aaf9b503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f865c025-12e0-4a20-bc38-fed33ed75409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14bae86-807e-4410-ac6b-6b672aecae76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c606d8a-9df5-4394-a613-cf9d4c769fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2419a307-7ba4-49bd-93fc-4ad828536847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0469cf88-b5c5-499c-a0c0-b3ca9dd5e977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e070bf6-158a-493b-a5c7-14b49fabdc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0f873e-3aec-4219-94b5-2ac2df02bfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85624bc5-b3dc-4d4e-a58e-4227beac30f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908447f4-59e2-4cfb-a8aa-d2cfb17b75c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c1484b-a291-4eca-b1a9-3a6a9f4b723c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85d9e15-64c4-4cfd-b260-3627562a26bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08619d4-fc96-4030-ad4f-5359a4e5211c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7c2e71-3b3c-436b-a060-bc3e43deaaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda3f70d-fd17-4c45-a412-a3cfc113f2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466d515a-412c-45a0-8048-16c2daf21cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447f58ee-94b7-4ccd-a775-38a40b4a5541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fee3b74-541c-4f44-9c3e-1173f4802a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad26e76-c213-4353-9533-51a74f040763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed2ab92-b12f-46d8-bfe6-d2492e562cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c507535-e5b5-4484-baa9-dbe53755c40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6facd7-5e30-46ea-8aa3-0d3ecbd18eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d4cc37-d167-4bd3-9910-b7c788e76432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b2db88-e28c-49b0-a15e-a9d164aebd86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6eacb9-37ac-4cbd-962a-de2efa033d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7449af7-8610-4984-8380-1a01a3290ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eca170f-557d-4ce4-806e-b6cd7a40c1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dc6ef4-1eb6-4a30-b42f-f8941e3dc4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95d9db3-66f1-412e-8e9e-c0479e91e5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e531afd1-9f72-42e2-b9c2-0500c66a4fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1347c1e5-2b80-4b7a-ae9b-69d39bf759fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965b31c8-8d6e-4f96-8d93-f4d826cd8a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeabafa8-e6ce-41e0-83f3-e51e6023c9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a1655a-00ea-426d-8efc-8906368b07d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa98e3d1-4dd8-4d13-ab00-d18ea666779a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a50b143-fac2-4aed-a55c-5f6c0b779c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589e10bc-645f-4abd-b084-285e273689ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c01c4f-5604-4181-9b86-235eb439dc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644d85be-00b3-46cc-add1-4546f4f84901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cfefd0-60f8-48ee-a1a1-6184f6ecec15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d4605e-1a14-41da-ac54-eb738b232955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a9811c-2de9-4224-8fcc-edb85c6e479f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232e166e-59b3-4ddc-afff-784591c4e220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a86f02-1687-44bf-9e75-147961bc21e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15165699-303d-4bcb-b9b9-316f5918c117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f1ac76-a68c-40f8-b9c9-472547ca80ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f16ac22-78cc-44ec-8e2d-c2371d45b614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effc64c9-ce40-46b4-9827-de9c27b947be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45832a0c-c756-4aaa-a67b-04c0fe03690a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba12416-9d8f-4526-ad6b-1a8da0940595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3475f31e-aff7-4e79-a149-5d84b61c0bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c8271a-65a7-43ef-bd4e-fa7c92f8b32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac01fa99-a235-4d02-8bef-26d270106f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1994c7-c6a3-4428-aa87-1ab0bbee5cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586960e8-43c1-4d3a-a541-ab7fa12fbfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26842ef7-3ee6-4585-8cc0-4a4d2563e9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac65dd5-66c4-4002-8ae9-73735511ca01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d541ea4e-8c61-4345-95e4-f43bc8975db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73efb55-d43b-4add-ac1b-0e4ae213e7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec00404a-6c8a-4f62-a5ee-9fa63f489b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7d2b5e-41a0-4215-934f-2d8d23447e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2d43da-6ee1-4def-806f-3c2a11b86125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d411278d-2621-4393-9c90-4d45255e3b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6950d317-f14f-4a68-9e10-060c7a4c9fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfabdc4-0acf-47f7-9ef7-26ad2aae9e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5534cb1-c934-4a63-ab86-3abdd0915c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810e5a29-0f5e-4f16-adec-23341bedb53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5af0573-21bd-45db-ac2e-2c05f435241d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95001895-459f-42a4-894d-d096f8e080fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbee3cea-ef9d-4898-877a-f57fbe858c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d94f8c-a411-4fd5-a8af-e4a4f76cb2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f68d67-250f-4c49-9f4c-f7123c9f9aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38da9609-8c6c-4efd-bc18-e42504baf720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2bbb47-f91b-401d-9c9c-fb24a87bf0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90035354-f492-4ae8-bdad-c5f04b2fa901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca5a46f-4a4b-4549-8233-f93e40e32dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ea3f12-efec-45a1-accc-f165d49025bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14455cf2-6d59-498a-8b0c-add291b8bd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fb5e8f-fc69-48b1-823c-3b8b2b50c0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8423a5b9-fadd-4289-9553-0b35f4c7f70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cca0b73-222b-4f61-b9f0-c4c1e010fe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cdd8ee-2b72-4d9b-b20b-6e18061bce92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6e5629-a615-446d-9808-4875d5a73ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52354d34-a2f9-4366-9563-64b7d2519d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8add90b-eb2a-4bde-aaae-5937a933b134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ffd8e9-8a87-411b-a05e-4e51863342b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f0ce21-bb5d-4a98-b61f-3acf5e6c6023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a8280a-2b50-4a82-be75-a6af5accce4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18847f5e-c531-4386-b977-dbea32e23063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5085cec8-2167-4e9c-a1c7-a3cfddfbb589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a09b76b-0eaa-4e5e-82ae-e00d86fe6ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c23a9c-0ce4-4671-a455-e6fd38e6b4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c65f6b7-5399-41d8-ae1c-af749721e372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94451507-72c2-4484-a276-63bc1b5700be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6255d721-7107-433a-9d67-02bff66326bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cc7634-8046-48b3-b4d0-e51b6ebe1b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d95d07-16f5-4300-bfd0-5bb5cfd29f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d902fdb-137b-4de5-9ffc-772fe788791a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41caee7e-cf0e-4986-822f-4e8cc8713f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7afca0f-a495-4e46-b311-89678e056757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913e3bcb-b0be-4a5f-8574-c8ac35b113de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0f3fc7-5243-4544-9100-d1ed6f52d171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4369cfab-5bd0-42d2-8fe1-0225b2bc695d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4c2a4d-b585-4da1-a8dc-ee6e0e56770b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d1d1f1-2cf1-46de-a87a-a57554d0be02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de568d5-fa7a-4a07-a4d3-2a98f29482d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75044724-4d1d-494b-9f73-eef5628bb7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525d1d23-1eff-4c9b-a37a-26431261bc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210c07e3-41cd-4638-ab67-76c793174f06", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd539cf-fb49-4660-bdc9-5bf4d64a456d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22cbe66-2f66-46c0-ba74-02dec89fa019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7817644a-1f4a-4e9d-b4ea-c5dfc38acb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4468f94-19fe-4f78-af09-44e68002d05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e0e79b-0922-4a6a-a230-084faa4f8272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54138f38-e0ec-4dc4-833d-16c5ef65c76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81aae276-a85f-45aa-a562-8ad57a952fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5db3f0-218e-45c9-bbb3-8de2b0c222bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b84652-8875-40c5-a27e-b004b2ef2825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57e2375-335f-475a-9f8e-645c9ad57856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17b1902-4c1f-46a1-8651-f38e91231ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907a9b72-fab2-46be-b1ad-e9cfd134d5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfc99c8-6e5c-44c9-80f8-a3a42caeafe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e094e809-3463-4c6e-a1e0-87ba7c5f0038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c176fd55-4cf1-4239-a219-4004e1d3176d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782117c3-2026-485f-b1ef-6a911445a126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4a0056-a8fa-45df-b788-7f3fb7066e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34acf8d-e538-4e29-baea-674f4b27651a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1557649a-0023-40ab-ae44-a1b10be8ed74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0214a192-46a7-425c-8483-2f67f344b78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1775f1f9-bdd6-44c6-91aa-49dc990ced41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc407e0-4b9b-4218-a299-3dbc6ad6f252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641bdad3-be4b-4e16-8488-607276f6b3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c09df0-0fe0-471b-9ef9-c757ae2a971e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71770baf-30b2-4c07-825b-0af978e0069c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f8cc18-142d-4318-8b74-db62ba94d33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ad1b52-e7a7-429c-b029-f15677dad79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f6fb8c-24df-4557-adc8-9a137694618c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41b07a3-83f9-4745-bbae-86de1e6a616b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afb5f44-5268-4c93-8ba5-651487933875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f69258-8181-4a3a-a144-b1d57f1ae45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fa1e26-e5f5-4a6e-9ab3-e219973ea9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020677c4-f1b8-46ad-b34d-b72c343df05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537fd76f-5501-4304-b622-e361034d13e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143cfd21-5c53-4cc1-bab9-700786df9744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3a2d5b-da1c-41d2-bba9-f1d6e47213ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac282395-e751-46ca-9c20-8870bf7bd49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d53baad-f0d9-4013-854f-f4b0ef150910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a010c2c4-5f2a-437d-a478-cf8979ee21bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498359ae-1aa3-4f95-b05a-b88fd92cd20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f65b75-f784-40f4-8bdb-bd0f29cf8c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe36112f-1b85-47d9-bc4f-7a658730a7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82669aa9-6230-40f3-a0fd-d1ff36498c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525f086a-38bf-4c68-a3da-fb311ced422d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959beff9-5aaf-4b87-b18d-f275ee6f079f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5018f983-5314-4f84-815b-fa102b1a75d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e014a82a-856d-4791-95c1-a9f6fa9c6b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1404d34-7892-450e-98f2-67aa13a4845c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f52112-2c2d-4d96-b4f3-a609bbd78bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570389e9-72e8-47e5-91d6-5c2e07791b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35abe93c-7827-4b69-8fbf-34da9c037b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a417cc97-57e9-4bfb-81e0-3ccd2e358ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb95d65c-9aeb-4c20-a4d1-465cc1b27fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b162b837-16b0-438d-b553-17b99283510b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cdb852-1662-47c1-ab6e-6d64f6f47f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c6c017-6eb9-435a-8d5a-12e1eb4b1fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62fb437-e981-4f53-82ae-0c303188cb95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37604cdc-f886-44ca-9172-3735bcab02c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2723fba3-7c74-4c7e-b280-905de60f66de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2f4667-bfb8-430e-bdf8-3c6b9eab9e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39efe6f1-8919-47a2-bade-65ab13316362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0901502-3117-4792-862d-a0f9c2ac8f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce291c4-42d2-4480-a7db-f4fb2f592803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00538539-f8db-4d13-96ad-84e6a0905870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acec6be-f4ec-4047-a107-962898bdb2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2a9d35-326c-44a4-af61-4c6564251901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.37.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fb31b2-2f34-4f96-805e-29ed401dc68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a307ab95-af84-40bf-b196-53b416efc342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11960821-66bc-4e8f-be81-a4cd4956562a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9443c83-ab38-465d-94ea-87f96c7aab0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a099116-c804-445c-9dd4-dddbff92d780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d646e2f4-8298-445e-abfe-43e91d1454a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2e042d-429b-45a5-bbac-91de9ff01ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837aa96a-f7b7-45cc-9396-aba63615b5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52f1c83-42c9-4937-95e2-f4df53bbc013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ac8c87-20bb-44ff-b09f-d3758b500acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2996cf80-5d84-4d1f-8faa-cf7d1d1415af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17927be1-0d31-4633-a865-100d4a512b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10aff55-f9c4-4699-80b6-108a79fb358d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e04b4f4-fa2f-4dca-9fd3-9fa9274755c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daebd171-0aff-478c-b8b4-e6d3576f7351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371c07c4-32c6-462b-8263-57055cb4a764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5740d75a-c02d-41ff-aac3-dbc1209ff2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d751c037-1c69-45a6-b7c4-50b17b302906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa7eb57-90ab-4532-8920-8824f608657a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e55789e-ba86-4ffb-81dd-c0d2ec22829e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2529ea-229b-4a60-a1e4-180ecfbb3403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.9.160.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc831f2-8210-4765-a930-dd533dbc264b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.9.160.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dabbcb3-0f57-41e3-b225-acdc6a49a36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.9.161.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abdae3e-08f0-4da3-a71e-88725b665a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.90.98.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6090da62-16f2-453e-afea-20a39b100223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.155.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95098c4-c8d4-4beb-901b-d41d149124f5", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.82.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1996b6b-3bb6-4e9c-9914-19ae37e7a9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.92.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455f43c0-84d9-473b-9f8b-6a090f4d2729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.138.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca90499-eac4-4de6-861a-7413f6df6378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.16.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf99f55-303e-47ed-bc20-8ee751b29d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.169.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5ee6fb-4249-495e-aa5f-ca1ac5f3f535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c59bab-261b-4961-8f76-65419a410ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.234.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7e619c-7543-4eca-854d-3b69c73af2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.87.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df98a27-b054-4a8e-b3fe-96307fb7a135", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.207.224.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efef9a80-e284-48dd-9de5-2228f89200b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.220.59.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764683b5-a1a1-476f-9d64-4558a0a5c632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.220.60.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac630d-1056-4fa2-83ee-e7b885c81bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661ffc4a-862f-46f3-a947-d1a70e7e732e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ce5b8a-c758-4b5f-baf1-7b418c3b32a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec89cab9-a606-4b89-b26e-1e650bc4400a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdfb853-5876-4fbf-9c46-9e20da3c16e3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.157.68.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2e66f5-78cf-4398-a06f-225e921460d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.160.0.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dc0076-7626-487f-a4a2-98a6ede9db05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.212.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d31242-346a-4484-a5b0-7ca7d55f3b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71abce7d-f7b7-4431-9ca7-34a138987aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfff2d5-7911-45de-8728-e1e67f55d014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4259feb5-30d6-457a-84ed-740d3fabfd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.216.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6392fe10-724d-433d-9c32-19d97330f20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.216.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f571033-d811-44a1-88e7-8a21640eb6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a7c276-a474-4070-919f-a10184213996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d28f28f-389c-4ce3-a22a-2fbe74af5b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2516ff53-ed32-429c-b32d-457a268b7543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.33.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be25f258-329d-44e6-896e-1b1aba3c659b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.48.228.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d81d4e1-a674-4d7e-8c73-b40ddf3664fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68941bd1-ea96-4fe1-b99d-84462223770a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab8cd86-ec05-4d5b-a8c5-94e1a22b360d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935d0ec6-16d1-4271-b3b6-37b0100dee5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0095f970-9911-42e1-9172-fac759437e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408a4f3f-bfff-487b-a088-50035c53ede4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c6e60f-05ae-4bfa-8a6e-330c8dde59d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f62baa-57ef-4307-b452-3628c5310de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc09f6b1-2345-40a3-8ae4-e15a253a77d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e16b7a4-2e3c-4c76-93ed-d42a0ac84720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a064267-05de-49ac-a644-4fe5a9f3e7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce9181e-b131-478a-baa0-87cb398b95a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33585b3-3827-4038-9074-8eea3fe69d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5712822-97a1-4291-b433-9a9ea0a7e796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9ddf83-001d-4014-961a-b1e84a7f60d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99c622d-ecdd-4198-a423-de43d8394ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f145c37-80c2-4339-8586-3c6ddf8b1e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8eb0000-d0b8-46a9-b9e3-a3bcfc9e5872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bfcb0c-a6ce-44ad-ba32-9fc26d096985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.128']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4236430-432e-4a21-9359-3a4cc821c80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feade1c1-505d-4348-9c09-4c1ce14ebe51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e59ab57-8976-47e8-9ec1-6037586e7a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55937a4a-43f6-47e5-a9a2-6009b73ff3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0ab6e1-d0e9-4027-b085-b605bbff606a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2035f9b9-f080-48a4-9432-7e99f889ae61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65aa3b9-036f-401a-8fcc-056e19edd7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21811f05-dcae-4d9e-b985-ca6a5156352f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b8b85d-27af-425c-98b9-cb43d4517914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477ca271-c518-4103-9987-6fdce62025cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18478a3f-b40f-4a6d-a134-822a54ac98d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1251ca9f-3c30-4ec4-9488-c9c1d0497a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d35e0a-4f56-4bdc-8143-9063afcf9b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57399b10-40da-40b4-953b-5d60b2a53942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df8ddf0-03d4-4685-85e2-b0128804b7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a500214-a30f-4126-8b3e-17545a17d624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37326e60-bb2a-46d2-8102-66771440aa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d30b99d-6a7a-493c-8506-4e61ba659d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d5bba0-b71a-4a2e-a51d-37f21da70461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00dd06e-8b85-4fce-bd12-52db9e0080d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1456a4-dff5-4c9c-ba91-eb9456f1a9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf21284-37f6-4dd7-9581-6f76a27082ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9b5986-d78b-40c0-b1c0-955b86dc4a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0a9c30-bf4d-46c8-88e7-737fb8866133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7262702c-b37b-4a00-99a0-c9cbc0bff580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331839fe-8310-422b-aefe-0dd3703d6525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa491146-a7c3-4e3a-b070-6c90c5f2b2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14167056-5c00-4953-8252-bf146eca054d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71938a2-f8fd-4068-9113-a461c8466460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a05fdc-21c2-4a68-be87-93c141f090bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1426f4-2b66-4afc-a963-f425eceb98a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.161']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758e13fe-728e-4deb-a697-1402952e47b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c0de4a-bec9-4103-a83e-b667ad2eef16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddc618d-6731-44b8-9455-0fe1b13f665a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d2bbca-39af-4fc4-b977-42bfb86c0102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fd4184-bd6f-45fe-8362-8ebd28a3e4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90222a3c-061b-462a-8ebf-8e27d4c56791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff95c3c-73dd-429c-8389-7866a1ec4714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c972ddd2-0349-4a5e-bde6-4c53c1ce229e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e845b2-f1b1-41fe-b9b9-fbf7a180ad14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2598b652-87f5-44db-aa67-8e4a6369305a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22aca0fc-cee6-4118-8bd5-d83dbb4e21ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d570d1-1c73-424c-bc83-3314dec948da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.172']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23d05e0-6626-4309-bac3-948a3c027be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c40f08d-2c56-4710-aa69-c9be814bc682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0ba09f-be4b-41f2-8daf-6f1b6b7354bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3032d9d-3b44-41c4-abb1-6e8c8451cc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ab745c-6bd2-4954-ab50-fd1cb08f0c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77faf089-9404-43c1-98e3-e6d7b4456f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f936848-fcf1-4625-9339-39108e02a82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58b70ea-0ff6-4f0d-af70-0b849ae09d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7498a3fe-158f-452a-a58b-0690528fea73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a62948-3078-4d44-acfd-9a8346148c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb770c6-f67a-4155-9987-10120c92fb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31358e5-feed-4fa3-8469-bf68d5d683ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ff437d-198c-4004-a545-01bf31790eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b3d2c8-985a-4f2b-b6fc-0801c51d386b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d48f9f-0f98-40c2-85cd-3807412f78be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0ee3db-e65b-4b16-a0d7-ac047181391b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf63f5e-1ce2-4689-8e06-c5dc74d29e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba7887f-8f0e-40fb-be56-d0961b7f6f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1ee9e3-0bce-4d7c-86ca-3c6a655c52c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbeca98-a83a-4753-8208-af9567a7ba14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099f9916-5269-477e-9f61-fb8e28f9aaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fb98e5-3463-40ed-b757-e4812ccf2ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c756a5-b6db-4136-9985-121cba78922a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006b2085-aad7-4862-a898-6fd2d8c1e98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c18d06-b84c-408e-b16d-dea44d54123b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecf3cd4-2423-4199-a46b-5a6f4dca9e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afc8fe8-8790-4675-9316-c3fa234402f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6ac07a-4ca3-4336-987c-c325346b9a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c6e266-7ec8-49ff-b557-fe76b9ae73ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ad9d83-2694-408f-a2e5-db8b70272e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd515d6d-8237-4de7-bca4-835f002e19b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18177ab-993c-41fe-86c4-60e5c16f317b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb50aa8e-f83a-4899-857f-379aad335406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093ddbb0-b5da-457d-ad58-acc16e26d8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6117cb22-9b28-454a-940c-e55025c006cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1275eb-8262-49c6-b66f-83bab14c0fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4719677c-cdc7-4141-89c8-fa595a3ce8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2298c327-be1c-406d-98ec-8cd65dd78cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710416b8-6f28-4185-8c52-3b3b34ea0e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76944552-4845-48eb-84b7-43fe47ae5a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f453a672-5323-4840-a804-97c574cdba46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0b1131-7b7c-4fe5-988e-12a0410a983d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41033004-d296-4122-87ec-ed7a267ef0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460e65c3-4506-4394-96bd-4fb3982a8b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681db85d-2d01-43a2-a298-ea64be23d4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8056d41b-def8-41ff-8065-ef91b2de468a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6946964-d761-432e-b616-66a7ef5a009c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0857cfd6-e4d6-4ef6-b733-d4f7a26ebfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fd874d-b210-43f0-97e5-ecebc29acec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8435e3e-73e4-4465-95bf-b885b1f45228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f15b49-a6a1-4d0f-b80e-be3c931ee772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6937394-2ca6-4abb-9398-f30eeb9e284c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d13ed6b-0ed1-41c9-b15e-b762bc479221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ab395a-a78b-400f-8a5f-acc3f14c8151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b900a7ca-1d8b-4de9-8c2a-186e4ab86525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba753817-e956-4db5-b2c2-154a21c4da3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c8c703-4e9f-43b3-8b9e-80b68e696089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076c6be5-54b8-4acd-8f6f-24acf8270402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bdaf83-59b6-4086-a4b6-e373307e0852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26beadb-25b2-43bd-a2c0-baabd2ebeefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e075149-db9f-4120-95df-9bca216f4a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d71b5e-c253-4015-9e45-7c7ebf5acba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9deeeb-4b5e-4af2-88e4-cad6fc9c7549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edd0f17-cdfc-4f76-bb6e-fe46eec13485", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.240']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e56462f-f4ee-49ab-bd1c-5551f453f91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11623146-ea69-486b-8fb9-cb141c85ae11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cdc854-e71a-4733-b14a-f82e11735892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9e8e38-7665-404a-b56d-7e4fc272763d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.244']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b478cd87-286e-4285-8453-024570c7581e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06332fe-f353-4820-854d-45f7da7bddfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65485bc1-f0f3-4d2c-a626-e82529585ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c32c1c-df76-445a-83a1-c82b718d523a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be15094c-85dd-466e-beb6-06d9ade91ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777df385-0f51-473e-aae6-6fdde8677f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44037b6d-89a1-4461-bace-5204013a09d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a73c5a1-47fb-4c26-811d-baf85ed1f95f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.252']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda90ad3-7346-47e7-bd6d-81c964b8f5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a8dd6e-f53a-4f29-b4e0-dbf6d4bebd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c628e8a1-63cd-4536-9cf8-2594a0a47115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d483f5aa-62af-417b-8c2b-3b4f6c6ded1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58893664-ead1-4681-9aab-093e7132eafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebffee5f-9def-4967-9a38-aa27657e43fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752c46a5-91f4-41b3-8e11-e4e9026f9382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe5f05f-e793-44f2-8757-069046a76ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fe46ea-4d3c-4eff-9939-6eafa637797b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940386da-2ac1-4b8c-a565-c54e38859ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5086ec-2e99-459e-b0ca-a397d8ba45b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a841a198-2376-4081-91e4-f7fd0786391f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78b1a13-d074-4aaf-8632-79d6222930e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac06ad08-66ff-4e70-b40d-6cca2146dd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155dd7a0-d4d5-4d2c-ab20-8fe22390b5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc88638-35c7-40e2-962f-075f0b19877b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39486f89-3fb7-45f8-bf5f-ad3d62f0225b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4234024-d62d-435d-b480-0a4132bcc1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a740a7-32a1-47b4-9859-763f41713d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20535e60-6e8b-497c-b1a5-14ce3cd17af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73b2b58-fed2-4853-b093-e68d5492a7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7276617-43f9-477b-801c-623e954dfd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc211d90-6618-4147-b671-d4e899e10440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc209b0e-66fd-4d01-8d9d-ca1ab13202c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8b8e29-c39a-4551-8a0b-f92b78f306c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655e0b61-f67b-4cc3-a3b5-f7c8de45b2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f2ad9b-044c-4a4d-9a76-3db08c6850ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e7668d-2fe2-4df4-bbb5-67329fc2f048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b4989c-fdaa-4ece-adea-b6052939dd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.63']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a25df2-7688-4ecc-bea6-54948ff7247a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9068c3b0-957b-4f2a-9074-0732c35d8efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72470c4f-9828-40ba-9259-0af3046f7122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976ae661-7ebd-4031-91bc-6ecf1f8300a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b098b8-38a4-4333-abe0-0a349effdab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b65d1b-d5d5-4d75-aecd-4b4d9fe2aef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18ebb81-6bd8-401d-9894-315e4957d8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d080f1-3d6e-438b-937f-36a7553b45fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cc941e-12f6-438f-ae53-a6ea2fb0fd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a736ed-1cfa-40a3-9d56-91c18a654a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa7016e-0efe-4422-b0a9-bc3417dc616c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa402c7d-cc09-4f15-813d-1cfa6c5c62df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa507533-edda-4001-a8c1-0e45e91b3c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50db94d-60cc-4d9b-ab3e-07f1585e1e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70c8ca3-229c-4365-9abf-76515d6da7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224b2a4f-d110-4d6b-8268-06b923262861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004c0f9d-8679-4bc2-9f2a-342cae0a7286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595965e1-1910-49b7-a2e9-4b8d06189cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329460cb-ad5b-4a08-87b4-b6b1719483f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b09874-aa77-48c5-9533-1a350f264eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db5aef5-67ae-41e0-8794-82b5c4a27cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b7a2ee-af93-4061-9410-b434c6a5771e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c383bba-16db-4ccf-9c0c-b44949176a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bf2683-9fb6-426f-ba56-69461e6facd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae762c0-3de6-4e0a-b8d9-783d8e41aeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdcf97d-b194-431b-a50a-bad245aa0825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fe92a2-6309-42c1-9ec6-260aa1993d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7531883-e68e-408b-be77-c141611fce8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4287678-d487-4a86-b4da-47ffc03a0973", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.220.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b691ff0e-19e8-421b-8764-48bb82651b08", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.221.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57722cc6-fca3-45f9-ad13-b46375dcebc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.249.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d448e50b-1ca0-445f-a831-8d1b1cc64797", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.120.203.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b92d11-cc3c-4f4e-aba1-99efbcf7b25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f70f9b6-2c3c-4db9-9eb5-f96451aacee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cca07b0-dc49-44cf-a280-a29bd0d9fae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4436e72f-db8c-4953-9183-5fa627a5971c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80449a2f-5956-4f44-93b3-7b033a74ce72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc250d04-4ba8-46d6-981c-b6d6e379a1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1041d6-c054-49ea-a268-1435bdab0dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a877e14e-7824-4877-b989-6545f19fff22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbffcbf0-58f5-4cec-a114-1cac516af499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8524fd59-c3fb-47a6-b9da-0af68bfdbd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bff4aba-9237-49e8-8bfa-81b144a61e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd285f5-7f0a-455d-9586-036bca375cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927c49a7-94c9-435c-be8b-c4de441735e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb7eca6-0d02-41f6-add0-51445d032fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298fa18c-9002-4e04-9f6f-2454a28676e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efaa431f-e8e4-4dda-b1e7-bdf07951ba02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa227f10-1a4a-4f55-9d3b-8c0e1d718b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cebdf81-b5c3-41a6-8e33-541046899b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0e7c85-d2bf-4995-ab94-e535e1608048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86058226-0404-4730-a5c7-8dd7046dba71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d154dfc-4103-4ca4-b8ef-4fa5aa1b7c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f64c9df-1238-45e5-bfcc-2fd0fd1aed32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55728d1a-6716-4018-a7e5-a468dcf15932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39ed48c-647a-4e6d-a0f7-463b6951eaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b036ef90-0293-4d56-9cf8-7d8e2d097d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0e4516-ae43-4a2a-b033-ba1ed95cf524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b51b9a-c2c5-41de-88e8-ab220deaa991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547cf99c-c42c-4742-a9f5-a89348ea7b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7af4e41-6beb-4471-a792-543cbd2bd3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35e9dc2-77b9-4963-8738-53973114877b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1435bd5f-0b75-41c9-aa15-08df8fb54d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.183.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6e8f45-707d-4dc1-a9cf-adce9e3763fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.227.178.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0443c146-eefd-4972-afa3-7c4e9104ca60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.19.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ca8169-bff6-4d55-a000-224160daebc3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.47.208.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867345d8-a1cf-422c-9ad4-e645b96cd8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.252.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13114d8a-80eb-4b64-bbc0-402e2b1ce9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc0ddee-f26f-4384-a989-fe7ae37a7f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3a281f-c850-4a35-bd22-7151e7922e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.206.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584e7339-51ae-4caa-af76-98f0a2d28bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9058d45a-501d-4988-9ffe-c0d6c5a25c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.107.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dfbef6-2a0f-4544-80e2-d10ffc930f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.108.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001a4d6-38e7-426c-afd6-a8ec0cebd66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.120.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cb2d8c-d049-433c-9dcf-c4b453006cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1128242c-1643-49ba-88e3-dcbb9fb247e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.151.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279cae0c-b6e9-4652-9a2f-4fff15ec3eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.162.254']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7364b861-ef37-41da-8769-b76c6b96af70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.188.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f377bbd-1877-4c2e-bb6d-5a6c473412a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.203.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd92a4cb-42d2-4ae6-9b2a-55178300c22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.244.135.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae79fab-41a4-423f-ad29-2ec1ad60dde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.244.193.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a68c74-c131-4aff-9aac-f6bf476799c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.244.68.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854ab02b-2cfd-4c4a-93ba-fc21ea232f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.244.85.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61a1232-2fd0-4f22-ad15-89ea1e9c1114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472f64a6-eb6f-4008-b37a-bfea95f75e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d38aba0-3965-4f8c-b225-76f4e228d6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.184.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef242e3-223d-48a7-9a2e-622057308a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dc1d88-7ced-451d-bf8a-51a7df56683f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.56.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f060c03-e169-4f5b-aba6-f3b095ce393a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb42e93-3959-4934-9ad9-1b270b6c1cf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85815fcd-2e00-4792-bc2e-f0ff564b9ea8", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.2']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efd6007-c18a-44a0-be05-53f19a7d7295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f40144b-aac2-457f-8526-252de4eb76da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82aabc23-40e0-42fc-93c7-38ae45820c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78131701-b56e-4290-9901-281dbcc44a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83ea9e6-e7d2-4a87-ba1d-7f931386cb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ab6ca5-df6f-414d-80a2-9d10e5d52ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53989dc7-de27-4cff-967c-470f53718dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c50914d-9eb4-4822-9bd3-8dc39b490105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ef7795-5221-40db-8a27-e81f43550617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead762d3-8e78-4776-94f2-062fdfffdc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7159216d-88ff-4a32-9e1f-bd58d92378cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760535b5-593d-4ae6-8d8b-9144319cd2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321d31b5-fcb0-4ac9-8280-a773354cce6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f62cb2-a3bc-48eb-9938-1f8aae8c8220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e78527-54fb-480d-a5f3-1463e76f41e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7055309-7615-4e22-9592-5d2946732688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d668235-9cd3-439c-b340-c596644f4914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94743a82-9234-44fc-b53c-a4d118ac1d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a99994-fcea-4928-aade-a49805ba1dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb2e9f3-f1a4-4059-bee1-66f96d5fef98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade30540-d53a-4057-bdb5-e52e80165766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ad24d5-8cbd-4d16-aab0-06950975e66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebf4a2e-004b-4c67-b941-3c4c15e5b8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.55']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fa5196-d1c2-4c0b-bb5e-cc70ec94c4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479fa724-f432-46f3-a76b-a822f61a4b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20cbf45-1e57-4b5c-b2e0-cc27676500ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40460ab0-1579-4f10-89ed-85bd70c743b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272cac02-cfc8-4565-9040-a4b358d43c4e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.216.172.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97af555c-facd-4656-a64f-6200ee199309", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.79.251.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b240fb2-5fe0-47fc-af8d-59e1353c1826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.137.64.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca245e73-325a-496e-853d-5e01e527d074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.137.69.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864b7039-a3d5-45df-9dd7-12ecb5777d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.137.71.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f185283-cb84-4b46-9cbb-4b756326aea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.137.73.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d58076d-2572-469e-9481-4f4bc222c26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.198.64.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb8e319-1e32-41f4-9055-08597ee73ff4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.28.138.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62672b8-2fb9-46c9-a1b6-0d936d1e237d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.42.18.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d92aa96-cea1-4f85-a759-fa0ccb7de02b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.53.231.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8f69b1-24f6-449d-a7f8-b1375f3bf036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.69.172.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c125daa-a43e-4a50-9e61-1dfb4da45ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79052cc3-38d1-49ee-b6ce-bb2b6b9e93d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810cb9c9-30c4-456e-9c24-270a460e4608", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.87.40.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18466442-c8ca-4aed-beb9-1da9bc90ce81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858e46c9-940e-47e0-b94c-a62c09e1a8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5382e29d-0039-41d2-b8de-f9fd0ccdac56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1420ac10-7264-47d7-9106-028e19f2f015", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.47']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b56cc3-dff4-405e-b554-2c8d6c1c2fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627f3d66-4270-41bd-94d2-f36d6dea477f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.2.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393f6dac-04ff-46f8-a0f3-c92b815eed4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90bbcc9-9dc0-4eb4-a6b5-e5ad77e235a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57cbae6-5cf0-4fa6-b8c8-0edd2e4b3f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a62d141-3639-4656-8bdb-c07ac03252ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee560d9-4156-42c3-b2d2-c268283b3f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1d9b83-2845-47d8-9fa6-b9b454b03a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.97.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ce0526-8300-499f-9faf-b893732c48e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d757d216-d028-4c3c-aae0-39164cbfb3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.100.213.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1d68fd-7bd1-45c8-b2af-56f05429c64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a141cb-d73c-4670-832d-71d0173036a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5948c8-5168-4f38-a679-d9e249b259d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043d7edd-98da-4733-97eb-3e4b25e62197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abdf1b4-dec6-4552-8ffa-ffaa542495cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a683aa-497b-4268-80e1-8e1e71501953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e7909c-cbd6-466c-986c-a710387a7eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df35a6bc-e326-49e7-b55e-9c591a728b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec31ebdf-23d6-4513-bf24-fedea7dcb465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2d7104-80b8-4475-9ef7-89227ae86728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53bf389-bb5f-48aa-9057-f42471712863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d2baf4-632f-4820-b47d-34202ce1d6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03eaab45-256b-4081-9620-953d01f9527e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e9f29c-b98d-4efa-8c24-dbfe2e5b6431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dbb377-2285-4248-b27d-58b15bd13970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f077a98f-ecc5-4b28-a582-124f16a755e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb7d894-a91f-4b44-aca6-b8ee01667e35", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.147.17.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a01982-1527-4674-85a2-df64733f308e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcb5785-bcf8-4d68-b696-cc905a5ad95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c5e229-c767-4038-90a0-1e82ceaa9edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0b63a4-1faa-4424-89b0-12ec68a4f19a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.155.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fac7625-75df-40c0-9c0e-003e8ea90c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.173.52.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400fb571-2f38-4024-bd69-cc4af329a839", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.211.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bd9b20-b77a-4157-bdab-e608c489c35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.26.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4b9920-041f-4343-af50-04b2e72a2402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.190.253.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35aaf68c-ed55-42e8-9104-cca70dcc447b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.101.9.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfe4f38-ea2a-4b33-b3ab-f0e4fc96ab58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.106.33.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791d586d-ccd5-44a2-90a6-ec4aaa0f636b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.110.236.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dba787f-4e02-4c48-956e-942ba74c973f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabb6d8e-92b8-4971-8892-8645d76ed5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ef7800-4930-4a44-9a10-4a3820a2f660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d331fa0f-6b30-49b8-8cf8-29a259bbd372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ae966f-6dd2-41da-b0c9-a10df066973b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a792445-ae7c-46d6-abf0-fd99a8458811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6591b34a-9c9d-4385-b18a-ac30c85a2e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95608266-3e12-4b97-851f-6b24a0a99537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d81a20-436f-4d4f-b52b-6fff0c540c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8cdb4e-dc50-40d6-96eb-6a626005edec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba5f631-db52-4e51-83b9-ec313b9a39e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1e6364-9f2b-483b-b2a6-eefd9b7df22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24649635-4fad-49b2-9e05-190561520823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753abd41-f9b9-459b-8203-d592a539105b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a064f9b4-34f1-4758-9ae5-a10f2fb2b611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0fecd2-1a4e-4952-b445-1bdc3af257db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a4a27c-ab8c-41ef-a125-60dc8671bce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea40df0d-4fa9-4537-b95d-59eea3e91872", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.143.188.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afcd31b-958a-43d1-b3e9-b5fd0a34c3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.174.185.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b994084-d5c1-4515-a20e-f85cc23f09b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.181.155.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0f4e6a-c452-4eff-8f4a-08729ffd3bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.72.3.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1824adb8-7cfa-4df5-ac8a-fc6ca7cc8a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.76.58.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6242e4-3417-4107-9823-92842c57ed15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.137.86.120']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f788875-2572-4dec-b22f-cbee34a1117a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.145.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ca7d80-e12c-4882-b9b0-a3240c0079b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.155.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcda5cbb-8b4f-497f-9f13-0d7403e78b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.218.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20af0fd6-5f8c-41c0-9252-328cf81307d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.147.64.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f32a443-d6db-4d26-80c0-6c1ad56fb313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.211.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730050c2-5090-4ecc-9cba-8ca073b8d669", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.154.4.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1119034-f408-4052-a467-e95686c2d108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c66c62c-3309-4adb-ac4f-380580395469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.112.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20a7663-9e01-4925-92b9-dfa0147170f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb2810f-cf05-456c-8652-a674b3b6bf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.124.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fde535-64c5-453b-abaf-22d974d76b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132a7d46-9bd8-43b6-8fd9-c41eb7d081cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.200.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7e68eb-c8a3-4354-ad78-36b9accd0627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b522724c-aa85-4e84-b5cc-2ab498d434ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.214.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1faaf9-0458-466b-abad-e680a50d3fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.76.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79919939-4547-415e-9d0d-2d5ac39ef6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.82.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e516655-13a2-42da-b521-d507f097081b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a625b83-3baf-4890-9402-4779e7efea74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9750c594-23b1-408a-85f5-ce1543157a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be09b9f3-bdd1-449b-9ceb-d288a489b83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.129.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34445e9-e811-45b2-9249-0ad305a7a6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.141.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be53be0a-eb25-4e1a-a8c5-db4fba081dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.142.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e0c5b0-56bc-426a-abb8-7650101f4120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.157.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599155a2-1370-4595-b213-e29d05e797a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873e1f97-88a7-43dd-a024-421c41c6090c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0aebbf0-795a-465f-82ea-05f8d16bdf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddca798a-1ec5-4e9b-a978-b94faaebfd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042f8dda-d177-4f8c-af10-aa28e4d6bc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.27.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea749ae3-9590-4572-8012-303bba5b1389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.28.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63ae61d-7288-43f9-b88b-e148a6773297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.32.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6ca86f-57b7-4926-9266-d15d9f558352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d4e815-fafe-4ddb-8b07-9f44f3631b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6462481e-e29d-46b4-8be6-5f50c9d72b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e6bde6-b671-42a3-901f-45593917f8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2219b295-3c63-414e-a8f0-c08ac83fc65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef21d078-ac66-455d-9d31-634e03bf75ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f81c6dc-ad6a-484f-bd3f-6b8b12cc50f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e3b102-e5b0-4918-8f40-5a1d36213742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb35001f-b84f-4ac0-a079-602e27cf23a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3060a40-137c-4ece-a6a1-61d8ec6e6460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d28e84-9591-4816-bc2f-34a967e93838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bfefed-c903-449d-8ca2-56d63a7a8330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457f7295-bffa-4e16-92f7-1cd919c34be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d43725f-6282-40db-8ddf-ec2902a25bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.0']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7ee4fc-e14b-4e1c-bdc8-584989a986aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce9c408-ad1a-4cd6-ab5b-40315553cacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.190']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1652f5e4-9877-478a-950d-98e098babd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45eafddf-ba0f-4414-be42-852677b23b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00eb8b5-0173-41c6-b2a4-9296db3d40cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee75784-aa43-4633-a236-5c31384b3811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f0a9d9-9b04-4277-a47b-4d05d032b662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb8531b-1fa3-48eb-9d6e-0dd5a0045bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c507aec-eaf8-44ef-91d2-143cc49950fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc914da4-907b-4a73-aa18-594aba61d302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3211d0-c213-4b2f-89a2-0e270c6ddc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4095e4c-7441-479a-8c00-3cc83c42efa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7681e16-164c-4d21-91b5-780c03368693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76892ac4-a460-44b4-b683-30e775844bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898ddcc4-f2d7-4fe1-96bc-b0459fbde261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898c45e2-ac90-45d1-8fe3-93b6fa4804c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c9b762-4ef2-4d99-b1af-2453ae53b92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.18.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2898a1ba-2b50-44e3-9216-dfecc8032c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9634768-b23c-4726-b970-55ac4cbaf66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467e2e30-0c99-4cfc-afe7-1f595fe0d9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a68fc2b-4572-4346-a447-eba587343c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43076886-c89a-4a4a-ae30-169483d0a373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e01676e-1e54-4b5f-b752-94b1f51f22f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d21e25-adff-4f63-a6c6-fca63e46b28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7527254-a796-4d6b-b241-b2a6fb69bdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51385294-8b54-487d-9951-e1561c916ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa134fbb-744b-44d3-8167-2b7a1fb70ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c08ae76-e916-4046-82c4-3aed0179be4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70246a4f-4f62-4729-b429-6dc5938c4cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198793d8-6d32-4641-b34b-716de660fd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.214']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b341533a-e4d1-48d7-8942-fd10ca812bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.99']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b74f71-8eb2-4372-babe-4dc928713ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfaf4043-da83-497a-a103-b6008f8f66bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f94f43b-2af1-45d1-a127-1957231e7ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5163c061-afec-44fe-816f-786e9d082750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f721b22-d7a9-4b84-b2db-95cc9b3d75c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.222']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2563513d-63d4-4ee5-84a0-5a053e22552c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9936f5a6-ea48-4d44-a547-8047aa78c5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.65.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0cc0ee-d696-4007-bf24-98d0f528fadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175b7721-a290-459f-a683-d8bb606e56c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569f1028-ec75-42cc-a1ca-14c0017ac7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a263a2-0710-4120-89ec-94ee8fd92acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5eb54b3-ed28-4b77-992c-e7320bf8d160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87207234-8aae-4091-87ac-990d818c87b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40408ef-2706-4fac-82d3-af1b17eaf788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39886864-19db-413f-a066-5dee662306a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146870ea-09a4-4f7c-8e95-1debd55955be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.228']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119c6a95-b0d0-471b-93cb-09cee6e1e214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0677ec-2c86-41d9-af8c-2e5300bc5e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.86.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b689f9-fec0-4c4d-980c-77b7f03409a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.116']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6a711b-3758-456f-8393-e671d6c1849c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d03ce8-9c89-4f61-9654-214d2d6ff202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea880117-7791-438c-b566-8e2cddaa45ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.76']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffd9814-5980-4d61-ae2a-8cf96f62f2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.111.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3556f8b5-481f-46a4-8be5-9940e6f5488b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.33.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f01e92-e25f-4009-af0b-5515b9bef544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.218.61.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56134d31-267b-4d62-884c-1befa0d6a5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.100.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf29808-d5f5-4a0e-a18b-e41b76f94b42", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.165.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641da5f9-508f-4212-ac97-d2c61ec94192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.79.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f782047-903a-416c-8c56-ff1990def831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.230.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea96dc1-8671-4d6d-9576-6d177b9bc17f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.229.229.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4673492c-6654-4423-bc32-1b81daa384cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.3.123.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d557685e-9be9-4ebc-89d9-50941b60b376", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.49.177.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abba400c-a78a-42bf-83b0-53e71615e320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.76.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e570970-c6e8-43fb-aac3-626f410e780d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621f9999-75ec-4724-ab3b-3d8f91b1f5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d47cc6-a475-4552-afe0-fa99e364ee71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fd0fc7-be4d-4394-8eaf-f811f861921c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.68.150.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8faacf-caa5-4076-95da-7ecdf7500bb5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.37.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc21ec81-78a2-42f6-85c7-49161618aa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf83b82-725f-4f00-b06a-b7ff95c38871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206e6d83-d52d-4086-a1f9-a5babedb8295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9556f18c-58cf-4150-8b2b-e0f238699398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96002035-9ce3-4531-b970-68e00cc0a7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673105f4-3a06-44f1-82a7-f929a0159f29", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df491a27-0b68-43f0-b30b-2bcb1587e9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2258930-f778-4284-b02a-c825206819ce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fa9c96-f5b0-4bd5-92d0-4c702a450fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8387d9b9-3725-4ff8-b50e-6eb0a7ea3414", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5de290-ea35-44b8-9aea-c40ec019134d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0725075c-a6b5-4ea7-af3e-aab325ae4d38", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e5ea2b-38d1-4671-a742-2615a95586d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113b4f2d-0962-4b06-8c3e-8987641ea982", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713c73e9-d654-4584-a6c1-d1e567beced5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44e0a92-44e1-4cf4-be08-191b193d9a97", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f8f77f-929d-4359-9e16-031fbeec07e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e033dc-9b7f-4ee5-86f0-906fa3dad705", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8fcd35-6d59-4787-b6b9-3a529635cf38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb82a32-9610-42f8-b52e-0fb3d56bb1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848a5599-cde5-45e8-9677-27137a1947e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5e704e-2450-4b46-89db-0027faf0e678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.30.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279f9659-2d55-4393-b199-cd7800b6cb8c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.177.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23b7ace-911a-4e74-a913-0512f8169c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476433ea-6960-470c-8e78-e8fdee4e9d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.102']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a538bd12-1eac-4e75-8cfe-811cdbfa4db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a43521-311c-44e5-9ea3-e88077c7efb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.104']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6e0437-0444-4942-9dff-142805bb2ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20be88e-b30a-4504-8cf6-49198a47d8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50845df-b1e5-4ab7-8bea-c98322f217b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71c8fe5-29d6-4348-ad63-f6e16d213c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9eb9a08-5503-41d5-86e6-dc2e3e14fe8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec89c9bc-c4dd-4fd3-8627-1636cad12970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1df2353-f9c2-4d16-8030-3c4d8867428f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf388a16-2191-48d8-bfef-cc1eacbc4de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e24193-fd21-4455-8252-b09e5b109c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe188e99-a907-4951-9d8b-3fa013f37fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6a9480-1c6a-4472-b0e1-c2a958471654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7656f647-5de1-4609-83bf-859c63dfec84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.72']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb36726-5eac-433e-8a66-07cccd7a819f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8fde96-c592-4e81-a721-8957d4512e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd12719-f7ec-44f3-b640-326205668bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.80']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1cd526-31bc-4e52-9c29-49b5f4260ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6670226f-00f2-4c5a-a359-9f7d6c89de95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.84']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd58ba43-f708-4966-a84b-d3e43f67ab6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883f4e91-85f4-4e6e-9376-d7493c10e2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e39d04-10f0-452d-8dae-325b545d1b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c125b9-2671-4119-a74e-68566e8e4845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1bc485-b56b-4b82-9dee-fe25e5a6ecde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c844e0f5-28fe-4410-9b76-d44d62f7c26e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.94']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eed178b-c5d9-44bf-adba-c28f82638ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69630145-da03-4f62-8d6c-5d4b55c838cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc3ab7e-be5f-4338-92cc-c9f553c590c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef8b0cc-2910-4b8f-91db-c4a143681df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e60df88-2b87-4875-8ea3-7dda9a206710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166c26bf-18f8-4793-8921-25685a1e767d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.220']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f9b638-0196-4b3f-9f50-b008eec9fe6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.224']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8d774d-1ffd-41a1-9302-b27ff76af693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f9082b-e4f0-46db-8ef2-e94c206de4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9003f7-3a19-4606-bfc0-a473ca6d246c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f41cdd-296a-4ff1-bbac-1a4c31161cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6f3f6f-6093-4010-82a0-dff9b2f79c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b621aa57-68a6-4cd6-8371-fcee2f4ae058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57b3331-6801-467c-a179-2b757e4831dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697e204e-01c6-44ce-9cdc-8359b78f8b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4f23f7-b891-451e-a2a1-e16710b92f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70745c6-123e-4888-bff9-6c302f3ed9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f447f697-750b-4442-addb-8d25f9e5cb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.248']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7419b631-f059-4729-9fb8-a03e2f869346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11ffcbd-2611-4e85-97df-24ab9cbdf888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.211.37.66']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcf991b-5fc1-425c-96cc-92b27194eac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.237.237.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85bf037-19b7-4d1d-a795-f251a393afa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.29.245.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3045abdf-3e49-40f0-aa2e-365e9b1ddd3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.39.62.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0204cc-544b-4007-ad8a-433f2471e4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.212.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26423a86-541b-46bc-af59-699e6ec07233", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.88.97']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626560c5-5131-40b6-82cb-9ec133990442", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.208.166.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abe8ba4-441e-4ced-a0f2-39781f97dd88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.36.105.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5b25aa-8f6e-4357-8f46-f009ee0b308c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.80.253.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f8a978-3a37-406a-aab9-95fcab51adf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.86.109.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b209d92-9b1a-4376-8a2a-bae49d33ce45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745948c8-277e-4771-976b-146dd5b02dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.171.249.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aedfd0a-84aa-44a4-a30f-50c141abaf8a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.224.173.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e932fa53-4ee1-4980-8f7f-23a72b2aa86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.250.171.64']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeb376b-37d1-45b8-ba44-4a59dd692c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.17.52.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c328ae6e-2ea4-4af8-9a67-54b1a762f396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.201.20.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb67e9a-4115-4710-810c-eb4215bdf2bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.201.243.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91978715-b12f-4fb2-8076-270a2c8654c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.22.62.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848a2fd7-7ce5-463d-b16c-38b1ecfd41a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.240.206.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95ecb22-eb8d-4968-b1f6-54284db9b09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.246.209.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a18f9d-2be7-4549-b252-dcacbf23cba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.138.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43185dad-5bc4-4cc3-932c-6a88276cd875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.169.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b891e7-36c4-4d5c-9d4c-148aba5cdf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.252.92.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71efa3e8-0b68-4623-a90b-acf5fca57ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.176.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca4ecac-169a-4d4b-ae1b-5428ee65d4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.176.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903d35eb-4372-4661-bb6a-0881c9b2ad05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.176.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3e0d50-3eec-40b7-949f-e365a21eedb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.176.20']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff4bf52-db9a-4a6e-8cf4-f411cb4b5628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.97.68']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd12bac-908b-4c42-bde2-bb8359bace8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.37.168.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a733a5-7ad2-4dda-ac36-7c23e80d5881", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.46.247.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5510ea9e-821a-4304-b3be-bd0afba0aa1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0c54c0-d8e3-4816-bafb-d4f52f16c7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da047f16-4986-4cd3-bf39-ec031efc40e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fac93cc-a1be-4b9c-bc81-4458ebb7601e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.133.206.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f54f91-b1b4-42ad-9612-8502b591fe78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.193.100.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8865a35b-4512-4f3b-ab21-e6c15e567df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.198.247.230']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db82abfb-f18e-4ff6-a646-1cd415b4a232", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5883227-ba0e-454c-9424-58983c126757", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412994c1-e013-4cfe-ac42-262f2ff7564a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b77e945-b9f2-4999-8303-9d68f26f87e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d504ab0-fb21-4fcb-8bce-2156459775b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f86108-c7ad-4eef-b2ff-23bb01a71449", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfede68-6277-4caa-8624-9b1895ecec1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da5f124-24ee-46cc-a421-c413a4f4d709", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8fb6f1-4b64-4e9e-bdd4-2d67ddd48aaf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a86af2-b41d-4c70-9833-1b3d0d864356", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d12eb3-1d7a-4131-96a1-54cca05e0942", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c44edc-1a1b-4126-b213-e0f8b10526b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d27da0-99e5-4853-9c9a-fb556ebf30d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d736ee-889a-49d9-9c87-24f746a99535", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bb9db4-832a-42d6-82ea-4058320e06c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c67ad9b-3ca5-4cbe-95b8-db181a031c37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f943185-778c-4f6d-9ab0-a0f1339a566e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e676f249-df98-4b26-b3d5-ee5993687b57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da381186-9be2-4cf1-818d-aa44c73636b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f25c722-6e6e-43bd-a8c8-4a3be79c1a31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37b839b-bd70-4e44-921f-ec16a979cdf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1181827e-22d5-4413-b01f-4ee0ea90089e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.227.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39e74da-59c3-420b-a944-72e8afd1fe1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.147.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932e3160-e425-448d-8c36-79471a3c340d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--face0d3c-8da4-4c46-a093-ca2888d16c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c9b873-0af0-48b3-a9b5-d4a2c39b2bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef962fb-9a3a-4324-992c-8ea6b4a24b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.64.233.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f07d0da-06c3-421d-a710-b96649a92c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0613f0e4-1b4e-46f2-9a89-ada1a4d947b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a603d5-05aa-4047-b5ad-4773f93a74a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fc1efe-f24f-457f-beed-874b1120a907", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.30.206.246']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a7defa-20e3-4073-b8e4-512dead5cb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4c8839-4aa8-40fb-980b-572013e9f71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3800244-a1f2-43c0-8314-0ca5a332269d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae97aa8b-bfdc-451a-ab52-3e2515be95f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76381873-e40d-4190-ad1f-1ffa8b49d787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28242e7-cbf5-447c-93c6-9895f509a284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407830a3-c9b5-429e-844f-89cf84fd0f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3097ca-8f9c-49d7-a030-0bcb189b26d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.97.9.232']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b357efbc-ca2d-4a01-91b0-d5f66d90a1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c8ca3f-e914-4fba-9f9d-88df41bbfe2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.219.208.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0773bf94-fdcf-4c0a-abd6-caa963fc72f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c5ecb8-e641-4da7-94d9-fcea934c9cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db76bda-70c6-4593-ab72-9293c16602f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663f50a5-5d4b-4c4a-b126-8e7eba7fcd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8e1006-dff9-4b6a-a863-0de443257c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869a4779-9181-43f3-8c69-ed98ffff6c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349ee183-2ee6-4b6f-a6e6-b07e5aac0315", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f055c1-061e-459a-b69c-5476a40ae7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.59']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca73a08d-9136-4801-ab26-611a5bbc8b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7c3fbd-bfaa-4f41-80e3-dfd6900f9af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.86']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be917a82-e6a3-4d75-8108-5a37ab01e3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0ba2b0-ac72-4a4b-b8cd-38e8a7cf7a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f5c935-252b-4487-8448-63a73f20c345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27124d43-9d77-4b69-b8a3-2be8b79f8274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15909025-53c3-4bc4-8876-1a8b2f41482e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9624067-ea11-4245-8423-d2c17394cd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2867142c-ad76-4b40-a42f-66007b0422cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c60115-6ca3-4b6f-aa08-69121e6fcabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.97.40.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eff9fae-a173-4f6d-b0d1-ac04957c65ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.116.62.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc592c55-b6c3-463a-b9f4-ac1d051412d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.126']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4824fd2-c61c-48e2-8127-9c68ce221e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0fdd07-f482-4135-ae6c-8c78ee7debc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202235fd-4749-4b5b-8321-8882c2a90ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bc5bd9-6209-4f1d-89d7-3c5da902631b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038db5b9-6f2a-457e-8750-5e4533c057b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4e1784-b5f7-4d17-b689-8550f29941af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94b82fa-b672-4b8b-9a0f-8087b8a244b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.249.114.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c150392-e0ac-455d-ad85-1986e869c635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede56215-acbf-4a1e-b48a-e4b61dffe50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.99.193.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e516496-14c9-4d3d-9c48-f74c75a22ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.106.110.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1632b09d-ce69-4471-819b-e2dd8a94f5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.108.118.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f53a9f-f1e9-4d58-9a77-6de2a16a4a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.172.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcb3448-eff1-4932-a24c-e0e49514b7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.125.154.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e379d60-6ce5-45c8-981f-97e483b68652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.125.154.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2514f084-d493-4a19-b976-331bf7e0e6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.125.154.192']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f2e7ee-226c-4361-87ae-018742af2772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.127.234.122']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83fa49a-f29f-416a-a921-b9d79ca5a72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16993da4-e69b-4cff-91d6-aa99751d8a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.167.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3a803e-04b7-4aed-a859-d7d6b575d640", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.146.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b673f761-367f-441b-8302-453c4d4c6b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.10.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f325d3-a9da-41f4-a9b3-8c9b86537c15", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.185.81.112']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115c6d2c-88db-4e2e-9b41-c0feeecd511a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58eaac70-ade5-49f9-8642-d7298353c298", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.70']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194b61fd-4f9e-49aa-8516-69ea533ff5b6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.8']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a26b39f-0b0e-4791-aaf3-11c8c877d994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1027352f-cae1-49aa-986d-cbaa6709e97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bf05e4-a654-4b51-bdd7-47b2366cfdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d68c53-3ffb-4530-9e9d-48c69c26be02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d460ae3d-2c06-4774-97a1-fa8fd15e0c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3060f6c6-5998-4c43-ba5e-09062e4bcd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041c307c-33ac-4b54-93f3-fc0803f89018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77639441-e319-41f8-9e3e-770c1f849cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c753600d-8256-4a9d-a1b4-11aaee2a03cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf2d1c6-431c-4935-9640-a90b70c92bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b42994b-5d2d-4d33-8707-992b01daeefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee887aaf-8215-42c1-9610-3b42606384f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001a1858-130d-44f2-88ce-a3ca51db16b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f21385-b997-4976-85d4-d94e2be92f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c651c293-aaa4-43ff-bfb2-a3c44caf91a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae4013b-a271-46da-ae8e-f0a831661474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb522ad-b8b5-464c-b67a-996331bcc278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.160']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c2ac1d-a778-49c7-af36-3f019b349fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b631de89-5533-4691-97ee-34b99a0e58b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.164']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516cc79a-610b-4a96-a128-d4629d4915a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.165']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0d0605-5272-4a68-a4df-0aeffd78ca6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.167']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5933b116-100e-4d8d-a0bd-a051ec196876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e8972f-48f7-4bb5-ae12-de5bfdde1901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e25add2-7e9c-4edc-a3a5-63af1da957de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.174']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92bf839-3757-4177-a07c-b1ebfde94006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.176']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88f6721-fbeb-48d7-94cb-050882a3f787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979939e0-8c72-4fec-a169-d05991b41fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd81405-d099-4401-9d81-44be1475dff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.180']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecce2ad5-184b-4a2e-9928-d58cdda408e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0400d0c6-e307-49fb-8a4d-70b8d2bd27d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869b4b48-b71a-49e2-adde-cd4d4ae04bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.184']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bb3532-aa05-4772-9903-a481c9eea52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.188']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396834a9-f605-4bef-b9e0-010d91893075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa9f4a6-bfb4-43cf-88c5-c22b4f4a3fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.211.129.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce90627c-6d3b-46fc-be90-3bbff07c5e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a72fa95-abd8-44d2-a194-e4f972955c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.113.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152f138e-1279-47a6-8f73-249737d440db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c521806b-570c-4ce3-8ca2-ab8828080bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0855244-4361-482d-a31c-5a1fb97026b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7f0afc-f555-459c-89f2-6f3782d5e9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.116.208']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d04052-8f1e-4804-8b6e-1dce4ed5428b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c10f7a2-f61d-49bc-b8ce-c0e9a74c7bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0bd99a-0e3b-4566-b547-4a671e535430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.134']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a99fce-37e9-4979-aad3-627bd00e1965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b23c55-3b44-4713-ac55-c11774cffa3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826e13f9-0a86-45f8-adb3-26bdc9bba978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.140']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b396f45-cfb9-4f29-9b73-0e5f8a0cc7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00019a6-2fa4-4447-a472-49c801d926c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36bb7d1-a34b-40d0-9156-e14152e1fef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dbaa74-c200-4abc-9295-7edb545f1cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b53df6-5ecb-43bf-8642-16694fa1b73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.148']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fc257e-4576-4290-9597-f3d2fe2efead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d11c2b-3dd6-4b88-bd5d-f74a9c43d3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8811df19-350c-4687-9093-3a2138df94f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.152']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe37ee21-21f9-4f3c-8c28-ad8aee41c517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3aad739-e19d-4267-9fdd-2fcc4d572e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce788b0-9a9d-49bd-bfda-eb47d1e595d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e3fefd-b824-487a-86c2-776a2a2e0cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.156']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e2dc54-e6cc-41d6-9531-b85520c4de46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.96.216']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09ec056-9ebb-4edf-8784-1734c321d464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.12.110']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15688547-f8d7-4f8f-ba3c-11e3d4593528", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.47.53.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d418011-834a-43d2-b168-639490b04d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.54']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1f5d08-6e55-4c15-bb59-4bb5e00a6f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.108']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3657c967-0662-4f80-9dc0-8e8df4ce36ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457e9e96-b8fa-4521-94ab-3a26b9076b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.188.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fa761a-13d6-42a7-a974-ede6a11fd09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584ce82e-8fae-4b4a-a38e-519646462334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584270ab-695d-4e0a-9787-632524f8f550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e512d999-1c3a-4985-b721-3c497d251426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4340908b-b360-42c6-838c-7f7a8a2bcb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7c01d5-c2e8-4667-87c9-23b11807e057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37a75df-2e64-4afe-b800-e89c853f525d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb3d18d-8a3c-486d-8d63-e89d9c9a741e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc47d045-4050-4a0e-938f-8cd71d105645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b392add4-d3f7-424c-95dc-f76a1c2ab730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102cc71a-c1de-4a0b-a953-8362ef572363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45190b2b-de27-4273-865d-c185c4208a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739ae16a-1c1b-4e20-a917-102575a17822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6774481f-17f4-4be6-b686-ddcdd39b62b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d09f098-aecc-4feb-a807-4f638f1e7bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3679b9-98d2-4a06-9b2d-245513d69874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207e421a-f864-49d9-8e55-bc0790a842c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd8c9e3-2e9c-418b-a9f4-a9658e49b3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.18']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b1963e-dd35-4758-bd7c-03f084bf6c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23296e1-50ab-4eaa-b483-82b1dae2ff8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89dcbf2-9d0f-4287-ba65-9bd4cacdbc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b467e3b-f767-498e-afd1-dd1745d18087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbbae81-44f9-43d2-87c3-914aa62f9431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dcf704-80fb-4e6b-b204-1b52bdffe8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c1c067-e212-4a54-b1bc-309aac936803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e61092a-a5f3-43ce-ab66-64ef67a5eb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75701b38-7e35-42ec-81cd-c018bf904d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffe4d7b-0e95-47d1-973b-77a62cbe9bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d41d02-2a3b-4c45-b0c6-b59a0f35abd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11819011-94d9-4d7c-8c76-6f743064edbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f2f6a6-4867-4c8f-b0ad-9097c25c8721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81ec322-8efb-4d30-becf-c723b335ee07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c4b833-15f2-4fda-9c58-334b3240abef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26f743c-8750-4118-b63f-dec7092849a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b00995-12d1-4448-a164-ac7244204ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d32ca9-53a9-4e65-bfe4-e7c493450083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c7288d-b2e4-42a1-b038-c4c2aee2f114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d784a1b4-1749-4bcc-9e1d-e14f7a8fa0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039df432-64b4-467a-ab4a-cafb4ce88b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373dcc28-da61-495e-9abc-c9bb4a835616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a23a0f4-e64b-4b18-ab0b-3e2f41722886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.233.46']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80af4639-c089-46a4-92a5-268de624f21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.203.164.41']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2f4dfb-7ace-4d99-b2b4-386fe2e070ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f987df-14dc-4c96-9fb8-7ed7586ab65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51309962-6874-415b-92ee-f894414fe873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.32']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07326451-74ee-4902-b469-e9147bc9df22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722094d5-8f9d-433b-890a-98c45681234e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509c3845-0aa7-4765-a997-2d3ed9a8cdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d320b62-22bd-4e14-a7c6-9bd034633276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2331ba69-9c65-4096-9825-b980dacda1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe680d6-25bd-4503-99da-0f31491306f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20ab0f7-fdfd-47db-a0cf-3cd46f4f0e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937e9e4e-b244-4d72-9f51-be9955fbc723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6f04e4-676b-4716-b862-bd5bf6e62f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71d21e8-af7d-4bc0-bd72-5eb9e3fe7388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f464ef4-f32b-4497-86bb-46686453967b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8403be-52fe-49a0-a2fb-b76e7e625c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e081d5-31d2-4157-bcf0-5c0a7252308f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfac032a-fa86-460b-9ce5-365d5282fc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806c8021-ae7d-45b0-b7d0-dbb9d45faed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e66ecc0-dba0-48c7-9971-e2f1a7991c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c28d324-ad81-4d19-9282-60a6be64f85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef4bef2-6b90-4029-8ff7-680897e02b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5a64e8-541e-478c-839e-b3fcdf200cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43f0e20-eacb-4ba4-809c-d8bd82c3d213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9613b7e0-a765-49ad-a2a8-97a8b512c745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b69b9a0-4d15-4c3a-ba45-395df86cffb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb6b490-851e-4a32-952a-766bbcee80c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ad1edf-933c-46ac-95f8-ff9d8d3202fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2db4f11-25ae-4b54-85e7-65800e3736dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040b4d42-6593-4b1f-8db3-bfa4a8dba518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8810e7-a729-419d-af37-cd4dd718bc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6934816-05cc-44a6-8af6-7729948e046b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbd982c-d5bb-4245-8a59-3cca57361705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30012f3-ba22-4b68-b290-2eaa3e5dac7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70daefa8-c3c0-4ea9-8997-90917ac648c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834c3d08-18ca-4d2c-b627-a2a63340e6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7a1644-3f07-448c-82d5-58f6a3119950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad27d312-f62a-4565-be5e-18816116415e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dfb890-af49-46ff-8569-11ba8fa191ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34812526-a94f-4d67-ad71-bb6ee32d6519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7f5f5d-ae76-4412-b0b8-8d32a068b4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb6ba54-dcf6-4e0e-badc-8484735c3719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867bc1b2-022c-4d0e-ba96-c0c1eed1c9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8007f8ab-69d9-4a5a-8357-97c44e76bb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8afb400-9c94-438f-a420-ba0e822b9d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02df834e-4a1f-45a3-b329-9666bfd4b02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac86863b-6ecc-492f-86f2-72f2caafc7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7d9b90-6db1-4d91-b9b8-97712ec2d44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d16778-aef7-4c9b-865e-b24b537c688a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737f17f7-0974-46c6-8fbc-29e75261446f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.24']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884e0baf-2e87-4235-a81e-02ef1a34533d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1388230-485c-4406-bcac-9b562c8f5b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b84f5c6-3c3c-495a-81d5-f5be331b9479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db264933-cbe2-4606-8fb3-416da3cca01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6273e2-7789-4105-ad03-60dc6cffc83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7ec6b6-e096-4c73-bb36-4bea347670d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58206f6b-2011-4140-be5a-c33d30c0c846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbb7620-447c-42cb-825c-ff91b662cbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86bb434-db91-4cff-bcd9-825725873501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3b7ec5-8988-4fb9-9bc0-8067da75888e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a254847d-0808-49ca-8517-65cc4e2a7d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e324c857-388c-4f6c-9f8a-74816779754e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3766d35-0368-4f0e-88ba-d702fee5030e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e083b1a-9627-4abe-8a95-069591fc1f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.4']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a450ac25-e850-4945-b200-c6938541555e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e640bbad-ffb0-4453-bb16-8cb97774b663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.6']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d703f4-e6be-47b2-85aa-e9671d5d8145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53328e0-805d-4ab9-90a1-230d561586f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d1f543-ff06-46d0-becc-0cba4d2a2445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.82']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa17d23f-769c-423f-bf54-e802c83845ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aff24d8-4688-47cd-bbe9-85d222dd56de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a21ed9-56a4-4bac-9d8f-6204b5fa8cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a765f7-7828-4a78-8d42-9725b1626a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855c619f-b92b-4bfc-b8b1-c68f191a36d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a1fdfd-399f-4c61-841b-b0e2d450f6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54ada83-716e-41a0-adb9-da50793f2f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e655dd-5d7f-4072-b0a0-62bf0251c547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29d545c-d834-44a2-a256-304b7d301639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da605901-9777-4054-a4a5-e856f6bcf9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ba3d7c-8986-4d39-adb1-7722e2077c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ba5349-9121-4216-909f-b0daa7be528a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2949d1-a40d-4076-b95f-34973088d41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4412d2-1981-47a4-b33e-5cf4b1c5d0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9097d458-8115-445b-b65a-83042fb21d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd5b2ca-8402-4bbf-a32b-9354ec5bd115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf35e15-87a6-4a0e-bfa3-02cb7e6cf64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89f20ff-183b-4398-9cd6-c3a2205ae85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefdbf51-4790-4053-9221-3f7ef74a88a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00f1c92-91de-491e-9405-bb13aa36ec4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b93946-ad24-45c5-8c4a-fbdd0c6b93c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76afe97-f3f7-40fc-b7d4-e85c8790e358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bf7ad1-c458-49cd-afc9-e89372c5f746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30dbc35-a267-4b00-a7a6-21377601e0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b22b1f5-de45-4566-84c4-dc16458892a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c5ad9a-7276-464e-bc8f-fbfac5d08912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a314cd36-85de-4704-bc3a-2aaa2a66c9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a976deb-fd0c-40ff-8f0d-2c445ae398be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e740ca9e-86ac-48ce-b325-4fd6adc0037b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d917655-e566-4773-b9d5-b338a5c1bf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a05e2ce-5a8a-41b2-89fe-32236f68a3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71727624-61c0-4460-81cb-cc643d249ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73398abc-3451-4225-ab2e-9995720b2c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e623308-a82a-4a36-ae70-82d4a23c95ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f66870-5c16-4419-afd0-120546c736f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c27be9-e455-426e-94d4-886e8d6e70ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ffff8b-22cb-4111-81ad-45a1e1c1ed34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacb440b-faeb-4bb7-9157-671ace00a85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb350355-4c15-4f50-8ed8-31fcec1dea44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f80efd0-2a38-49eb-9c69-56d44eb1e29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d95ac8c-604b-48c9-8a79-ac0d102ea4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ae2e80-30ff-4725-86d5-971af9c93433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12efbb69-09ee-4566-ac96-b4834e7f7872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c625fbe8-32b5-4777-b51b-9b9497a62210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3b17cd-713e-406d-a698-76d8e3d83dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f517e23d-49d9-4d0d-8352-8a1737a28836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f153a14-78ef-41cb-a1a5-8a43272a1179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab143460-672f-4a7d-a8d8-330147b13768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6143406b-17dd-475c-ad29-d0c713188761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1882b868-26ee-4cf8-87b3-f10d9ca83cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51440b18-e95f-4627-b666-210f66e236c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf778db-4c12-4fd3-a128-84dac77ae51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63362259-b2a6-4cab-aaee-f0b7e2c9276c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.223']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc32ffba-1f33-48e7-beb5-12ae5da54a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfc1513-ea2a-4b0b-b87c-d2f95a31af45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b41aaf6-862c-4de9-ab98-0b0c28ff5c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bb5d91-e4f8-47ad-a47d-48e9c1c17f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f874d11-27cf-4509-95a4-8f9bdd207849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96adb104-0f30-454f-b2d0-80d9bde38328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12feb736-5393-4c0e-9206-7be4c70cbf5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82eb6fd5-329c-4ca8-998c-37d79945563d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f74d04-deac-4152-b0c9-5afe878832ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428a87d2-426e-471e-87bd-811cfad149e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d3ddef-c6f5-420e-bdff-f07ee74c3c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c550dd2-3f0c-4e27-87bc-684a390c23c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d660f56c-7fb3-4c06-bf3e-ca0a3144fa41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684199f0-bb4f-4956-a646-834a6f9237f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf32d312-e62d-4e73-b31c-1075f432cfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9c4bed-2fe3-4c3d-bc53-0d21d6e2fb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb62c718-50e6-457e-a3ea-8bb8487bd905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359d3f86-8f03-4a24-b99f-4ffd0bc17094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b1181e-2a73-4f80-a18b-39c7c5a1f748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f5c178-14e9-46a0-b0c9-1dc722e89da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edb44f9-1758-4b22-9a23-d8b6f86fe154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c52d5de-4681-46c4-b0a0-9ede544afa6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60a81b2-8fce-432b-9dd7-ecd8d91896db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dc1d20-2902-47d3-a474-8ae75d4459b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54632dd5-0307-4473-806f-8bfcb6e9e543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5355ea9c-4968-413e-91d0-2e3a6102e16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2baca30b-4696-44dd-a022-7380534f1802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf304fc-53ef-4660-90b3-a7e5967e9160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9807c21-052e-4d62-9c3e-e87b52fafc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d11240-8a6a-4a01-8d2e-c786b64cea1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9929f79-857f-42c3-95e0-347b6b4e187c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02c60e1-8aa7-4caf-bce0-5eb32771f13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d271c92-edfc-4d1b-bf69-2bbc84de83f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b6522c-54fe-4a4d-a5db-6473621456ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fc301e-3ee6-496f-97eb-1090e57d14a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.243.167.209']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffeec50e-2309-4128-95eb-1972330cbf8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.162']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e558658f-2ec3-47bc-a069-e90e8704cdff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594c9acb-bf7c-443b-a546-5f83068da6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2ab66f-0ca5-4c1f-97d9-ec063633b5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ed24f3-60bb-4669-bc45-a7270ff94061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.96']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2603b483-5968-427b-8461-42eb00804cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.17.219.92']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472a2cc7-9389-4268-ad5e-c6e4ee0e45de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7413f6-43ac-4b28-9910-7eff0575577d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.62']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae3c946-b6eb-4243-9475-ddbb799d8986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0f4643-20e9-4fd5-9078-f2655fa3cd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.208.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999189a5-9e4d-4922-963a-cbe2fb628640", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.173.97.28']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62948265-9817-4722-be4a-17bfd4808850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fc78b6-8302-44c1-8f5d-811ec86372cd", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdf4773-7402-4975-8234-6f96f21268b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.175.47.100']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76860b77-63a2-4dce-b02a-690bebc7af42", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.91.197.38']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a369847c-aa07-4473-837a-38d898cc4c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5260e8-f25c-4cb3-9a13-834317d95341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.142.43.88']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccacddf-3e56-48e1-81df-0e40efdf20b8", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.142.47.35']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda620dd-72ce-4b46-ab07-1c97e76ff4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.144.132']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3177fd19-f6ad-407c-8d72-78b2715cd31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.234']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b409038a-4803-4b3b-b933-62ee0d81fdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cfe358-a4e8-4320-adde-f5f87445f46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.98.239']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0bcbd2-41de-4932-a942-dd7ddb692514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.204.239.163']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0026d7f-b6e0-4f5d-b212-7cd35beb1917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.206.127.129']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54483059-e6f9-43cf-9686-ef50070a87f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdd913c-0c45-4a88-8b22-64318db8e243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc42b89-a88a-4e1b-82b2-5dcc499a94d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.154']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b26426-cef3-4cb6-88ec-92b8d32ad952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.155']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05e7479-b494-4a36-8d0e-6e79cac8a263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.158']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d643aa22-aa63-4384-8462-79b7b4e60754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.203']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4774f7a-15a0-4601-baa6-7521d59c900e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.204']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57addc37-33f4-4384-b97f-68bbadb36d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.206']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a5aa1b-4163-455c-91a7-7513f74ab3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f2a58d-35e9-4f9d-989e-f8edfbbcac91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68565466-0137-4979-978b-dbbf67e52b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.230.136']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b376540-0f4e-4dc2-bb45-c0f549447b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14df65a4-34d7-4969-86cc-17f87fd60cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.30']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdeabb5c-0cdb-4880-b0ca-b052cd0e3ca9", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.88.45']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad55dc8-91a8-41f6-bf9f-af1b1481067c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.55.118.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a911ff3e-96b2-4c7c-bb9c-eff38f8e5947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.98.199']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42ae623-e645-47c5-ad66-8628cfa0944d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.107.1.195']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42759ba9-9d98-48b4-af01-01c6b1b76bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.111.250.103']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad50957c-1bee-4427-9f5c-e812b9972bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e32044-6567-437b-a127-708325f634ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.16']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c45a624-176d-49e2-9d98-b53d097e15c7", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.172.56.36']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da081e24-e91c-4c5a-8907-76ad7595e236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.89.105']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b0dc25-93da-45e2-8ee3-87123aeae436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d76f5b-fdf8-4bdf-9eae-d551790de889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.37']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a8393d-36d0-4537-8d28-c236d95e04db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e5d30d-87ed-4029-9429-7d9d3c02ca1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.217.109.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8010faec-2ccb-496e-9f8c-3cb0fc9197f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.211.142']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c6f72f-1399-4ba0-90a8-57254ab41423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.87.231.131']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8f451d-a25c-4750-93ee-ae7d930d6853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.29']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abda654-c892-4992-9d15-e2f703816392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.89']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad727a8-8e99-43be-98ea-0cc24c499c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.26']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f95dc54-205f-4342-bca2-c060f576acf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.182']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e686d476-da0b-4d65-989f-2d1724bdc6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.233']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d482b01-8942-4bb1-bc98-0abe98ccc794", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.240.154.183']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fea6724-795e-4568-a929-30d3e6d3b2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.9.84.23']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e24b42-7d38-4229-add8-ec609299edce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.212']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c351ae-048f-4f4c-bef0-69249f842b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.51']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff4a99d-9d63-4fbf-804a-75b73a513d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.121']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a260c5-2f82-4777-813f-2cddc5969c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18270735-8666-4e45-816c-f295ed77669a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6626569c-53a7-4b78-bcbd-fa5ba55696f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.241']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0e2d8a-831a-4e3b-9e5c-55b7e180bdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.107']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e19ba6e-204b-431d-8c7e-4d800e381514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.17']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ef5791-2c6f-4f27-8b54-251fea916a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d136230a-76fe-4579-a267-07ead7851f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.57']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c83acd-9b1c-4df4-a888-d9e9b7f0c2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.81.34.56']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556c2fcd-2a0a-470c-94e9-bc38bb16e674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.84.121.170']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ae4f92-3122-4fcf-92fe-d294175e80ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.84.51.33']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3061f8-0571-4b28-a4f8-d3c9507cf882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c656182-f7e2-4e61-b171-c0727691d73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-06-03T00:00:00.000Z", "valid_until": "2026-07-03T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfde9ed1-bc04-448e-895e-56a9f1a1f0a2", "sighting_of_ref": "indicator--1f5b62af-9e3e-40c2-a3e8-0ca8a472c9bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5efcc6a-238d-4531-926a-24b6cb34e9c1", "sighting_of_ref": "indicator--cce3b58b-acfe-4969-8b72-f0a951ddd56e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228773f1-0361-4685-90c1-caf00c618250", "sighting_of_ref": "indicator--b20af7f5-2850-4883-836b-062f56a3c1fb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a584df2-256a-43fb-9bb0-763dbe4c6b43", "sighting_of_ref": "indicator--60e370ba-54ee-4abd-b40a-7fba4787ba06", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca74e4ad-d47d-4143-8d23-88e970ff65a0", "sighting_of_ref": "indicator--48825735-c81d-4fc2-a33a-39f93611196d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21747df-652e-4741-a982-7c62ab09a674", "sighting_of_ref": "indicator--88fb8881-43a0-4ecd-9409-e53256d3e48c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f143ff2-8bce-4d87-ae4d-3caaf3f28795", "sighting_of_ref": "indicator--02efd33a-3798-49e9-9694-546806511931", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8119d9-17ce-4c5a-9ff5-b31bc03d0f25", "sighting_of_ref": "indicator--a1c66be5-1647-47f2-bad5-5fcd7e3882da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6998b268-2e51-436a-b683-bf41f6793344", "sighting_of_ref": "indicator--d3af70c2-2b41-4851-9313-80b8279468cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc554bc-85f6-4962-827d-5ad5be9a417e", "sighting_of_ref": "indicator--c3c1a9b6-be3e-4e3c-bf3d-0201d0e9dbd9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd8b0a7-300b-463f-a07e-e0da35d41cc9", "sighting_of_ref": "indicator--885af9cd-2939-4d6b-b7ab-22eabb48ef18", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1247318-7918-4846-9a75-f2525cbf4c06", "sighting_of_ref": "indicator--6e947a39-83d8-4a6f-87be-9051c78b0f41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0527b5-b92b-4c3a-8707-a9a6b9d01a3a", "sighting_of_ref": "indicator--6e947a39-83d8-4a6f-87be-9051c78b0f41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a1d19a-8dde-4169-8892-07d53214bafd", "sighting_of_ref": "indicator--5015dc81-aee0-491a-90b2-94f5b69ad8f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3573a6ff-8e41-41ed-8b69-27f537339e45", "sighting_of_ref": "indicator--5015dc81-aee0-491a-90b2-94f5b69ad8f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417b9782-c736-4876-ae16-a0327c0381cf", "sighting_of_ref": "indicator--9acf3c85-2080-4374-aab3-c474a1d34752", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922994ff-fcbb-4d11-992c-10b143b4eef3", "sighting_of_ref": "indicator--8cb41b9a-a600-44a6-b8b8-047e9330b7cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284d7613-39b5-4970-a2a5-3d39242e92d0", "sighting_of_ref": "indicator--7eb1b881-565f-462f-9966-ef40d5937960", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e34d371-56a8-4a6a-a478-4a3b655e86c0", "sighting_of_ref": "indicator--7eb1b881-565f-462f-9966-ef40d5937960", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec721da3-7e1b-4ad7-99f5-72c9bb6c0678", "sighting_of_ref": "indicator--7a04f267-a7cb-4646-a8b3-0d8fe3a27676", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a29a574-9ab8-455c-9976-07bf9edbab41", "sighting_of_ref": "indicator--0c9c24f3-af06-4727-a54d-a49b43f18479", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231e08c8-f74a-4373-baaa-d8f44993845c", "sighting_of_ref": "indicator--6d449318-c2df-4cd7-9ce6-6b63c2415e7a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efa0d8c-1f24-47a8-8211-6361dd8377bf", "sighting_of_ref": "indicator--8a88e1ba-647d-44af-8082-b48809d2ec7d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd13840c-c819-4a8f-b0f0-9912ec0fd5a4", "sighting_of_ref": "indicator--2e498110-aa48-4fc3-9dbe-da655280bc19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c6551d-93e4-46c7-94ca-b148cdc545f0", "sighting_of_ref": "indicator--024016e1-56b4-4a11-897a-cd0b72dd8827", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d9f0ce-43e3-468a-a439-1952e6e3afbb", "sighting_of_ref": "indicator--8da77f43-1cd7-4666-953e-5bdf850a2adc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac18ad17-ad71-4b21-993b-defe07945e81", "sighting_of_ref": "indicator--ac2f68e7-944e-4bb1-b684-d686ab2f1011", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6066d0-21f0-4a18-b68d-586c3a5b46eb", "sighting_of_ref": "indicator--067c9f13-1207-46c4-b69a-b0e6b9da9db2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa63b36e-cbea-49ce-94bb-c05769e36591", "sighting_of_ref": "indicator--067c9f13-1207-46c4-b69a-b0e6b9da9db2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf90914-32d4-4534-a445-39dec5bbff35", "sighting_of_ref": "indicator--61e714e3-0c2f-4f12-8e4b-47b691fdfb0c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e345b1-6636-4745-b527-201133870eab", "sighting_of_ref": "indicator--9d160c9c-2ba8-4184-88da-18002497c6a9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887a51f4-48e4-494d-9bdc-68aaf9257f0a", "sighting_of_ref": "indicator--95940b39-0528-43e0-9bee-4ff945570883", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ca795-126b-4fab-ad8b-cf06ad421552", "sighting_of_ref": "indicator--207061d2-af4c-444d-a554-d40b85f35ddd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a79ef36-5ada-441e-bac0-580b6d6eee95", "sighting_of_ref": "indicator--ec2332ed-da62-4385-afab-023a94916e5e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbf73cb-c1ca-4f44-a316-b7d7e3e465d1", "sighting_of_ref": "indicator--60ef8353-916a-4c39-b503-b840d67371f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36c1fd4-b19d-4170-8bcc-0e1488faa0ef", "sighting_of_ref": "indicator--31df25c9-4856-4111-a44a-adf59f2f7934", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35a05dd-77a6-48c6-a626-2a9da6b5ad4f", "sighting_of_ref": "indicator--b19ec401-a7c1-4335-8783-9c02ef7627f7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764423a5-73a5-466f-b55d-1e27f46b905a", "sighting_of_ref": "indicator--75403637-61d2-4b6b-83f1-0088d07f0717", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353c0979-6c07-4066-a1d0-3295fabd44ac", "sighting_of_ref": "indicator--ca6ab4b1-3fe2-40c7-933b-2a132d3116c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79153d6a-24e9-4380-9acc-4315a82eb12a", "sighting_of_ref": "indicator--109ec750-6c8f-4655-aec2-58621e2477a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3d447e-0e68-40a6-a8f7-bcd7ff0399aa", "sighting_of_ref": "indicator--898c1bab-747e-4cfe-a64e-c65931679b78", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c584f3-2ec6-465b-a7de-36251bf88ce5", "sighting_of_ref": "indicator--32f28988-f681-40d1-bc17-98248621c769", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8c2f2c-40b9-4eb8-a172-aa5dfb56a6fa", "sighting_of_ref": "indicator--10960d3d-0fd8-4d49-9ca3-a986bcde5c36", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d2ab73-0b09-45b2-b89d-8e72103816cf", "sighting_of_ref": "indicator--87d292ce-99aa-4568-8033-b4abb5fd73f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a3f13e-bc1f-4b5a-bd7b-aef53c86ecf9", "sighting_of_ref": "indicator--11736b95-51a2-4c04-bb88-b8b67a7b7f5e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20ae49a-7cb2-4b8b-9d29-646f08c5a162", "sighting_of_ref": "indicator--5a953e10-e01d-4273-a50a-b20b274001e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7052703-a6b6-4ce4-a914-a7061cd20289", "sighting_of_ref": "indicator--14c64cab-c2a8-4738-b88f-5faa7b837bfe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3bfda2-2bf0-4a5f-ac87-666e6c9fbdf5", "sighting_of_ref": "indicator--21adbfdd-d2a7-4e6f-8d65-a6dc399af464", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a018b08-178b-44ee-933a-6ed6a8881194", "sighting_of_ref": "indicator--21adbfdd-d2a7-4e6f-8d65-a6dc399af464", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee1a7e1-b31b-4415-b07e-c2f955310e21", "sighting_of_ref": "indicator--5c50a74d-bd4e-49e3-aa68-46c6e74306e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7481444-3ac8-48be-b707-3a476f27f23c", "sighting_of_ref": "indicator--e3b649be-3d25-4fc5-9c2e-daa892fab229", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3343af-0b60-4187-8062-ad13bcfef989", "sighting_of_ref": "indicator--2bcc79bf-fc8a-4c42-a148-2c5446ce707b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce293e46-856b-4fec-b832-2de0c826489e", "sighting_of_ref": "indicator--2bcc79bf-fc8a-4c42-a148-2c5446ce707b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0146390c-62e4-4531-93f1-daf81cba53a1", "sighting_of_ref": "indicator--b3e54736-ffe4-4911-b555-3a6100d30d2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5383be8-a39a-49c3-ad3f-bc25b4eafc12", "sighting_of_ref": "indicator--b3e54736-ffe4-4911-b555-3a6100d30d2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540fde08-3302-4e8d-bdf8-733fbf6c08e2", "sighting_of_ref": "indicator--079f32dd-9c30-47f1-b7c8-4276ae8af9f4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fa5a69-e464-475b-927d-dcc247f688f5", "sighting_of_ref": "indicator--079f32dd-9c30-47f1-b7c8-4276ae8af9f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468eaa57-cc53-42ce-bd09-7de4199b24a5", "sighting_of_ref": "indicator--b0e26ca5-f835-4192-aac7-8c4eccbc2648", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8e2f99-b3ae-4cc7-b29a-79f5dfd520ab", "sighting_of_ref": "indicator--bd290e71-05db-483f-b6d1-c7c7c74b1ccb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eba43f3-d39e-49c6-8755-1b750aebd922", "sighting_of_ref": "indicator--0dbc3942-e5c3-4aa4-a7d5-9fbaca821af5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb02288-9ca6-4aee-bd51-459d70bf4031", "sighting_of_ref": "indicator--39642f0d-e963-44b0-a1a0-5ad5bc399a08", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47afc95-0fcf-4a75-abc7-0545a8a6b39b", "sighting_of_ref": "indicator--ed3978c3-6ebc-49ca-8350-281f0ab2493b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247dc609-a12f-4b78-bbea-ffc87a0565df", "sighting_of_ref": "indicator--c3f0bd1b-8894-46a9-9907-5a277ca7aab6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7938e57b-931b-4c9c-b3ea-48eedfc2e171", "sighting_of_ref": "indicator--bf3aec91-a75e-4bc3-96da-5747f5f94367", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ecf5c8-a559-4a51-a7fb-a7210ddb3589", "sighting_of_ref": "indicator--9f8a1b19-7082-4747-9c46-e60514845792", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52ae1ea-1e31-451e-acca-2f4b26bee4b6", "sighting_of_ref": "indicator--54827892-2e1a-40d9-9b46-cee3680af516", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81f472d-9e5e-4aae-b9a2-20d111ab42be", "sighting_of_ref": "indicator--e81b1ff9-a7fa-4f73-923f-cdc5282789a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4102683d-6893-457e-8980-0e4a1418fd73", "sighting_of_ref": "indicator--d9f647db-dea7-43ae-930c-8f96e6a491e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222459cb-5437-4a8c-b02d-8681cfe8089d", "sighting_of_ref": "indicator--e52fa47a-b584-48fb-ba65-fff55ff8622c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4642cbdb-7494-4294-9016-76a05d8a3f50", "sighting_of_ref": "indicator--e52fa47a-b584-48fb-ba65-fff55ff8622c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcd360b-9181-4d32-b3f3-b34fd825eccf", "sighting_of_ref": "indicator--552e6055-d78f-45e6-a3c6-0f51e079781b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78fa85d-0b5b-4ff8-b211-1d1aff29d005", "sighting_of_ref": "indicator--62326363-29b6-4cf3-be77-f0fbf73a2e1b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12f03af-6412-4af1-bba1-877d13ef6b77", "sighting_of_ref": "indicator--62326363-29b6-4cf3-be77-f0fbf73a2e1b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ec67db-e5e4-45e5-9c62-2d4d6cd02cd7", "sighting_of_ref": "indicator--79614625-2f22-40dd-9c10-796f0f5fb1af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24760bb8-5fd6-4217-ae89-3976e8f9aff7", "sighting_of_ref": "indicator--81cd2aaa-697a-4ec0-8dde-ad06edd81200", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1cc590-b664-4008-824e-8f9c450c5a04", "sighting_of_ref": "indicator--5052bdfe-f8c2-45ac-8f05-ab8544078348", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033e44da-4c74-4942-896f-7e14247cdfbc", "sighting_of_ref": "indicator--f3146c29-7271-4010-b33a-1722b5824404", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1824149-bfd4-4a1b-8ff0-debe2e9560a6", "sighting_of_ref": "indicator--23d0da4f-fa4b-4e1e-8371-622cb2b01b26", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148797ac-e12a-47da-9385-a3c1d746ffef", "sighting_of_ref": "indicator--dcff5069-d17d-4749-8993-71948829ef40", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b98312f-b4bd-4e26-be53-33095b4ac6a4", "sighting_of_ref": "indicator--5f4995c3-552e-48de-bb8f-28162881379e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d21c2f4-fb1b-4c5e-a4d9-e9feddf3d25f", "sighting_of_ref": "indicator--6db091bf-9c31-468b-9f03-a295c669e264", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba2b299-dafe-4900-81cc-6d32818c7c5a", "sighting_of_ref": "indicator--6db091bf-9c31-468b-9f03-a295c669e264", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dacd7f-6385-4398-b2c0-1a62bd0f872d", "sighting_of_ref": "indicator--603f2188-6d18-4fec-9dc6-18ac1b8f61bc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6acd68-a80b-4f0d-96d0-a4a8c6060ef0", "sighting_of_ref": "indicator--603f2188-6d18-4fec-9dc6-18ac1b8f61bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21e32e0-6f91-475c-943d-09ad014a6594", "sighting_of_ref": "indicator--ae103eb0-d45d-4ca7-8d34-22a3c8353762", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78e371c-9fdf-4b5c-ac35-d361582f0186", "sighting_of_ref": "indicator--8ca8861e-a9ed-452c-a511-87ead7571b85", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01014d8-cf33-458c-ae47-998fba46141a", "sighting_of_ref": "indicator--48c9fdc0-0b25-4a27-9eea-2bcc338a402b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f946bfea-38b2-4bea-ad60-c814f6fa4530", "sighting_of_ref": "indicator--48c9fdc0-0b25-4a27-9eea-2bcc338a402b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c3926d-3c4a-4446-9e80-6ae824a4f828", "sighting_of_ref": "indicator--954beb98-75e2-4510-99c9-8291750f8b72", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e8acf0-1c39-41f7-b3a9-83b4670cb186", "sighting_of_ref": "indicator--6f828ab4-39b7-4740-b778-8e33784094b2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc98d56-42ab-4a99-8f1a-e0e9a9fdb2ce", "sighting_of_ref": "indicator--387adfc1-c847-413e-8874-1ea0d1c7b9eb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b367bbf-2ee7-4788-a131-48d597a8b8cb", "sighting_of_ref": "indicator--87d61a9a-a0ad-4a66-9d55-5538c24868a6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4297971-e908-467e-a000-34aced296153", "sighting_of_ref": "indicator--87d61a9a-a0ad-4a66-9d55-5538c24868a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c8beee-ae82-4dee-a165-8a2b6368951d", "sighting_of_ref": "indicator--1c5e21bc-9bf4-4f1f-b8b1-525ffe68a769", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4174442c-92f6-4adc-b454-232f98962a91", "sighting_of_ref": "indicator--81d25ac3-4bf2-42cd-ad39-d7148d8fa59a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e81e42-ebbf-4f1f-9301-f6bbc38ce8a4", "sighting_of_ref": "indicator--af0c96b1-74be-4b03-9984-c2bb339f803c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d9c830-16d1-4ef4-bcdf-321d9fc7b592", "sighting_of_ref": "indicator--580f95a5-d6df-47e7-a8b2-bbba7110d3b2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299c78fe-f48d-4051-9b6b-15b932dd18b7", "sighting_of_ref": "indicator--580f95a5-d6df-47e7-a8b2-bbba7110d3b2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636554cc-92a6-41c9-b52d-214fc8014a79", "sighting_of_ref": "indicator--bbfe71f2-4d95-4c9d-9718-bf6df26e5c3a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037ac40d-98f6-4955-8c69-22d38d7b23bc", "sighting_of_ref": "indicator--714ca27f-d39c-4621-bb38-96705e41757a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c29d32-39ef-4856-b421-712a8b6247c4", "sighting_of_ref": "indicator--e42ee0c7-131e-4e2f-8a91-b38909d82578", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e554460b-54f7-42dc-999a-369da9ee8e99", "sighting_of_ref": "indicator--ae015279-a0fb-423d-b527-a7571fbe9db1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d63e5c5-3238-42d7-8dd9-b14f70eec287", "sighting_of_ref": "indicator--fdfc1910-bacc-4ac5-8cec-431d71906d5d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7640b81-2b53-434f-8e47-388510b7dc0d", "sighting_of_ref": "indicator--66b94a38-7e4e-40ea-966b-d9a8cde57f25", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52da062-d957-4ca3-a68a-945a59e01719", "sighting_of_ref": "indicator--0784132f-e3fd-4ce7-933d-c8745063ba8c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27149540-847d-49d9-83ce-eefd852d7196", "sighting_of_ref": "indicator--5b834f17-75b9-4da9-b7b9-dfdc1a7202c7", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e09771b-1bc4-4bd0-aa75-b9f0ab838295", "sighting_of_ref": "indicator--5c54dc20-8059-43ab-baad-3c4665e209e0", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd41cd5c-fedd-46bb-bb2b-8e827a9545b8", "sighting_of_ref": "indicator--10ee5be0-0723-4d78-830f-2aa233f148b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add0f3fb-78de-4678-b8bd-19d78efc81a0", "sighting_of_ref": "indicator--630bd0c1-be0b-4165-9830-eebc913f18e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a61f4f9-59e1-4bef-bbb1-b32bf0e8280c", "sighting_of_ref": "indicator--ac26772d-a691-442f-b693-463e5261a706", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d48ea4a-f639-4e5d-a00b-7e19c6c3bf28", "sighting_of_ref": "indicator--c4341621-1958-4134-b1e7-9ad407d44b44", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a719c5c-7aa7-4f27-a678-23cba5afa177", "sighting_of_ref": "indicator--c4341621-1958-4134-b1e7-9ad407d44b44", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9384afc8-f349-4a9e-8ed7-05642066218f", "sighting_of_ref": "indicator--c4417cd1-e9ef-4a4c-b090-d12497d555ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b04112-86d2-44a2-a408-5e3eff167732", "sighting_of_ref": "indicator--2fef1277-f5a6-4baf-a403-aa193a743475", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302c4776-d2d1-414b-9dad-71380b1cdd87", "sighting_of_ref": "indicator--a08ab556-8bb7-4ee6-b5d9-d09736120831", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882cc521-aca4-4d6b-935d-157977493623", "sighting_of_ref": "indicator--0dadbda0-8181-479a-8398-5a14d7452d33", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69958713-05d6-4d92-8880-9e00a3fffe49", "sighting_of_ref": "indicator--0dadbda0-8181-479a-8398-5a14d7452d33", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd973fb-011c-41b8-9bfe-bd86ce5acfb8", "sighting_of_ref": "indicator--d4370383-bbb1-488d-af3d-d5fb08e20f70", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4774355e-fe77-47e9-b1d6-00a4ca816221", "sighting_of_ref": "indicator--7bfb2943-5ef9-4b32-9438-9ff3ada3496f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f25408-a7ae-47ea-81d5-ee0bdf94b19e", "sighting_of_ref": "indicator--1e563095-ca8c-43da-b361-4c70bae4083c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7806094-4b92-4160-8944-e064fa4e300e", "sighting_of_ref": "indicator--8f0ef7dc-a1e2-4c8b-82d5-990d4ea611ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d3dd2a-921a-493f-aa9b-eaa2349ebb75", "sighting_of_ref": "indicator--8aef8a7e-9bf0-43b7-ab6a-3712f53c180d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7608d3ab-8730-4c49-8d0f-8c8be8899eea", "sighting_of_ref": "indicator--5156c96f-5dc5-4431-b1e9-b2b437ff8b1d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5096926e-825b-4588-9e83-aab44d21b14a", "sighting_of_ref": "indicator--248a70ae-61ab-4bc3-ad70-34994d47e917", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3907f3a0-7a90-4212-8c21-5321c9153f19", "sighting_of_ref": "indicator--2a1d70f5-521f-45b2-98bd-e0af7946d79f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ac0d95-f5f2-4e47-a1d2-62b34ec787d7", "sighting_of_ref": "indicator--bc9174e4-e6f9-4260-b215-114e3a50694d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fef945-4454-483e-b259-3f97d7ad13a3", "sighting_of_ref": "indicator--52915e8d-ab2d-49ff-998e-107b6a4a6dd5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a512fd-d517-4ee9-95b5-e8c52bb9356c", "sighting_of_ref": "indicator--c7839a18-88a3-402b-9ae6-d1a7b3d8c7e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a484a504-75e4-49e2-93ee-8e146178be14", "sighting_of_ref": "indicator--34758151-5709-418b-b172-e4274c24e1a6", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b78b52-b7e4-4808-8dc4-d4dffdb99ff2", "sighting_of_ref": "indicator--87393caa-c516-4ebc-b734-7e4baa5e0fb0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d860db9a-a8dd-4d23-b22b-904937725f08", "sighting_of_ref": "indicator--1d2a180e-1e29-466a-a628-9ae342f805f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86779f13-9bcf-47bb-8364-403cf2b59568", "sighting_of_ref": "indicator--58199363-8f25-4e97-b81b-f23798f14bcd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b603b330-b6e1-4e85-b36c-117cd00cc2b1", "sighting_of_ref": "indicator--2841f5f3-2a41-45ed-b42a-2da0dd9681d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c776c40-f6d3-408b-b67a-4d8b07c9c0a1", "sighting_of_ref": "indicator--890bb91e-a1bf-4ed6-b063-c31003357f55", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b69500-b9f3-4e5a-997c-579760a68cca", "sighting_of_ref": "indicator--7db2b215-13f2-47cb-bf75-ef5a7470112a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4e68f3-a30e-4a20-84e9-0516b8272d3e", "sighting_of_ref": "indicator--30d7a326-7b41-4da8-8cc2-0c692271064b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9990ec-6ae1-4910-8dc4-5c1624d784c0", "sighting_of_ref": "indicator--2eb95aa4-40bd-42f4-928a-a9e0274b7f02", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203fec95-4218-4e31-bf47-de8c2216bc1f", "sighting_of_ref": "indicator--26919667-5ce0-43e8-8904-9786eb165250", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec940723-69d6-451a-9f5b-35603ba89abd", "sighting_of_ref": "indicator--b4b9bf4a-3f30-49c4-bb93-7ccfb36bf915", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622ac75b-2ff5-4cc2-8539-49a4217f73de", "sighting_of_ref": "indicator--a0f3bd58-55ed-46b3-800b-4090926eff46", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debca997-6169-44c7-be05-4a5696d0de6a", "sighting_of_ref": "indicator--63a94f50-6035-4e0e-be4a-7ae8d4bb9b47", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bea847b-f1bd-4f0f-9281-1d288e06ea2b", "sighting_of_ref": "indicator--63a94f50-6035-4e0e-be4a-7ae8d4bb9b47", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ac6539-cf1c-42d5-acab-8bd917ec75ff", "sighting_of_ref": "indicator--81ed22f0-6215-4413-976b-673efa87ab17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145d1797-116a-41d0-9fac-f587223d6446", "sighting_of_ref": "indicator--2a0ce0a8-f4c9-43d9-9384-f3a4fe7201e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1841bd09-dd37-49c0-a403-51cca1392abe", "sighting_of_ref": "indicator--c5e76527-dcd1-4b1c-8369-56ed477d851b", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2535090-d826-4962-95c4-4bf4b4215567", "sighting_of_ref": "indicator--c2546909-aa6c-4d49-95ef-0505f5893d4c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df4fcd7-5087-4ca8-b327-ea560634d7d3", "sighting_of_ref": "indicator--aedcd99d-d4c5-4289-9fa1-1bdc61b2361c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593ada06-a2be-4630-a7a3-d15e760c6eeb", "sighting_of_ref": "indicator--96fcf3b9-7b5d-400e-9932-2626e18fc666", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89cadd1-67d5-4b5b-adf0-d375496ac674", "sighting_of_ref": "indicator--8d42cd8e-ae3a-44f4-8f91-91b6ed8ef709", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8247f91-af2c-47ba-97c9-228523a34cb4", "sighting_of_ref": "indicator--8d42cd8e-ae3a-44f4-8f91-91b6ed8ef709", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5475c21c-abbd-487d-a099-b8da31ea9f2f", "sighting_of_ref": "indicator--7b05309e-e57c-4718-9b82-80931215279a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f555e840-5b0e-451d-a6d5-e6fd8a3f034b", "sighting_of_ref": "indicator--cf07f45d-a24f-4f51-9544-778f2fcfb863", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e245154-ebce-4b96-a016-b426a93b7a34", "sighting_of_ref": "indicator--511c852b-a58b-4087-94af-7fb0b6094089", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e248315d-233b-47df-8a4d-b1a05a27dd0a", "sighting_of_ref": "indicator--11f13f79-23bc-4ce3-bbd4-07cbb0ab0734", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6947c18-161b-4c49-b9d7-fbb6b47605fa", "sighting_of_ref": "indicator--11f13f79-23bc-4ce3-bbd4-07cbb0ab0734", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a412550-32a5-4ab9-b303-3a8bc2081933", "sighting_of_ref": "indicator--11f13f79-23bc-4ce3-bbd4-07cbb0ab0734", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaea19fd-3375-4225-ae38-e746993292ff", "sighting_of_ref": "indicator--c31fa668-02e0-4303-ac09-79a2dbe4bede", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e469118-4765-4416-9a76-8f54b4999330", "sighting_of_ref": "indicator--91bd9cd3-7784-4d8a-9cf5-a5b5827dc22a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fce530c-bf37-4dc4-8903-76f3aba839c7", "sighting_of_ref": "indicator--a3998840-12e3-413d-8f45-f2f75c6228a3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9e104d-e723-4e94-9f3b-1f7ea2895a3b", "sighting_of_ref": "indicator--c58878e6-e59b-492e-a24b-0665b5dee94c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5a0c0b-d3a8-4f4c-8733-7281a8d9e649", "sighting_of_ref": "indicator--c58878e6-e59b-492e-a24b-0665b5dee94c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af26e04d-3c57-49a4-9a1d-f935bf1e390b", "sighting_of_ref": "indicator--8a2643e8-d3e7-438e-becb-cc235ee12a9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4dce88-2307-4b2a-9c54-c88406e84eba", "sighting_of_ref": "indicator--4c95ff9a-ceab-4f15-91dc-31dec3cb6387", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251aec8b-563d-4d50-88f6-d7116e4e9f37", "sighting_of_ref": "indicator--ac188c07-67a5-48f8-aacf-5e8bac7be9af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1863dcb-300b-479d-98ab-0247077d39a3", "sighting_of_ref": "indicator--36aceaf0-64a3-49cb-95b0-d173e7613e2b", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229ba141-823e-4ffb-8ca7-a3511d26522e", "sighting_of_ref": "indicator--be5d066d-973c-486d-8dad-b204981ef2da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb1b48-5cfc-41d1-ade5-4d637f7de9b6", "sighting_of_ref": "indicator--9b711333-8cd9-4abc-a9dd-902eefdea073", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f61e3f-40ad-49c1-a80b-130a7b6e5d31", "sighting_of_ref": "indicator--456056b6-bc9a-4d91-978b-f8672874d429", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15db3519-ef30-4ba2-b4ab-e168484b462a", "sighting_of_ref": "indicator--2ac139cc-22bd-40c8-8d29-17cc858c446d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a7d55a-3fc1-44e4-a8a5-80840067ad0a", "sighting_of_ref": "indicator--b44d9517-b5ab-419a-8525-0b1af3fc7720", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e11d79-ce7b-4741-9c4d-ac1002206fa8", "sighting_of_ref": "indicator--b44d9517-b5ab-419a-8525-0b1af3fc7720", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fe4f4b-458d-4a4d-901f-3b7cc06eae81", "sighting_of_ref": "indicator--ed5897c9-fabf-499a-8889-b7b725c3f52c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c066cca0-5fc4-4160-9c3d-85086a2eef7c", "sighting_of_ref": "indicator--54905a76-8247-42cc-87ff-e0cde1b4c305", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf47f34-7b69-4ebf-b396-948bdda18bb1", "sighting_of_ref": "indicator--971e7c1b-00ef-4d36-9f63-1473f436858e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f57cdc-20a1-4403-9fce-7463ef404e0c", "sighting_of_ref": "indicator--0e44a82b-e5b8-44e8-9465-0b8f9e8d7baf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45426e3-8817-41f3-81bb-06dde6c68044", "sighting_of_ref": "indicator--d441bf29-1e8b-4953-9e43-ee3de59dbc9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d3999f-ab60-4e6b-8636-2dad0966ffed", "sighting_of_ref": "indicator--154d36e1-366b-4ecc-926f-599c7a66a696", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb7aad1-e19b-403d-9072-acf4537458c9", "sighting_of_ref": "indicator--ce0670d9-ef2e-4a83-94c0-7aca42ef0184", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4373d8ce-84f0-4c2b-a6d1-c3d4713b568f", "sighting_of_ref": "indicator--8ab7cc8e-2aa2-42c0-84de-51b142f98568", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2874f56c-8026-4964-807d-aa1d2f7cbe15", "sighting_of_ref": "indicator--ccee1e34-ef44-438f-ae74-d9926d046b69", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79fe131-4f09-4e69-8fae-0169f887c280", "sighting_of_ref": "indicator--c58828e0-4acc-4949-902a-dd5527149649", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf288a2-0322-41a8-8905-b95879bfd4d6", "sighting_of_ref": "indicator--ab0137af-5372-4741-859c-c2c8c6433883", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4602122-8add-4f9c-b1ec-74b47465f595", "sighting_of_ref": "indicator--04b66008-aca8-4fb8-8740-1bb548a20499", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182015ee-53c3-422d-9511-963d0697aaf4", "sighting_of_ref": "indicator--e8b1e2c8-9c91-4235-a9a2-0ee0d86fe0ad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3606cc6-bfb5-4f8e-9397-e2212c7469f0", "sighting_of_ref": "indicator--90892ef3-5d6e-4bad-9d21-cddd6697b08b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64f500c-c291-479a-8fda-2c100f6c0830", "sighting_of_ref": "indicator--d582d58a-2955-4a32-a197-a0e4a910ace3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa492ab-f02e-432f-b67e-37974133b2b4", "sighting_of_ref": "indicator--08276bc9-28fd-4ae8-810d-cbe2ecbff5a6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d524cf0-8853-4113-a5a3-d708be912d5b", "sighting_of_ref": "indicator--fbcf3f23-a283-406f-8e32-4c85152999b2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edeb3d0-2dcd-47ba-ae43-00ec5bc86d74", "sighting_of_ref": "indicator--fbcf3f23-a283-406f-8e32-4c85152999b2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ad750f-53f6-48e7-a9d0-fa0b62e2359c", "sighting_of_ref": "indicator--cfd7b08d-7c99-4e37-99ee-36747a565467", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8472f75b-ea30-4e32-a4ad-b0b6a8374865", "sighting_of_ref": "indicator--4fd9a13a-4e1f-4b21-8326-ecc306ba5638", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182cd190-f40d-472f-9300-ba2812c97607", "sighting_of_ref": "indicator--9d88dd5c-eba6-4e6f-8ba5-a2e42b4c77ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d3539a-deb6-4758-a5fe-b146542e68c9", "sighting_of_ref": "indicator--0bc29a4b-378c-450b-a623-cea3c6cd4da2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ef688c-faf6-4039-8aba-02c6ef1bf26b", "sighting_of_ref": "indicator--cc70f395-ac24-442a-a34a-6aa89342d73b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03544ae-4c39-48b5-9202-069da1638214", "sighting_of_ref": "indicator--9466f541-fba9-4425-a282-a05116d662a3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52c424d-8adc-4ad9-9a7e-b1ac7dcc0375", "sighting_of_ref": "indicator--aed45d79-3019-4b58-941e-504472e092b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ce637d-ca06-4c43-9c6e-3282d31171ef", "sighting_of_ref": "indicator--4a1ce4e8-054e-4835-af26-56261821d54e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb3918d-243c-490d-9422-d91ef814c6df", "sighting_of_ref": "indicator--ff59ba76-aa3c-4ccb-967c-af6cfe3fc3b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454f8cd8-7339-4cae-b169-4ceb0fc40dff", "sighting_of_ref": "indicator--a803d0f3-eb1a-400a-a9b7-acee25577d4a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00773d1-7758-4033-9135-9d8d318943d8", "sighting_of_ref": "indicator--88719571-355a-47e0-9417-e73aa98635ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7581a8-76e7-4d49-bec0-e6dd9707a4d8", "sighting_of_ref": "indicator--ddd05654-78da-4118-9f9f-374f08618520", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaddb2c1-f4a0-45e2-8c6c-c97b3946e553", "sighting_of_ref": "indicator--1fc75544-6813-4153-a034-0aa4346d22db", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2408f8-30e9-475c-9b36-2acf1d08f741", "sighting_of_ref": "indicator--fbcaad6b-5d95-416e-a13b-70c54c7684f8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7563b278-bb22-4ab8-8aa5-a5971a1e7606", "sighting_of_ref": "indicator--20061fdc-b35e-42c2-9127-50f64183f11a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49aac8e7-f208-4903-bb03-fc338f8f3c23", "sighting_of_ref": "indicator--5b7bf799-2797-403a-9990-5af65960365a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5fae87-3394-4fd7-aafa-2fc36459a8d8", "sighting_of_ref": "indicator--b1b149bd-d30e-4abc-9c18-2a770e8fdb88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d869a4-d5f1-46f9-bd69-9574a4c808d1", "sighting_of_ref": "indicator--abc550ea-2b26-458e-9205-83b91a98bd7a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899208a2-14d9-4080-bcf4-ed4d99967b96", "sighting_of_ref": "indicator--dbfc6f61-5927-4e8c-ad5c-a24678c586b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71765f70-1f78-48c4-8300-0b10a350da03", "sighting_of_ref": "indicator--f75d9b4b-1214-4032-8c49-dcf0f97490bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b025f34e-7e65-4536-ae99-5e09d0e9d10f", "sighting_of_ref": "indicator--cde0788d-6dab-4307-8808-a8b489b735be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e227a88f-bcfd-4bcf-8a35-39727806f1e4", "sighting_of_ref": "indicator--cde0788d-6dab-4307-8808-a8b489b735be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d5dae0-2e12-4c85-8769-eecbae7d1cfd", "sighting_of_ref": "indicator--18da43bd-3908-420e-8a9a-8ecad10caec6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57805138-4fbb-4d89-8435-f03096353aac", "sighting_of_ref": "indicator--f959a514-5a44-497e-a61c-1310308d1750", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb39c82f-6783-4eef-a88e-b076131ba50f", "sighting_of_ref": "indicator--e466992a-509e-45b8-a94e-a7a40bf59378", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abb35a0-23fa-4840-b7b8-9c45ed77eba5", "sighting_of_ref": "indicator--fbc134b9-4b57-4031-8645-2cabfc776949", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f23e14-86e1-4eb4-b8f2-9ac1e4378a2e", "sighting_of_ref": "indicator--fbc134b9-4b57-4031-8645-2cabfc776949", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55feb8c0-773c-464f-8701-5295221b5190", "sighting_of_ref": "indicator--f83fab07-ae56-4001-900a-d918b5c91334", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4ab6cf-52a2-4fff-9c7e-d7f8d3ee9c02", "sighting_of_ref": "indicator--8e6a3f29-890b-4b50-a6bd-faf7a0c511c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ebd23e-7815-4251-979a-64460e2d863e", "sighting_of_ref": "indicator--1cdde7d1-d44f-46ba-87fb-b51b3cdcf7c7", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c222fe0-ce23-41a8-a990-821130f8ae94", "sighting_of_ref": "indicator--3893e4a1-5191-42af-ae2a-9ed2cc5eb281", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c91aaca-29ee-4136-aa90-3440507d13bc", "sighting_of_ref": "indicator--0b5fd461-8448-446a-8c87-b579c47f96be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3c952a-baa1-4f50-b389-9af424f879c0", "sighting_of_ref": "indicator--0b8a75a2-d410-4102-810f-73bfd9a53734", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad1cb46-c14c-4f05-b851-9ab2c8388d19", "sighting_of_ref": "indicator--07c0dfc4-0931-4d3b-8cb2-5047d945c768", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3592e94e-a9ab-4aba-8844-c0abef4f33ec", "sighting_of_ref": "indicator--07c0dfc4-0931-4d3b-8cb2-5047d945c768", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4be09e4-a3f4-413a-9ca7-f1cc5064b66c", "sighting_of_ref": "indicator--ca01814a-1702-4887-92c9-eec93e80bcf5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7231bebf-a38c-44fc-aa57-413991ce931a", "sighting_of_ref": "indicator--235a6e40-e229-49a2-a066-b05501c11d98", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e63a8f-d48a-4751-90a1-e5f4170933c2", "sighting_of_ref": "indicator--8ccc0580-50a8-45cf-a3e3-5129e6c89069", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e50253f-2e05-4818-95ba-a6ff7989f777", "sighting_of_ref": "indicator--dd80eb7f-9f13-45da-8474-53b3e158f841", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb8a1aa-aad6-4a9e-afad-5d868c0c3f85", "sighting_of_ref": "indicator--2bb48f26-c637-4fce-9947-d79f84b9bff0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fa61d5-619e-46dc-b118-437a2b6dd2bf", "sighting_of_ref": "indicator--f559111a-13e9-419a-8817-5d9cd1a493b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9676a49f-7077-4a25-94f4-13583e67a1d2", "sighting_of_ref": "indicator--6ab8702f-3305-4b47-af51-4d8a849ed3c3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1998d036-0ec5-45d5-a9b4-f89c27079b88", "sighting_of_ref": "indicator--4b4207ec-4eb4-49ac-86ea-a605636a2ee0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58486a87-2d6a-420d-bbb7-f3ba0dafae7b", "sighting_of_ref": "indicator--61a8b3f5-7a73-472c-a707-ca8ce5533063", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930999b2-fea9-4428-8c1a-80959ed563d5", "sighting_of_ref": "indicator--7589d9ac-6e3f-4e36-a25e-b8e0a1122277", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c750309-d1a2-4066-9676-2a7cac97dcaa", "sighting_of_ref": "indicator--55630e07-8108-45d0-83b9-544fc4ddfd97", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6542228-0aff-4a27-b488-01b80f9954ba", "sighting_of_ref": "indicator--e02c5ccf-e402-4d40-9597-cb4497753a18", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2cdd72-7133-4b3b-8a0c-d59dba6b61e6", "sighting_of_ref": "indicator--a8cdbcc2-1865-4b49-bf68-b559faac53ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d500c1-c138-4e1f-89df-0c87d8ff1614", "sighting_of_ref": "indicator--78a0a2ae-1364-4205-8000-5b0e8a29ac8b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9422d9-56bc-451b-ae0d-e6b3e804faa6", "sighting_of_ref": "indicator--e34dbfc9-9222-481b-9105-1840a2d538cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba19a0c-a92b-44bb-9ce4-274bedd92504", "sighting_of_ref": "indicator--b0d47b87-af85-46b8-9aeb-4b981f6a3084", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f0f98a-1042-4054-9d62-0156bb3ddcf6", "sighting_of_ref": "indicator--7e147ae8-10f3-41bd-ac72-c18b0dca2144", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5224fded-32b0-4911-9026-61a116d23b8c", "sighting_of_ref": "indicator--7e147ae8-10f3-41bd-ac72-c18b0dca2144", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baab3af5-512a-4211-9704-34d435f013f1", "sighting_of_ref": "indicator--49e54811-a6bc-42b2-a031-4b94db290ac4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdda2bc7-ab9b-4055-b275-43d46e092761", "sighting_of_ref": "indicator--9f1e984d-dd55-4fdc-aef7-e0a154f402b4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eed28a-25f8-4418-a731-084c54ff1ea5", "sighting_of_ref": "indicator--d3f265e5-bfe0-412b-9b8f-bb391d75c510", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e924cc6e-71fd-4fcd-991c-b2f1308e5445", "sighting_of_ref": "indicator--d3f265e5-bfe0-412b-9b8f-bb391d75c510", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d39bbd8-4dcb-4619-b614-eaa7dde139b0", "sighting_of_ref": "indicator--29f9666c-dab4-4e50-93de-e67a472ddbe2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a301e888-7b39-40a6-9d4d-2b1c87873214", "sighting_of_ref": "indicator--a0a43bb7-40cc-4979-90c8-8149163e27f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23ad6bd-ed78-4cf6-b038-a11f78cea27d", "sighting_of_ref": "indicator--fc81bff7-29d8-4adb-8daa-e11298b4a163", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966a83da-4eb8-46d7-b64c-556bd555559e", "sighting_of_ref": "indicator--cc606949-e4e8-44dd-8cad-bdd57bf2fe16", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240251b9-46c3-439a-a52c-01fe1940599c", "sighting_of_ref": "indicator--96cbfa6c-5462-4c3d-a673-184350465ab4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25903a7-5b27-4a44-9432-84cd87ff5b2b", "sighting_of_ref": "indicator--1aaf4452-8d22-49c7-83fd-a3d61c38935e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e1a10b-8786-41e8-b210-b87ef7a39531", "sighting_of_ref": "indicator--b0f3274f-90f6-4d73-954d-60d7ad4c758a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d063767f-3898-4503-a940-947af53011a4", "sighting_of_ref": "indicator--3f5f998f-2c05-4a98-a430-23bd7ee1c971", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ce2af0-8231-47fc-b49e-e0d4048938c2", "sighting_of_ref": "indicator--e48f5c5d-098f-48f8-984c-9f8e374b6197", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9aa695f-ab31-487d-bf60-cbad8afb6290", "sighting_of_ref": "indicator--04c33fad-2109-44d5-97af-aa610b44913c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c946853c-71a6-4f6f-afd8-e5026f050e78", "sighting_of_ref": "indicator--a9ebd1df-b10c-4f8b-9bfd-da1ee339c1a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c84c04a-8eff-41d8-90e4-58c9927fe8a0", "sighting_of_ref": "indicator--90210f83-f9a0-4fe5-8168-012e18bd67c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecb76f5-04f5-4f42-9191-da2aabcb4bf2", "sighting_of_ref": "indicator--07e3c596-605f-484a-9c2b-2d3470e0e387", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386330ad-9de3-4aef-9beb-88a51f9772d8", "sighting_of_ref": "indicator--a858c7b3-d70f-46f1-b033-8642eb06cbd2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ab0eb4-be28-42c9-85ee-c3e0fe629993", "sighting_of_ref": "indicator--be6e21d6-661e-4fb5-a91d-7c325efdec51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee170516-8ad0-46b0-bacf-8982f4120916", "sighting_of_ref": "indicator--4b57d172-f911-4f43-87de-4b5c1794db63", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16b81eb-453c-457c-804e-97b73c2791bb", "sighting_of_ref": "indicator--2795ce44-b526-45ec-a574-8949d201319e", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43a82d4-c089-4b9d-9ee0-953822789118", "sighting_of_ref": "indicator--eae8b080-df74-4e5d-9c39-eb8898a5f992", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12149dbf-c505-4a7c-a13f-54012aa3e2a1", "sighting_of_ref": "indicator--451f1864-2930-4da9-b292-581e5f8060bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa99bd1-c42e-416e-bea9-641d8ff077fe", "sighting_of_ref": "indicator--6eed0ed0-ce03-4613-9763-9b053d0ba7ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c75b6b0-ab98-4e6e-8546-038014daee53", "sighting_of_ref": "indicator--0ea5c64f-dfaa-45b7-a7d5-4341de73a6d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6651f3c0-b8a8-438a-899c-83a9ff8a6d26", "sighting_of_ref": "indicator--324b2693-83c3-42b1-9630-17c39ecf3d62", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe540f-3024-4422-af6d-3f12e1c04004", "sighting_of_ref": "indicator--b0bc6b0c-1701-49bf-ab7d-86dd44e2f27d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86df545-6cb8-452c-9105-6fdfc7e114ad", "sighting_of_ref": "indicator--d52259f7-ed6c-48cf-a99b-a26e977488ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f18a80-6412-4944-8b7a-b03969be3b34", "sighting_of_ref": "indicator--e7bbb3fd-63bd-4ee9-be0e-e4100536d9f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8610363-9407-4e1a-b1bc-0258498f98e2", "sighting_of_ref": "indicator--9d2f8531-b5e4-4ca7-a994-b49c470d6c0a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51de86a2-5c5a-4a17-878e-47e1447ff41e", "sighting_of_ref": "indicator--67b9075c-d730-4e44-8bf6-f0b6921b133a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0055fe84-dae5-4990-ba4f-13bf1c3a332e", "sighting_of_ref": "indicator--32c11267-5c36-45de-8522-c126de29a254", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300f4119-6901-4391-81e0-216d7a81dc39", "sighting_of_ref": "indicator--ade14ec7-afd6-4d50-a0b4-0d1b8f4a22ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01d8852-09c9-4a37-a9ba-615fa5a2fa34", "sighting_of_ref": "indicator--96e9716a-29ff-4757-82f1-ef6ab60ba39c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6008470-b1f7-4d0e-a9b4-a3728b10b399", "sighting_of_ref": "indicator--96e9716a-29ff-4757-82f1-ef6ab60ba39c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcaabde9-0a56-4445-b3ad-65ab1c8d5246", "sighting_of_ref": "indicator--fb31ad18-d99c-4a71-914d-9f4f7fd3b4c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11de2b6e-3c20-41b6-a56a-f876583a3108", "sighting_of_ref": "indicator--98f45a96-1dac-4b8d-bf33-49141b7037d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03457f81-2549-4858-84e2-5d35df2847a0", "sighting_of_ref": "indicator--dea6e943-2a49-4a8d-a01d-4a3cdc7fd160", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a06285-2da9-4664-a297-33d095f3f847", "sighting_of_ref": "indicator--6dcb937e-ad33-41fb-b352-708fd76cd20c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484603a2-4127-4ca3-b956-249b94168724", "sighting_of_ref": "indicator--b8ee2512-446a-4f2b-9c85-33219b29d0c2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78c7162-cf7f-47ee-a0ab-5b3a7bd9d68f", "sighting_of_ref": "indicator--1fd5719c-b2eb-43a2-b162-7c196556598e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881fecd1-bf97-4845-b1cc-7ce20c4e36b4", "sighting_of_ref": "indicator--92c6c299-fa97-419c-a284-d2c6f74055c2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ad9e9d-a7e0-4e84-83eb-484bf0767f4e", "sighting_of_ref": "indicator--e018b5f5-1c1f-40f2-928d-e698b188c2ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd224593-b94a-4140-b040-976444ac916e", "sighting_of_ref": "indicator--06d4199d-c4c7-4a30-945f-a60d05ff957a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221ae472-0095-42f0-9c22-63c22e4eca3b", "sighting_of_ref": "indicator--5daf7114-113d-44a5-aeea-5b3e55d745b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c3db34-cd1e-4639-a6ac-c043318289c5", "sighting_of_ref": "indicator--fdd693d1-16be-4c52-9d36-0155d1f6087c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6894e63e-ac1b-4080-b440-1dd4451a6271", "sighting_of_ref": "indicator--87f9523d-c914-47c5-b2ff-1e8962a27209", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71ba0a3-1d55-46a2-b212-ff449b02e5c7", "sighting_of_ref": "indicator--520895eb-b787-4ae0-bc83-ed760ecf0fb8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f043410e-53ed-4a92-9023-70562ea400d3", "sighting_of_ref": "indicator--d9c37afb-05ea-4c34-9e25-ca1d9db1a841", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d770f37a-083f-42b3-bebb-0d083b6a0c74", "sighting_of_ref": "indicator--6747ed17-825a-4649-8dbc-86f58de591b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b60fd7-5601-4360-83ef-2e3c09ae1961", "sighting_of_ref": "indicator--6b426eac-1e7e-45a5-b02a-a4112762e732", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1a9fa4-e5cb-4800-b749-bb5ac40b902a", "sighting_of_ref": "indicator--e5d32dc0-71ec-444a-a964-9043099bce36", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf8fd5f-09aa-4c8c-93e5-58b41345eb54", "sighting_of_ref": "indicator--01666153-3346-493f-a6ba-d2dad2663ea7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f2913e-e179-4598-833c-f16091a29012", "sighting_of_ref": "indicator--53916004-3bcd-4da5-8c77-9bc6bb6ab94b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11e79f8-fbd9-4e4d-95f5-ceca9875d183", "sighting_of_ref": "indicator--720b37cc-d54d-483e-9b0f-20026fae61e4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fda3ad-7d34-49c4-ab6a-23fd9f987242", "sighting_of_ref": "indicator--4365b07d-b971-4bf3-88fe-2c2efa5772ea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cc5226-4a42-4b03-be2f-7e293f737530", "sighting_of_ref": "indicator--31220226-a140-4ec1-8d0a-7f51a76617c7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0e13ee-4a5f-446e-accb-17af22d9c63c", "sighting_of_ref": "indicator--d9ae2e75-9db0-4c0d-a51b-6dfa7fed7906", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6db8a93-c53f-4ab5-9b08-78b94c054b80", "sighting_of_ref": "indicator--e514bac3-9533-4ad7-b943-c308505c32e0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4aac05-42a9-48f3-af8f-73ad2c16cf42", "sighting_of_ref": "indicator--537a6711-4370-43bb-87d5-d217aa2842f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbf0582-3f89-44e9-8d11-5cd897cf5bc7", "sighting_of_ref": "indicator--537a6711-4370-43bb-87d5-d217aa2842f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4840d243-c163-4dff-94ae-fc60f983aae0", "sighting_of_ref": "indicator--93b4d16f-670d-4b5f-9aae-708e1bbf349f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d0c6dc-46a1-443e-a81d-aa7d088a3230", "sighting_of_ref": "indicator--e5146a43-2aa5-44bc-8528-d83958e21f63", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd17f228-ed93-4bfb-890a-21c4fb3a686e", "sighting_of_ref": "indicator--e5146a43-2aa5-44bc-8528-d83958e21f63", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fc459e-ddce-49f8-80ad-52b44ca3de73", "sighting_of_ref": "indicator--db3444a0-50a3-4119-b4b7-ab330e7ae6e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18568c6e-41ad-4341-8e86-7c19ab21171d", "sighting_of_ref": "indicator--21e5756b-da2b-4e6b-86ff-7ac2ad6ca5dc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f623935-67ac-44f8-bec7-75c3aae49bce", "sighting_of_ref": "indicator--a3d7023a-7800-4004-bd0a-39970665b3fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441261e0-7d59-45d4-9b98-8f8629cd433b", "sighting_of_ref": "indicator--df684f88-745d-4389-a2af-98770e3a8773", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83addee-e626-43ba-94bf-512c780140fc", "sighting_of_ref": "indicator--961e0921-60cf-44c3-923d-faa2d7f017c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9a987e-a813-4dd8-85f9-9007cf4fcba6", "sighting_of_ref": "indicator--bf93dd16-0adb-4b88-8035-4546193929c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8713ed-5376-4cb1-9619-bf59b8f67a84", "sighting_of_ref": "indicator--a61ef9c1-33f6-4b6a-b7bc-49080d7a2d3b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f07fb6a-04d2-4dc7-98b5-acde07fd8275", "sighting_of_ref": "indicator--fc3408e6-c2ff-4b4b-b475-37c621f2117f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24eb613-6795-43c2-9b53-2a93be19c422", "sighting_of_ref": "indicator--1e57b1db-ef35-4a4a-9ca4-38454c5addac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58609ca7-9c3c-422d-8e98-af4171b666ac", "sighting_of_ref": "indicator--8d1669f3-9dcb-48e3-9463-caf9040c17ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31af405e-e7aa-4129-9479-aee19c81c852", "sighting_of_ref": "indicator--4679da88-e245-44c9-b926-c160d2a8e2e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d426710-9a82-4204-b3ec-09ba301779d6", "sighting_of_ref": "indicator--4679da88-e245-44c9-b926-c160d2a8e2e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa91c94-9556-4bd8-a49f-3e2716a563bf", "sighting_of_ref": "indicator--1987cd04-250b-4e63-9f3b-5e80f4cf5bdb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704bd7f3-d0ad-44a9-a723-9017dbf6ea14", "sighting_of_ref": "indicator--97bec1ef-2c82-42c0-b6a1-4764fdbc8ff1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2122b48-38a9-42b7-85ce-275422352408", "sighting_of_ref": "indicator--97bec1ef-2c82-42c0-b6a1-4764fdbc8ff1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc912323-15e6-4432-a4e5-dfdea20ca1b1", "sighting_of_ref": "indicator--153d8e63-f744-4d00-968b-cb6446c1e7aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f082f7dd-b411-4a11-a33e-7dc7df1b3e34", "sighting_of_ref": "indicator--7158f150-0759-4bc4-82c2-36331791ee25", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e50184-daf0-4509-ad11-e6a1fb08401c", "sighting_of_ref": "indicator--29b3daca-bb12-4154-98d2-b9b170ca36fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d5e719-1fad-47d7-acd9-5cc5e12b3068", "sighting_of_ref": "indicator--b1d2ecea-77e2-4ca4-9da8-6bb6b01d8684", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff65b37-fb39-4b3d-8ae8-6a94b7e35b26", "sighting_of_ref": "indicator--8a3ae64c-e436-40cd-b23b-0dd9dc361b68", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34d7ccf-ea9d-45e5-bf30-38e6ae4220cd", "sighting_of_ref": "indicator--60410551-7f74-45f5-8270-df2fe15a3764", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff2118e-a7ed-4837-b5ad-e9cafbff33e9", "sighting_of_ref": "indicator--660e8959-8ec3-49f4-8df8-76750387d144", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000f2b3d-d2eb-4834-99b3-16af90ad2557", "sighting_of_ref": "indicator--369ef73c-b1e6-49db-9a38-5e465d09c1fa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2ef1aa-9131-4fe8-be0f-f9a524dc1427", "sighting_of_ref": "indicator--369ef73c-b1e6-49db-9a38-5e465d09c1fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee553810-7945-47e6-8782-17b31a5eb27a", "sighting_of_ref": "indicator--d77372dd-3ac2-4a05-8e07-c6035964a1d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be64696-f7af-439d-8f5c-8bebebafbd27", "sighting_of_ref": "indicator--d77372dd-3ac2-4a05-8e07-c6035964a1d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008a1474-5572-4a18-8a6c-cc9700ed0a5e", "sighting_of_ref": "indicator--ad2f940f-7521-4f7e-a3c5-168224c68d19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928888aa-2049-4e82-bc84-0f5d66206544", "sighting_of_ref": "indicator--ad2f940f-7521-4f7e-a3c5-168224c68d19", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c466667-63f5-438b-b034-a86e05f7ee5e", "sighting_of_ref": "indicator--f56d25d7-56ee-40b6-a389-4f479914ea96", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835f00a3-30ef-49f8-bf0e-68f2de684ab6", "sighting_of_ref": "indicator--371dda67-fe1d-4d46-a5b9-82f2aefc8491", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c66885-7c4b-4d65-a35b-04b029d953d2", "sighting_of_ref": "indicator--8a463762-fb00-47e1-bb62-55950a62231a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d267ed32-6538-4e0e-abce-474f8b1015e3", "sighting_of_ref": "indicator--4e136940-02e6-443f-b935-9ddece2e04dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4428e59b-a2e0-49f7-8e1e-e829423ee4a0", "sighting_of_ref": "indicator--5aa89516-c4ef-41b9-ae74-4e9b5991b51f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4c8c9b-ba1c-4ea8-932b-49991dfd2ba7", "sighting_of_ref": "indicator--851828f6-2815-4dad-9356-0de7cc7cda53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2ce90b-67f1-43e8-b5a7-447b515653fa", "sighting_of_ref": "indicator--76d454df-52d7-4d95-9f46-afcd39360f07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923d9963-54c1-4c58-93ae-de6e52d6898b", "sighting_of_ref": "indicator--fbd81f46-e7f1-4032-bc6d-445576ed9d05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8076b4c8-cca8-46d0-a000-4945dfd49ecc", "sighting_of_ref": "indicator--f0caa365-2996-46b9-8b12-1c200f32d8a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05297477-93e4-404f-a010-a485438398fc", "sighting_of_ref": "indicator--35657bf0-7571-44bd-afb7-330439b6adba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e71141-4fff-4af8-b2b7-35b1909d1676", "sighting_of_ref": "indicator--1c635954-138a-4a3d-8aca-b07a23cd7598", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e55d6c8-e5ac-4592-9d5c-d841d896bacb", "sighting_of_ref": "indicator--1c635954-138a-4a3d-8aca-b07a23cd7598", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c9db1d-3b66-499e-b743-fd57eeff5630", "sighting_of_ref": "indicator--1d7f57a6-763e-4cff-98f2-929df0e58fe1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73d4d8f-81c9-40f2-b16b-aef548224583", "sighting_of_ref": "indicator--c125c6a5-03d6-424e-b0a2-74738b6e0630", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b695fcf1-6bde-46ce-9dd1-222c0c5a270d", "sighting_of_ref": "indicator--cb315909-e847-4aed-847c-ad564b69fd2e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e56ea6-53b8-4480-a226-61ee2a257218", "sighting_of_ref": "indicator--ad75b46b-0b18-4c9e-92ad-04b8c65d2c53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a36f33-b588-457c-9d04-468ee6c5922b", "sighting_of_ref": "indicator--2dfebae2-c2cc-4627-a716-0e6b3a3bb6d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f83bde-5fc6-46b5-b370-abf8e810303a", "sighting_of_ref": "indicator--f4b7a159-7270-461a-9471-cb844feacb4e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf792ca-2afd-4f8f-a524-582c6d013fbd", "sighting_of_ref": "indicator--94e4dc26-0ecd-42a5-ac1d-c6856ffeeb01", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b621cb5-3647-479f-ba33-8dfcb6069399", "sighting_of_ref": "indicator--f11114e1-2c1d-471c-bff7-f0a42443dfaf", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb447b7-267b-4946-a568-fb7ed8230792", "sighting_of_ref": "indicator--457a6bb2-8e55-432c-b3e9-77cea4a07123", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ba80ec-2db1-4a24-8f90-469ac18f9ec5", "sighting_of_ref": "indicator--233bf244-cb4c-4517-a1d7-77a0ee06d5d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5b5592-4b1d-4449-a084-8e4a5cf4b5d1", "sighting_of_ref": "indicator--625a60b2-b939-4dbc-9ed4-7b147d4bf2a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b02bfb5-7ca3-485e-bad1-e9c06cb60cbc", "sighting_of_ref": "indicator--17c6d743-4fb7-4aa5-a643-8fb258133ac2", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d803fe14-094c-4369-9664-9f0241f6301d", "sighting_of_ref": "indicator--c63c460c-8621-4323-b2a4-eb76b6b1bf6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b795d9cf-7d38-4670-8f11-690b9458d1ae", "sighting_of_ref": "indicator--8ae57f67-d292-43bf-8ea3-e293d3866e8d", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b908ad-e029-4ceb-a561-60c9cce811ac", "sighting_of_ref": "indicator--f3b96d31-e49b-4530-b583-2785015a6690", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2a7c81-8ab0-40f7-b607-1b98e9133b0c", "sighting_of_ref": "indicator--a06a45f1-aa39-4a17-aedf-21dba82fd6de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0abb89-b636-4f3f-94da-ccafebaf8db4", "sighting_of_ref": "indicator--fbc2e237-027a-4513-b33c-6545112e74e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84921a2-912a-4046-8397-27cd22d53222", "sighting_of_ref": "indicator--a5d49d40-4380-451d-8a8d-5b37e33818ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48259083-375a-4d4b-aa54-64ca9df5ac39", "sighting_of_ref": "indicator--4f0a5084-d05d-454e-bae0-2eccb25048cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4cd8ac-6e4f-4b8f-a4d1-7748baa15277", "sighting_of_ref": "indicator--405a2ed5-76b8-43a0-98ad-40726c75b88d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345ba13c-7848-4a33-add8-db33175d21e0", "sighting_of_ref": "indicator--36bf5547-1ec0-4c15-bc7e-6d9bcea79f99", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703d8402-69c5-433e-a501-ec3c0bb236a1", "sighting_of_ref": "indicator--05342b69-8493-4f2f-b04c-a13041ccaadd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61e1fef-321e-4c0b-acae-62e5f44463cd", "sighting_of_ref": "indicator--8ae8f4e6-a3e5-4ed9-8d07-554f263b3b4e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab66ec0-155d-4d79-ba14-15647b3ce5f4", "sighting_of_ref": "indicator--88ecb151-1967-4662-b4c5-7d3ea4d9b053", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e5eff3-ed2d-49a8-bdc0-911048dc6a7c", "sighting_of_ref": "indicator--3446b83d-0efe-4c9c-8088-5b12537a7677", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114431b4-8fd2-4fef-818b-4aef8b303758", "sighting_of_ref": "indicator--3cece743-d540-42cd-98f9-2fbe0dfd4d17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bae8f9-3716-4fa9-a9a1-b0324cae3090", "sighting_of_ref": "indicator--e7e1f707-3822-4aee-b42a-0eec23e1ac9a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce7e215-2056-48a1-99e9-c8273355d84a", "sighting_of_ref": "indicator--e7e1f707-3822-4aee-b42a-0eec23e1ac9a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe1cf1e-8ab0-4805-9bc0-649091de729a", "sighting_of_ref": "indicator--724d1917-85be-4f26-b905-6cd4d73cf4d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31584fb-890d-441a-8823-d45fef96fcbf", "sighting_of_ref": "indicator--a3e37361-f170-4014-9347-ba80e72e35fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a355efc6-04f7-43c5-9545-fee4d1247a11", "sighting_of_ref": "indicator--bf4740a7-c39c-488d-bd6b-4743ac962316", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae81160-0baa-4dd8-8944-e4cb36bdfd9a", "sighting_of_ref": "indicator--b33dafa6-be3b-4904-a99a-b5dfd6691e2f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218562dd-a9c8-4e94-8410-13306a5644e6", "sighting_of_ref": "indicator--0b13ff6f-5099-4361-adbb-00d210b1dd0b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89abb256-c211-42bc-a0d7-826be28c04cb", "sighting_of_ref": "indicator--1d0091b6-fe24-4094-97b0-393bea1dfbfe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b6c52a-d521-4077-8616-d378cada11f2", "sighting_of_ref": "indicator--9263eb1c-be55-40db-a15f-aa8759cb95ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2341834b-4524-461d-b48b-b2486d34aeaf", "sighting_of_ref": "indicator--1892ee53-4c42-44e3-aa1d-5480346c9e0d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63175e48-f421-41ab-8c04-bdfb3dc83596", "sighting_of_ref": "indicator--235a7ad9-2136-4506-9831-f0320601ac5e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6b6d23-4284-4a64-967b-fd78757510cb", "sighting_of_ref": "indicator--07cc7f43-2860-488d-b416-b3c7199b9583", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e6b1d3-4191-40ab-8405-7016c2f05a0e", "sighting_of_ref": "indicator--07cc7f43-2860-488d-b416-b3c7199b9583", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098f6060-41ed-4086-b87e-8d261078f88c", "sighting_of_ref": "indicator--09c5bcfc-1fb1-40a0-9624-0a5dc102703b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa5fc63-c73f-4190-9117-258bff79e883", "sighting_of_ref": "indicator--75f7a140-7a3c-488f-9a8a-a8f0e1220900", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e3ba7e-c5d4-4540-b88c-300d0404975d", "sighting_of_ref": "indicator--96746794-82c6-44fe-8f7d-dbf5cee5ff44", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb4136a-e1c3-4d6a-ab2c-d464821351af", "sighting_of_ref": "indicator--f45876d0-c2bd-4799-9d6f-06831de37bb9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaffb1d-b351-45d3-88d7-25df26e84dc4", "sighting_of_ref": "indicator--e973b9c7-0c8c-4acf-a76d-5372224dd0a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4ea6da-f488-40ed-b2c9-ef05991ee0ed", "sighting_of_ref": "indicator--e973b9c7-0c8c-4acf-a76d-5372224dd0a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50d67c1-2336-4eca-9d7e-310b78217d83", "sighting_of_ref": "indicator--d5ec34c8-2325-4215-a988-0b4918737b36", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4597e75e-5cf8-490d-bcda-57768c31c5ca", "sighting_of_ref": "indicator--91a2b529-297d-4d65-8d00-462f9ce5b86a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5d4a03-4b5f-4c67-add1-888931c762e1", "sighting_of_ref": "indicator--ec4be4df-55bb-453c-ac17-c4e6668fb8fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de127d86-4d83-4b26-b993-c93d4b589462", "sighting_of_ref": "indicator--0c0dc52d-5af8-4e4a-a72f-bd4f04b0db10", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff39aab4-567e-4b0a-a219-1f7ef89056b6", "sighting_of_ref": "indicator--0c0dc52d-5af8-4e4a-a72f-bd4f04b0db10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bfd6c3-ed3b-4e09-b043-5cff20c24c56", "sighting_of_ref": "indicator--7ea35601-ebb5-4a08-9851-e1d58c93dc92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f33b83-2f56-4e07-819f-8b86d197fe44", "sighting_of_ref": "indicator--1ff6e742-c017-497f-89b1-43b0466e5659", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04c51fb-d73c-43d3-b665-5375c428b497", "sighting_of_ref": "indicator--7c4110cb-6c1b-44a6-ba5e-4e45bf046574", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ef60ac-eda6-41fb-bb01-15a98e3f9013", "sighting_of_ref": "indicator--3796bed8-b024-411c-b39c-f89365e80622", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683a26bf-2283-4307-89b3-d8507595f91b", "sighting_of_ref": "indicator--adb41753-e02b-4e48-8c26-c3b30a526081", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea210ea2-0751-4c10-b9df-73e96f659351", "sighting_of_ref": "indicator--adb41753-e02b-4e48-8c26-c3b30a526081", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbe4a00-6ac1-496e-a555-881e9a8b4f6f", "sighting_of_ref": "indicator--7d42611c-9cea-407e-8026-a44db0f587ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a778e59f-43d1-4ed3-aba5-7ce5c4824cc2", "sighting_of_ref": "indicator--f6bf0507-1c4d-4e58-b867-fd9e3206a2a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81268a5b-2ecb-4254-8b8e-6c57719a8512", "sighting_of_ref": "indicator--f6bf0507-1c4d-4e58-b867-fd9e3206a2a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da80d77e-3a29-4108-935c-9836a2cf7f0d", "sighting_of_ref": "indicator--fc9da3ed-cbd7-489c-9eee-6252927a6106", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f99e60-7826-4ba1-87c6-799305014c8b", "sighting_of_ref": "indicator--c484bd8f-f581-4675-b4ae-793d14288913", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1caf3d3-abf3-40fd-9e29-6d320b08b73a", "sighting_of_ref": "indicator--7f5bcf53-50d2-4233-afb3-a9f7282f083a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de5712d-a782-4758-bf6d-6c22e6c55858", "sighting_of_ref": "indicator--7f5bcf53-50d2-4233-afb3-a9f7282f083a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af69f85b-4ef1-4871-bbf9-8eeee926a160", "sighting_of_ref": "indicator--cf77cb1b-3c41-4494-beaf-13ec86dd5954", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b15413-0a64-437d-a641-785d3708c524", "sighting_of_ref": "indicator--cf77cb1b-3c41-4494-beaf-13ec86dd5954", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4255404-c9ab-4cff-95f6-271207412f11", "sighting_of_ref": "indicator--dc648cb6-0244-45bc-a569-ca657cf48ced", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb13d9b7-33b7-4ad1-af28-6bab7e8d74b9", "sighting_of_ref": "indicator--60fe9cef-0a0e-444c-9ab1-29031a0a5d4a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a3a1f7-651b-4083-9da1-eb57d147ed30", "sighting_of_ref": "indicator--0a58d6d1-dacd-45fa-8962-e6c5f1df4058", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c771cf-01be-4438-b631-d9c180f792ac", "sighting_of_ref": "indicator--7f4dc2e9-0c7b-434d-9e83-04b48dbe9f18", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a93528-0ae5-4922-ba1d-334a9b8595df", "sighting_of_ref": "indicator--d78a1ccc-a61d-483a-beff-c393442139bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a02f59-95e2-4abb-a5f5-3268a944e446", "sighting_of_ref": "indicator--d78a1ccc-a61d-483a-beff-c393442139bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7104ebee-310f-4309-ab23-f6660a43a9d0", "sighting_of_ref": "indicator--96d200f5-c94f-486e-a729-c25969ab7105", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453af842-81ae-4bc2-ae76-40eb50827b31", "sighting_of_ref": "indicator--bbfac6e9-295a-4c79-80bd-00f94ac71910", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae97d6c-2864-4ef6-9e3e-2b0051c7897e", "sighting_of_ref": "indicator--7241b274-30d1-49bb-9dc9-2ef0f3e3703c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d47189-2045-442e-86ed-a8b1d0b49454", "sighting_of_ref": "indicator--5d5afc1a-f0c0-4801-a935-5e85e78596a6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edac2a4c-daa5-4fa7-a9f3-814e11f57838", "sighting_of_ref": "indicator--2ec14afd-07d6-469e-ae3a-f5481cb753e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f0036d-d251-4845-bebe-6ac4a6637603", "sighting_of_ref": "indicator--2a8730df-1ca3-413b-92dc-a501dd8fe2c5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca49f8f-0800-447c-8fa8-5af3c87b4f64", "sighting_of_ref": "indicator--2a8730df-1ca3-413b-92dc-a501dd8fe2c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb6903c-e308-46bf-9320-97ef51cb2eac", "sighting_of_ref": "indicator--a5e29150-27e4-4ac8-9586-0ca2289ce223", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650305e0-feff-45a0-967a-a4beca11ed4a", "sighting_of_ref": "indicator--a5e29150-27e4-4ac8-9586-0ca2289ce223", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941d2f6a-a196-45ba-804f-8176fd86c194", "sighting_of_ref": "indicator--711e7b41-cb3d-4958-b9c1-476712463f9f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789e6861-e2cd-44c5-a17a-dc7a2743674c", "sighting_of_ref": "indicator--cd6bd208-6903-44ec-a162-042b57f65907", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b9a870-13a4-4511-98c7-02eece7ea5e8", "sighting_of_ref": "indicator--cd6bd208-6903-44ec-a162-042b57f65907", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d94a8f-ca6c-4b60-8d9b-fcc4c7157513", "sighting_of_ref": "indicator--14943cfa-d8c7-4859-9d0d-2f1d8256a70d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b846ff-2623-4dee-a3a0-96e5580e53f2", "sighting_of_ref": "indicator--87725899-1a08-4cde-ac3b-d191abcaaa77", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cab3ec7-fd37-461d-aae4-0e995a5a07c5", "sighting_of_ref": "indicator--11f10598-167d-48ec-925d-76ae58c7995f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653ed036-df8e-4283-8bb8-0f30340bb98a", "sighting_of_ref": "indicator--65cbbafa-92c5-43ff-a8d8-31486ea03360", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a096860d-5ef7-4257-aceb-a9f18a95b1d0", "sighting_of_ref": "indicator--4a24c165-5680-400c-ab1b-59f68c8980f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3853d4d0-1c91-4ffd-bb09-1f2cb0e64857", "sighting_of_ref": "indicator--ce2a8989-adf2-4a61-be77-d3040a79d753", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19c6b2a-43bf-484f-9795-f6e8b235fbc6", "sighting_of_ref": "indicator--04d9071d-3e0f-4574-8dd6-5efe27226da0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5498e7bd-297d-433d-92fe-530c17904b97", "sighting_of_ref": "indicator--9d5677fa-530f-47fa-903e-8b1980fbf78f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a43815-f674-40b2-877b-10dfc0105dcf", "sighting_of_ref": "indicator--4f55c13b-60c8-4686-a2d2-a08f29aebf54", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90b3d87-5ad7-4c61-953a-70c340a1a045", "sighting_of_ref": "indicator--c0e5ffb3-97f0-474b-8361-0207b3cbeaae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1c826b-0bf6-4f36-bdd4-c6e3ae44c557", "sighting_of_ref": "indicator--055f970d-e699-464b-b9b0-d3ee062a8df7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e5f766-92ff-4b05-85d4-5bb1ccecfe6e", "sighting_of_ref": "indicator--ea0c22e2-030f-4317-8a0b-7d2c371b638d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d05ad6-ca62-4c32-a514-1a2bc0a2d53c", "sighting_of_ref": "indicator--ea0c22e2-030f-4317-8a0b-7d2c371b638d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e751e244-83d2-42c8-98a2-2500bee601ca", "sighting_of_ref": "indicator--66052d62-dfe0-4506-b2ab-afe55b9a3536", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0583ef8-439d-4fac-9c95-b730e1d5f971", "sighting_of_ref": "indicator--32b04c26-cb8c-4985-9b3e-2e5c47d8851e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12888408-91ad-49ca-9835-f9cf7b2b0519", "sighting_of_ref": "indicator--32b04c26-cb8c-4985-9b3e-2e5c47d8851e", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f7c9c1-66d9-47e0-b4fa-15721651215a", "sighting_of_ref": "indicator--2c27e348-467f-46c2-9b5c-5f7c94f2724b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aff4f1-5de8-44d5-9e86-0976367b29a1", "sighting_of_ref": "indicator--cb83efd1-361f-4683-9387-8d3880a73cdf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a153cdcc-b75b-4602-aa76-abf1f397edb2", "sighting_of_ref": "indicator--6841eddf-6b17-42ce-9bd6-ddd07d761032", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7177aae0-1f6f-43c8-b682-7e952099d74a", "sighting_of_ref": "indicator--2170fd3d-3cf0-4b2a-aea6-c06dbdcd9377", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a906339-0e70-401b-beb5-ae9c077fc346", "sighting_of_ref": "indicator--fa065006-4f70-4a0a-b808-5739008e402e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df38911e-9319-4cf9-8e9f-feb55126339a", "sighting_of_ref": "indicator--19281fdb-794f-441d-b046-1ccb2b63481f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12ba745-837c-4589-93ab-791c5715818c", "sighting_of_ref": "indicator--0f343fda-b5e1-40c7-9301-504745bdf7e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab48836-d4f9-4b17-987d-f6640fd8f5df", "sighting_of_ref": "indicator--a1377b77-c3a1-49ba-b034-96f7e6bf4302", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8d4660-54aa-4e61-ab5f-f122b3dea41f", "sighting_of_ref": "indicator--4b9de3a0-fe2c-416e-9217-9409d9b80fcf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1bd601-bf6b-47dd-b87b-69bb8911f1c5", "sighting_of_ref": "indicator--ea372b16-2c8b-4b66-8d84-d46262192dbb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db615fbc-3f8a-4e30-be34-b1f99a580774", "sighting_of_ref": "indicator--8973ec1c-aa5c-4e4f-90db-0c181a1e74a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed00280e-413c-48fc-a3d4-3355b355e490", "sighting_of_ref": "indicator--8973ec1c-aa5c-4e4f-90db-0c181a1e74a0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c362106-b28c-4a4e-96da-b658f76bf679", "sighting_of_ref": "indicator--67f9a7b1-60b5-43b4-b6f0-9859a3da73b2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab604ff6-723c-42e9-a11d-0cfa3c349223", "sighting_of_ref": "indicator--7af009e4-fa58-4ddb-9b4e-d0c133a7d14d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04d3f6a-412b-4ed9-9e63-66982434a3a0", "sighting_of_ref": "indicator--3ab9093a-4933-432d-b048-5b9fc052f6dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a34e367-54fe-4123-a61a-81cf23ea9403", "sighting_of_ref": "indicator--7b53b74b-e051-4d33-89b2-0a4455853f74", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c461e5-db21-44a3-bd03-23895cb462f9", "sighting_of_ref": "indicator--8052da3c-08b4-4ea6-94da-e2e4e9dc1949", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e1dfdd-d5b3-4543-8f8a-e53e31f019d8", "sighting_of_ref": "indicator--8052da3c-08b4-4ea6-94da-e2e4e9dc1949", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3891f248-266c-4551-91d0-e456d4d24aa2", "sighting_of_ref": "indicator--98169d9e-91d7-4fac-af53-942e513d0c19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe083ec0-1443-402b-a7f5-8715cb022c08", "sighting_of_ref": "indicator--6f0e830c-0737-4ecb-a554-df9e863cb368", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bce5ef-1622-4e64-96a3-1a7d4d190a90", "sighting_of_ref": "indicator--6486834c-3a3c-4e4d-a684-a07e97471b86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3caf966-4970-4775-b832-67313ecc2ac2", "sighting_of_ref": "indicator--3ff92a9d-40e8-4a57-90d8-050863c1944f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ff0506-defc-405f-aa72-a76d2571a797", "sighting_of_ref": "indicator--41a650e8-8c9f-4795-9b6d-5fb28f384113", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a27087-c51b-4d9c-baf2-beb44d916bda", "sighting_of_ref": "indicator--41a650e8-8c9f-4795-9b6d-5fb28f384113", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf90ad6a-b880-453b-83f7-e9e38da1db6c", "sighting_of_ref": "indicator--2f370aec-0cb7-4246-be4c-b83e569186a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8219b18-741b-43e6-a1e7-f41ab33a4379", "sighting_of_ref": "indicator--08c306b6-fe44-4af4-9f14-247d65bcdc27", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666f496b-1d43-4b01-8cd1-c51d3baab757", "sighting_of_ref": "indicator--c9da0353-d1e7-4f36-8675-2b4cb037e9ec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae6cfc0-c952-4f71-ae90-9c308b90a616", "sighting_of_ref": "indicator--70489782-3bd2-49a7-b335-119034a19c4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de8f264-57cf-494a-94af-4632266e5925", "sighting_of_ref": "indicator--c3156974-643a-45aa-9704-e84970e9137c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17be0278-d235-493b-b48c-e84b8a986af0", "sighting_of_ref": "indicator--a85745a3-4ef7-4713-a9d9-0b11f8442495", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b28661-746c-487c-95ef-54940bf77b1e", "sighting_of_ref": "indicator--b0f6606b-35fe-4b9f-8587-2ca47c677f68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813f2fa2-73d2-441c-8153-bbea8648ef2a", "sighting_of_ref": "indicator--991dd1d0-a65f-4305-b7cc-f0f0f768f958", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55074eb9-3e23-4e85-9230-b52b3d3ed408", "sighting_of_ref": "indicator--23fe3044-59fb-4d14-9d77-ca015a96a051", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ffb256-2dde-4d3b-831f-f12726cac41c", "sighting_of_ref": "indicator--1e13fbf9-ba97-4e1c-8c7c-67e7b8dc0b46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb570c28-2460-4458-9fdf-ede82af11b2d", "sighting_of_ref": "indicator--1d47e390-ef48-442d-ba2b-3367129b53ce", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc963812-9240-4e04-be46-92b9c6a626d8", "sighting_of_ref": "indicator--24c525f9-b76c-42b4-b624-eaac30e2cf79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f23fc4-451b-4366-9086-9d9c32e3e79e", "sighting_of_ref": "indicator--fb301601-67a7-411e-a6fb-853a26edfdf0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf732db-4e98-44d9-84b8-346926331e96", "sighting_of_ref": "indicator--b8a60f3c-f431-48e1-afb5-dd270913a6b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2dc310-a918-4c73-9eae-235dcb0ea677", "sighting_of_ref": "indicator--836e9074-14b2-4b6c-8f50-065b1c09b7bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b19a56-2ee8-401e-a767-b7b4f6e82b37", "sighting_of_ref": "indicator--f0a67da3-f4d6-4167-aac6-3a5f24f69392", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e5debb-4cd2-4966-8e39-66e523c99349", "sighting_of_ref": "indicator--c6449074-643b-4e56-8d1e-9ab995c619f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e70f048-0356-4249-89c7-0fe0cc411db4", "sighting_of_ref": "indicator--90d34b98-52cf-4ec9-b175-4526375c4384", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3907e81-6b1d-4484-ad2a-d0465968b86a", "sighting_of_ref": "indicator--c0489e92-2c7e-454c-a0f5-8d561149b1d9", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42338f69-06b8-4297-8936-ff1544986bed", "sighting_of_ref": "indicator--37caa7a4-0fe3-4b74-807c-4da202f10b75", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb6cdb1-0e9e-4229-93a2-318e853507d9", "sighting_of_ref": "indicator--37caa7a4-0fe3-4b74-807c-4da202f10b75", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1b4150-f495-471c-8524-f734fdc9e123", "sighting_of_ref": "indicator--869ce96c-f1dd-4357-8c38-a1d5d3421cfb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e1baa2-868f-4d94-85e0-8d4b32054473", "sighting_of_ref": "indicator--efacd84c-479d-4b42-965e-5de9a9a1e9ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc5d4f4-ddec-47a3-a8c3-815166939723", "sighting_of_ref": "indicator--bb9c79eb-5fa8-42df-acbe-e4eb38412a87", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae582bb-c52a-41e9-93ad-4c40fd406d45", "sighting_of_ref": "indicator--9259aa82-7b00-45b9-8cce-efe1ef6d8b68", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d58d86-146f-4c41-9934-45ec98a01900", "sighting_of_ref": "indicator--9616e7cb-8cca-45d6-a6ad-244479cec338", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60ec33e-af68-4bc2-98b4-2c07599842af", "sighting_of_ref": "indicator--b1e39127-36e8-4a53-abf3-1b750cbc1c67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfaa88b-4c46-4da7-86c8-21ba035a9643", "sighting_of_ref": "indicator--10f17662-2b2c-4715-933f-af5d07b5d742", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b2931c-8cfc-4f1a-b3fc-38cd11759e9f", "sighting_of_ref": "indicator--d59941bb-a861-4284-87e2-5deefc5cae2e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2335ffab-ebec-4567-b1ec-9598b97d3514", "sighting_of_ref": "indicator--f33191f1-9bb9-4f5a-857d-95a1f93d8be2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da63a88-a0b6-42b0-ada2-5a4a8f4de375", "sighting_of_ref": "indicator--38d5df19-e595-4169-af39-7ac92dbe6824", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac65802-5bb1-4c7c-9b66-be9e2f6f3e85", "sighting_of_ref": "indicator--e84cb64c-0685-4e1b-ab27-7aa8123e42f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac75f60-f154-4391-8edf-1664e966be01", "sighting_of_ref": "indicator--714de926-3611-4275-a3d0-b8ae99831742", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f876ba5-4011-485c-8887-94ffde0674b2", "sighting_of_ref": "indicator--d376528a-3a0a-4688-9f70-e72763ed37ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23217e9f-20b9-4981-a670-6d8389696a44", "sighting_of_ref": "indicator--9de79164-ca0a-4a7a-b36e-a8cd0708fc7c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3691dd94-3b68-45c5-b5e6-186977ac8140", "sighting_of_ref": "indicator--2d286bca-3c5c-4a10-b9ae-f54a7a997b93", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d855afb-fba7-4c10-b150-892e397c9706", "sighting_of_ref": "indicator--bcfeeb69-4cf7-4c8e-b409-a2120547c004", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7f180e-753e-4fa7-8b22-99d94bef7197", "sighting_of_ref": "indicator--c1590b26-5c1f-4119-8291-a5d2200298ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf3cd6d-4680-4a34-8021-50fd3eccde24", "sighting_of_ref": "indicator--86d08770-ceee-4229-ab89-585d86e3453a", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a885c9-d565-4ddb-b76f-537588abc984", "sighting_of_ref": "indicator--9321b806-bf58-4bee-8e07-c8aafee16c71", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedac6fc-44a6-4be8-8a37-fdac08ae3c86", "sighting_of_ref": "indicator--0a7e3b54-819d-4614-98d9-02baabd597f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f6c92d-46a5-44f4-a4f8-9e0d88dfc040", "sighting_of_ref": "indicator--c05ad601-09f2-4dbb-b22b-15dae732df84", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3614ba38-fc4d-492c-8243-4d6d2ec04817", "sighting_of_ref": "indicator--d223b675-5067-4ca6-a4b9-779922fcf8cf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3524443b-d2ba-41fa-bd38-d14957c809c1", "sighting_of_ref": "indicator--c1f641f5-4ae6-4334-8b46-94501d9cebcd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5946eb-9179-4e53-b6e2-83b8cf05209e", "sighting_of_ref": "indicator--5cdec89e-ca16-42a4-a9d7-27cff099d7f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f3482b-178b-4f48-b8f8-f9f9e95b0f16", "sighting_of_ref": "indicator--52097330-403f-4723-9c55-0f2b26d7fe2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda6e3cd-5564-41ae-b393-f16de896d004", "sighting_of_ref": "indicator--b7d4893f-3e16-4ab6-bf68-5797fec5fca7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd39e14-d014-40fb-a22c-98c6dcd57110", "sighting_of_ref": "indicator--b3bdcd0d-0065-4c61-bfcc-a0ed26a21832", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e51a74-d9bf-4ff0-b894-988bdb06a3a3", "sighting_of_ref": "indicator--80cfb437-d67a-4a00-9086-6fc2b7ae5423", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea09a95-34d7-4396-bda7-d1e136e780d6", "sighting_of_ref": "indicator--2767ec92-e808-4aed-a780-4529f73868d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c100f5-872f-49d7-aaf0-d79b79ae3477", "sighting_of_ref": "indicator--086680d4-ebda-4fbb-8ae7-1293c8360757", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd416ef0-bf81-4e51-8bd1-23d5afd924b2", "sighting_of_ref": "indicator--3b4fe199-1852-489b-aa9a-bfa946ce26cb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58edf475-01b1-4db8-a7d7-b78dd19d62e7", "sighting_of_ref": "indicator--47e007a0-715f-4803-ac62-23c8e4de5570", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9e8dfd-bfa2-47f2-af74-917f8d46595c", "sighting_of_ref": "indicator--0d32d456-49f6-4ccd-92cc-d4af0d4e0457", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c469647-1242-4488-88f2-ff80982ac119", "sighting_of_ref": "indicator--9eaff2b3-81ca-47d0-b1a5-ca92d04fdf04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287f5742-5c4e-495b-bc7d-fb71a68edb2c", "sighting_of_ref": "indicator--4b5897b4-94ec-4979-97bc-61f3533016e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec950ba-e095-47c6-bfec-44be5b0cf595", "sighting_of_ref": "indicator--e2d8fa67-f985-48b0-8edc-fa33f108383a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9167f315-4810-45f6-b0b5-35ef2aed0b73", "sighting_of_ref": "indicator--dfdd7af1-e357-4ebd-962b-f09ce1b92336", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7f245c-618b-4955-8456-748b7b26d4ff", "sighting_of_ref": "indicator--f3e79dad-f497-4c7d-a6cb-179f94189f91", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb2562d-0c6a-4d36-a76f-3b659841b5a8", "sighting_of_ref": "indicator--eb8c1724-d6e0-4cbd-9024-1c414dfe2afc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f475f5-859b-4837-aa2b-e8ef1082a8ea", "sighting_of_ref": "indicator--8eeb2b84-c604-4698-96a6-94bac4554ad2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef1479b-d538-4244-bc61-5ddceb1fe165", "sighting_of_ref": "indicator--7f904230-dcbd-4ca8-8636-8c64ba0262ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1f2963-6d6d-40c3-9bc1-97aefececb4d", "sighting_of_ref": "indicator--edb9063c-7112-496e-929e-8442e00888c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f002d51-c0d1-4b97-928e-8c7cf997ff36", "sighting_of_ref": "indicator--c57390da-19f4-428f-a558-c07db34117e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a12221-e7b4-423f-9993-60db2efe0e50", "sighting_of_ref": "indicator--1927e458-b019-4cca-8956-5c1c31748942", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629784aa-f51f-4979-8c4d-a06a0910932a", "sighting_of_ref": "indicator--0bdaef35-ed47-4b18-8b1f-1508452a198c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a24f36-5fe5-45bd-817c-fd72bff66fa9", "sighting_of_ref": "indicator--d745ec03-5577-4d0a-ae75-22ea3412b1d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998c943d-9f82-4376-b277-ee21e2c5f79d", "sighting_of_ref": "indicator--39009421-662b-492c-986e-935f09e5c0e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0458563e-96cd-49a5-8b6b-95ca90462da9", "sighting_of_ref": "indicator--8f2ce32c-d0b0-46a2-b34c-1e0ea2e49426", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9750cb21-66bd-4b8e-9d16-9abf30c05563", "sighting_of_ref": "indicator--e578a133-c848-4ba3-9d84-95970ef2cf1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c0d0fd-68b8-49f0-a83d-39dcd472f6d8", "sighting_of_ref": "indicator--6eccf4c4-63ba-45d5-a12f-0b56a2434dd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9075a5a-42ff-43c8-8ca0-300e1e37eb11", "sighting_of_ref": "indicator--bfe773ac-b95a-48a3-b322-445a20c3c4ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f49298-a380-49e3-ad44-7cea6beb0038", "sighting_of_ref": "indicator--117b1363-1245-49da-8d22-c06886d88a1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af8e2fd-ad81-4ad7-a93b-b8cc319bbc79", "sighting_of_ref": "indicator--c8feb4ad-d8ec-4e5b-856e-bc41efc5225d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd11f6ce-5e70-441b-8fa1-0005ed5f1792", "sighting_of_ref": "indicator--2dc2ed42-9839-4cd6-8249-792652140870", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d6f18c-9fa4-4eec-9c60-b40f5a7386e7", "sighting_of_ref": "indicator--9cfb08f6-8bdf-42f0-a442-007d5a4809ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8729b6a-836d-4a92-84c6-eb1db6d7bcaf", "sighting_of_ref": "indicator--deae25f6-a64d-4750-b935-f845f0db070c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e43bd14-ac6c-4894-a20a-93ec1460daff", "sighting_of_ref": "indicator--67df55be-dde1-4023-a633-b909bb2de5b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bfc10f-44ee-4422-93a9-5048a3e2564c", "sighting_of_ref": "indicator--d58eb3c0-97a8-40f6-a029-f3518efe098a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cba464-5e4a-4aae-a02c-a91e45db17b4", "sighting_of_ref": "indicator--dc957d26-4cc7-48e1-84be-2e19b27c26e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c89a2b-745e-49c6-baa0-79a10bca5f2c", "sighting_of_ref": "indicator--47b59a4a-62d5-43eb-b75a-6433472066a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17726317-ce83-47fb-8c08-4f50d451448e", "sighting_of_ref": "indicator--b4a5ac4e-22e3-4cea-8b02-301f2942549c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d0a89c-b573-45e1-ac4b-3c44ef65556f", "sighting_of_ref": "indicator--70b98a1b-b29a-42be-9600-53a4a99de095", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9e3ad3-6c73-4675-8590-fef09a75eee7", "sighting_of_ref": "indicator--3f4fb1ff-955c-431c-a7a7-effdd840d3c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6af757d-cb27-454f-85e0-08250e65daa2", "sighting_of_ref": "indicator--f824c254-5961-4c09-875e-7c9122c02b52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938f414b-1351-43a4-aabc-2e77d74018b3", "sighting_of_ref": "indicator--b1510a46-2b8f-4a14-9c61-94f17603d3fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1836dc5-9d23-4123-af40-29c89b27be12", "sighting_of_ref": "indicator--1c4ffd90-3bf0-4fd9-a4e7-827b5b470b71", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81fa52e-fe2b-4728-b247-dec5c1e5b293", "sighting_of_ref": "indicator--03785398-4780-46a6-b339-fe09ff4dbde9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e7914f-ccf8-4b53-b621-3b73ff3b8353", "sighting_of_ref": "indicator--8ae324f2-09b8-4313-8af8-961c70d46629", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bcdb28-be3a-4d62-bfbb-16eb6636ae24", "sighting_of_ref": "indicator--256ef5be-e5b3-4833-9c28-f612319bc4d7", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c9b1ec-d49b-48f4-8d3b-783f4515d4c6", "sighting_of_ref": "indicator--c3fa6179-9a7f-42df-a18e-bee913afd3a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee742f8-a07f-4567-9eeb-91bfe4b77c79", "sighting_of_ref": "indicator--710d2997-f988-4064-9af1-12b3bc349735", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcf8d26-d0fb-4df6-8ad9-4c925a28a1a8", "sighting_of_ref": "indicator--ae9d43d1-db84-4598-b486-871e0b58f710", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a69cb87-6cd9-4636-90e7-1c0660ef5ef4", "sighting_of_ref": "indicator--88bc6fb9-afc9-495d-bd81-d5baf68ee265", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dce142-6ce4-4d60-af77-bc8dc5b067eb", "sighting_of_ref": "indicator--ae57c1cf-8f87-4976-94a8-bc4bae7e514e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f51fd-0edb-422b-8895-7fc2b87dc581", "sighting_of_ref": "indicator--3999ee48-6eaf-45cd-86db-4b29147b041f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fcbeac-2e3b-4aeb-b9e3-2d60ae61b249", "sighting_of_ref": "indicator--5601ddf9-5a0f-4024-b5fd-ffd50cb32d5a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635d1e0b-bae5-48b1-aa55-d666ba68cfdf", "sighting_of_ref": "indicator--725e4346-c51b-4382-a7df-2f969ae2bf42", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a49f3a4-23fa-4805-b7dd-510beec775f2", "sighting_of_ref": "indicator--42022415-d14b-49a5-9183-0c7b217f22a7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00035d4e-336f-47f6-beda-bd6cd407ff66", "sighting_of_ref": "indicator--a1255897-50ad-48d7-81bb-831eef8bcbab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f44c825-bbb6-44c0-92c9-4c5f48d4cd2e", "sighting_of_ref": "indicator--1d924b57-09d5-44f2-a1a3-ff0cadbe5a39", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f953e0fd-94f8-4904-9a90-33f862748a86", "sighting_of_ref": "indicator--c23c1ee4-cf6d-4079-87c0-a3bfc232de7f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5e5002-0a87-451d-8f9f-dfab2160c3e3", "sighting_of_ref": "indicator--94a6711d-c545-4dbd-a097-7f8e53a786c6", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae98b62-2b57-4bd7-8e18-67bfaae23646", "sighting_of_ref": "indicator--4342119b-8faa-417a-9794-016d2175ac97", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0491ce9-d00e-4ee6-a36e-d9cc3c531ba6", "sighting_of_ref": "indicator--3657e86c-68d3-4c00-93ab-a44fc44b6d96", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f22f48b-4e0e-4357-a30f-5cc6ae08c841", "sighting_of_ref": "indicator--d5130cf5-683c-4208-bb7f-d3ec466d9bb4", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ffe981-8665-423a-966f-e767864a3610", "sighting_of_ref": "indicator--0ce40817-6826-4de6-89ae-6da0a6de4c6b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1423a836-0eed-45e2-95e4-fe541250c462", "sighting_of_ref": "indicator--b34ed270-9d83-4e4a-89f4-bbec2a1e228e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20be5598-d40f-4f79-95a0-ade9331550d4", "sighting_of_ref": "indicator--2c259c4e-6fef-4860-918f-af254d17fc47", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee4846c-7642-4d04-998c-0faadfa22ffc", "sighting_of_ref": "indicator--47d348e0-bce4-4aee-8a97-9229e6874455", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68527a23-8150-40d2-9a28-8f986aac7d51", "sighting_of_ref": "indicator--6f67e5ca-28ce-4b11-8588-37a29afafe6c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733c9005-20c9-4906-899b-ed4977136fff", "sighting_of_ref": "indicator--f85f3ea5-d05e-43f3-9c22-6c767f944578", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef182ad2-18cd-4d16-880d-573111255afa", "sighting_of_ref": "indicator--6ce5f38a-82c9-426b-8aed-19d2d8597dc4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5932b7-d3c6-4bc8-b4b7-5cd4a20fb950", "sighting_of_ref": "indicator--ff6424bc-ee7b-4fc3-8852-f2f48e55bee6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bde6aa-02cd-4d7a-a4d8-eb33c5c753cc", "sighting_of_ref": "indicator--533e8cbb-b5de-4a4f-845d-076a18df5c64", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c891ad89-0121-4bba-a432-fa3fcbdeda40", "sighting_of_ref": "indicator--75a339fb-9d2a-4848-8181-62bed6c81485", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7126d2e-8588-4186-b58c-84682912b6a4", "sighting_of_ref": "indicator--160baa7f-eae9-4dd4-bfe2-6b23dd0cdbdd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40140d01-e0f5-4ab5-84ce-4aa5e7eaf758", "sighting_of_ref": "indicator--160baa7f-eae9-4dd4-bfe2-6b23dd0cdbdd", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f7e7d8-7844-4089-8c0b-f0cae1757615", "sighting_of_ref": "indicator--018942c6-c3ea-42d7-a7d3-bbd6d738c663", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387eeac7-651f-413b-a735-b881b8745935", "sighting_of_ref": "indicator--018942c6-c3ea-42d7-a7d3-bbd6d738c663", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2425a19b-9bff-456d-be52-0c969cca6f2f", "sighting_of_ref": "indicator--75abe6a3-24bb-4b61-a1dd-1b4ea35aaea9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ee0c80-5ce3-4e1f-8fa3-993617b3ed5d", "sighting_of_ref": "indicator--bac53072-825c-49fe-947e-260822adb303", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e615910-5aef-4bba-ae96-11900269ccd3", "sighting_of_ref": "indicator--fd2e0f37-93da-48c5-8b9b-e365759eebf8", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c613ff7-27e9-440e-9261-92041eab8969", "sighting_of_ref": "indicator--e3e025c1-0173-4f9e-a09e-c1bf7b16d3f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e53bafe-05d3-4184-8cbe-bb8207ab0257", "sighting_of_ref": "indicator--370beca9-29f6-4d69-89e6-408fb5b3906e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c596d14e-2cd8-45b5-81ab-c1c09a990ea0", "sighting_of_ref": "indicator--a71a9156-a3cb-4ee0-a16f-93acf2717b65", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e5bcec-1d77-442d-a528-c94d8e0b8769", "sighting_of_ref": "indicator--c10b836b-e387-4d16-924b-c9fbe3e6d67e", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4558d26c-7af3-4db5-9c7c-7ec9118806cf", "sighting_of_ref": "indicator--01e64c0b-8bd3-4a9d-a1a7-547b4432734c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50570c1f-2a7a-4dd7-9ff6-46b1a9ff6f4c", "sighting_of_ref": "indicator--53a4ea40-1711-4960-940c-1c1c061d9fdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7e58bb-4dc5-4440-b4ae-e21950e2bdf9", "sighting_of_ref": "indicator--b7a8e92a-82d5-4f39-bf15-7910f4ea0bc9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6654a3-41fa-440a-8fb6-10acb9409313", "sighting_of_ref": "indicator--8ffeb0ea-c517-416a-bf1f-79363fcc1a18", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60cd116-bfdd-495e-adbe-57b562117277", "sighting_of_ref": "indicator--bd9c395f-2257-4df2-b35c-8c6777b1ebf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623f7ff1-080c-4ff8-b2f2-da3067b2ba97", "sighting_of_ref": "indicator--2069838c-1015-4724-98a1-688b58b32d85", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90b714f-fe79-4c51-bff5-44796143de5f", "sighting_of_ref": "indicator--84f1f91d-6ad0-4123-abf2-21e9b8215038", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e773c3b-ff3f-4944-ae33-5a84b68117cf", "sighting_of_ref": "indicator--a16347b1-6a4f-43d7-bb6a-2e9a9317402c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c145a328-cd9c-4f13-80f4-bce232415d74", "sighting_of_ref": "indicator--4f48fef6-71a5-4453-96d7-af8441fae07f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d06f77-f658-4c6e-b81e-b9a842a98308", "sighting_of_ref": "indicator--66f2011b-3bcb-43aa-8732-1d7c53a32632", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50ffd7d-6c4f-4714-8304-82cb0fd8303b", "sighting_of_ref": "indicator--fec54da4-d167-44fc-928a-1793ff2175db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed37e670-1f19-4501-ac96-db9c45ab820c", "sighting_of_ref": "indicator--fec54da4-d167-44fc-928a-1793ff2175db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479c2318-2d8c-4b7b-8fe7-c314f4344809", "sighting_of_ref": "indicator--73b64337-9c93-446e-97ac-4974990091aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c1e4a1-ceec-4c74-b18a-4189072845d4", "sighting_of_ref": "indicator--3534bb9c-1836-482c-b15b-fd57efb445eb", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf04680-ae2f-43da-b043-a6175ac4266e", "sighting_of_ref": "indicator--c38dafb9-e054-441f-9611-10a3be1b3cd8", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3edbf9e-428b-4940-a163-b7231848f622", "sighting_of_ref": "indicator--8f43cb99-5875-45a4-8f77-65db019fcbc8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00848cd0-08d6-4693-b014-455c498fb7a5", "sighting_of_ref": "indicator--02a3c55b-6719-4505-a416-1ecfd2301e86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda2f86d-08d5-414d-98ba-c48f78b41cf7", "sighting_of_ref": "indicator--fd1b0db6-6fa4-4072-b555-031df5293951", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29860a10-e26c-4297-9997-447048e9edd2", "sighting_of_ref": "indicator--399686f0-3893-4443-b325-bcf41aabe8e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80019417-45cf-4d98-9a27-a6a834d46246", "sighting_of_ref": "indicator--eb2a3ad0-1da2-4b76-a5ba-dc04a8e1cb08", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e79e43-5b00-4f6f-9315-2f0e91facc37", "sighting_of_ref": "indicator--c085d0d8-7ff0-4cb4-8aed-7a809e446358", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b55fb4c-c233-49ba-bf2e-6c1148ae5c12", "sighting_of_ref": "indicator--c085d0d8-7ff0-4cb4-8aed-7a809e446358", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af98d3e1-675d-4cf4-abb9-73d5e8c009d9", "sighting_of_ref": "indicator--e388010a-3bf4-44da-8dcc-cec42486aa10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8187f80e-5503-4aff-b8ca-35f91987693e", "sighting_of_ref": "indicator--ffe9e496-0423-4b33-9c9f-a266a07e027d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8b622a-0075-476e-9de9-86d3017904b3", "sighting_of_ref": "indicator--0b321984-8247-48f8-ae30-7a6f3c7b06fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee6e52f-8259-4fc9-92c3-86cccff07391", "sighting_of_ref": "indicator--4e5fa421-8a12-44c6-a323-759d0e279800", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3088c45-5223-4952-8f3f-e1e85b88a879", "sighting_of_ref": "indicator--c7710a8c-34b7-4627-9389-abe73be6bc27", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9561b3-c798-4b6b-b4e2-c75c99d1499f", "sighting_of_ref": "indicator--cc816ab0-6d45-4c98-9ce9-0b4041d3ed47", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95311f61-bd72-42f9-afc9-0626882cc2eb", "sighting_of_ref": "indicator--cc816ab0-6d45-4c98-9ce9-0b4041d3ed47", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736a9f9f-cdc2-41c2-9767-b875ccb7e79c", "sighting_of_ref": "indicator--7d1e8880-b7fb-42ea-877d-3018164098ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8a7c41-5f5e-43f9-b5f0-fced04117c1e", "sighting_of_ref": "indicator--636385f3-6f83-4af9-8b7c-0d2c71e5693e", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399b9589-0a80-425f-ac43-c9ac919ecf31", "sighting_of_ref": "indicator--23bf81e1-3764-44cf-9d5e-2a8768a2fc96", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd2c07-1f41-4d5f-882d-2fa519e92e2b", "sighting_of_ref": "indicator--4b50e608-dd5e-4ee0-ae45-6c0ba7eddaab", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05194afe-bb5d-4948-acba-69950c9c13c5", "sighting_of_ref": "indicator--0cbc4508-2b50-447a-b971-b1b176ee46cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed43d31-017b-4320-b1a8-f3efcf3de281", "sighting_of_ref": "indicator--0cbc4508-2b50-447a-b971-b1b176ee46cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531788ff-36c6-45e8-9f14-02780e71eba2", "sighting_of_ref": "indicator--b42938e8-c007-4871-a177-d0e542f502f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3c45c4-7507-439f-a0e8-3f3a929c1781", "sighting_of_ref": "indicator--614bd20b-1ff9-43e7-81fd-2cf969c9a946", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dab8bc9-35cb-4fc8-a022-aecf7f53f573", "sighting_of_ref": "indicator--f46c0091-12af-4785-863c-15264163a962", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6887d4c-5b0f-4a8d-a9a8-048ad46ce8bd", "sighting_of_ref": "indicator--f210c889-8e80-487d-83cb-89af95a1bc4f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0791c702-312c-40d3-937d-912612ceeb43", "sighting_of_ref": "indicator--f210c889-8e80-487d-83cb-89af95a1bc4f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08290a09-4208-424d-b6d7-3bb2bb1939b5", "sighting_of_ref": "indicator--86c4a4ae-4893-4ba8-b832-b00e2b2fe919", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517ef716-1479-4e98-8bf5-707565c0e90d", "sighting_of_ref": "indicator--20da6c50-95e5-481a-914b-90078ac55cc6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a26cfc-58ff-4f28-b9d9-628f35044591", "sighting_of_ref": "indicator--e2bb4c75-e541-47b2-91cb-0e7cc5f5b334", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2144e35-f30a-4a62-bf78-1201e3628e55", "sighting_of_ref": "indicator--7fcc4a0e-c138-48f3-bd7c-d330c6c97694", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d62e25c-d267-4877-a2ef-99d56ac1087b", "sighting_of_ref": "indicator--8fedeebf-e1bf-45c0-a957-0d94df524ef3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adde3be1-04ca-4d8c-aa6b-fae392b64bf8", "sighting_of_ref": "indicator--8fedeebf-e1bf-45c0-a957-0d94df524ef3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d107b5bd-fc76-4601-af87-7cd5c7b46873", "sighting_of_ref": "indicator--58e1267f-d0b8-4a0d-a5a4-41027ecd1eb1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76625b92-9fc7-405c-921a-c023fc9c4c43", "sighting_of_ref": "indicator--58e1267f-d0b8-4a0d-a5a4-41027ecd1eb1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2965ce99-f69b-41ab-bf1a-ccf19c7b33d9", "sighting_of_ref": "indicator--da9356e4-144b-413c-8ac0-0136f687f375", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0f954b-63d3-4884-9cdf-9f5ea7479bee", "sighting_of_ref": "indicator--63ad50e9-ce46-417f-80f4-e3e70a102f8e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8ac58b-8d5c-4be3-84e5-8f52a39cfbb1", "sighting_of_ref": "indicator--63ad50e9-ce46-417f-80f4-e3e70a102f8e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95019be-6111-412f-b952-dde58db3735d", "sighting_of_ref": "indicator--4f9a0829-3d1a-473a-9ffa-e4a88295ad46", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d34c66-4bec-4aaa-9187-47aab6004fcb", "sighting_of_ref": "indicator--ef39a5b6-555c-4a12-973c-c01a7caf12fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c343096-7ccd-41ab-ace8-4d92f738ce36", "sighting_of_ref": "indicator--05eb56df-7da7-41c5-8b85-337ea2d56959", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ce8abd-e6af-4caa-97c3-7ea77532a451", "sighting_of_ref": "indicator--713f529b-086d-47f3-808e-3629729c7241", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6f540e-f9a6-4548-aad5-d4bcd16c74a5", "sighting_of_ref": "indicator--54766f36-9172-4121-9f23-b159c214b2cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb897891-7ee4-4c4b-84cc-a7c7c9c4543a", "sighting_of_ref": "indicator--fe8164c1-ee6b-4b8a-a0d6-f3c849f2ec40", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5085024b-e081-459d-8c94-ba5372fc72c2", "sighting_of_ref": "indicator--f81bd635-39c8-4611-989d-a687f39daf48", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065235b0-734a-40de-85df-5d8ee1eb1ce8", "sighting_of_ref": "indicator--f81bd635-39c8-4611-989d-a687f39daf48", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b297d7-510b-414d-bc0d-985e852672fb", "sighting_of_ref": "indicator--269515ab-ea34-4435-af74-13de869c625d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2692e081-d41d-40e0-aa3a-b9ed6dd7ac17", "sighting_of_ref": "indicator--1a280a3d-98dd-4a9d-af3e-aef97a59acd8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da03de18-bf43-48ac-be58-bb297f260add", "sighting_of_ref": "indicator--0853832a-9ba3-482d-a070-e1f7517e5900", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27497b7d-6bc7-444e-85ec-842a3cf44b05", "sighting_of_ref": "indicator--257f0b8e-76b8-4e22-9beb-cbbfed65da44", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a9ed8a-2153-4b12-b87a-9380c4ff344e", "sighting_of_ref": "indicator--ac3002db-a127-48d8-92c9-6353b34549db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6c9827-40f5-4c36-9297-a9cc308ddad9", "sighting_of_ref": "indicator--ac3002db-a127-48d8-92c9-6353b34549db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bafcf6-a813-4bd9-b73d-9fc87eb87445", "sighting_of_ref": "indicator--e1eb156f-cf6a-4850-b058-b589988e0562", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff341b6-3c3f-4c4d-8014-49e4683b0508", "sighting_of_ref": "indicator--e1eb156f-cf6a-4850-b058-b589988e0562", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981af8bc-5d28-4a12-836b-a21fd8c8e0b3", "sighting_of_ref": "indicator--f78e6b34-b41f-4263-a0c8-5982907c6656", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85760817-4c3c-4883-afa7-2c4e98d2b03e", "sighting_of_ref": "indicator--f78e6b34-b41f-4263-a0c8-5982907c6656", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162d73df-e826-4dd0-95b6-d191ba663c9a", "sighting_of_ref": "indicator--328d4f72-8b96-4881-b8d8-c7e4197a3b05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f7d96a-ef09-4d41-a88f-992e22aeb0d2", "sighting_of_ref": "indicator--e7d79497-cad8-4743-b3c4-06ba343f5bca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0318cbe1-b72a-4789-86a1-4c5639a91fc5", "sighting_of_ref": "indicator--e7d79497-cad8-4743-b3c4-06ba343f5bca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cc7892-e85b-4e40-9d44-314fb4e8a4ae", "sighting_of_ref": "indicator--ae5b3ce0-c33c-4d52-a0a6-a1bc205042c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca249a0-af29-432d-be78-f69ed6788e8a", "sighting_of_ref": "indicator--ae5b3ce0-c33c-4d52-a0a6-a1bc205042c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f3906a-de4f-4e59-9c33-9b785298ead5", "sighting_of_ref": "indicator--8ded22de-a8c9-47db-a5f4-a1495f6c0679", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd97f44-b610-4a74-b9ea-b199f6f08453", "sighting_of_ref": "indicator--8ded22de-a8c9-47db-a5f4-a1495f6c0679", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75b46bb-6403-4d31-bb7b-c8d0693cccb6", "sighting_of_ref": "indicator--93a07c30-1752-4e23-9b5d-d9fe08732daf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77ee5df-f153-489b-9228-8efc4484a397", "sighting_of_ref": "indicator--93a07c30-1752-4e23-9b5d-d9fe08732daf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f240099-61c2-4cca-963e-aeb7cab81352", "sighting_of_ref": "indicator--010d24ae-1597-4206-a311-f172f1d36625", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ed7d4e-bbe0-46ee-bcbd-14caa3e9e48e", "sighting_of_ref": "indicator--010d24ae-1597-4206-a311-f172f1d36625", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20711325-86df-488b-ab71-9027115dda95", "sighting_of_ref": "indicator--b479fa1f-f634-4dbe-9eea-80b0c5f1d0ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc2b751-ed1e-4e5f-b013-83f5d8ea10af", "sighting_of_ref": "indicator--b479fa1f-f634-4dbe-9eea-80b0c5f1d0ed", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8d668e-3161-44a9-82b9-8739846849e1", "sighting_of_ref": "indicator--789bbcb7-9d9b-48aa-87fd-1b4eedb03902", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63ddc52-46c8-41b1-b630-7323298e8159", "sighting_of_ref": "indicator--789bbcb7-9d9b-48aa-87fd-1b4eedb03902", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393c356f-6e5e-49b9-94b3-aab448f5e602", "sighting_of_ref": "indicator--eaa95ef1-abcf-414d-8bcd-8ef34c1dfc2a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43df9117-5735-4ddd-8dae-6e67c607d447", "sighting_of_ref": "indicator--eaa95ef1-abcf-414d-8bcd-8ef34c1dfc2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2dd750-61e6-4886-8386-4c711fcd2055", "sighting_of_ref": "indicator--df8b60ae-b985-4c8b-bcb1-f00ec7cee6e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65047086-85d9-4f6e-95ff-82f6f4b9ef88", "sighting_of_ref": "indicator--649f8080-ef7c-4775-b37b-975b36c9b902", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a6e946-58ca-4b11-8d1b-ece3de5d2d95", "sighting_of_ref": "indicator--6356cebc-f6ba-4702-86d5-ae4a64d14419", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245236e9-45f2-4d4d-8f19-6a7cf48cb115", "sighting_of_ref": "indicator--101276b7-b31f-4bef-acec-44bce509ad9e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac219c8-8772-42a3-bbbb-1a2b57171f7d", "sighting_of_ref": "indicator--5073a83e-0532-42ea-9493-6b527b6d45a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531faae2-b259-4f47-a1a4-8c854e399748", "sighting_of_ref": "indicator--5073a83e-0532-42ea-9493-6b527b6d45a0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae667f45-482e-419b-b1d3-7f841b2b4782", "sighting_of_ref": "indicator--db77f317-21b2-401c-8463-3aac4e2153fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0061fd-d93f-40c0-9586-775d5ce79387", "sighting_of_ref": "indicator--028807c6-f53e-4ddf-a54c-1a0a22e9faee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afdbd7f-70d7-4b7c-a95f-beb8a4248718", "sighting_of_ref": "indicator--d63faa99-2858-4cdb-8a04-04a2c2f9eedc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42575a1-bc83-4b3a-9e79-234a921bb837", "sighting_of_ref": "indicator--b9c43b10-607c-4411-b651-a6b08c086b8e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5c6872-90ab-49c1-a1f3-0f230626f6de", "sighting_of_ref": "indicator--71ce63f9-52a5-479a-9efb-a9c266db1784", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4578a2d4-3dd7-47f3-968f-01c38b22532b", "sighting_of_ref": "indicator--b836a2dc-1578-486b-9e05-2494a84f064a", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419fafe9-8da2-4901-90bf-0fcf2211bd49", "sighting_of_ref": "indicator--f3894863-fafb-4373-9bf5-6b1940279dd9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5f334b-bb64-4dc4-ab06-f324fd8f51f7", "sighting_of_ref": "indicator--7fc0649e-2748-4ae5-9a8c-76e7afcdf811", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105c076b-c5d2-40d8-8e7d-79251d5622b0", "sighting_of_ref": "indicator--fd7ac3e5-ef48-4bf2-8cbb-d8caefaa90d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0cde97-93df-4180-8b77-165ba37095a0", "sighting_of_ref": "indicator--7e883714-8f38-4c57-84f6-fe4bd46d15dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b154866a-6308-4de2-8813-a3fdc67f0b59", "sighting_of_ref": "indicator--7e883714-8f38-4c57-84f6-fe4bd46d15dd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26381d9a-a46d-4fd0-9dba-9d29cccfec4b", "sighting_of_ref": "indicator--45638662-777b-4bfb-a7b5-9e331f25c4b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d63ffd-2aea-4b2b-8f13-0511b461d231", "sighting_of_ref": "indicator--45638662-777b-4bfb-a7b5-9e331f25c4b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def730c8-cacf-49f4-abb8-741e6dace2cf", "sighting_of_ref": "indicator--30d89e81-4cda-4e0d-8650-4bd9b9aabb50", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329bf991-dd5f-49a9-8778-505f2cb4cf36", "sighting_of_ref": "indicator--f357266d-716a-4254-94ef-4ecd6547c391", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9238ef1-a7c5-4886-ad7f-c2663cceb596", "sighting_of_ref": "indicator--f357266d-716a-4254-94ef-4ecd6547c391", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61350ddc-4967-4bc2-87d7-31c1bfa461bd", "sighting_of_ref": "indicator--1cca757d-94ef-402a-8da1-d38f1ea05edf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa63654-ec5e-4dc3-898a-da4872799f4d", "sighting_of_ref": "indicator--1cca757d-94ef-402a-8da1-d38f1ea05edf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdc0212-6dac-4be4-ac8f-b914329de826", "sighting_of_ref": "indicator--21e9dac3-1159-42c2-a56a-ca89a00d4e1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6591245b-6095-44a0-b4f7-8bd51f7b98cb", "sighting_of_ref": "indicator--21e9dac3-1159-42c2-a56a-ca89a00d4e1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f069d717-3a7c-4d35-8113-69a4d08f74a6", "sighting_of_ref": "indicator--fcb73e7e-d4a4-43f1-a951-393807606038", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c9b757-4609-4bcd-bcbd-09e9cdcf67e8", "sighting_of_ref": "indicator--fcb73e7e-d4a4-43f1-a951-393807606038", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33cf932-121a-47c4-a6b6-8576fd235a38", "sighting_of_ref": "indicator--79cf3e96-8756-4738-b51c-0f14b8796de9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ca7fc2-afcd-49ea-bebe-47569f127bb8", "sighting_of_ref": "indicator--0f109b5d-3281-441d-a7a8-f665c07432a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6820effa-23b3-4da9-a955-2850a82438fa", "sighting_of_ref": "indicator--7f4abdc5-e43b-40d4-9921-44f28da0b948", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4f91ce-59c1-4908-a0d6-3c6822beb313", "sighting_of_ref": "indicator--0620630f-9a9e-4724-8f07-f2cae0587ea9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2f8c05-4a11-4707-b5d4-e0cf46f03126", "sighting_of_ref": "indicator--962e9b9c-e710-4fb0-a425-97d6e5633880", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b7dc6f-5a2e-491b-9afb-856eec9975d3", "sighting_of_ref": "indicator--7bae2fdd-8c6c-4fe2-96c8-ac874ed381e0", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c351728d-6b66-4f69-8284-ceb085ee1930", "sighting_of_ref": "indicator--9d19556b-365c-4bbd-b476-f0cc48c52034", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e48d39-b35a-443a-9a8d-6b637b3792e4", "sighting_of_ref": "indicator--93d02575-ea06-457b-8495-4cb152135820", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb09241-49b5-41fe-9f8e-bfaca27dde86", "sighting_of_ref": "indicator--93d02575-ea06-457b-8495-4cb152135820", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeeaee1-4a2b-45a9-b091-13dd28a849ad", "sighting_of_ref": "indicator--5a0b01f3-dc24-4c10-9096-10378f9b8e08", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47630a5b-951c-41ef-b519-3ba622e3a61f", "sighting_of_ref": "indicator--e965b60b-d750-4ada-bf98-15ab71677cf6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95288515-71c8-4505-a89e-9cca7662c92d", "sighting_of_ref": "indicator--60d5670f-f48e-480f-822f-67a1fa8e9a11", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98dbaad-dfc0-4498-a507-ea62d285762a", "sighting_of_ref": "indicator--2e84b4ac-fd91-41ab-9001-f0ff04caa38e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fe3a28-fd1f-4b02-8249-71d9022bfb8a", "sighting_of_ref": "indicator--b13e03be-87a4-4b11-8388-9eda06a5419a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c415068-19f4-4c4b-8f3a-9ad92e2e703b", "sighting_of_ref": "indicator--037d4656-52b8-40b1-b52d-b695b81b9873", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fa2181-70bf-4015-bf73-77f9b5759298", "sighting_of_ref": "indicator--9f2f4beb-2cb3-4786-b3b7-0c7ce46e7ecb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4144d446-083d-455c-a564-4dc8a801e053", "sighting_of_ref": "indicator--9f2f4beb-2cb3-4786-b3b7-0c7ce46e7ecb", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67af3822-7c88-4107-bc11-e70a0288213e", "sighting_of_ref": "indicator--2d983c83-7d80-47c4-9fd8-6ffade27d9a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edee5843-f662-4b5b-a5da-cff920d2d127", "sighting_of_ref": "indicator--57340c68-e43f-4ba7-a2f6-41d5063a6df6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03923db-a641-4ccb-8e64-f87ccfbee210", "sighting_of_ref": "indicator--2c7f0711-fc35-47bb-8850-25ed523aadb3", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fd0159-4ff9-4cac-9bb8-aff7264cbacb", "sighting_of_ref": "indicator--0ac9f7b8-104b-4726-bdb3-b7ae402224a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c28c5a-d8b2-4a5b-9e0a-5f64c55aa367", "sighting_of_ref": "indicator--80dd73e3-039f-4004-a729-1293c061787f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0006dfec-a6bd-4550-87fe-dbf13725c054", "sighting_of_ref": "indicator--f96d7fc3-1b7e-4862-844d-0e0173c34c3a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c376da52-d791-4c26-ab7d-140ffe1adcbb", "sighting_of_ref": "indicator--2ea4e6e0-4917-47ab-b3f5-d4deec21a74e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cb1f24-96d5-4cf2-b9df-66b7f7609331", "sighting_of_ref": "indicator--ddb6d2d4-58c0-464b-a141-52803182018a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d755eb25-443e-4487-9587-9de8884418e3", "sighting_of_ref": "indicator--9b396665-c850-4b58-81b4-36de6f437f43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f595dc-a3c6-489c-a015-ac5242481e4a", "sighting_of_ref": "indicator--490ee41e-7798-49d8-86aa-651086a4dc5b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31a0593-ab9b-4202-8945-25976cf3a1b8", "sighting_of_ref": "indicator--490ee41e-7798-49d8-86aa-651086a4dc5b", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af6d7f3-f4d2-4863-bfcd-6f373fd9d49f", "sighting_of_ref": "indicator--d0875f15-91d1-4ef2-9824-3b4e776b559e", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e99e6e9-9d52-4d68-8e13-5ad534f14d31", "sighting_of_ref": "indicator--f830fa89-76bd-41f9-974d-7476b25dff5f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc01485-adfe-4f9e-a054-c1e45ed5a3ff", "sighting_of_ref": "indicator--6eb16d80-3d85-4258-a711-51dc66ed3f16", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb1ac0e-af2a-4ad9-a9cb-ba7c3f725920", "sighting_of_ref": "indicator--058eb705-8c1e-4ef7-9c9e-41b1e9f301fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acc5b8f-a322-4bda-a377-77ec73ffc308", "sighting_of_ref": "indicator--17308ac3-dfaf-4379-85a4-674359244736", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0a7344-0f6b-41a3-80b5-fefecddebf14", "sighting_of_ref": "indicator--ba5e46a4-6df0-4eab-9721-1dadfe7202b3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ddb2cc-a611-41fe-b0ed-650693252e23", "sighting_of_ref": "indicator--e9be2496-f789-4dec-b8b1-a6c252923709", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9146bb58-a960-466e-89ad-4cf5a3ce64f7", "sighting_of_ref": "indicator--56606083-42de-4f5b-b297-16b701855243", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a0132b-742c-4e3d-b0dd-b851e2a68b24", "sighting_of_ref": "indicator--5019a6da-9416-43a7-ac34-b8e6acabb0a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39965ef-b774-467a-9eab-ab83570c7935", "sighting_of_ref": "indicator--5b5b821a-bfe2-4d6c-9dfb-2e200afaf16a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d22948a-c270-4e39-a655-2ff78cf5a0a8", "sighting_of_ref": "indicator--6f0f206e-6705-4ede-a01e-0aec0b1044de", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3180eb-5ce5-417c-bca1-5dcd4127a38b", "sighting_of_ref": "indicator--29529284-7964-459d-a245-c3c5ffed2ca8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99075656-2757-480c-8680-788d1a6cbaa1", "sighting_of_ref": "indicator--2935c14d-eaa7-4524-a5af-a7a903093ab7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ef169c-d644-47d6-9004-0af2ca16a966", "sighting_of_ref": "indicator--936751c0-ca76-4dc1-9d40-17bd7e199449", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5860c6c0-116d-4835-9ed7-8505915707eb", "sighting_of_ref": "indicator--9f15450c-b21b-47e3-88fa-8baf3c6b27c7", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31eb5ae-cd2c-40a0-a419-2d8b6c8f9bb5", "sighting_of_ref": "indicator--9bdbf8b5-0b9e-41e4-812f-5a7041410dec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99df74cb-3dbb-4367-965e-58c080814af5", "sighting_of_ref": "indicator--4618c0d8-7d70-4159-a270-926750341556", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a910b2a-acd9-46fd-b668-1c6cdc72789c", "sighting_of_ref": "indicator--9d489637-2c90-43db-8f0c-5fa23409b6f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875b702c-9713-4f16-8386-8eebe0ec5c44", "sighting_of_ref": "indicator--9689fad0-2be9-47f2-a384-66d1387f0b03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926608a4-c348-4e89-acf6-a3a0750522d3", "sighting_of_ref": "indicator--15dc1e71-ba06-4644-a87d-7fcc6b4a5788", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0800d4-2dce-4c7d-9bee-9840c8cae62c", "sighting_of_ref": "indicator--9512a8fc-ac73-4d05-a349-b7a139d78a99", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351e6db8-48f6-4cc0-af0b-079ccc50d178", "sighting_of_ref": "indicator--b7df3574-103f-444d-9dd7-135e42dd837f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb86c0c-9904-4340-85a5-af21f88d6711", "sighting_of_ref": "indicator--e1f84541-6e7e-4ff3-9ae8-5f23fb0077c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e728bd9-5922-47f9-896e-85dab5c67071", "sighting_of_ref": "indicator--f6fc64dd-535c-4db6-8ddc-57d8f2368b31", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3be3aa-3b14-4d35-9ff3-7675ea19ad10", "sighting_of_ref": "indicator--513b6745-f7b7-4243-a2b6-ae6c59cf3790", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5edbb8a-9589-409b-a2c6-806fe2137541", "sighting_of_ref": "indicator--efbf1f98-3efc-48a9-b3dc-d1932059cc40", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd083c49-1760-400e-a88a-3b3fac484391", "sighting_of_ref": "indicator--fabb2946-c4d3-446b-9baf-e71cee65263e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45da8489-058c-4db2-b804-6993ac70a61f", "sighting_of_ref": "indicator--276f68e2-71be-4717-bca5-b1b3a84e41f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ba6137-77f2-421e-b68a-553d4f7cb217", "sighting_of_ref": "indicator--83d701e8-317d-445a-a437-3c9c50f5b74b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db5202a-7396-4fed-abff-ab7ee9bfa23e", "sighting_of_ref": "indicator--655997ee-eba0-43f9-9981-674f3af10f85", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85045021-32bd-4049-b5b0-63fe90ae7f6b", "sighting_of_ref": "indicator--386dc165-0823-4566-8c79-544c0bfc9af9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fa6c16-6de7-4aa2-bbf3-9d9c2dc01a6d", "sighting_of_ref": "indicator--4b115cc9-638e-48b1-9359-845e123ce3ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8699d8f-23ba-4e1f-8dda-4dc32bd6cd78", "sighting_of_ref": "indicator--9d965056-962b-44fa-ae99-f83ef627b59c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e29259-131c-49d6-8944-67db50aaf5b3", "sighting_of_ref": "indicator--2226fecf-f951-47a2-a103-56643f561edc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74a8fd4-a731-43b3-8b51-c5ccd36d506a", "sighting_of_ref": "indicator--363267c3-d74f-4c43-8a13-744f8a1e2a57", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678812d8-d480-4fb4-aec1-0a11cf7441bc", "sighting_of_ref": "indicator--7ad9409c-74ea-4f67-836f-e3435431be16", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6713db7f-d23d-4ec4-b24b-ff76f305e26b", "sighting_of_ref": "indicator--c0da9318-900f-483f-ba63-a823af9505c6", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92e969b-b6ca-48fe-9f72-f105d86926f2", "sighting_of_ref": "indicator--6c64e95a-6d40-45da-be0d-349a420c3ed4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6725c536-870d-4781-bf32-58ab470132d4", "sighting_of_ref": "indicator--1172ff18-2b88-4932-958b-d1a1188f0ec4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc70308-f9b6-4b22-b95f-bdb5c190f212", "sighting_of_ref": "indicator--f2b2ecf2-4c39-4b22-bc84-4ec1f513d701", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6871a47-433f-4b90-b732-5907e8706338", "sighting_of_ref": "indicator--2361dc5a-57a7-4d3b-8d7b-06c27eb67a29", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874be678-31fc-4678-bc67-1dd17b5ef439", "sighting_of_ref": "indicator--a800b2ae-8a6f-490a-be3d-4f5c3da1e536", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62b9cac-5ae4-4394-916f-da144ebd42dc", "sighting_of_ref": "indicator--a800b2ae-8a6f-490a-be3d-4f5c3da1e536", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256d7e01-364e-4db4-b28a-ebf443f79c7e", "sighting_of_ref": "indicator--09e173cf-9403-4adf-acf5-543b6c734efd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6d7964-6b42-462f-8159-220b8f8bc7d7", "sighting_of_ref": "indicator--09e173cf-9403-4adf-acf5-543b6c734efd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f4c90c-f3b6-48a9-8eb6-6f0e3dcc7825", "sighting_of_ref": "indicator--911a3819-6f91-452f-8340-fc4e15a4384e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72886615-31da-41a5-bcd1-fde84a45ff5f", "sighting_of_ref": "indicator--a3829133-108f-41de-8cd2-96cc727a2f88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11beb7bd-77b5-4610-8b8d-8859816ba783", "sighting_of_ref": "indicator--a3829133-108f-41de-8cd2-96cc727a2f88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4a0721-7e13-41d2-af01-356fc63b26b9", "sighting_of_ref": "indicator--4f69b7c8-4949-4f2d-a290-b56e3f162a60", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a7b828-a1b6-4e9a-9942-ca3833a32c28", "sighting_of_ref": "indicator--249ee162-45af-48e2-8507-304d9e1100ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef566857-7be5-490d-8fc0-00a839cc266a", "sighting_of_ref": "indicator--f53c2dc6-be32-4bec-a0df-0f1568992df8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f0243a-551d-46be-8d7d-115ce7870a53", "sighting_of_ref": "indicator--8a62dbd6-aa03-443d-b601-39c085e71727", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a941a43f-f715-480b-a080-a8181ec7eeb8", "sighting_of_ref": "indicator--bd694f6a-dfa2-42ca-ab24-919fe956500e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f40d95-ed56-4a53-a67f-742d1f31d32b", "sighting_of_ref": "indicator--d5e4f49d-897c-451d-bf63-acef0e637192", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf98b11e-ca74-4ce6-831d-f11988b222dd", "sighting_of_ref": "indicator--0090e7ee-c6a6-44b4-9786-6bb37a2ecd51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac9dddb-b708-4daf-90cd-e70c5528f536", "sighting_of_ref": "indicator--568bbb00-5046-437c-a82a-c95567c234eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c653b9a2-051e-43d0-9e8b-c7135f0a23f7", "sighting_of_ref": "indicator--7127a595-76d1-42de-a38a-c45299aa5a14", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b289e7e-3d3e-46f2-be72-4a6146f3adfb", "sighting_of_ref": "indicator--9f13d1f1-1dce-4b58-80a3-4ed4b2e7e81e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77878928-cabc-4940-b8da-bf0daa7593f1", "sighting_of_ref": "indicator--7cb6bfd2-1870-4066-a89d-063941fd7547", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce7f9b4-fe0f-497a-a535-4b63d4ba4b9b", "sighting_of_ref": "indicator--c63be2ba-fc3b-4a94-b873-7e18ddab6ec9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0383b3bc-e54c-4393-89e9-45a82932822f", "sighting_of_ref": "indicator--c420f509-8cce-4c9c-bbf3-c16a4f9ea7cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e46c91-1372-4a7d-bcbe-6a2e6986ee1e", "sighting_of_ref": "indicator--5eaaaa79-d8ce-4d15-89fb-d649c77d3c86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4697f6-fd84-4472-b488-d1286b01dda7", "sighting_of_ref": "indicator--634d7ab9-bc03-4ebe-827a-5f4d273128df", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b13d58-d6c4-46f4-97b2-2864b5b4e26b", "sighting_of_ref": "indicator--ea827b75-632c-49e3-b36c-85dd41f613e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284dad9b-6c6e-43d1-97c1-99287a1ef6d0", "sighting_of_ref": "indicator--fcaccb27-ca81-46f2-bfc0-15b0971199b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87be46e0-4e08-4b3d-a4d9-0c21374dc07e", "sighting_of_ref": "indicator--ebf2d128-2461-43cc-9d6a-1f607c1863e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36521c40-b9c2-4f75-8d73-589994e79481", "sighting_of_ref": "indicator--7d019c7a-2a91-414d-8c9c-210c50a35941", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9e475a-21af-4ea1-bd21-b07ddbaea19e", "sighting_of_ref": "indicator--4ac6aa8f-6049-46db-aab2-bca42ffc24ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffdacbb-f1e1-4823-b08a-b70eb22f5dd4", "sighting_of_ref": "indicator--9f621544-9a8e-489f-ba2d-28f5b00eba4e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fb7e1c-492b-4706-8edf-7b1fc784b92e", "sighting_of_ref": "indicator--00deda04-5db9-408f-967f-91e851a0470d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f1ce04-bab8-4611-a9bc-1164406c5e15", "sighting_of_ref": "indicator--a33febc7-051e-4286-a853-acd99afa502c", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26488174-438e-40ba-acc9-bc6709b9e869", "sighting_of_ref": "indicator--0682d92a-f576-4971-ab82-070d7d63c46c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0020fe54-6877-4df0-a932-bad2f187d414", "sighting_of_ref": "indicator--1ddb66c8-dd49-4b60-97e2-297c4b082789", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0ee971-4c5a-44a4-9a05-113dc20d54ca", "sighting_of_ref": "indicator--b5f3da93-ffa8-446e-ad40-699ff2e387aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e204e1-4454-46ff-90b0-3d2464317727", "sighting_of_ref": "indicator--32a99e84-dc99-4414-99ac-784e24cb3da7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f28a9d5-0db5-42f5-afd1-9d932c6084d7", "sighting_of_ref": "indicator--8fd7373f-3bc4-4ca6-951d-9b8efcb6aa9e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998f53c6-27f4-4288-8160-8f49b73b6bdc", "sighting_of_ref": "indicator--17d25bda-1a59-4cee-8c4b-b82dc56ca463", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70175ef5-b3c9-4d0e-b79f-b1da0ac19dc6", "sighting_of_ref": "indicator--17d25bda-1a59-4cee-8c4b-b82dc56ca463", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351b1e78-1fe7-467d-87ca-76d0f2cb3396", "sighting_of_ref": "indicator--17d25bda-1a59-4cee-8c4b-b82dc56ca463", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bc03e9-652d-41aa-b562-81ea6880d5c4", "sighting_of_ref": "indicator--177a94f9-5894-4b6b-a3a0-46e02598c0a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782a9637-19f6-4ca7-80b9-5028075c8728", "sighting_of_ref": "indicator--17b06c42-a045-45a3-ae3e-afe917e3ba2f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76d3cb9-663e-4498-b5b2-55e20465b06d", "sighting_of_ref": "indicator--17b06c42-a045-45a3-ae3e-afe917e3ba2f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176a8ec1-8acc-4fff-b31d-5856084ef596", "sighting_of_ref": "indicator--f0f494fe-0709-4b53-8472-96c0d17f6160", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfef0344-756b-4d91-afe9-59b6b4f0d198", "sighting_of_ref": "indicator--9fd2fc44-1825-4356-903b-6ee24f7ba456", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bdea2e-35b6-4865-9906-83c5feba212e", "sighting_of_ref": "indicator--9fd2fc44-1825-4356-903b-6ee24f7ba456", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7e42e6-49a2-40b8-8684-72a5fea0811e", "sighting_of_ref": "indicator--6d9796cb-084a-49b9-98d1-a94e79749754", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b5276e-6030-49c6-8a5e-86b768e1f877", "sighting_of_ref": "indicator--78edbba3-96f3-4860-b793-eafb825e79fd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1536e4f5-29cb-4c12-9378-996ae5f94d00", "sighting_of_ref": "indicator--78edbba3-96f3-4860-b793-eafb825e79fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a628834b-1163-4576-92f2-9702cf4cd599", "sighting_of_ref": "indicator--6dc3152a-5f51-48b2-849e-503562b16719", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be74792-d7ef-426e-a087-d90d0712852b", "sighting_of_ref": "indicator--6dc3152a-5f51-48b2-849e-503562b16719", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c3ef26-642d-42ce-830c-2c75b33d2fdf", "sighting_of_ref": "indicator--305b52f2-ae4a-4326-b82a-8a6d2d9f27a9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b610cd-3b90-4c5e-a427-67a6d0a5675b", "sighting_of_ref": "indicator--d38f951f-12b1-4d5d-abdd-3c62cebbdc8f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1d1032-da9d-4f48-8aee-a9f86c8a0c3a", "sighting_of_ref": "indicator--d38f951f-12b1-4d5d-abdd-3c62cebbdc8f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b484edf3-4e53-4218-916d-4688aa3d16a7", "sighting_of_ref": "indicator--19c4d7ee-429b-47de-a7da-1c505bcd6450", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92efc00d-445a-4259-bcc1-bd6a134bd8bd", "sighting_of_ref": "indicator--19c4d7ee-429b-47de-a7da-1c505bcd6450", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377f7d13-36ed-406a-b779-3b3653ffacb2", "sighting_of_ref": "indicator--894ad7ea-0f5b-4196-b2eb-0ad23c22d656", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d54be4e-f0e6-4123-bb84-dd7d5bed0a65", "sighting_of_ref": "indicator--894ad7ea-0f5b-4196-b2eb-0ad23c22d656", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9936210-1052-4eb9-84d1-d56753bdb313", "sighting_of_ref": "indicator--81a4c7bb-6306-4862-85ec-b1a13c686492", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1abcf9-9289-4f0f-ae04-8b58e4bd6c9a", "sighting_of_ref": "indicator--81a4c7bb-6306-4862-85ec-b1a13c686492", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12e4e17-558c-4e81-b99c-fdf2a09880d9", "sighting_of_ref": "indicator--a24096d0-34e9-45da-8470-d47c4df8e7d9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a04f74-6f46-403b-b487-a1bdb44ccf99", "sighting_of_ref": "indicator--a24096d0-34e9-45da-8470-d47c4df8e7d9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87034aaf-0c3e-4343-8769-2d73b4e13840", "sighting_of_ref": "indicator--8a50d3fe-ada9-47d8-b38a-9fb203f45ce4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1972caf3-b263-4061-9717-5959a5b97a06", "sighting_of_ref": "indicator--8a50d3fe-ada9-47d8-b38a-9fb203f45ce4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be02566d-ce45-42fe-bdc0-54e205954fe7", "sighting_of_ref": "indicator--756bea45-5d58-4988-8073-e712fbb7dc9b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2891a320-1342-4999-ac55-e1562c25c634", "sighting_of_ref": "indicator--756bea45-5d58-4988-8073-e712fbb7dc9b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1befea83-f0b7-4af2-8112-535150767423", "sighting_of_ref": "indicator--933e4a84-9637-485e-8928-b8448c91cb9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87bd6cc-be4c-4dd2-8044-4ac92bf866c4", "sighting_of_ref": "indicator--933e4a84-9637-485e-8928-b8448c91cb9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859d52e6-2ac3-460d-a808-badfa6fcb220", "sighting_of_ref": "indicator--933e4a84-9637-485e-8928-b8448c91cb9d", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae7c9b8-cc8b-4d0c-8d25-ab77ea6fe42b", "sighting_of_ref": "indicator--3ece0dfb-13fa-4922-aa8c-c2aeaadbdb46", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc74a07a-aa5f-4de0-9511-0ecabad5b8d4", "sighting_of_ref": "indicator--74930b0b-0bb4-4407-a701-4e98183da9a3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88484de-3000-4e38-a2e1-55573fbe44cf", "sighting_of_ref": "indicator--a3d52380-2b22-49dc-a4da-08090d9cb745", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6848f6-da5a-499c-a997-5b9374d68b70", "sighting_of_ref": "indicator--67174f6c-ac29-458f-89ed-56cf02a52681", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee4db22-fd31-46ca-8f80-f05f8e756986", "sighting_of_ref": "indicator--720cf360-d1ca-43ce-8ab4-d606d3dd897c", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24d865c-b1fb-4459-acba-8e1509873900", "sighting_of_ref": "indicator--25de97e7-4d96-4706-ac97-8af5fd22de43", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ed7cf1-4e31-4363-9b75-fd4c02580e5c", "sighting_of_ref": "indicator--3b81c235-94b0-47e1-8e5c-74b7ec7ad061", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3400461c-563c-4419-bf7e-ca91b90e19ce", "sighting_of_ref": "indicator--b8909139-eb5a-47fb-988c-34d95860050c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f22491-5617-4e16-9813-21c7fa9d760b", "sighting_of_ref": "indicator--20487454-1b85-48ec-9562-bc5d0fe79148", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb613dd5-b33b-408e-be92-5d9b9b853a2f", "sighting_of_ref": "indicator--e8c7631c-1fc6-4bb2-a0de-c32544464df1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1de3f2-a49d-4d80-82a4-a6d0897a2a22", "sighting_of_ref": "indicator--383ad881-ea41-44eb-8521-fc2d7669c95c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b50e6e-0d49-4782-8d2a-51175ad24146", "sighting_of_ref": "indicator--ed979d51-e968-4dac-8156-8acdeec725f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23833639-baeb-4fd1-9884-c43d8e9499cd", "sighting_of_ref": "indicator--1efb7c34-f390-4904-96f0-135ebfce1a3b", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6034ba-6da4-4e25-a1be-e7ec317b4f6c", "sighting_of_ref": "indicator--49dd558e-2ecd-40bf-bfc4-b6caff31efe4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a8f074-7527-4b89-ae98-4ff05b84313b", "sighting_of_ref": "indicator--bd9b9e26-411c-47e8-a040-2a6932ee2758", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c8f3df-f5b7-4bec-8d8f-3717c4bb392b", "sighting_of_ref": "indicator--bd9b9e26-411c-47e8-a040-2a6932ee2758", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237b8c2b-0332-4af3-92af-b5b1130bb5ec", "sighting_of_ref": "indicator--5607d097-b25a-420a-8b74-e6a4e9724fa7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407b31e1-dbe9-4e18-bd3d-3a994f6c29ff", "sighting_of_ref": "indicator--04689fb2-9f7c-44d6-8f02-d7f02543575b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7658e924-5356-4199-8785-5f4d4c243940", "sighting_of_ref": "indicator--04689fb2-9f7c-44d6-8f02-d7f02543575b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3acc17-6bbc-4aed-9c81-84a6a03b9b78", "sighting_of_ref": "indicator--da1c9b35-2fba-457a-9360-bb8f950b20e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e87f1f6-2860-4f7e-af40-0a42015739ed", "sighting_of_ref": "indicator--da1c9b35-2fba-457a-9360-bb8f950b20e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d318471-2926-4d4d-842b-ed7624e2de91", "sighting_of_ref": "indicator--04ad87ae-76ca-4de4-983d-58a74cd02937", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea33c155-07c9-4510-84a1-e8db8c92cba3", "sighting_of_ref": "indicator--223dfd31-9734-404d-836c-96b4936fe89a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1f80dc-5518-4239-a57b-1a6a4f9c31a2", "sighting_of_ref": "indicator--9e8dbacd-b8c8-431c-8bac-c7bedc6aa3f8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f68b56-1e35-45ea-b6f3-139971e280a2", "sighting_of_ref": "indicator--5c3cd87f-cfd5-416a-b0f0-01272bcb4d76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af96033f-2de9-44a3-a087-819eec7f6e98", "sighting_of_ref": "indicator--4c9bcbdb-4edf-41b1-85a6-281f074469c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4441b2a2-3fe2-4843-affe-b51cc22a78d9", "sighting_of_ref": "indicator--4c9bcbdb-4edf-41b1-85a6-281f074469c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaff3e2d-6bef-4920-adf8-cc149617fc5c", "sighting_of_ref": "indicator--beddd500-9034-4a15-9ef4-9d9c6c61c027", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63554372-99df-4ae6-ad47-0e07f157a753", "sighting_of_ref": "indicator--aa2cc667-9800-4d92-9321-6eea38dd0e2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139ce0f9-36a7-4c70-9848-c3c12fe82706", "sighting_of_ref": "indicator--fe50492e-215b-40b5-90d7-ec1bba8e2970", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902c8cc9-f252-4043-a053-5529e4242341", "sighting_of_ref": "indicator--a2895929-05d6-45f7-9d62-15d67a177c85", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35de9575-4e8f-4ea7-a9a6-b7b0fa6b0f07", "sighting_of_ref": "indicator--654374aa-4151-464e-b041-8ee5523498a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac2efaf-86e7-4808-8fe7-3c55cb84b6d5", "sighting_of_ref": "indicator--5dea951b-80e2-45e1-a3bd-dac0d1ec4257", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82c510a-c878-4298-95cb-a25fb8027f02", "sighting_of_ref": "indicator--ac8c635e-20f7-4268-93c0-6ca830fe3dd2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4708ad20-df07-4a37-81e9-d048cac2693a", "sighting_of_ref": "indicator--a6bb1b93-d436-4c82-b99b-1bd2cf09336f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475b52a1-b2c3-4077-b9d5-f67c93fabcf3", "sighting_of_ref": "indicator--4594d939-83b1-4e9b-abdd-4be82f3fbb0d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d8b31d-c0fa-4057-848f-d30565a54857", "sighting_of_ref": "indicator--6d9c2a10-b694-4a28-855a-9b30b501392e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e44cff-35d1-4205-8f0d-13c614db28e7", "sighting_of_ref": "indicator--7ef06e0a-33a5-4f67-9f43-d051a9211d54", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b03d2f-94a9-4fde-abfa-710a71d166a7", "sighting_of_ref": "indicator--69b02ab3-de5f-4854-b951-dedc7fa2c43c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8589dce3-0dfb-49bd-81a1-b435e16ed5d6", "sighting_of_ref": "indicator--d74820e3-436c-4538-9eaf-714c796295a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52fc08b-f169-4b3c-9251-e84a595e0651", "sighting_of_ref": "indicator--82193214-4129-408f-aa6a-45d820abed43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3b6dac-3081-4dfd-aa43-eac957ee8d79", "sighting_of_ref": "indicator--6cce60e0-3c51-475b-80c4-e6aa6cc10c5f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c4afd0-ea59-452d-a4ec-15bef1fa5ce6", "sighting_of_ref": "indicator--4a593e3d-8872-4376-a63a-844c1d5792d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0180cc05-2924-45b8-a1da-5af104ba7584", "sighting_of_ref": "indicator--4a593e3d-8872-4376-a63a-844c1d5792d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eae574b-08b4-4524-81a1-c0ad5bd58666", "sighting_of_ref": "indicator--c061b18a-6c87-4082-b7b6-046b1effe776", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42be856-cd54-4f98-9773-e516be3e1846", "sighting_of_ref": "indicator--c061b18a-6c87-4082-b7b6-046b1effe776", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73214bd1-4f3a-4718-a7b0-02ec4e1d1de1", "sighting_of_ref": "indicator--966c8cdb-b050-44e9-a622-ac9aa8ece512", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8a41e8-ae73-4087-8a03-a510adb1559f", "sighting_of_ref": "indicator--966c8cdb-b050-44e9-a622-ac9aa8ece512", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1446d4-0fec-4f88-8c59-cfcef9648d54", "sighting_of_ref": "indicator--ac739772-16b8-4b86-b8db-0d7fcf3bb749", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd85ecdb-5cfa-4e50-b33d-f08158920215", "sighting_of_ref": "indicator--8d4af5f8-0dc1-4844-9ae1-b5b2e1ac6211", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53039c4-1422-41c0-99ab-a19c7561fac5", "sighting_of_ref": "indicator--74af6320-10ab-4c48-b7e2-6b2001ff91e1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17589505-818a-4c60-bddb-5dbe18f5e8ee", "sighting_of_ref": "indicator--74af6320-10ab-4c48-b7e2-6b2001ff91e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939bfead-48f0-4199-aa20-52069a2cfa4f", "sighting_of_ref": "indicator--33d0b142-0d62-49f1-9d62-60b417e40b0f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88820e59-ffc3-4490-a446-9a6681ed34c0", "sighting_of_ref": "indicator--33d0b142-0d62-49f1-9d62-60b417e40b0f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8216dbba-32f6-4e96-bcfa-6f8c13bd732d", "sighting_of_ref": "indicator--859e87b7-e369-42f7-a632-9f4ab0f5c13d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b279097-0afe-4d45-b55b-cd7d41bfab20", "sighting_of_ref": "indicator--d5d44063-19b5-4021-8f71-32040383e5f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582687bb-3eb4-40d3-b4f7-f22006a8a22e", "sighting_of_ref": "indicator--ae060aa6-9c5b-4cfd-941c-c5413f70d9cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7838e924-a6d8-4c44-86e5-0158caadc082", "sighting_of_ref": "indicator--fd1dd3b9-1fb4-4ee0-b03a-db08890a801d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e48d8d-d169-4fc9-9996-2b509514b188", "sighting_of_ref": "indicator--169f973f-eee5-435b-9e6b-95d0151e25e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd524cc-f4f6-42ac-8ddd-bf9a159ee507", "sighting_of_ref": "indicator--42bee604-1a72-4d6a-8c81-6493d980d774", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8fd854-654f-4ed6-85bd-143b8db3a50a", "sighting_of_ref": "indicator--5ad38ac8-4583-44e1-8df3-df66e73c7cbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef78b8b-712c-4edf-a2dc-fc96c44b8a0e", "sighting_of_ref": "indicator--5ad38ac8-4583-44e1-8df3-df66e73c7cbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40ab0b3-1cc5-4a45-a9ff-a6b2812e9723", "sighting_of_ref": "indicator--bf67ce37-479d-48ce-8dcc-069c2d44dfb6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a040ba0-e00d-4a24-9d6e-a469e7b5c558", "sighting_of_ref": "indicator--104cc10d-d462-47dd-817b-9937d8f9b2bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9523d784-c5ee-4ed2-b3cc-33c1ca2f718a", "sighting_of_ref": "indicator--bf57d64b-25fe-482d-9b4a-66912a01ad85", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abcbb2c-0c51-4174-bcbe-82a117da29bd", "sighting_of_ref": "indicator--76c2d1d2-7af7-430d-913e-a343816083f7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314c15dd-3989-47c4-ae0f-9731f38c1e69", "sighting_of_ref": "indicator--b1044875-847d-4323-819e-33f09279049c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4522ac92-2dd2-4c68-ad3b-7838ca469d3b", "sighting_of_ref": "indicator--9c29e204-6167-4818-bc3e-fda8175d661e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1b50e2-0538-4f72-ab12-27811572d6f2", "sighting_of_ref": "indicator--35f78852-b8ca-4c8d-a3ec-0ec07e05b3f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b8830a-ad43-4da7-9705-78cd293b391f", "sighting_of_ref": "indicator--c52bd5f3-0bdd-4cfc-b465-071c5b470b50", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb41925-bce3-4fc2-9c5f-f056cfa4a603", "sighting_of_ref": "indicator--c2e0cb55-5ecd-4447-9350-0aed47a48f53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecab906-0d7b-4a88-bd33-137912c4e8f1", "sighting_of_ref": "indicator--5d7259eb-b06c-46fb-8e40-64589d097e1e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc52401b-dc67-4447-9990-45a0c60dae06", "sighting_of_ref": "indicator--0bf750ce-31f3-4dab-a502-ed3d7df5c27a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a3403c-50d1-4f86-bf07-4133825482fb", "sighting_of_ref": "indicator--848a35d4-639f-41e1-98d4-297ce8c16cea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80662bbe-9b28-4dd1-838f-f3a4aeca8446", "sighting_of_ref": "indicator--dc788347-3637-4b83-99b8-a31bdcb2cae1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac7739c-8097-4e4c-a0e1-65c9347a82a5", "sighting_of_ref": "indicator--380cc156-75c7-4572-b203-705460975d7f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93763ed-18da-4d07-8712-7846e98d2c82", "sighting_of_ref": "indicator--7b21ed2d-9e20-42b2-9b02-ca1c54dbf468", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb262c9-b104-45d2-84bb-f72f50e9cd31", "sighting_of_ref": "indicator--af8f00c3-3ef1-4773-bd99-e995ebbca58c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef6ba01-1284-4f5e-94f6-705ff043f56b", "sighting_of_ref": "indicator--cfc261c7-9201-4869-b018-c2f9c6d9cb3e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409ec002-0da3-4947-b14c-9cef9cd07b9f", "sighting_of_ref": "indicator--8775ab6d-16f6-4b53-b7e6-edfe1c59a173", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cdac1a-ce01-4f4d-a36a-48d58efb978e", "sighting_of_ref": "indicator--5a23732d-38cd-4795-96a3-1941ebdeea57", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937e8d3a-346e-4331-8a31-970d4ff99fc8", "sighting_of_ref": "indicator--de5c6314-f5dc-4f6a-ba03-b400e8127c76", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e4a859-ddef-47ee-b2ba-f3002c0f6dca", "sighting_of_ref": "indicator--4ebf6605-5bcd-4bd6-9446-a294cfecd581", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2c4f79-5e68-439d-9e2e-2acded40a9e7", "sighting_of_ref": "indicator--ec89296c-c3bf-4bc3-9a09-b34a138fa84b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2654467b-0a8e-4a02-a4f4-337a8ef46478", "sighting_of_ref": "indicator--48a21cc2-fe7f-4b2c-a3af-ec1e97b29f2f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e084ef5-9bd3-45c8-9726-38439555d79a", "sighting_of_ref": "indicator--e9bcda7b-51ab-42ef-ae3a-ce00d336c6a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf184f67-f78a-4459-a5fb-58f5ff2da895", "sighting_of_ref": "indicator--71911d94-8080-4888-ab98-227654ab0f13", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f0a517-911f-4a34-9a0b-f42548df1c85", "sighting_of_ref": "indicator--ddc04338-6cf3-4f99-82a3-71c2d2163bf2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750829b1-321e-4746-a5e9-98438c8a480a", "sighting_of_ref": "indicator--b7775b9a-038b-44fb-894b-1ac72d97ac8c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc1639f-0842-4b12-90e2-5a8bb943d63d", "sighting_of_ref": "indicator--189815c1-88e8-4daf-93d3-ab2f1a64a50b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef00f27c-1e3a-4a70-a706-f5bd3dad7965", "sighting_of_ref": "indicator--f954f927-9a50-4b75-b5e9-092025794ba3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08c1185-8943-4440-a374-f0120cde1632", "sighting_of_ref": "indicator--d4b1c3fc-b92b-4b19-81df-f0de51966552", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e0bea9-3fd9-4934-a461-d9b218689b78", "sighting_of_ref": "indicator--b11cc3b3-281c-4a09-95e1-f9da96cd2376", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f55b336-d9f5-44fc-b8f2-69bda8e1f677", "sighting_of_ref": "indicator--e07af827-29c6-4459-b6e0-57ec72f4a442", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8906e758-0bb8-4242-b5f8-9e2a7ff518c0", "sighting_of_ref": "indicator--05c94739-9391-43a4-ab93-f5f84ec83ee0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32587261-2dd9-45ac-bfcd-07df415f0b38", "sighting_of_ref": "indicator--db4f5e05-7906-4c23-8fd7-2f54929f6f19", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc9ddbb-2aa6-4610-86d8-c399a0371eee", "sighting_of_ref": "indicator--088c55a3-69ff-4e85-91b2-c621cbc5e4a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f405185-3823-404f-9171-912742afb349", "sighting_of_ref": "indicator--6d8cdf98-dc70-4935-a419-dd099be99ea5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76df47a7-3f0c-4810-8511-c21650525001", "sighting_of_ref": "indicator--df63a89f-7e95-4746-8de4-eafc2e3e6004", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e691970-6cca-40e4-be84-49b6e2a48864", "sighting_of_ref": "indicator--5b9845a4-5639-4540-b3b6-bf33f0a060b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da9bcd9-ca23-4866-8979-6a9477a363e6", "sighting_of_ref": "indicator--10f278b5-b0c6-44f9-b82a-fa1f766eedcc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fc572d-9566-457b-8206-6c86f60af1ca", "sighting_of_ref": "indicator--e771729b-b6e4-4995-9a34-c766ea0a0670", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77202b38-f8bf-45a0-8f95-7fc48c5dcbe8", "sighting_of_ref": "indicator--9e3ba57f-5b2c-4d76-b3fe-fb4126c9ce93", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634a3127-0fc6-4bec-8464-e7f291561bb5", "sighting_of_ref": "indicator--9e3ba57f-5b2c-4d76-b3fe-fb4126c9ce93", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00525b54-96e7-4608-9532-1234a1f78755", "sighting_of_ref": "indicator--34c80483-bc76-41ab-84f7-a77a4e458b42", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88274582-95ac-4432-a6aa-5cceafcb1c19", "sighting_of_ref": "indicator--3a9a638b-09cf-4308-ae3d-31472666be9b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926a6c33-7f33-4ce9-b3db-856c033babf8", "sighting_of_ref": "indicator--1216c55f-4428-4b6a-9e4c-d01198573f54", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a0067e-9126-45d4-9bab-c99ad5506be3", "sighting_of_ref": "indicator--0da4ef04-4931-49ae-bd96-c1f8bba8b870", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98652b4b-3db9-455f-bd83-096757922c8e", "sighting_of_ref": "indicator--ce170099-62e6-46a2-924d-81829c830808", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43661ba7-e90e-43d4-8b0a-0b0cd34acc13", "sighting_of_ref": "indicator--f30ee336-4389-438f-b657-0f0b33dae81a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e758d95c-dca2-4643-88a0-48abb64b3bfa", "sighting_of_ref": "indicator--70d896b4-657b-4834-8583-34903d50a817", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3cf64c-6552-4d92-93e9-7a0c50e1c1bc", "sighting_of_ref": "indicator--e415b27b-175b-47fa-b2c5-0324e7a923ea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0f20d0-b32d-4c6f-ae9f-bf33acfe3b53", "sighting_of_ref": "indicator--29c5c593-55ee-414f-b4af-d342e8c912fa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4771ba-c5e3-4445-9909-b5f13d764fd3", "sighting_of_ref": "indicator--48a1fb38-662f-4dfd-90f4-5adc802bc3c2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c2d948-ce82-4cb4-ba65-e28f9765ee42", "sighting_of_ref": "indicator--20841336-17cc-4cf3-8970-8839d7733b7f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b304330b-6fe0-421d-89af-b1589157724a", "sighting_of_ref": "indicator--ed4ad67f-c691-4d40-ad1d-af33fccf3026", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab953ec4-7a76-483a-aaa7-449e755abfc3", "sighting_of_ref": "indicator--dccb1a4a-8e06-4a5f-b188-93c9526119a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae3860a-5a15-4510-9fdc-25ba6321b11b", "sighting_of_ref": "indicator--2996b5d8-ce9a-42ca-b96d-b5908bd2c95d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2939100-b147-4396-9753-59df398c8aee", "sighting_of_ref": "indicator--2996b5d8-ce9a-42ca-b96d-b5908bd2c95d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344530fb-e162-43a5-b31b-15d57ca01cec", "sighting_of_ref": "indicator--481bef6f-fc2a-4abe-af8e-b772b9b4cdb0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6014ca2-912e-4218-9cf9-9330634366bd", "sighting_of_ref": "indicator--0d6ed6d4-82c4-4e83-a775-ebcc54337ed7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05799e66-4cee-4094-872a-321f70474c83", "sighting_of_ref": "indicator--3e1892af-72da-4d68-afdd-22eb80fc5604", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a292139b-5fcf-4409-b7a2-60d1fca9e186", "sighting_of_ref": "indicator--3e1892af-72da-4d68-afdd-22eb80fc5604", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112a13f0-b4ce-40ad-b091-bc27beb41b7b", "sighting_of_ref": "indicator--219b1e91-7a5a-4e4b-a282-13d843ada813", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a99fccd-24a6-4ef0-a929-b8ce6c873075", "sighting_of_ref": "indicator--8d064a17-0807-4138-a7a8-9f658a1344d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c7fccb-5900-4090-b11d-d2244d949c7e", "sighting_of_ref": "indicator--79c8bc4c-e40e-4c9b-894d-82818ba11b36", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c06f90d-209b-496d-a99a-756aec25ed8c", "sighting_of_ref": "indicator--2d1b2c6c-c5ec-42f8-889e-0c647a7369aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f259f8-b8a0-4f9e-beb4-e763b67831c5", "sighting_of_ref": "indicator--c127cbaf-ac11-417a-a4c0-849d65cd46ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37224943-81a3-4680-81a8-f63a721f38bf", "sighting_of_ref": "indicator--1c91bafc-a0e7-4409-9166-715884ea0448", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1a5944-9549-45c6-b07f-f454d11b809a", "sighting_of_ref": "indicator--97e71032-8aa4-466c-a89c-a6dddd92991a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5bc3ed-27c4-4fb5-99d5-d1db79335601", "sighting_of_ref": "indicator--e752edef-0473-4afa-9a00-048e0f28b1d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d2ddd2-d866-48e1-bd18-c59278f030a2", "sighting_of_ref": "indicator--f70fe88d-0589-4fbe-8204-916ca4304955", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6eb41b-5c68-4132-ae41-ed482daa5d8b", "sighting_of_ref": "indicator--451020d8-f056-4395-a900-f3c52ef2b91b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404b8257-83c1-4105-9a48-da436b04a2a0", "sighting_of_ref": "indicator--db7b84f9-9c86-42a5-a746-9a6e3e1d8628", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4aedd2-36a9-4f34-990f-201ceabbca96", "sighting_of_ref": "indicator--c7e58d56-c5e2-4eb3-bd03-404043ad2dab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eae429c-cf44-43cf-9fb4-42e8ff3b12a5", "sighting_of_ref": "indicator--5e54b066-9bbf-4d05-988c-ee1382ab305a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9977a9-c4cd-419e-b3db-038239212ebc", "sighting_of_ref": "indicator--b59d11f2-785b-4c92-8800-a4baff61add3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3b9c37-11e5-4621-b803-6da092b262d6", "sighting_of_ref": "indicator--7e798983-368a-4a49-85ea-fe98261dd569", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129cbb14-3e24-469c-ae73-540094fdbdcd", "sighting_of_ref": "indicator--479b602e-f95a-4c4c-9a65-65ea6cc30e90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49be040-7158-4805-93cf-3c7278bf327f", "sighting_of_ref": "indicator--47c47d29-7141-41f9-b487-57022982064a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219d1f1c-4ecb-4acf-bd2a-f01c8ed37ad3", "sighting_of_ref": "indicator--0f9d5ad3-3ae7-40f3-a1c2-2a0a24f21452", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1451bbe8-bd3c-458f-98cf-d9330cba504c", "sighting_of_ref": "indicator--cd4b2d74-e583-41b5-9ca9-14856ae21a44", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9908dcad-dd34-4480-9056-958eb630b553", "sighting_of_ref": "indicator--7fcb7d7d-aac2-4dc2-b13b-58ee0dd1d19e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9028d1a-0d27-4cc5-932a-95e23c4d3e1a", "sighting_of_ref": "indicator--116771a8-2240-4090-8750-82b1bec6486c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27059cd-820d-44d1-9601-a0322924c5f4", "sighting_of_ref": "indicator--90cd3153-cdc4-4da6-accc-4229b10e74bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942507da-b5bb-4069-aeae-c527484f05a6", "sighting_of_ref": "indicator--0aa73bf6-f7eb-4a71-aead-46337345f184", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e932264e-d23c-4a46-9b12-6155c474d065", "sighting_of_ref": "indicator--9d5f9a3b-8392-4528-a32e-f3c42d34accf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8439be99-1e68-4007-859c-4cc533f5a938", "sighting_of_ref": "indicator--9d5f9a3b-8392-4528-a32e-f3c42d34accf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31561803-9b29-48e4-9099-645ed71a9074", "sighting_of_ref": "indicator--459e511e-7248-4c06-9080-f4521e6ddb2a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02fd0e2-ffe9-4b75-8035-d4aaba138f55", "sighting_of_ref": "indicator--459e511e-7248-4c06-9080-f4521e6ddb2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8804ac7-a197-4de2-b11f-bc8828d6c00f", "sighting_of_ref": "indicator--54b878c7-e35c-487e-bdd7-2345a66d8796", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ab4bd9-3b45-49ef-a8fc-44cf539bd8bb", "sighting_of_ref": "indicator--54b878c7-e35c-487e-bdd7-2345a66d8796", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f55cee-44bb-4858-b32d-acc0f0e1b3b6", "sighting_of_ref": "indicator--6759666d-f6fe-4279-a941-e781b6cd2963", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b85d2d-6287-468c-975d-b031ad98a38b", "sighting_of_ref": "indicator--6759666d-f6fe-4279-a941-e781b6cd2963", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c196cd1-4591-4620-9656-2becff154010", "sighting_of_ref": "indicator--dc6c9eb2-008c-4041-a4d9-121c4d42b585", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d2e4b2-4537-4872-bb2a-2707c8442cc2", "sighting_of_ref": "indicator--5755d311-430f-47f7-a2cb-58336981b856", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2c5606-1ada-47e6-be61-f6e6c11952ef", "sighting_of_ref": "indicator--6009b88d-d46f-40d2-97e9-ac1318ee1f65", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a641bdf-6fa6-4438-a7ba-0ae22aeb0092", "sighting_of_ref": "indicator--b52af5ae-dbf6-48c0-965b-990693c26cc2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a290b6-802b-494b-b72e-2dd5f2598a9f", "sighting_of_ref": "indicator--e8262d6f-528c-4d26-b655-1e1db5534914", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f789a8d-0e67-45e3-aa10-99ab9ccdf719", "sighting_of_ref": "indicator--bcbff163-93b7-4547-a50f-9caffd7ba612", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0119ace-0666-40db-abb8-fc6b29984de0", "sighting_of_ref": "indicator--ea3751de-b836-4612-b140-af2ba0ec52b2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca339b1-4288-4838-b311-282d25ba70d9", "sighting_of_ref": "indicator--ea3751de-b836-4612-b140-af2ba0ec52b2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1f917f-63f3-44a2-a544-8e82168aa7e4", "sighting_of_ref": "indicator--fdab908c-003e-4327-9882-3ab2a48f4738", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9b06fb-b3a2-4a84-a054-ffbb157c665d", "sighting_of_ref": "indicator--fb104edb-0f0e-45ca-b3d8-d954196a9526", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52170507-9292-499f-9f6e-a707ab7187dc", "sighting_of_ref": "indicator--59f27e6d-7ee4-4edc-972c-c853283ccb2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342af99a-9f22-492b-8ec7-693b93569e63", "sighting_of_ref": "indicator--59f27e6d-7ee4-4edc-972c-c853283ccb2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e688e943-acde-4bbf-a0da-d31a7ea969f1", "sighting_of_ref": "indicator--d8b1b10e-6e72-4973-b504-cd071a5ffebe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd444765-9553-4af2-b41f-0849aa640616", "sighting_of_ref": "indicator--d8b1b10e-6e72-4973-b504-cd071a5ffebe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fcd2ef-ed9a-4af9-9d1c-412878e0681c", "sighting_of_ref": "indicator--5e6b80e3-8141-4cb5-86dc-b22a0af6e1ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b03dec0-282b-41c9-b041-5afe880cac7c", "sighting_of_ref": "indicator--5e6b80e3-8141-4cb5-86dc-b22a0af6e1ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400d486b-084b-48e8-93cf-5933dd62e202", "sighting_of_ref": "indicator--9af0eabc-e3b9-4dd7-b823-68f6dadabf58", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d09ba7-07cf-4529-8bda-971bbb69a5d1", "sighting_of_ref": "indicator--dc358ef7-3541-4104-8e22-805b0aca77b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dc5414-fdd8-4f64-819d-5540f988b5c1", "sighting_of_ref": "indicator--fef3f0f0-6de3-4d16-8690-f44e65aa1a32", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d9e59f-9f47-40af-b707-75fefc63d381", "sighting_of_ref": "indicator--213013f9-917e-4b59-b4e1-c3f5d2f99e94", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c349eef2-d1e8-47ca-a971-d36ac610ccea", "sighting_of_ref": "indicator--eba78a1a-d898-4e6c-adb5-a1b9e8013e1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22420018-1345-4dca-b793-fcac9c5fcb3d", "sighting_of_ref": "indicator--b6fb251a-f397-4c92-b5a2-827d388fb399", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007596cd-0bda-4e1d-8171-5b2f3e881d24", "sighting_of_ref": "indicator--b6fb251a-f397-4c92-b5a2-827d388fb399", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518051fe-a0af-4a9d-942b-46b57824019d", "sighting_of_ref": "indicator--d4dc7640-71cb-480f-90bf-1dc83096d466", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36039fc-f1a0-42d6-894d-383daa018fbe", "sighting_of_ref": "indicator--27a26159-dfd7-45b0-94a7-bd09763173bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259eabac-6fda-4e5f-ad85-30a4ad0538fe", "sighting_of_ref": "indicator--199e347c-aa4d-466e-b6d0-1f59bd3aaa25", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1818087f-26ee-47b2-ab51-192f5e280e1c", "sighting_of_ref": "indicator--7c128ba8-d227-45bb-95d9-e8c203eaac00", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c970e614-4300-43c8-9e22-c0d711465e02", "sighting_of_ref": "indicator--258d4dbd-ea88-43e0-a715-b36c574712ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d46be7-675d-40f5-8be4-f2f7ea31db18", "sighting_of_ref": "indicator--781c3f6b-25a4-404d-bc84-17f6fc83f9e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33058d0e-a918-4b53-900a-6aec2c67bf4e", "sighting_of_ref": "indicator--cbfd01e0-0dcd-4beb-a3e7-e44a0a1597c5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10900313-ef7c-4117-97f0-fb2f3ab89abc", "sighting_of_ref": "indicator--cbfd01e0-0dcd-4beb-a3e7-e44a0a1597c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ea1076-0dc9-4c4d-8468-fd7a72963b43", "sighting_of_ref": "indicator--bbe1ba3a-2604-4816-9893-d7eb35f1a867", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24939a92-16a1-4002-b65a-6ce2b9c3b1fa", "sighting_of_ref": "indicator--8163f605-1968-456a-be91-e8b40d15117b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b530a3-a6b9-4b7e-a24b-600ef9df1529", "sighting_of_ref": "indicator--053765d4-a242-4b8b-b969-7b24d2163218", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3c1458-63c3-4c9e-a6ec-37d9294c92e7", "sighting_of_ref": "indicator--053765d4-a242-4b8b-b969-7b24d2163218", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4e9731-b2f8-469e-90fc-0ac5e2b41a15", "sighting_of_ref": "indicator--5bb2bfaf-b0ce-4660-b929-7fe873eb6a2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c39a9a8-3dbc-4b26-8759-0c81de9718e3", "sighting_of_ref": "indicator--9de0bae1-e1d8-46e1-a1d6-83f95a0c1d1b", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212c17d8-dc11-4bc6-b0a8-ab2ed627c2f4", "sighting_of_ref": "indicator--520cfe4d-1eae-40a0-8d68-9170df6429cf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7cdeac-d3f9-4b4d-a147-ab5bd548252f", "sighting_of_ref": "indicator--f30f117a-f43d-41cf-9712-34273633e23d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c9459c-9fb2-46c2-b991-519b7333d2bd", "sighting_of_ref": "indicator--1dbbe098-14b2-408d-917f-a797ea6c4dc4", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbb26aa-d424-4439-abc4-4ccd158b5090", "sighting_of_ref": "indicator--8829b308-1b23-47ab-9418-c0e44f2e5541", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7126fd-78ad-4612-a574-c9e56e54ab54", "sighting_of_ref": "indicator--bae3930d-aa70-4efa-9fe6-c6ccc9aa74a4", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bfc058-4597-496d-805c-e8b21d153638", "sighting_of_ref": "indicator--874daa48-a879-4c19-91ed-31216f91c568", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317513ba-371c-4690-bd27-952bb7b8f2e3", "sighting_of_ref": "indicator--9048bf2c-263c-4822-b680-82556e994c85", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ee74a9-8747-4964-8fbe-68303604b08a", "sighting_of_ref": "indicator--24a78721-1d98-4d97-a62a-3b85c13fe9c6", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a184b039-5a7d-45e7-a72c-fd29236fa434", "sighting_of_ref": "indicator--f7ffcb4d-1f9d-486e-a911-49d33cf24189", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e486760-7c3b-42e8-9a1c-092f0413bd0e", "sighting_of_ref": "indicator--c5318016-6127-44aa-b423-626c60a0cfdd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e533ea-40c1-44a5-a9b5-2a8b1f8a96e7", "sighting_of_ref": "indicator--d3258d7d-486b-4956-8d69-e63104b14a2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088ecd72-2206-460b-bec9-2e769d8ec97e", "sighting_of_ref": "indicator--d1854d73-87e7-46a9-ae74-b7f30a035c53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc1c7a3-f721-4ac4-b38f-e6410cb440d1", "sighting_of_ref": "indicator--e9d68d13-7e44-4294-b9aa-996e02aacd77", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efda425-6544-4fb8-b7cc-63fdd66bce41", "sighting_of_ref": "indicator--a3a5b5f1-ebd1-46dc-97b2-5e15af1a5eed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3cba50-8e49-4f60-aeff-7ac13f394e07", "sighting_of_ref": "indicator--60a79b6c-e0b7-41b0-b9b9-d8fd3f60b703", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eee5f4f-cbf0-433f-9bca-827f24e7c57c", "sighting_of_ref": "indicator--33939da0-1c65-4090-8341-01ca6400070c", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e80b161-ad8d-4c90-9ecc-f4e985ba2c71", "sighting_of_ref": "indicator--402e3c78-3d4c-4d30-a6c4-24ea9e71d1d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151887b3-4feb-41f0-b551-29a344f18e05", "sighting_of_ref": "indicator--ef26d42e-a1bc-443e-890f-782f50239fc6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d71190-2d95-4e21-a78b-5544bef825f9", "sighting_of_ref": "indicator--a63daea9-2a80-4422-9f20-4e5221dcb482", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ff8b3b-f572-46ff-a9d8-05d04017d2d3", "sighting_of_ref": "indicator--5b18d9be-ecc5-492e-a890-fb3b78540698", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60c1ce0-7db2-4f0d-8495-b45cc61ecba3", "sighting_of_ref": "indicator--5b18d9be-ecc5-492e-a890-fb3b78540698", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46dc183-fde2-476b-aa48-54fbc6eb278b", "sighting_of_ref": "indicator--5c7eca95-6740-4156-8025-068920af6bb5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1576924f-7a70-4ea1-8b23-831b1559f48c", "sighting_of_ref": "indicator--5c7eca95-6740-4156-8025-068920af6bb5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef86dbb0-b12b-4792-bdfd-514f7b2d609a", "sighting_of_ref": "indicator--1e8cd9cb-d479-4ccd-a8f0-84ca976c2afb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9c1a7c-7f5c-4527-9aa5-0cb31993316b", "sighting_of_ref": "indicator--1e8cd9cb-d479-4ccd-a8f0-84ca976c2afb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fd337b-c672-44c0-bcc7-0a6e53bcdc64", "sighting_of_ref": "indicator--b9ab2b26-6322-4b6a-a213-4cef6ad7abb3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b031c4b-5ca1-43cb-82ac-e6dc6c578eac", "sighting_of_ref": "indicator--846019b9-e8ea-4c2a-be49-b786390f8870", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c5e83a-560e-47ff-a62a-da1480835447", "sighting_of_ref": "indicator--a3219509-8f7d-4a1d-95b4-360eaea155d6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d1bdd9-13b1-4d11-880a-a777d7e5ee68", "sighting_of_ref": "indicator--9ad0a374-2853-4646-8ddb-cfe827be103c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489f3008-fc3b-46d3-ac99-dfebf7abda5d", "sighting_of_ref": "indicator--d9d6d310-c8b2-4398-b012-e1173f9c50d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f97ef4e-8f88-4330-b06a-579cf8d7ad0b", "sighting_of_ref": "indicator--aedafb7e-ae86-470a-9c92-4e9c594be16c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1986de-5752-4a4e-bf85-a15cf6a6b9f2", "sighting_of_ref": "indicator--b7cf6065-c0b2-404f-ac26-12dac9c6264c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9551fd2-660f-439d-926d-568f29ec9abb", "sighting_of_ref": "indicator--7619f7c0-ac31-4e73-8832-46ec2019f718", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4546ef80-571a-486d-adf1-5645e51b19a7", "sighting_of_ref": "indicator--d82e8422-4193-42b0-9644-ee6f636db09d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b0d09a-cefd-43e7-ab00-2c4b18a586a3", "sighting_of_ref": "indicator--782663eb-ad71-4858-98b5-8f003b42e261", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e7864c-274d-4805-962b-4707c4496c04", "sighting_of_ref": "indicator--517b200b-9ac4-4fa9-b691-9cfde411ae18", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe1958f-5db5-4f00-9619-938cf8bd5b1e", "sighting_of_ref": "indicator--64cb840b-d652-4615-828e-bf0dc27bf6c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2da5260-128e-42d8-8a66-e9d6f27f2129", "sighting_of_ref": "indicator--1a9da563-e5f7-4908-9f58-6cabf47ca3cf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4c0cf3-b678-4d13-b7f8-4c25e2b45d7a", "sighting_of_ref": "indicator--d60a9853-4283-4d8f-b1c2-1aa62cc76292", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3840d03-80f4-4632-b306-52d1608d9640", "sighting_of_ref": "indicator--a8e102a6-7346-4d0b-9b76-659d9d55e60c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba954f02-05a7-48fa-942c-7d1e2cacb43a", "sighting_of_ref": "indicator--58ebd95c-c039-4bb3-9d52-c6a370d8754c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442ecafd-01e6-4093-b861-f70f5e560454", "sighting_of_ref": "indicator--905970d2-fdff-4269-b646-d77cca452e84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b533cbcb-182d-4cb5-b471-1f0c4c06bb4e", "sighting_of_ref": "indicator--18e2cb73-b2a1-4ae9-a387-612b1f28e3e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ffbcb1-1bbe-467d-abc2-43239c51583d", "sighting_of_ref": "indicator--5842359e-876e-4213-8666-5cbf64989e8d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa66fc32-a3ef-4b0d-a5e6-4cd046c14589", "sighting_of_ref": "indicator--de139d88-473d-4a73-b6dd-b925398f4219", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda94b71-a086-45ae-bff3-b6225b5b7d1a", "sighting_of_ref": "indicator--4696c72d-5539-42c5-9b25-aa2cad1df505", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3d71bf-7cfa-4c12-b231-e3420f98d71c", "sighting_of_ref": "indicator--bfec02e5-6714-4568-8fb2-677dd04ffa72", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc73daa8-097c-40c8-ba08-13f1f0a07a79", "sighting_of_ref": "indicator--3b2c89e3-888c-43b9-8baa-b825b185c4b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978c2a9b-7cb8-4c1f-bee0-2e8b334ba9dd", "sighting_of_ref": "indicator--e0b5ba19-12cc-4c01-8ca2-50605e4b5c03", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ed49d5-cb86-48b1-a50c-9d7040ce88ca", "sighting_of_ref": "indicator--bae0837a-98f3-4387-9729-7d08745750c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9979be0f-b332-427a-a743-7cec1a1133db", "sighting_of_ref": "indicator--c88e2651-9bc9-43b4-a11f-6a83b3c909ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f632ea8-6301-4637-acef-63c97c6d23ff", "sighting_of_ref": "indicator--0bd2803b-fbb9-4fa0-a75c-2279ecc3f391", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f582577c-6c76-4b1c-9798-7e47a0c435a2", "sighting_of_ref": "indicator--eb04f6a6-0950-4de2-8f5e-5ef47b0eaf13", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5058422-c88b-4481-a773-cc2081b0e4fc", "sighting_of_ref": "indicator--2e8df533-da94-4bac-b920-3a14937e8bae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c754405-a40d-462d-94dd-b08945af8ebd", "sighting_of_ref": "indicator--2e8df533-da94-4bac-b920-3a14937e8bae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5b9d70-e841-4668-b02e-a82093c32580", "sighting_of_ref": "indicator--f02c86ce-03f8-4e40-aa48-e9350b8399a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c723aa9a-2c91-4347-bb8d-508237e952e1", "sighting_of_ref": "indicator--f02c86ce-03f8-4e40-aa48-e9350b8399a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1515c6-9186-4809-882d-23588b163b3b", "sighting_of_ref": "indicator--3a9e665c-6dbd-461d-9091-eb19e9cedf39", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec09353-089d-45f8-8108-16defde0dd02", "sighting_of_ref": "indicator--3a9e665c-6dbd-461d-9091-eb19e9cedf39", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e1aed9-d958-45f7-aba2-96700f911779", "sighting_of_ref": "indicator--7dfb6dda-e393-4bab-b238-d69129c4a836", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e921fe32-caf1-47b0-ae05-08971bd3b5c0", "sighting_of_ref": "indicator--7dfb6dda-e393-4bab-b238-d69129c4a836", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e6d254-ce3a-4f97-9809-ecc4aca2423f", "sighting_of_ref": "indicator--6a3c223f-0022-4c7e-9510-9ddea7d96d42", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212e1422-84b7-4a03-8b9b-0ffb051c745a", "sighting_of_ref": "indicator--6a3c223f-0022-4c7e-9510-9ddea7d96d42", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e33b18-ec2d-4503-b74f-1ca40310b2ab", "sighting_of_ref": "indicator--551509bb-1722-4d6c-8120-51e8c601522e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04702092-0d67-4c98-8ebf-a1a8e9026857", "sighting_of_ref": "indicator--551509bb-1722-4d6c-8120-51e8c601522e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026f29fc-651a-4f7c-8d0f-52438d6409ed", "sighting_of_ref": "indicator--fee12fa3-99e5-4e09-bb73-3d806583aff5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeee5c2-5dbd-4d21-b64d-d65bb6463ef7", "sighting_of_ref": "indicator--fee12fa3-99e5-4e09-bb73-3d806583aff5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c648917-74a2-4ada-9083-2c122ab87209", "sighting_of_ref": "indicator--8a536517-24c5-4749-84ce-9730cf9a4ada", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4b58a4-afa3-4e0c-869a-e53d6ae28f7e", "sighting_of_ref": "indicator--8a536517-24c5-4749-84ce-9730cf9a4ada", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6a38ee-a913-419b-9fbe-a45c22a752f5", "sighting_of_ref": "indicator--d2a4fd37-410a-419c-9bc9-d7bd57cd9566", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ee928c-af30-477d-aaeb-11d824b3daa1", "sighting_of_ref": "indicator--d2a4fd37-410a-419c-9bc9-d7bd57cd9566", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b164180-5a69-4a97-8835-0064f18d2b22", "sighting_of_ref": "indicator--48599767-dd4a-44b6-b47c-67c61339c0a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704c2d0d-8505-4e3e-8267-53a52b644934", "sighting_of_ref": "indicator--48599767-dd4a-44b6-b47c-67c61339c0a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13a3cf3-d05a-4a72-9fdd-5c57383ad69e", "sighting_of_ref": "indicator--5754a996-fbf5-4a1e-927e-6830d0160643", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15545ac-1968-4ed8-ad16-f07d50a1e5ac", "sighting_of_ref": "indicator--5754a996-fbf5-4a1e-927e-6830d0160643", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef505c4-9fdf-4508-8a15-f07dae383ca9", "sighting_of_ref": "indicator--cae966d4-2430-4811-b206-d333322d0908", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dac097e-419c-455f-b7d4-70524cff04e0", "sighting_of_ref": "indicator--cae966d4-2430-4811-b206-d333322d0908", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a286dcf-29db-4379-9bec-13902a43554e", "sighting_of_ref": "indicator--56080eca-475d-4454-b14a-615280620997", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacc6926-08c1-4dc0-9385-850b6a24e02c", "sighting_of_ref": "indicator--56080eca-475d-4454-b14a-615280620997", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81fe4c5-5006-43e4-a216-6229fcc02ba4", "sighting_of_ref": "indicator--99712048-ea49-487b-9b83-5aa649bd3c59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e287da77-cf73-445d-9668-e8791953f818", "sighting_of_ref": "indicator--99712048-ea49-487b-9b83-5aa649bd3c59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d107087-bd88-466f-856a-d3af3eb85e02", "sighting_of_ref": "indicator--74a25a8e-8d83-4a46-ad15-dcf95b3d9b85", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f75065-c3b4-4fae-a43e-edd4e6613140", "sighting_of_ref": "indicator--74a25a8e-8d83-4a46-ad15-dcf95b3d9b85", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6e94bb-444f-4867-b56a-a131824363a1", "sighting_of_ref": "indicator--d11fac90-8313-44cd-8c86-5f7cf416dafc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73eb3b3-63bc-490d-88a1-89fafa3101ad", "sighting_of_ref": "indicator--d11fac90-8313-44cd-8c86-5f7cf416dafc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24311fd-9eb7-4ec5-9869-e95213ab1bce", "sighting_of_ref": "indicator--c6b7014a-11ff-4f24-8d2f-f485a261bc8e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b2650e-079f-4154-9d62-a0c37e6bdb29", "sighting_of_ref": "indicator--c6b7014a-11ff-4f24-8d2f-f485a261bc8e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29df2420-5181-4e2b-918b-88df8db2309e", "sighting_of_ref": "indicator--cc3dbe97-7cea-4b58-841d-234c6223d02f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9086b0d-def5-47e9-8981-510d05c781ce", "sighting_of_ref": "indicator--cc3dbe97-7cea-4b58-841d-234c6223d02f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b79c47b-bd70-4a6d-804a-9e9c3925db81", "sighting_of_ref": "indicator--fdc52428-0c77-42d9-9fdd-0a333f3c56bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b59dfd-6ef7-4196-8ac1-bfc623fa0c7f", "sighting_of_ref": "indicator--fdc52428-0c77-42d9-9fdd-0a333f3c56bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857df7e3-cbba-4f6e-9310-18aa14e3d8b1", "sighting_of_ref": "indicator--cef71ef0-6c43-4b3b-8045-92c3a1564eba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3040a16-b619-4120-b0d2-000cf99aa02f", "sighting_of_ref": "indicator--cef71ef0-6c43-4b3b-8045-92c3a1564eba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86c553b-70b9-4f9d-a321-d5251b4e153e", "sighting_of_ref": "indicator--45a932e2-db2d-45e5-a564-352b75f61172", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3a61b1-3869-4e0b-bac4-1d6dfff45815", "sighting_of_ref": "indicator--45a932e2-db2d-45e5-a564-352b75f61172", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc9f7b9-bd8d-430b-b6b5-e0e8e8b57b17", "sighting_of_ref": "indicator--18054840-381f-47de-a35f-89e97716a76d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cb3b4a-4d84-48ab-90a6-c159a2c3df2b", "sighting_of_ref": "indicator--60e596d5-c382-4b78-aa91-6be5528179d5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb018dc-a204-4790-9ae3-cb8c17a2a72f", "sighting_of_ref": "indicator--9152199a-79b3-46c9-9c4e-72b33f080919", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa1bc5a-f4d4-4baa-aa51-0ca4a27deeae", "sighting_of_ref": "indicator--96b123c3-6e1a-46ac-80bf-5fb5d7973ea9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fff754f-55a9-46e7-80c9-6663260fd1ab", "sighting_of_ref": "indicator--80f94ccd-ec35-4f60-890c-857b194a5a1b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d1a451-e0e3-4414-befc-30554cd8a52a", "sighting_of_ref": "indicator--a97bebb7-a42e-4e6f-9e46-01ca5f9a30e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0755812-f768-4ba1-b641-88f63798f209", "sighting_of_ref": "indicator--34d9518d-f6b6-468c-882b-e2383d876cc8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b7d1f1-f0e2-4cae-8270-c03e70be5985", "sighting_of_ref": "indicator--fbb23105-ff7d-4b9b-aadd-22681b8752c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a67899-8489-46d2-9435-fffb37ed5480", "sighting_of_ref": "indicator--fbb23105-ff7d-4b9b-aadd-22681b8752c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41053e5f-fb90-4088-ac8a-7caafe86eb11", "sighting_of_ref": "indicator--a8da38a9-3af7-4877-a36f-a04112b066b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f22cae9-e4ec-406a-b9dd-cd0f75c2e751", "sighting_of_ref": "indicator--308be8da-0590-4f81-83a6-c5a18b799242", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2638a54f-f32f-4b21-9051-b7cce667795c", "sighting_of_ref": "indicator--90acfa08-9f2b-4e3a-8527-e8a973d74692", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27678c8-f5b2-4223-89ff-b1431a27a184", "sighting_of_ref": "indicator--90acfa08-9f2b-4e3a-8527-e8a973d74692", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b6a387-4bd9-486a-adc3-39087bf6b3c3", "sighting_of_ref": "indicator--90acfa08-9f2b-4e3a-8527-e8a973d74692", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674f6147-31a0-410f-84c2-a80f533d6da3", "sighting_of_ref": "indicator--fa392011-c9e7-4a15-9532-ac06e7ce2630", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609cddf3-8cab-47af-9c94-7503ed596adf", "sighting_of_ref": "indicator--7d7c099a-4665-4299-8ae2-e521e10584db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855f83d8-3653-4670-879e-a4d276f267c5", "sighting_of_ref": "indicator--7d7c099a-4665-4299-8ae2-e521e10584db", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a93f78-a40f-4471-8b74-c812437f699f", "sighting_of_ref": "indicator--135e4dcc-ccb4-4a1d-837c-aeaa6cdf0a90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826b9727-7747-4393-b791-730032ec90ae", "sighting_of_ref": "indicator--a654092f-cb28-4f1e-99a2-cd9c9236a069", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ba7f19-fe14-4f6c-8109-5b0da152fb51", "sighting_of_ref": "indicator--8d894659-13ea-4a6d-899b-b5cc5452aac3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333ccbde-aa2f-4585-87e9-01cde7b83be5", "sighting_of_ref": "indicator--ddafcc8e-cd6a-48fc-9838-05a72f77c690", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c8e07e-fdeb-4c9f-abcd-099e47d035ed", "sighting_of_ref": "indicator--713271f4-2220-4a31-ae2b-5c820d2829b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bad833b-04b5-4274-83a2-ccd0f2c45903", "sighting_of_ref": "indicator--713271f4-2220-4a31-ae2b-5c820d2829b3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c39f6d6-3d81-4b40-b7b9-a5c7c863989d", "sighting_of_ref": "indicator--cac62db5-ca95-4e68-ba03-06e2140ffa92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada9df01-dd50-4889-a8e2-9c5f164fa9fd", "sighting_of_ref": "indicator--d67d9a69-9686-4165-9ee8-aa362fb5b6ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc25d74-e82d-438d-a7b3-42a69aa66c96", "sighting_of_ref": "indicator--67832604-da1b-4304-86c4-b5e8a07973ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ed774c-e978-4b63-ae79-3dcd91d79094", "sighting_of_ref": "indicator--9fc4dc4a-c20c-4f4f-bfa1-0c4fc41a0fac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ad8300-9e8b-4915-af2a-9e9ebc434c42", "sighting_of_ref": "indicator--226fb765-67eb-4b1b-af54-28953599832a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985750fb-e33c-40ae-bb8f-58253c0fe89f", "sighting_of_ref": "indicator--67e5b4d1-679d-49f4-a242-15baaa463d6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fc5831-31a0-45c1-8cb1-05f891e9345a", "sighting_of_ref": "indicator--67e5b4d1-679d-49f4-a242-15baaa463d6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db25f924-6fe6-43ee-8aa1-d85128c9b292", "sighting_of_ref": "indicator--94e27027-9aff-4dc8-bd8f-f8818d3f0c14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10c6cf1-ba18-42fa-8608-9290ce2f2dc3", "sighting_of_ref": "indicator--40dba079-0274-4b25-aa31-91b910a3ab58", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fdd870-baa9-47cc-a210-961aa0559ef6", "sighting_of_ref": "indicator--85e12ef4-bac2-4483-9d8c-6b006397c930", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78833048-a48f-4396-8820-f102f6d69717", "sighting_of_ref": "indicator--e9f4ed89-d686-404a-a0ce-01af308e5355", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db9c977-bd57-4d7c-88b1-dbfaa62e90a7", "sighting_of_ref": "indicator--e9f4ed89-d686-404a-a0ce-01af308e5355", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7afb1a-6db4-4512-bf27-0ae91c8dd035", "sighting_of_ref": "indicator--10497657-c114-4b58-a403-d9af85f99635", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0bb194-ffea-444e-838c-9c4a6e758f11", "sighting_of_ref": "indicator--10497657-c114-4b58-a403-d9af85f99635", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270789ca-afbd-4855-a43c-316b8da7bc88", "sighting_of_ref": "indicator--c2480e6a-cc57-4463-87b8-4b3a11bae517", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e95a833-ecf4-479f-9349-6be4d5c74ea1", "sighting_of_ref": "indicator--c2480e6a-cc57-4463-87b8-4b3a11bae517", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363ca9c1-fb87-441d-a0d9-7c068bd6ba00", "sighting_of_ref": "indicator--650db530-5e55-4a2d-9978-b2439539774a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c7f411-2b4e-4fb3-bf21-150d04cbe402", "sighting_of_ref": "indicator--27174d51-9a54-494b-acf4-b355311a5973", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2915b973-347b-44ac-a077-23db93a63d65", "sighting_of_ref": "indicator--9a9abee8-0ec3-4ef8-8e3b-61f81da1921e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87114f3f-8d72-4305-98f9-b44ba9504a31", "sighting_of_ref": "indicator--071c4e2e-28ce-4434-8c06-672c7049a6cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e3f016-44d5-4e7a-a674-22028f49488c", "sighting_of_ref": "indicator--a3077358-9322-478e-8e35-cd2edb39abf0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1906d0c6-9a44-462b-864a-40aba79e7a2c", "sighting_of_ref": "indicator--519a5b8e-e20a-47c1-aeb2-622b78fcfcf0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdda0ce-2fb5-4808-bb64-83e64d995bfb", "sighting_of_ref": "indicator--32e84d8e-716c-405a-989e-8c690e1a25f0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0751b5dc-19c9-4ce4-af96-e44642938ff9", "sighting_of_ref": "indicator--32e84d8e-716c-405a-989e-8c690e1a25f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095f359f-4b61-4129-8ac0-bd17137c304b", "sighting_of_ref": "indicator--191bcc2d-faf7-488f-870d-735cd6d62124", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7347e59e-0400-41cc-9b1c-9bb8c1b6408e", "sighting_of_ref": "indicator--191bcc2d-faf7-488f-870d-735cd6d62124", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb87575-1a94-47cf-893a-68fd4cedd677", "sighting_of_ref": "indicator--fcf95eeb-5c62-4a40-8b52-dd893ddbdd57", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6843fb41-4ee8-4de0-b6d1-26fd56de797e", "sighting_of_ref": "indicator--80474be9-6c19-4b7a-802c-e6c94811f35a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32863750-e967-420f-be8e-b6b881608121", "sighting_of_ref": "indicator--80474be9-6c19-4b7a-802c-e6c94811f35a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf9e02f-5187-491d-811a-bd6310304d8f", "sighting_of_ref": "indicator--1d2c9e06-956b-4a76-b2b1-2f125ac0f89e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be9cc9e-ca8a-4e5a-abea-d122a8335a56", "sighting_of_ref": "indicator--15ffe8c7-16e1-4db7-8c8e-589cbe668777", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4435e94-0579-4897-bb01-fae08f3184d1", "sighting_of_ref": "indicator--bf667a68-3940-483d-b238-7d821b442ffb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295947a5-6b74-4008-acf0-d48440d7e5fd", "sighting_of_ref": "indicator--69cf3fc3-128e-4d94-b1c8-3a3dfef791e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e94ff2-5c06-4061-861d-cf87db42f7f1", "sighting_of_ref": "indicator--69cf3fc3-128e-4d94-b1c8-3a3dfef791e4", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee0c31e-46c1-4abb-a04e-0b6a9c1d7b04", "sighting_of_ref": "indicator--c19b28a6-5e59-49d7-8b8c-aa33c1ab3dae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3aa31b-ad7a-4a8a-9c27-0c480ba0c029", "sighting_of_ref": "indicator--c19b28a6-5e59-49d7-8b8c-aa33c1ab3dae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9456063-6e1e-4464-b61d-a743d47462e4", "sighting_of_ref": "indicator--4884facd-3493-45a4-aa88-d9ceb10e2625", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd63df87-0088-4e7f-b166-48779f396d65", "sighting_of_ref": "indicator--804cdee9-bdb3-4753-9d75-777d68e36d54", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e54fc1-28ee-4a6b-9fc6-15f1766a947e", "sighting_of_ref": "indicator--26e4d93f-6f78-4f63-8e2c-dac490fb1399", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7637130f-b158-419c-bd70-f370bcba24ce", "sighting_of_ref": "indicator--793da670-f262-4e92-9983-4ba028b5234b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa1a552-c9e2-46d9-959e-0d08794b897d", "sighting_of_ref": "indicator--3f544d7f-4f2d-4752-8b8f-3dbba4219f09", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2540a8b5-b3cb-4cd6-ac8e-0d9ca477ec30", "sighting_of_ref": "indicator--471e99ea-6b50-4e66-aec1-5e8b2a4ed2aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f039a666-e052-415c-a017-6ff9c8748550", "sighting_of_ref": "indicator--471e99ea-6b50-4e66-aec1-5e8b2a4ed2aa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef525168-397b-4a74-8c16-9606a0f805f5", "sighting_of_ref": "indicator--d9c5ff1b-d9b2-42f6-8c75-64f31986d8a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09deb75-1651-48f2-958a-cc0850c81476", "sighting_of_ref": "indicator--d9c5ff1b-d9b2-42f6-8c75-64f31986d8a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0196ccc3-e583-4b0a-a380-dab27bc248fe", "sighting_of_ref": "indicator--faebb0ee-765b-4f86-bcb9-bcb5d38fc7d2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66177b46-bb93-48d1-92d1-bcdb84a49da6", "sighting_of_ref": "indicator--0f3097d2-5a49-4ea4-bf8f-2f19e00cb18a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6228f955-b5b9-48f9-b1bc-9f66173fecee", "sighting_of_ref": "indicator--1d823043-4d4b-4333-8e2e-e3bc6eefe1e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8940e054-4e29-4f88-b997-f11c7ab61cd8", "sighting_of_ref": "indicator--1d823043-4d4b-4333-8e2e-e3bc6eefe1e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d027480-730d-483e-85c2-ffd0e52ff560", "sighting_of_ref": "indicator--56c45cc8-e22c-40c4-ba35-2b1386e47331", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24159beb-fae3-4b65-a80a-6c8dc6e157ad", "sighting_of_ref": "indicator--458067d7-8f8d-4582-b4c9-5fc016bedb77", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b104b76-2b16-4e8f-9c2b-5f74392bc8a0", "sighting_of_ref": "indicator--efbf6c0d-ac7c-4997-a60b-42d15bf3850c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1971808-2c08-4287-891a-da12d3df88ce", "sighting_of_ref": "indicator--8b18cabf-ebb0-4b98-bb2b-d0189173bfd1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62172cb6-b0f3-4a40-ab8e-54edf24b43ba", "sighting_of_ref": "indicator--624885f8-04ae-4e53-853d-854883eaec53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d26d1d-a3bc-44a4-9e74-e0d1b4d5933c", "sighting_of_ref": "indicator--75a1f292-fc47-42ed-a496-349a70ef0b84", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dd4216-0ec9-409c-9fb9-4905e404d383", "sighting_of_ref": "indicator--26380de1-f247-4b12-a9fc-0c41c435742d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fff5895-afe3-4348-9eec-15ad869ed9bd", "sighting_of_ref": "indicator--ed076b85-0b1c-4670-99d7-66518146fab1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a151d55-6ceb-4d09-a261-775441f42333", "sighting_of_ref": "indicator--7b398ff6-d58d-4ac9-90b9-11d6d5fdfa9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d1ba30-1aab-4e38-80cd-95edd2fe76ec", "sighting_of_ref": "indicator--40131604-f846-4fd8-9543-05c180b934b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9968b899-a444-440a-9e4c-d98574ff0f5c", "sighting_of_ref": "indicator--d7009d8c-52d4-4ead-84e7-6b0ce908cfeb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d07f8f-de47-41ce-9b0c-dce941e73b5c", "sighting_of_ref": "indicator--787d5274-d820-406a-9aed-a6b300cb1df5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac6523f-5b5b-4262-b420-11b0fdaebedd", "sighting_of_ref": "indicator--b600c97a-36e8-4a7b-925a-a7edcd81e85a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e763aa-bae0-4c66-ae91-6078f18e5254", "sighting_of_ref": "indicator--3b1ad3d9-3301-4214-8a4c-391e185e0419", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4b6304-2d18-418c-a270-a9ade634f4d6", "sighting_of_ref": "indicator--3b1ad3d9-3301-4214-8a4c-391e185e0419", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c5d2ef-d2dc-4e29-93bf-33750f71b384", "sighting_of_ref": "indicator--62d577fd-be39-40b4-9da9-59c3d3f48d90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5790fb-b927-4f2f-ae96-ea203825cfbf", "sighting_of_ref": "indicator--3618ee1e-8d8a-4bc6-af68-2dc8e99a07e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4c1535-b131-40ed-8d41-fab5209cfe8a", "sighting_of_ref": "indicator--4298e2a4-f25d-433f-bab3-92aa8dde3b9b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158a287b-49f9-47d7-81b1-dbdd45883b02", "sighting_of_ref": "indicator--bbdfbd02-9a1a-4b84-be5c-fd1a42506211", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4679f60-47eb-44fc-b3fc-31c7c3fa53ac", "sighting_of_ref": "indicator--c02588f0-cccf-4873-86b8-4d19821f734b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655ecdc9-c3d0-4de0-8395-22ef33d012b0", "sighting_of_ref": "indicator--c9f26ad8-d515-4e23-bdf1-8e0a09f9dbdc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f1db3f-ee8c-49e9-b453-d73f8d66fde5", "sighting_of_ref": "indicator--79dad501-da44-4c96-9491-a87440852f95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690bee62-1887-4b06-91db-8525bb8ed6ed", "sighting_of_ref": "indicator--f7371be1-c5ac-4df3-947e-b2668e40f7a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a8704a-dd11-4138-b149-4b9161ebeac9", "sighting_of_ref": "indicator--3e579547-fa11-4ad7-a3b9-807aff831584", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2077eebf-2a6f-401a-ae59-e46d14a10cd7", "sighting_of_ref": "indicator--1a30e832-be90-45b1-ad6f-cbeba92ec02f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b6de2e-0fe9-4df4-bbeb-4143397f56b9", "sighting_of_ref": "indicator--046eed86-3177-4b6a-978e-0dea5d28bbae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ad1aa1-ebd0-4e9d-bbf1-0fc1bf7d40ac", "sighting_of_ref": "indicator--6c115427-77c7-4d49-97a2-f2bd8752d81a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e0f3b0-8685-4f1d-8088-fa28c41f7f41", "sighting_of_ref": "indicator--619db3c1-a46a-4ab1-98c9-dbb1e1e5dd9f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c318204-4a90-40d5-a17a-a3a272d3174c", "sighting_of_ref": "indicator--ad290589-581d-4c0d-a0a4-cb9054ef7ac7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77d6820-6182-4dfb-ab7b-357db602b474", "sighting_of_ref": "indicator--2c0ec183-1846-4ccb-a752-6cc4b65379c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839cc71a-8184-485b-bee0-3475c87ff6ae", "sighting_of_ref": "indicator--2c0ec183-1846-4ccb-a752-6cc4b65379c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3ab6ea-a015-4b16-b4c6-46475724bd9e", "sighting_of_ref": "indicator--5352ad6e-6cf7-4809-bd34-f5f3cdd25413", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0964bb35-04c6-4671-b4a1-2b0f54b068c4", "sighting_of_ref": "indicator--a3a69c46-1d6f-4284-b551-1c9af05188e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe0b6f6-7c48-45ac-9255-25b25ad127d3", "sighting_of_ref": "indicator--a3a69c46-1d6f-4284-b551-1c9af05188e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8c80f4-2709-4a17-a155-0723fa387012", "sighting_of_ref": "indicator--2b91af2c-9451-437e-b48c-cc07d62fe842", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf9385f-8988-4130-a02c-83486fed184a", "sighting_of_ref": "indicator--54365082-158b-4935-8014-b0f8b1bb6446", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f6cf44-f7a9-4814-b7f4-75fbc21b8d6b", "sighting_of_ref": "indicator--4a05571a-aeff-48f5-b819-634255f27438", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b84aa45-371f-4566-a957-b50d3af2e598", "sighting_of_ref": "indicator--977763e6-2135-463d-8fc2-db9e142dbf98", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa07900b-f9d0-4829-9b91-9ff1ad8ff34e", "sighting_of_ref": "indicator--28fd80dd-63fa-41f2-aaf4-cc3aa38e208b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0ecb08-73f0-4609-b9c9-5b8518dafa14", "sighting_of_ref": "indicator--28fd80dd-63fa-41f2-aaf4-cc3aa38e208b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c1c36f-7987-4450-b664-c167ebea3d47", "sighting_of_ref": "indicator--5c31e57f-984a-4bef-950b-66d8657f6b88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f65b24-4281-464e-a24c-338eaf23711e", "sighting_of_ref": "indicator--acf60c15-ec75-4f4d-8432-bb2e3689faa9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448c15f2-60fd-4643-8b38-32e0f755089e", "sighting_of_ref": "indicator--a79a5ef0-7298-4a4f-8978-8e6298307601", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e91e46d-8552-4f46-9d84-51ffadbad42d", "sighting_of_ref": "indicator--35513612-c34a-459d-98e1-2e008e1b4430", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e7f6e3-b845-44da-92d2-b3735cb27696", "sighting_of_ref": "indicator--35513612-c34a-459d-98e1-2e008e1b4430", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0380e3f-9d9f-43b6-a375-fb51f6fc76f4", "sighting_of_ref": "indicator--2e8772f2-def4-4c3c-8a31-480c325c73d2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919fabb9-6508-450e-bfe8-afd0b5853379", "sighting_of_ref": "indicator--a78ec38a-1b4b-4b3c-9d35-aaba21ab638d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa96a7e-b0d6-4f4a-896f-de48e33e6c15", "sighting_of_ref": "indicator--d02b9a14-a006-49e4-83fe-ed463bea6807", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8e41c6-b5b1-48c3-82a0-efc8fe3713b1", "sighting_of_ref": "indicator--0fc22fc9-7c4c-46f5-b4b6-a6ca721879cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ab9a7c-b7e4-4465-a294-038bb2089f70", "sighting_of_ref": "indicator--509312dd-3c39-4b73-8750-192153652dae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b298fa3-5909-4a3b-9156-585fada1230e", "sighting_of_ref": "indicator--509312dd-3c39-4b73-8750-192153652dae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd75e070-9836-4b28-94e2-64911204e6f5", "sighting_of_ref": "indicator--d8ce7d80-b37b-41c5-a07a-97cc60ec2de3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4122a0-eada-4f4e-bb92-b7e8d7bc488a", "sighting_of_ref": "indicator--c528eab6-dac7-47fc-b888-102bb1afdd5e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b3ac41-4455-4dae-b4c2-633f63ff546c", "sighting_of_ref": "indicator--c528eab6-dac7-47fc-b888-102bb1afdd5e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478a5b7c-6868-4a4b-af32-a9c6a4beb03d", "sighting_of_ref": "indicator--7e8ea2f6-b79e-4b07-9270-1cdcd6ab4746", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b58a2e0-1d09-4d65-9c94-a8eb2e0ceafc", "sighting_of_ref": "indicator--b364a613-4cee-49f8-bafe-708851653157", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d92f054-1cfa-4929-839a-f87af2871e60", "sighting_of_ref": "indicator--e0d9358f-a1e9-433a-935b-7813a039331b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272aa11d-331f-424d-925c-39e085c3c2d6", "sighting_of_ref": "indicator--4de3bbe4-b1cb-4666-8763-ed9833674651", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7ce5ef-a740-4228-8c97-ed76effeaf60", "sighting_of_ref": "indicator--4de3bbe4-b1cb-4666-8763-ed9833674651", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb581b4-0e5b-4004-b90e-a336fd7c985f", "sighting_of_ref": "indicator--1b8c2d35-4953-4b1f-8c54-49fc168eac84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1869d127-915f-40da-8d89-beae832f62cb", "sighting_of_ref": "indicator--4cdcbfd1-e49e-4e9d-87e6-549703e5d381", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6014a6cf-6d6d-4cc5-99eb-e671dfdad9b7", "sighting_of_ref": "indicator--2736328a-fd46-4098-812a-c2dd97aff577", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c2f593-4684-49fc-be89-846e439db427", "sighting_of_ref": "indicator--cf96c244-bf34-4a64-a1d4-97f53e7e45eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286e0ba2-bc39-43a3-9104-5c676b19145c", "sighting_of_ref": "indicator--1dca45ce-5b92-4c67-9678-b338995331f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2440b6-4631-4c06-8975-f2a5ed075e75", "sighting_of_ref": "indicator--289364d8-94f3-40d2-9e5d-de4569fed0ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7531c313-b050-4981-b71f-caeb80b9d733", "sighting_of_ref": "indicator--6495e3a5-f0e4-40b4-b576-86edc07989eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3811a4e4-8598-4c38-a66a-197a2be13d2a", "sighting_of_ref": "indicator--801cc6c4-8ba2-4867-be40-7795c70c2a2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cca6061-70ba-4824-97ee-3228229191c9", "sighting_of_ref": "indicator--801cc6c4-8ba2-4867-be40-7795c70c2a2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3763cd8a-d692-4316-bdf8-7e9d6f535504", "sighting_of_ref": "indicator--8ae94306-635b-4d4a-9cbe-061d226f4571", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0453945-946e-402e-8576-42e889de4abd", "sighting_of_ref": "indicator--8ae94306-635b-4d4a-9cbe-061d226f4571", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2e69b5-8825-4638-867e-0777f1c7762e", "sighting_of_ref": "indicator--821ba972-1b1f-4cb6-b9d7-aad9ada99acb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccfb0dc-6e07-42ab-b6c2-bcdda98b5c05", "sighting_of_ref": "indicator--d1c8c2a9-d4ba-4e01-b722-95fe5fa010ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4c6032-1cf8-427c-8e0f-7d14915dace9", "sighting_of_ref": "indicator--369672c9-3b7e-4e2c-b220-a85d65ce0733", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc470cb-cd85-4fca-b2de-7ed1b87b9e63", "sighting_of_ref": "indicator--019684b3-beb1-4760-9edf-eff29b651fd7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c1c68f-6f2f-4bcd-a2d1-5b88407874c4", "sighting_of_ref": "indicator--ce7ccad1-4ab5-4bbd-ab87-5b231f30ea85", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee3eb26-3e75-4ccd-801f-23bf75fb672a", "sighting_of_ref": "indicator--09ede866-af2a-43c6-91ee-4807b9a4d554", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89af53a1-9058-4dc6-9561-6a7ff5837d20", "sighting_of_ref": "indicator--3b90c655-dc85-41c1-9b8a-8940faa6bd1e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59164eb0-1d79-40a2-b2d1-11f3974bb404", "sighting_of_ref": "indicator--f120108c-650e-404f-a11f-9e7e0336194e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4905e343-cf71-419d-a259-ba891c159861", "sighting_of_ref": "indicator--bf89a489-8821-41dd-91cf-ebce9e850f57", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bd5800-84e0-4649-aa68-b804da0e7389", "sighting_of_ref": "indicator--b45e46a5-5399-403e-84a7-ed2c6428708d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93f8f44-328b-4633-a7f0-bcbb5c50ecc6", "sighting_of_ref": "indicator--18ee20b1-0728-4f74-a6db-fa8db0e177ec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e313d0-02f8-40cf-8341-67a17808bb51", "sighting_of_ref": "indicator--366726ac-542c-4406-a306-3b4acb0b6f3e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b15afd-27ac-4aeb-8fdc-dfdd8d9ff644", "sighting_of_ref": "indicator--db0f4f05-79b6-4580-bd6b-3b04fb3cd7da", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94b6672-d130-4924-80b8-7c8b065cf900", "sighting_of_ref": "indicator--9b51c9e6-9d43-450d-9b58-ad779d3d6cf0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c018a1d7-92f5-46e7-9a31-abd616e71157", "sighting_of_ref": "indicator--69d3d34a-a6c1-492c-8428-a6273ce4ba28", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f2719f-b498-450b-a738-f2d079ce80b7", "sighting_of_ref": "indicator--91508e19-c7b1-4c1d-83b0-6387dc3e5c58", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f1f511-51e1-42dc-82af-c784a19ddcb3", "sighting_of_ref": "indicator--52620690-c8e8-49b9-a49a-0d2f4f33a63b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b57030a-8364-4bba-8531-79c73562f015", "sighting_of_ref": "indicator--19a73531-0f5e-4a33-900b-6cde8fd3e98a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405c323b-244d-469f-872f-fbfcf8c426a4", "sighting_of_ref": "indicator--66c1157f-6b59-4b43-856e-aafb188ae490", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dee0b8d-da50-459c-8a6f-6e8a35ce0ae6", "sighting_of_ref": "indicator--66c1157f-6b59-4b43-856e-aafb188ae490", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784c9d7b-f89d-487a-a6af-1a17e04ad0d2", "sighting_of_ref": "indicator--fa1844ec-f112-49bf-b7aa-b5509e1c5f72", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b04bdb-0f0e-4e6f-81a1-8b932e051e05", "sighting_of_ref": "indicator--18cb3c83-f0b2-478d-8798-a3421c7bb094", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18643caa-6e5b-4730-9051-8312fdd05843", "sighting_of_ref": "indicator--4782f3e1-45d7-471c-9f87-665257dcc8c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070d7805-c64c-4df1-a765-ae6599bb323b", "sighting_of_ref": "indicator--c9435bd1-9c5e-485f-b257-63baa886e7e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5868d996-2523-4e29-bbc7-55a67d00593b", "sighting_of_ref": "indicator--c9435bd1-9c5e-485f-b257-63baa886e7e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ae30e-62f9-4127-a0ec-4ae14f3b12a7", "sighting_of_ref": "indicator--302a2e8f-1079-4497-8a6b-4ff0313858df", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef92c4b8-d5f9-4d32-ae23-f0d5f9f92129", "sighting_of_ref": "indicator--b122554d-9303-4975-a464-c4a667193082", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cfed10-858c-4192-8b91-81ca071f8740", "sighting_of_ref": "indicator--af31a6ee-a8d1-48e6-a096-f0947ac72c22", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66eda808-0702-4f46-a11d-d0777cf0df7f", "sighting_of_ref": "indicator--2406776d-9c28-4bfc-9780-9a97291097ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7b6490-7f76-4279-8434-47594f21cc6d", "sighting_of_ref": "indicator--2406776d-9c28-4bfc-9780-9a97291097ee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d102715-17fb-424d-98c2-e0fd1b5db1af", "sighting_of_ref": "indicator--41c7e6da-d6d6-41c5-9970-593fddf6947a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d785181-9a27-41f2-938d-003969102345", "sighting_of_ref": "indicator--b5e4aded-7a34-4827-bc9d-b5f58f522c2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396e0e6a-c666-401d-89b4-3718ba5fe703", "sighting_of_ref": "indicator--8bcb851c-b1a7-4c3f-bb38-4f6639cfb8c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dc2b8a-faf5-4868-964c-044bdbad8a7e", "sighting_of_ref": "indicator--2898075e-7b26-442b-ae39-bd0063474bff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfe4187-36b9-4fb4-9dfc-5b34b65f0113", "sighting_of_ref": "indicator--a05ec194-4fb1-43ae-9d25-8b784c1100a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16431e06-b71f-462d-8f20-5994cf74ca8c", "sighting_of_ref": "indicator--8b55ee6c-496a-4e9a-9449-c55bf7ebb68b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15f735a-4418-4deb-8c60-7617400b4a95", "sighting_of_ref": "indicator--ac7a0621-ed16-42da-b964-f13b89e70495", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582c0657-9dd8-46dd-9c23-d188aa526aa4", "sighting_of_ref": "indicator--c35d5d47-b5eb-48ef-9ebe-5d5616c13f12", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8433b27-b38a-4553-a467-0889172b46a1", "sighting_of_ref": "indicator--0f69b691-0610-4a19-a580-79d49a17ed9a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36f5d7d-3216-4031-acdf-fddc737108b2", "sighting_of_ref": "indicator--e8becc1a-6bce-4991-9df9-0f58925bf5f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3155ee-d795-45ce-b580-56d44a9560d3", "sighting_of_ref": "indicator--8d7e0319-0c49-41a3-982e-da173ea3e28c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c06516-207e-4e03-8015-779addb59028", "sighting_of_ref": "indicator--aaf6a96d-90fe-49b9-a19e-558d797a0dbb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36c8abd-3eb6-48c5-8a5c-7ccb47459cd1", "sighting_of_ref": "indicator--f4a394c7-9b08-4273-9c82-a333313d67c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270e5a6d-bb85-42b0-a19e-54a0e3d397fc", "sighting_of_ref": "indicator--7a4a281e-0462-41e7-bd58-e1d05f8f1d6a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be531fa-9bb0-4c05-a73d-d6892ac4af7a", "sighting_of_ref": "indicator--759a166a-01aa-4986-8b65-2b70c625ab03", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e2d59b-db78-4496-a084-c97a1a110a8d", "sighting_of_ref": "indicator--8c726bcf-80be-4758-99aa-8a93471af141", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff3ac6f-e818-419c-8550-a1dd9091160e", "sighting_of_ref": "indicator--c6e169cf-49e4-42f8-b0dc-8c93a3957e84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d117cb6-0642-483a-8654-7558570dc1c3", "sighting_of_ref": "indicator--44518d94-f235-4a65-9316-22fd33e1f743", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9774b7a6-0a93-46c3-a504-8c6e387d59a3", "sighting_of_ref": "indicator--cffe1a0f-a7cf-43e8-9090-cf4b58f460b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a7a8a7-0a70-437a-a425-4ad94708c6a9", "sighting_of_ref": "indicator--142aca48-fe74-4429-b7bc-aaaef749978a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ade2ba-50d1-4c1e-9837-90f257e5b4fc", "sighting_of_ref": "indicator--79ae3b0c-0980-4218-a1ac-79b3b15af4bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c318233-396b-4fba-9ff3-b063e00ad2cd", "sighting_of_ref": "indicator--e9e816c3-09d7-4c83-875d-2f7c3bc32081", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e2073e-9f8a-434f-863f-1bc90d768e90", "sighting_of_ref": "indicator--9ce69341-9baf-493c-bc74-f8d180c765ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db096fdc-5250-417e-b139-d7bc0d23b6c0", "sighting_of_ref": "indicator--47766a71-1543-4da6-9329-948864b179c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880d3af9-ccd2-4d92-8e27-0506df5514e6", "sighting_of_ref": "indicator--b3426337-461f-4e4c-8384-b0eb5348a38c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fc164d-a639-4853-a82e-a822d9714d77", "sighting_of_ref": "indicator--c2cc9460-cf67-4c80-b83c-d6e983356cbb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ca6e38-a860-4b85-9d65-8cf729d4cb90", "sighting_of_ref": "indicator--40edba59-1bf9-4087-922c-094d5c216d32", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5f0fbd-eece-4b8b-abfc-185d2996bcdc", "sighting_of_ref": "indicator--4a330db1-121e-40f5-b87a-1757203739bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f51154-bfc9-43a1-a34d-913e7a9d3537", "sighting_of_ref": "indicator--f55e27fc-453c-4fe7-b240-b08ce64958fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0addd52b-b88f-4903-a0ee-9951068c249b", "sighting_of_ref": "indicator--a4e73861-e32e-45be-83b5-ce0d5e44040e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ba4deb-47f8-475f-8e60-49d587253339", "sighting_of_ref": "indicator--6c69befa-b3bb-4b8c-8038-3cb868fb16ea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ac803b-70c6-41b1-ac55-7df0335cacda", "sighting_of_ref": "indicator--5ec00b15-3541-484e-8128-4f06caf8ff1c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c228ee1-bdd6-4dc9-998f-851aa633d25a", "sighting_of_ref": "indicator--ce2e7f8a-79d8-4d7a-921a-e33258ef32a3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab807511-0281-4fb9-bd47-9ddddd8269a4", "sighting_of_ref": "indicator--ce2e7f8a-79d8-4d7a-921a-e33258ef32a3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe0d40a-866e-45d1-95d5-83229d50112d", "sighting_of_ref": "indicator--8621d007-4465-44b0-b073-17133f8b2144", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a9f18-ac87-41df-8a02-ac86f612ee89", "sighting_of_ref": "indicator--32236f2d-8faa-404f-9cc4-5f222334f79d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4950e4d8-9d27-4843-9195-cdbc1618a0c6", "sighting_of_ref": "indicator--98f4b950-bebb-4984-95e0-1248b413693a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54500871-03c1-451c-8f73-d796bd9d54ae", "sighting_of_ref": "indicator--14bb06c5-dde3-4498-a891-c43995453f73", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3107ddb9-b018-4eb3-9f2a-f7612b18e9b1", "sighting_of_ref": "indicator--de8ccbc3-3ca6-4f3b-be56-b565fa3845ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976677bd-35e7-40d4-b529-eb79f234cbbe", "sighting_of_ref": "indicator--edda10ef-48db-441e-9117-6cc6856f1fb2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f7d403-3fce-4255-a5d1-08c85074a6b2", "sighting_of_ref": "indicator--1670af71-8839-41a9-9005-5fd668d2cd34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bb1e43-3aa9-43fc-b15b-a5e11e2540f1", "sighting_of_ref": "indicator--03d2441c-f976-4434-ba05-b13973ae6062", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b350ad26-c7b2-4ac5-bcd6-a1dc5dc1a44b", "sighting_of_ref": "indicator--55d20795-117c-4423-907b-a0b6841da2c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a9f350-2cce-4fec-aecc-2fc4b92353c0", "sighting_of_ref": "indicator--c32f8999-d369-4020-b3d7-de4bd89beedf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59288191-13a6-4ec5-8f14-af16e2b3191d", "sighting_of_ref": "indicator--95e77e6b-41cb-4eb2-8256-35b6b43d43b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0090697a-414f-4096-af2c-e2aa13d24a66", "sighting_of_ref": "indicator--95e77e6b-41cb-4eb2-8256-35b6b43d43b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286a0359-2775-4c16-afb5-0271bdbc89b1", "sighting_of_ref": "indicator--e029a98b-34f5-439a-a788-62118fc46ffe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056e2fee-7c9c-460a-b5a7-83133a416914", "sighting_of_ref": "indicator--6dc3c501-e2fe-4224-9b22-0fbc05de3180", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1582d57e-24e2-47c6-9555-bd3b3618e1f9", "sighting_of_ref": "indicator--27189ba6-6623-4fad-8a8c-ae6316fc6e20", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af5c902-c1e8-47f4-962a-b82f4543d007", "sighting_of_ref": "indicator--4eb05722-f5db-4109-a1f4-8198cd77c171", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1514d6d7-fd62-4269-8559-3dc2303cf2f9", "sighting_of_ref": "indicator--18cd3ced-7182-418e-a006-0fbe73bab13c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8347a95-3690-4905-b105-3a1b36be9959", "sighting_of_ref": "indicator--c26c334a-26f6-4bce-b7db-47dd509d358d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1981f8d1-3034-4b6d-b2d9-ac40e312d0e2", "sighting_of_ref": "indicator--6a0d5814-a321-41cd-b2e1-568e6a835f18", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae04326-dea1-42fe-b988-8ca7ddce0714", "sighting_of_ref": "indicator--c3d79072-f6a8-415e-b841-0043ce624a0c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7d873c-07d6-4b9b-8caa-a99dd484e0ff", "sighting_of_ref": "indicator--38888698-93c4-438c-a723-98734273324e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e6b904-6a9d-4da3-936a-c0dde0e8ecb7", "sighting_of_ref": "indicator--55aa96ce-bd46-4b51-b54b-10630ff1b87e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c7f992-e27a-45d6-b5d2-46b821cf6fdf", "sighting_of_ref": "indicator--a86cacbd-c7f6-4fa6-8cd7-fecd25e9a472", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe74c43-7e88-4876-b5e1-723f4958ed2b", "sighting_of_ref": "indicator--a542333c-6f72-4e8e-bfd4-591037d1941c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f68789-c6cf-47b3-bb41-e05bae28ef2e", "sighting_of_ref": "indicator--7bcd8249-1b73-4918-b0f1-9d8de333da96", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4764ba40-2846-4e46-8f42-806e9ceb513c", "sighting_of_ref": "indicator--4ee5b0d8-684d-4bae-9094-1514dbbc5256", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dda2bab-735e-46f6-8525-558582928c98", "sighting_of_ref": "indicator--50e5c1db-6ae4-4178-ad34-2ab37e6fdc8f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c62ca4a-868d-4ca7-bc5f-97498aae7e4b", "sighting_of_ref": "indicator--9b813ef5-5a62-4d24-be55-6c2b55600144", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42efa1f-740f-446d-97f2-2f84c0adfca2", "sighting_of_ref": "indicator--a7dc80e9-98b1-488b-a42b-7265609bb512", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e97d12f-bfe7-42bf-bd81-35035c2e1ce6", "sighting_of_ref": "indicator--b2594d9a-12eb-4905-b2ec-604558657cda", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b925923-2efe-4617-8734-76dc40c85933", "sighting_of_ref": "indicator--0116f7fe-3443-46e0-936f-4bc95247ff0a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89af9429-6feb-4bf6-a3da-72e9b0748674", "sighting_of_ref": "indicator--c92379a5-804c-4809-b36d-ca603d750a7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9638549-6fb7-4a27-a460-3915f3d514b8", "sighting_of_ref": "indicator--92cc99b1-4259-4e12-ad3b-9ad9e76b8763", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc603f65-184a-4434-b23c-370d27529c77", "sighting_of_ref": "indicator--92cc99b1-4259-4e12-ad3b-9ad9e76b8763", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0755109-6c10-451f-910c-ed21229e2e24", "sighting_of_ref": "indicator--5d77b814-6ae1-48cc-a2a2-7c15e362226e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139c7cbd-8218-47c5-985d-aafb4147a263", "sighting_of_ref": "indicator--8d6ac7f6-69bd-4642-b86b-0d55d19979df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a67776-2520-473c-b902-97f7a55c8cb3", "sighting_of_ref": "indicator--da3d471b-22e3-4d6a-94dc-b4b363f975b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0440174e-077b-4dd1-98aa-4bc5a5fcfb64", "sighting_of_ref": "indicator--f7128aea-5119-49bb-a2eb-11cbe8431c63", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056e3bc0-1b6e-4efa-876d-8e1f4fbd064b", "sighting_of_ref": "indicator--49e088c2-1038-4137-9c84-7d5d9092d85e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9c22fd-4370-49c2-ae26-58d479dcc0c3", "sighting_of_ref": "indicator--07f5ca4a-fd8e-46ea-9bd1-3d851c02058a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fc2a3c-9fe8-41e0-9478-38367b0dbe68", "sighting_of_ref": "indicator--51d650a6-353a-45b6-947b-46b2c814fac4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a724a527-caff-475b-b861-4ca98bc51066", "sighting_of_ref": "indicator--452d4731-cddb-4da7-a5a6-ba3303975a2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831bfca9-2fe0-4082-bde3-b86c53d16bce", "sighting_of_ref": "indicator--2a1b2f57-5724-4bf7-afd6-260fc37289d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e2163b-950e-49d1-84e8-0439a39a4657", "sighting_of_ref": "indicator--5ba1f11f-b3ae-41e7-a149-976b56662ee8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844b9310-9890-4dc5-a78c-6441d85b69bf", "sighting_of_ref": "indicator--c76fb9c5-9179-4597-b124-793d1fa01ace", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db34dde-b886-4e0c-9180-4d5aad8f7184", "sighting_of_ref": "indicator--4584b986-a88a-4ef5-9a36-88783fefc2df", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c243e8-f211-45bf-a7ad-36a7ac9578f0", "sighting_of_ref": "indicator--65abb4ce-0f45-410b-82c1-c0071d3188b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68b6675-bed6-4642-bf33-c9b44eade5e6", "sighting_of_ref": "indicator--06f00710-930c-4265-a6fb-2bad04ac2293", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d853a6-93af-40b3-9a63-35c632671b09", "sighting_of_ref": "indicator--3b1c90b8-d005-4eec-8291-99c1fa88997a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65223fc-76fc-4571-8ca1-a9fb18ccf5a8", "sighting_of_ref": "indicator--b8a61198-9688-4384-8651-d896a3756d02", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728e0013-f870-4419-b0bb-3e302a10bc5a", "sighting_of_ref": "indicator--736eb1e7-6d60-48bb-b181-f2f1b492e689", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c89eab6-3ce9-49b5-89fd-b9cd5deca6f6", "sighting_of_ref": "indicator--bf68c678-3745-48c0-94cf-017acf687e98", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ff22c5-8bf0-484d-9f3d-4980aec0c13d", "sighting_of_ref": "indicator--f2dab766-b2af-4c67-b2f7-83b6fb51044b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6148e9-b463-4643-bf04-701a0c31de11", "sighting_of_ref": "indicator--d49b0ab2-8e28-4f5f-8e2f-725798a39774", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d274dc-35ae-4e78-aaf1-c96a744b7404", "sighting_of_ref": "indicator--849193d3-03f2-4db8-a426-5b5f50c5381e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d769265-3312-4071-b2fa-e164b75cdaf5", "sighting_of_ref": "indicator--3f45da3d-5511-4797-bcab-dbcb02911d86", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52896254-c7f2-4b0b-a334-efda7babfb09", "sighting_of_ref": "indicator--5251093f-939b-44a7-9bc5-312dad4c5795", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b57c1b-cc9d-42e9-b4f8-91744ce1a6f8", "sighting_of_ref": "indicator--5251093f-939b-44a7-9bc5-312dad4c5795", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0b7c79-01c1-4736-a8ea-3ee98fee599b", "sighting_of_ref": "indicator--aad47172-6048-41d7-a791-fa3afec17b9a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63dbade-8467-4f14-9789-ee85eb937c1b", "sighting_of_ref": "indicator--aad47172-6048-41d7-a791-fa3afec17b9a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9db7a8-02c1-47eb-8b00-c6bd5ef99576", "sighting_of_ref": "indicator--a9eb76de-ab56-4ba8-a8b6-5e527a3a3de1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dadf44-7be1-444c-8fb7-e03587a5878d", "sighting_of_ref": "indicator--e4df9a36-381c-4771-a672-1ffe54709d1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edfcaad-d894-490a-8510-fffdc1f623ea", "sighting_of_ref": "indicator--e4df9a36-381c-4771-a672-1ffe54709d1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d585e7-b91c-41f2-8400-7b330d3821e4", "sighting_of_ref": "indicator--a1f05ebd-b0cd-463f-b4aa-6c03c8098abf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80d5d09-2692-43cc-baf3-f8cf84e205fb", "sighting_of_ref": "indicator--6e1c5edc-5c23-4748-aa70-e2ef2cd2e13e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9518b747-4c7e-443d-ae03-a0fdacfc9213", "sighting_of_ref": "indicator--27bcd398-327e-4b63-b7db-8290100d6971", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a251996-89be-4dea-9ae6-cb36fe8d44b9", "sighting_of_ref": "indicator--6edd8043-b572-4567-8215-0ee02218fd8f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1557ba-a57a-4de2-8746-3e1e6c95b48b", "sighting_of_ref": "indicator--f99240a5-04cb-4e2d-ba8d-5654889e3852", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00dc785-fa4e-43c9-b3af-0420dd74b866", "sighting_of_ref": "indicator--f99240a5-04cb-4e2d-ba8d-5654889e3852", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519a52c7-18a3-4f0e-8dea-1dfe12b200cb", "sighting_of_ref": "indicator--ba07940d-d6e7-40ae-81d5-2035a306625b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2caf6f-22fa-4c2f-aaa0-aff28575ac62", "sighting_of_ref": "indicator--dab7b779-76b0-4424-b17f-939b7b204284", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c4224c-e50b-4840-81e0-ffea77a6991b", "sighting_of_ref": "indicator--0f9796bc-f3ad-4eda-86ee-f95dd7cfef2a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90c5d21-c201-4967-98e7-f85385eea52e", "sighting_of_ref": "indicator--0f9796bc-f3ad-4eda-86ee-f95dd7cfef2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22fed44-ead3-4213-a7c4-fd0430cc86c3", "sighting_of_ref": "indicator--6eb14808-3f1f-4b59-8188-3b61fc9823cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9a0e82-8728-4b7f-873e-4e736113b669", "sighting_of_ref": "indicator--a4a685ea-ceb8-403c-a0ff-2ad203971fc8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed1c34d-7516-4573-b111-c7c4ab16d7de", "sighting_of_ref": "indicator--a4464e1f-bf03-4289-b755-11689794478f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81deef9-230d-4fd3-a913-f821100506a3", "sighting_of_ref": "indicator--092a3235-f24e-4a0b-ba72-d58285890498", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbb61ca-06be-4c6c-8e33-d62a47bfee73", "sighting_of_ref": "indicator--a86a40d0-c628-497d-b877-94c5521ddac0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef736da5-103a-4824-9edd-6c863e16a49f", "sighting_of_ref": "indicator--a86a40d0-c628-497d-b877-94c5521ddac0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63faf3d3-0e72-4cd9-94d9-74190db83f3f", "sighting_of_ref": "indicator--a86a40d0-c628-497d-b877-94c5521ddac0", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3479f3-0ccd-49e6-83c9-e46f91b08263", "sighting_of_ref": "indicator--4984ec3b-9b7f-4704-8bfa-b8e74d1e4925", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd069633-4ef5-45ae-93c3-c61066196c41", "sighting_of_ref": "indicator--1bdbed2b-871c-486d-af6c-08087d71298f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1b9703-8156-4868-a943-2c0aca9e313f", "sighting_of_ref": "indicator--1bdbed2b-871c-486d-af6c-08087d71298f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f14becb-28f9-4d68-9ef5-3c06afcc3f07", "sighting_of_ref": "indicator--1bdbed2b-871c-486d-af6c-08087d71298f", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44feb55a-a20d-46e3-8763-ecc1ecc12165", "sighting_of_ref": "indicator--69df78cc-8abd-486e-a44f-1abe8dee4152", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7360b59-5df0-4292-baee-72457026cc7d", "sighting_of_ref": "indicator--0cc6ffc6-9d7d-46a5-94ce-a5356abf984d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd82b732-1b13-49d6-a55e-cffb2df8404d", "sighting_of_ref": "indicator--523fd8ca-8512-4610-a518-93cd0dc96050", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8c42f3-46ed-4988-afcc-34753bc53e06", "sighting_of_ref": "indicator--f4cddb2d-b6b5-41ba-a70a-0b937f5ba743", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d220c7e8-801e-4424-a583-572cdf66c183", "sighting_of_ref": "indicator--c1cfee90-d3ef-4a7a-bd21-c504b53d0af8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f33f89-7303-47a8-98fb-6e3648f5d5bd", "sighting_of_ref": "indicator--c2c21535-226b-46fe-96af-37ace667b289", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e316f5a-7b7e-467c-84d1-7b9a8b280cab", "sighting_of_ref": "indicator--c2c21535-226b-46fe-96af-37ace667b289", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8124ff-dd32-494b-a2f4-928f0eb8325c", "sighting_of_ref": "indicator--4b652b3b-34fd-439a-aac8-e292f804de6f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2e9522-ab34-4c55-a9f6-83801d2ba9e5", "sighting_of_ref": "indicator--270ad08b-5044-456a-9047-02b3aadff1c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90e0069-9e30-40af-868b-1f70859f8eca", "sighting_of_ref": "indicator--921e79dd-969d-4985-9955-eea913ba3731", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6955c6d-2a01-4bd5-b250-baa922963915", "sighting_of_ref": "indicator--f94711dd-73d9-4c5c-b054-fb9bc48fc7d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1836fa9d-cd0a-4b96-997e-081b2c2320b0", "sighting_of_ref": "indicator--c71b7a29-0319-40d3-b7f9-ef46ccd64bfe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1c23ee-ce29-4412-babd-e7ad2934ed80", "sighting_of_ref": "indicator--6c0de28a-9481-4195-8171-943c2a1024e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e048e96c-7f3e-433f-97f9-b0ca4e67c5cb", "sighting_of_ref": "indicator--226d08ed-4d5b-4eb2-937c-1b74b97c22a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503951e2-94a9-4b7d-9f7c-35e9da4b31a6", "sighting_of_ref": "indicator--15fbb836-dbeb-494c-bb00-10e0489c2941", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ea0c28-4485-4a34-9d71-fbb5f83c2c63", "sighting_of_ref": "indicator--cab7e2f1-8c6f-4b98-b06f-6c20df75427e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5817eeb3-6d5b-4ef7-93c6-6b57412bbfad", "sighting_of_ref": "indicator--cab7e2f1-8c6f-4b98-b06f-6c20df75427e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1729637-05f2-4826-8b31-5a68423151a1", "sighting_of_ref": "indicator--34caf326-43d1-4715-9f78-7debdfcb822c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ccfc79-5ed4-4da1-92d9-10a26498cf0e", "sighting_of_ref": "indicator--d8e2f8c7-c700-44f9-9bea-719579d6be77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a361750-fa87-4428-9dfd-a396e916c42b", "sighting_of_ref": "indicator--e4a3310f-9df9-41bf-80e4-730bc9060077", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8643b3c-6ecb-40e4-a171-717d456f18f4", "sighting_of_ref": "indicator--2c662149-80ca-4962-8c31-a0a398ab9b5e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7577a7e-0cf6-4ca3-9431-0dfd376dec72", "sighting_of_ref": "indicator--34b5ceba-06f1-4c70-9827-cba77b806a2b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3332c2-723e-40bf-b1b8-a04c39b7ddc3", "sighting_of_ref": "indicator--29f34557-9d76-4191-918a-514bd45c1d07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a3ad82-8681-4e2a-a71b-98e25f353118", "sighting_of_ref": "indicator--eef06090-cb98-455a-9f05-dd0d368de7fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4db057-ca13-455f-ac65-f50e08a77808", "sighting_of_ref": "indicator--0984bd71-5636-4019-8920-004bf0b80d5c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d409b763-1778-4943-b205-2ce3d6c88bc7", "sighting_of_ref": "indicator--01b713f8-2243-44af-b05e-460ba5136424", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb96262-61b6-4787-a75a-ff440680700a", "sighting_of_ref": "indicator--a733477d-ce86-48c2-9776-98522c772d41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568b764e-6a0a-439e-a598-11f7b247866a", "sighting_of_ref": "indicator--89dc09c0-a624-4561-9eab-e4b63dd1ebc7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb96cd0-df5d-462a-ba70-a8c2880f03a0", "sighting_of_ref": "indicator--f8bf19fe-d6d4-4b31-a884-807686a777c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1f961d-3d77-4064-8d3b-0db8ad4563b9", "sighting_of_ref": "indicator--28f86bf0-e891-45f1-996b-69be236c29b4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bb17a6-7125-45ca-9c31-670c92e4b1a8", "sighting_of_ref": "indicator--0367a3b1-63a8-4ed5-a2e9-ef3135abc98a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8dbc86-edf5-489e-9324-054d9326b0f8", "sighting_of_ref": "indicator--0367a3b1-63a8-4ed5-a2e9-ef3135abc98a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3a82f2-0762-4a9d-9048-43f22092abb2", "sighting_of_ref": "indicator--b8ccfca2-976d-49e5-be04-a324b28a8a6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd984d4c-b523-433c-9989-12bbec64e707", "sighting_of_ref": "indicator--e9323ff6-d5b2-4b64-8bf1-5fca01f1838a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f984d44-d8a3-4174-be74-503a24a1316b", "sighting_of_ref": "indicator--e29a9ae8-4e15-4993-b3bd-7d3890c061a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efe89ce-4ff1-44ee-ab90-b986dc18a454", "sighting_of_ref": "indicator--020e5578-d55b-4dbe-9dfc-ccfdad33ba11", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543e5f6b-f6d8-451e-9c26-7d86548bfbd1", "sighting_of_ref": "indicator--a7392607-5fb0-4e2e-b3a6-ece49b8fd24c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eab323f-92f5-4592-b03d-b6d6bb964191", "sighting_of_ref": "indicator--a7392607-5fb0-4e2e-b3a6-ece49b8fd24c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15bae38-bd31-4caa-8e73-18d524c77a25", "sighting_of_ref": "indicator--31135724-547e-402c-91c1-728b61efdfe7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46d1fb4-6316-4430-aea4-015b424bea3b", "sighting_of_ref": "indicator--e4d8f77f-8064-434e-a757-7553d1eb0e46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acbe16b-0687-4846-a7f5-68ac6dd56031", "sighting_of_ref": "indicator--2af63ee1-64a2-477e-a84e-d15bdeb8c10d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99561b11-ed96-424f-9452-f8e0bfee658d", "sighting_of_ref": "indicator--2af63ee1-64a2-477e-a84e-d15bdeb8c10d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0665c8e-c995-4214-9732-41e274308b27", "sighting_of_ref": "indicator--37be02f8-4967-448a-8e4a-d95e61edd454", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7af7a38-248b-4d09-a7d1-8d2ce4c01254", "sighting_of_ref": "indicator--37be02f8-4967-448a-8e4a-d95e61edd454", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a98e5cf-4102-4722-9cdd-2a8e57ab4fb7", "sighting_of_ref": "indicator--490422d2-a391-4205-9f21-3d312e6b61a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54490101-5539-4a0a-99a6-be6c6883b23d", "sighting_of_ref": "indicator--490422d2-a391-4205-9f21-3d312e6b61a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0942b3-56eb-4c21-9bfb-3b62d3b5108a", "sighting_of_ref": "indicator--77d9610f-4e84-4d13-a49c-7c7dd2483e58", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74461c12-8e77-4ba9-97bf-343410199ae3", "sighting_of_ref": "indicator--c78b4dd0-6f9a-478e-8876-86ca41e0261e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5a9ce0-4b83-4b18-9271-0e4ece41653e", "sighting_of_ref": "indicator--8c7b707f-b388-451a-bf0f-845885213ca7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b88db6-1d8b-4842-ad4f-356104f35603", "sighting_of_ref": "indicator--46aaa42d-2420-4f11-a426-99b5b02f83eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cec68e-8234-4b72-b797-1f9fe2439da7", "sighting_of_ref": "indicator--19f52b6c-2c41-452c-a0f9-be333b0e23f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0477d6a-8e52-47d4-8fa4-5bf62c78af80", "sighting_of_ref": "indicator--19f52b6c-2c41-452c-a0f9-be333b0e23f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d142b6-ed10-43c1-be69-24afce41cb57", "sighting_of_ref": "indicator--16ccc581-2bc6-4fa4-ab47-e49033c684b5", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c01418-7d7c-45ff-8848-784b43dd9285", "sighting_of_ref": "indicator--04e1f532-906b-47b8-8242-127199c8e190", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cb7152-9229-49b6-a7d9-6c406d792d56", "sighting_of_ref": "indicator--8796c168-dbe2-4f0e-9e83-dfd761606c8b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e0a154-e067-4049-a5d2-f7cc9e0332c1", "sighting_of_ref": "indicator--691b7276-1c94-4cbb-b1a2-13dd05956d1b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c205eb6-d3ab-46c0-b48b-ea1adf0389f5", "sighting_of_ref": "indicator--526e4cad-e384-48b5-af97-f2669ccc991c", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8103316a-077a-4b70-bb32-7f1f4001556b", "sighting_of_ref": "indicator--7ad63aca-4192-453d-a70f-c2de713b3450", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04a917f-d781-44a6-bc5e-f6e0c70e0ad0", "sighting_of_ref": "indicator--93393e1d-fb50-4ebb-bded-5e4358f647ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0076bd-f162-4fb4-9957-d7152619aeff", "sighting_of_ref": "indicator--93393e1d-fb50-4ebb-bded-5e4358f647ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0600ca0-caad-4757-9b14-fe07a2cc45ff", "sighting_of_ref": "indicator--03bfc8d5-9a7c-41dd-bcae-60bd1f58d99d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cc62b1-931e-4774-978f-10887cbe6f8d", "sighting_of_ref": "indicator--67a135f7-aaa5-4e58-85fd-53915c25aac8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e61b363-1b99-4cc2-a65a-39173cc367a0", "sighting_of_ref": "indicator--78d54a3a-2e9d-4a41-8089-836112a2a74d", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039d4940-8ed8-4f3f-8b88-89e1c6b56c5d", "sighting_of_ref": "indicator--6dd3e531-aa11-4762-b576-3ce2558f0b91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df04e6a6-e4a3-4f8f-9a16-ec819f22d7b2", "sighting_of_ref": "indicator--d7b3f828-319b-4b28-bedb-f35330263b52", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75784a85-5603-4a3a-90e5-99142a9ca107", "sighting_of_ref": "indicator--ac17226d-529b-49e6-82f4-f69cf463a43b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab07f388-7e79-4438-8e3c-13131269b2b4", "sighting_of_ref": "indicator--3ea991b4-91d6-4050-b237-6d215a8f8a99", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08238d5-43be-4a14-be93-0d3de8c49a20", "sighting_of_ref": "indicator--3ea991b4-91d6-4050-b237-6d215a8f8a99", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37bfb8f-b7c3-4688-ac6a-db77251e5772", "sighting_of_ref": "indicator--6891062e-f5ba-45c0-a00c-b0029b54b671", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8023e2c6-1277-4bf9-9e22-0d56902a9b60", "sighting_of_ref": "indicator--e6fe915b-225f-4a03-9e21-5e0c73f97b46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35e2b91-0d27-4f7a-902f-f25335473ed4", "sighting_of_ref": "indicator--444bc9d1-0f61-40cf-aee0-9d8124341b8a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3c0dfd-d22a-4cb0-8656-17ba2f15c19f", "sighting_of_ref": "indicator--444bc9d1-0f61-40cf-aee0-9d8124341b8a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247747c6-4f9c-48f7-9efc-290f59944ba3", "sighting_of_ref": "indicator--1112a201-0dba-4c93-bb25-827c1e45ba79", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44aaece9-8693-44e1-9f8a-8ab6710f402c", "sighting_of_ref": "indicator--1112a201-0dba-4c93-bb25-827c1e45ba79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb5405c-e6a0-4fa9-8528-d9e03664181b", "sighting_of_ref": "indicator--e9f480b7-6595-4a3e-b2f8-2b476be2b543", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6b0756-d6a4-49e1-b05d-75b86310ab80", "sighting_of_ref": "indicator--e0d0b755-d358-4650-991f-1532deae5574", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e601080-2a8b-487e-b15b-02bbed48db5d", "sighting_of_ref": "indicator--0e5cc6c5-93cb-40e6-9aec-f4646ecc21b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673077bd-1a72-4d67-b7b7-bbaa73b18b47", "sighting_of_ref": "indicator--0e5cc6c5-93cb-40e6-9aec-f4646ecc21b4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696e0cc4-0f78-4461-a520-a5ea6181f268", "sighting_of_ref": "indicator--af616239-45ca-46c4-ba63-0d5f22cb2d91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952c5740-79dc-448c-8da8-d09cd83212fe", "sighting_of_ref": "indicator--af616239-45ca-46c4-ba63-0d5f22cb2d91", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a47852-c03c-4a22-a48c-681fb5771d5c", "sighting_of_ref": "indicator--dd4d7e21-3378-430d-9139-8df778a79cbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19568d12-7991-4ffc-b1d7-998424b8e85f", "sighting_of_ref": "indicator--dd4d7e21-3378-430d-9139-8df778a79cbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966166c9-b805-4a03-9333-e6e525c61c71", "sighting_of_ref": "indicator--3fea99b7-91ef-4ec2-9f67-7a15b13ac045", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddf6260-46a8-4184-a0f1-d71b73ee5714", "sighting_of_ref": "indicator--df7520d9-cb83-4ec3-848b-102d40080fd8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd14b405-2841-4f3c-9f17-8992b2fb3299", "sighting_of_ref": "indicator--df7520d9-cb83-4ec3-848b-102d40080fd8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcdb95e-4959-4dfe-b011-d6e7f6a7040b", "sighting_of_ref": "indicator--39f1807d-6b97-4b21-914b-deeb7dce9bb5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa56b9c9-4e0f-4775-ab94-6f7bf4496dc9", "sighting_of_ref": "indicator--f51ec2be-5702-4b09-98eb-aaa4a8ed66df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77689834-01ca-4762-846c-021be5a7c456", "sighting_of_ref": "indicator--82e67858-3378-4bc5-9ea3-cba401c2bfdb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9038548e-8685-4b4b-9fbd-0c680d87a456", "sighting_of_ref": "indicator--82e67858-3378-4bc5-9ea3-cba401c2bfdb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5fb49e-9b6a-4400-9997-b4f59b8b650a", "sighting_of_ref": "indicator--489a2b8e-f839-45ac-9336-9554b73581dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd1b77f-2f00-4dcd-80d4-9d4feed0c97d", "sighting_of_ref": "indicator--489a2b8e-f839-45ac-9336-9554b73581dd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8029b0-dce3-4bc3-b3bb-2550376d5651", "sighting_of_ref": "indicator--50da90d4-de76-486b-9ca6-d5032665ad48", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b185d6e-95a5-47ca-9210-8acc4e7dd65a", "sighting_of_ref": "indicator--e1f2b7d3-bc9d-4cd2-8e35-d5039dfa5e2b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4e30ca-79d1-4206-8eaf-c8a38bc32f4b", "sighting_of_ref": "indicator--1cbd6aa3-09a3-44df-a078-6d9451184d67", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5614162-d2a2-4576-8af8-f84c8a6c2dab", "sighting_of_ref": "indicator--1cbd6aa3-09a3-44df-a078-6d9451184d67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6dea5e-2e6b-4a98-ba87-36388b8f7426", "sighting_of_ref": "indicator--2a5f34e6-c21b-42fc-8452-9964830c702f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5027dc8f-6e67-4f18-aa73-b47a69d0401c", "sighting_of_ref": "indicator--830246ae-a313-4475-a81b-611246f21788", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6dc9ae-fba7-4433-af51-d616e93dd21e", "sighting_of_ref": "indicator--f0c44afd-35ab-41af-9c32-cb6aaa2a4a13", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0013b2-0e1e-47c7-8241-a6c274482618", "sighting_of_ref": "indicator--9f65db09-9f15-4ee1-8a1d-9660affd8287", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8089f6f9-8da7-4bf9-bd79-e6582fca4151", "sighting_of_ref": "indicator--9f65db09-9f15-4ee1-8a1d-9660affd8287", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cef237-ffcb-4e8b-9f34-1a6c5b2f2041", "sighting_of_ref": "indicator--be46bf2c-a44a-44ed-90e5-525a1caee571", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9c386a-dff1-4358-bd46-c832e50c14d2", "sighting_of_ref": "indicator--64b9c630-cc62-4a1f-bf84-b8a708751e4e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3250e1cd-ea58-4de5-91cf-6e3b4e83b48f", "sighting_of_ref": "indicator--6c15cdb2-a584-4456-8bba-cba0c7cd15a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97212fcb-da49-49f7-92b5-e9ab16a5f0c4", "sighting_of_ref": "indicator--3a5d3340-1d7b-4378-bc39-1334ca0060d6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356c8bc1-5be9-4651-a471-c0d71211a7d6", "sighting_of_ref": "indicator--5012652f-9c37-4038-b0e2-e162fee11daa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f2a73a-3b63-47b3-8fb8-cdf4255f10d6", "sighting_of_ref": "indicator--3f63806e-6531-4b51-9238-265c589b13b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4e8046-dbd4-449c-850b-5a353ff6c845", "sighting_of_ref": "indicator--0decac13-f69b-4271-a56a-2ccd4f56c5d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d196f7b6-67a8-488f-9ad7-a499a6912ad1", "sighting_of_ref": "indicator--55749e1c-9c0c-40ee-aeb5-8dea39fbe272", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6a9d7e-a6b1-4216-b2a2-b15a2c765090", "sighting_of_ref": "indicator--55749e1c-9c0c-40ee-aeb5-8dea39fbe272", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6be51e9-f02a-4672-8a31-d410c98e83e4", "sighting_of_ref": "indicator--432a1a31-55a3-4956-b50c-34e2423cd0a7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d902cb6-13f9-464e-8b1a-01a645ef3b4d", "sighting_of_ref": "indicator--24e18855-a23e-4a2d-9b34-38d5fba966b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce43ec2-b095-4a29-8148-dbeac2712584", "sighting_of_ref": "indicator--c52b8265-aebb-4922-a7ff-ee1fddf2675e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557031cc-7c10-4fbb-856c-48d5694f0867", "sighting_of_ref": "indicator--c52b8265-aebb-4922-a7ff-ee1fddf2675e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9784d8ed-383b-4515-80ce-908fca706554", "sighting_of_ref": "indicator--80c0f596-9abb-456a-af3f-223111b777f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e73f4d-4a7b-4ef8-9ddf-37ab98a5ff89", "sighting_of_ref": "indicator--80c0f596-9abb-456a-af3f-223111b777f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3cb9e4-8075-46e5-970e-42b0d7802bfd", "sighting_of_ref": "indicator--40584739-d4ca-41b6-83fe-d0ddd1092461", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612d3c39-1a97-4666-bde6-bc55f3bf8764", "sighting_of_ref": "indicator--941ab5d6-bc84-462c-8025-73505b9bcb50", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506ff0d7-99d7-439a-85d5-2ff6ed3d389a", "sighting_of_ref": "indicator--941ab5d6-bc84-462c-8025-73505b9bcb50", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0701135d-a8d8-43e0-aef8-005e9cdcea4a", "sighting_of_ref": "indicator--3dd2290b-f85e-41f2-be75-20af5be47cfc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e25777-ec40-43ea-ae10-977e30b8d934", "sighting_of_ref": "indicator--3dd2290b-f85e-41f2-be75-20af5be47cfc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7a7017-aaf5-46f9-88a2-98053d93008f", "sighting_of_ref": "indicator--9830c701-e0ee-4ed9-a5af-8c096fc0fb77", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2940231a-14d6-4d6e-87b6-513f1521a9f3", "sighting_of_ref": "indicator--9830c701-e0ee-4ed9-a5af-8c096fc0fb77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e389842-737e-48df-8dd5-2d10e34a933f", "sighting_of_ref": "indicator--f4484895-5a43-4e63-9c29-cee4230e478b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65596c7-8171-423c-9c10-d070969ca222", "sighting_of_ref": "indicator--6d4be766-6063-48a5-b2ef-832df544472f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf1d9de-031a-48e1-bf59-792e8a5e58bf", "sighting_of_ref": "indicator--de2f05cb-2ed3-4546-830d-166b9337377e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6180e244-fb51-42af-8dc4-27a3930a46d4", "sighting_of_ref": "indicator--de2f05cb-2ed3-4546-830d-166b9337377e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ad3704-1491-4b7e-8cae-dd5abbad441a", "sighting_of_ref": "indicator--b419104a-b786-48b6-ab89-89e400430e76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a9284e-b1fd-45b1-adb5-3ff234510178", "sighting_of_ref": "indicator--782dc386-2981-4ca4-83a3-02a2301e0e38", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d17069-1261-4814-958b-8043c3370cad", "sighting_of_ref": "indicator--cd76b39c-27d0-4b53-8866-daef0466b702", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6c1fd0-f312-4c90-911e-1cb9880b7d27", "sighting_of_ref": "indicator--cd76b39c-27d0-4b53-8866-daef0466b702", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6610f2b7-1b96-4e4f-9b11-901c61bfbe34", "sighting_of_ref": "indicator--ac506ee8-c378-41e8-84c2-4f758e1e8699", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd2a8f7-f7f5-48dd-9b52-8162d548a819", "sighting_of_ref": "indicator--a1391407-9da1-4b27-9ab8-ca33a5a2eb6a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0da72e-2b2c-4f49-8fa7-fec9d0c5dcf4", "sighting_of_ref": "indicator--64df6813-82a6-4014-abee-dbb057905c62", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df928f82-ab25-4b1d-8fb9-f97b6d89ad60", "sighting_of_ref": "indicator--5a661390-5e8d-46b1-ac19-6b161fba64f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a46522-6d35-4199-99b3-3933773bde89", "sighting_of_ref": "indicator--5a661390-5e8d-46b1-ac19-6b161fba64f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40eef8b0-6c1c-4bb3-9882-34740341b83e", "sighting_of_ref": "indicator--5ab12860-f38d-4039-b926-23df95c7dfab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a724c8-95e1-4527-99cb-f9ca59ad967f", "sighting_of_ref": "indicator--7d296074-8c53-4934-95ed-ed57ea325964", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4feeb53-db82-4237-9895-1817d1f95f76", "sighting_of_ref": "indicator--7d296074-8c53-4934-95ed-ed57ea325964", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08835971-ea87-44b6-8ef2-1107429296f7", "sighting_of_ref": "indicator--41484126-f458-49ed-bdad-31726d4adfd6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7bcabc-04c5-4c30-bacd-4234c853602a", "sighting_of_ref": "indicator--41484126-f458-49ed-bdad-31726d4adfd6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805ff12b-c278-43fe-96eb-1fd8ba6e5859", "sighting_of_ref": "indicator--d049258e-f666-46fa-926f-9b799a17b10c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7b848b-8860-4b37-bee4-79d2c58ba4cf", "sighting_of_ref": "indicator--d049258e-f666-46fa-926f-9b799a17b10c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f557f89-de65-4c22-bc75-b115f68a63da", "sighting_of_ref": "indicator--1ff132d0-4f91-49be-9d9b-e3324b33fdbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b260803-40b5-4848-b24c-4c5cce5aca63", "sighting_of_ref": "indicator--1ff132d0-4f91-49be-9d9b-e3324b33fdbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b9a82e-25d0-4038-b925-803bce8231cb", "sighting_of_ref": "indicator--394afbc8-7701-4117-9df2-b2af5d57b30e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8acd1ed-9274-43aa-b05f-2be527cebfc5", "sighting_of_ref": "indicator--394afbc8-7701-4117-9df2-b2af5d57b30e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfe4219-dbd3-451d-8caa-c0b5f8764d62", "sighting_of_ref": "indicator--73e030a6-00b5-4410-b85a-534e1a7b0fa1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9499f70a-e48c-4e52-8559-e94a203860f0", "sighting_of_ref": "indicator--974d8388-2104-4b04-8124-2b7562492632", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf4d555-fe25-47c2-b877-33a1c3142340", "sighting_of_ref": "indicator--974d8388-2104-4b04-8124-2b7562492632", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee35e04-2851-45f7-bdfd-4fb96ba1198d", "sighting_of_ref": "indicator--bb805bd1-d7f5-4c26-8bf2-c6a92d38daf8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc2596c-2a72-4ace-b411-139360667037", "sighting_of_ref": "indicator--bb805bd1-d7f5-4c26-8bf2-c6a92d38daf8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa2481f-33f3-4fc7-afe1-10c9d4c30e3f", "sighting_of_ref": "indicator--af89cf74-6c64-4a4c-a803-8c802d004056", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e446021-3feb-4b3c-96b7-9c75ebf72f5b", "sighting_of_ref": "indicator--af89cf74-6c64-4a4c-a803-8c802d004056", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6057e34b-e280-4932-b149-0de533aa410a", "sighting_of_ref": "indicator--1be41e14-b7f9-4674-8629-573571edc19c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36947360-2876-4658-a640-7a5ef198b735", "sighting_of_ref": "indicator--65be9681-fdd5-4779-a3fe-ee4810fa5235", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88681244-f2e4-4c37-bfa8-9ff4bcc9deee", "sighting_of_ref": "indicator--65be9681-fdd5-4779-a3fe-ee4810fa5235", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714396da-4777-4a32-91c6-6ce21da93007", "sighting_of_ref": "indicator--23bb0e00-d127-4ffb-b35e-93b78abbd4c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074b2faf-fa71-4d0c-9629-ec32a3bec220", "sighting_of_ref": "indicator--7925e0cf-da6b-42ac-8845-c031f1741fcb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233a6474-77dd-48e4-b4b4-f0bba8174369", "sighting_of_ref": "indicator--7cec6d2f-3be8-494a-9863-b0a3c6e0277e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8086fad2-e696-4ef4-b6e3-a7f4070fb9ad", "sighting_of_ref": "indicator--7cec6d2f-3be8-494a-9863-b0a3c6e0277e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ac50e6-d79c-4810-9e44-cc09783f1f38", "sighting_of_ref": "indicator--d1ae4b8c-8bff-423d-99f5-0c3c25e0d99a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64fb8bc-998c-401c-8979-9868b4b1b066", "sighting_of_ref": "indicator--d1ae4b8c-8bff-423d-99f5-0c3c25e0d99a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddc97d3-1d23-4763-9677-4202b65bfc82", "sighting_of_ref": "indicator--c8562b69-ecdd-42e9-8383-353da7be7e86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243b1221-2525-4006-bff8-dbd39d8ab76e", "sighting_of_ref": "indicator--9b6a0f1c-ad25-4857-b0bf-e6e267287673", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1b9201-3258-4962-930e-f73e2923c682", "sighting_of_ref": "indicator--9b6a0f1c-ad25-4857-b0bf-e6e267287673", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9f986d-95bc-472b-8fe4-ef9a0f879b39", "sighting_of_ref": "indicator--c9002e68-6426-4b1f-9ed9-6655e5ccfffd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31bb937-ca2d-4d5e-80e0-61cf0d484279", "sighting_of_ref": "indicator--c9002e68-6426-4b1f-9ed9-6655e5ccfffd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908b13f5-6b75-4600-8e8b-cafa4b955639", "sighting_of_ref": "indicator--5433f84a-ecb1-44dc-83be-8a34e166e275", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784279f5-8e49-4ac9-9b5a-37ba8740d076", "sighting_of_ref": "indicator--44a5f3d7-162a-4f48-9a47-ee870604420f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f0f4ed-9284-4001-80f3-fd1a1aa6eca6", "sighting_of_ref": "indicator--44a5f3d7-162a-4f48-9a47-ee870604420f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316559fe-61e8-4a70-a246-10bff272539f", "sighting_of_ref": "indicator--18742246-98ab-4719-b36d-6090eb2d02a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c569d985-9cb0-4da6-ad26-df4013f60eab", "sighting_of_ref": "indicator--18742246-98ab-4719-b36d-6090eb2d02a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884e34ab-ccc7-4ebf-8d36-919ea1450887", "sighting_of_ref": "indicator--8df27742-712d-4a11-b9b7-d7bebbe9eb59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5579e1-54bf-4f5b-aa82-bf34226cc1cf", "sighting_of_ref": "indicator--1f4b50e3-df2b-4971-b45e-0d0209a52bda", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f8d70c-a727-4e6e-a54a-fb8365953302", "sighting_of_ref": "indicator--c552c106-068f-4e86-9e48-6bb39a8bc288", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c840f99-e724-43a2-a425-134c470e8736", "sighting_of_ref": "indicator--d7167817-da9a-4293-a3ee-0fc34440cda5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c10ccee-db5b-4b2d-8b03-0f0e9fef803e", "sighting_of_ref": "indicator--d7167817-da9a-4293-a3ee-0fc34440cda5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414ea3d6-029b-4c6b-a3a1-245ca7879171", "sighting_of_ref": "indicator--d7167817-da9a-4293-a3ee-0fc34440cda5", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfbcf6e-f9b5-44d7-87c5-f1102af9f017", "sighting_of_ref": "indicator--065496bd-a9fe-4bbd-9f99-e55972228853", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cad9c5-288c-4032-8edd-ba5da0a847a7", "sighting_of_ref": "indicator--065496bd-a9fe-4bbd-9f99-e55972228853", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3494e2-fdeb-41f3-8c2e-cf1543052f1b", "sighting_of_ref": "indicator--23ca9606-2bbb-46f3-975a-e7ec5f472e43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0438ca89-bdaf-4677-b2a7-070c558161b2", "sighting_of_ref": "indicator--d781495b-51fa-4afd-ab8c-6652985ffb4b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6f045a-74cf-4651-8112-bedbf9cd303c", "sighting_of_ref": "indicator--d781495b-51fa-4afd-ab8c-6652985ffb4b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaea35d7-e358-4535-96d8-af1d92110122", "sighting_of_ref": "indicator--8289a87e-2c49-47e1-beff-b7d05276c4cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcb8fb6-ad5a-46d8-adda-5f40198f6db9", "sighting_of_ref": "indicator--8289a87e-2c49-47e1-beff-b7d05276c4cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7f22df-ecb0-44ac-bf10-cf44aff46365", "sighting_of_ref": "indicator--461f71b2-b5ba-4fe1-b6ce-456198f17255", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7051046-6f1a-4364-b897-d982ce9eda18", "sighting_of_ref": "indicator--461f71b2-b5ba-4fe1-b6ce-456198f17255", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccbc457-f441-4726-90af-e8443d610cd7", "sighting_of_ref": "indicator--cd82ec38-b079-4f48-bcde-7deecca3a8ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57319e41-364a-4f41-97d6-236dd8f0ced9", "sighting_of_ref": "indicator--cd82ec38-b079-4f48-bcde-7deecca3a8ec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51fb314-31b4-461a-9baa-60c769fb2d82", "sighting_of_ref": "indicator--df05d349-3629-4e38-892f-3a122aa8107f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3e2af2-c3b2-4edd-85e9-9dddfbded519", "sighting_of_ref": "indicator--df05d349-3629-4e38-892f-3a122aa8107f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecfaec2-0e28-40a8-b88f-d0ebc42f1112", "sighting_of_ref": "indicator--f178fe8b-687e-48e7-a9a9-5284b88563ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4e7d34-d888-4f17-9c98-0af98431e3b9", "sighting_of_ref": "indicator--f178fe8b-687e-48e7-a9a9-5284b88563ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bf831f-e0ae-4cfd-bd83-4b9a71efad9d", "sighting_of_ref": "indicator--5cfea2b1-c58c-4f92-9d40-d6b4171318fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec6c5c4-5852-4596-98fc-530931c831ef", "sighting_of_ref": "indicator--5cfea2b1-c58c-4f92-9d40-d6b4171318fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e99b58d-e8ce-4b6b-ac33-411bb01a5a41", "sighting_of_ref": "indicator--aee10912-a55d-4074-93f8-c9f868ce76f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca189592-8fc1-4162-9f78-c02b021221d1", "sighting_of_ref": "indicator--aee10912-a55d-4074-93f8-c9f868ce76f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2719e8-fab7-498c-9e7d-3bd18a4259e5", "sighting_of_ref": "indicator--927f3115-f09e-4782-866d-3e5f4d533fc2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e592a58e-01e9-440d-ba31-ebf76c21844b", "sighting_of_ref": "indicator--df322751-b077-4969-824c-4449d4440a6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547397c6-299b-4f18-89dc-7e90886025a0", "sighting_of_ref": "indicator--df322751-b077-4969-824c-4449d4440a6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662bd2a6-bc99-4b40-88f2-872748bd0c26", "sighting_of_ref": "indicator--a6a6607f-a350-4c29-85de-59cb76164058", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b96584d-21d1-4c5f-94bd-3859e434a460", "sighting_of_ref": "indicator--a6a6607f-a350-4c29-85de-59cb76164058", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56f04bb-2ae1-49af-8a57-6527ba933956", "sighting_of_ref": "indicator--c8d375d9-91e4-404e-99e0-514b0e135b9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9febf13-42a4-45ff-8814-554c04ae0cd3", "sighting_of_ref": "indicator--8a42d631-c0f9-4f02-b8a0-fae307fdc9e1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098c15c3-b143-4557-a6e1-f8699468639f", "sighting_of_ref": "indicator--8a42d631-c0f9-4f02-b8a0-fae307fdc9e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe848fa9-af01-4967-985e-6620e9b01cbd", "sighting_of_ref": "indicator--ac23fbae-7a2b-40ec-a21f-d113d7df4950", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c36b7d-07b9-469b-9eb7-8a3396138c4d", "sighting_of_ref": "indicator--ac23fbae-7a2b-40ec-a21f-d113d7df4950", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322cbf38-8fd4-46a5-a933-bdd4b4a2cc89", "sighting_of_ref": "indicator--a8af9bf2-b427-4108-82e6-c6cf7c156aa4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809da4c1-ff16-4ea1-82e5-d453447310e0", "sighting_of_ref": "indicator--a8af9bf2-b427-4108-82e6-c6cf7c156aa4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e724facc-e289-42c6-8aff-5a8b69a38e54", "sighting_of_ref": "indicator--bdcf740d-3512-4776-89d9-5d4260503392", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7241a0a9-d46a-40fe-a7d2-27391685317b", "sighting_of_ref": "indicator--2ec85ce5-e115-4036-b1d1-9dc621f4bbe2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598d5021-2c81-496d-9799-a6670721c13b", "sighting_of_ref": "indicator--04327356-b549-4018-8a14-54882764aae7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcab643-958e-45b7-82cb-7a9c6896479d", "sighting_of_ref": "indicator--04327356-b549-4018-8a14-54882764aae7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c68c45c-1544-4f57-90af-819d099b1365", "sighting_of_ref": "indicator--b543043c-adbb-450b-a09e-38e59d067aec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d2d63a-c2c6-4892-8383-5da320e22faf", "sighting_of_ref": "indicator--b543043c-adbb-450b-a09e-38e59d067aec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962151e3-9c88-4f89-8fad-f7a9d18b9b18", "sighting_of_ref": "indicator--0e18b9e4-b061-40c2-9f1c-8ad849fbb6a3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e4519e-b82b-4c64-a65a-8c703fed91cc", "sighting_of_ref": "indicator--0e18b9e4-b061-40c2-9f1c-8ad849fbb6a3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03088aa1-b8da-4e23-a4b9-ee693fb2bc9a", "sighting_of_ref": "indicator--ce6b7a96-cf88-484e-a280-b763855a437b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f7a350-fb6d-49ba-bc6f-832de5ac9f5e", "sighting_of_ref": "indicator--bcb47d96-0fed-46ae-a3c0-2fa34a5ee4b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee6b70f-192b-431f-8428-03b374ee81ec", "sighting_of_ref": "indicator--bcb47d96-0fed-46ae-a3c0-2fa34a5ee4b4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e2cdbb-477d-49e8-8f83-c19cd6723d26", "sighting_of_ref": "indicator--00af0233-fc24-4b0c-a6c8-91cba89992a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea16905-7c0e-49c9-9fdd-a2c30d17738c", "sighting_of_ref": "indicator--4b099bd9-2167-45c1-a5a5-f0bcf18872e0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0c2eef-0107-4ab2-9ede-ea45222b397e", "sighting_of_ref": "indicator--4b099bd9-2167-45c1-a5a5-f0bcf18872e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0dcddc-7895-4181-8691-e1069948b1dd", "sighting_of_ref": "indicator--25b66116-7250-4eae-91a5-d9eb367eb726", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b807d74-0f4f-48c9-bae9-56c5647ca9a7", "sighting_of_ref": "indicator--e7c26650-c74a-4c6b-bdd1-f94bb0907795", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10467a6e-6fee-4cfc-a2e0-1db797830004", "sighting_of_ref": "indicator--eb61388a-368e-421c-9ba0-9935e9f4533a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61c2e3f-9c9e-4a12-9050-06e90449eab5", "sighting_of_ref": "indicator--d66fa469-0e5f-4b10-8d73-ca6ea83d0857", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f03fe7-4cd3-4f4b-9c42-6a8b4bdde260", "sighting_of_ref": "indicator--d66fa469-0e5f-4b10-8d73-ca6ea83d0857", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcaa6b16-135a-4922-b701-45849d24c874", "sighting_of_ref": "indicator--4e308379-a87f-48a6-81b0-9e7f1efbb0b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2ad081-d4a4-44e9-b097-21f25bdf6a67", "sighting_of_ref": "indicator--4e308379-a87f-48a6-81b0-9e7f1efbb0b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45312dd4-2772-4940-9df1-60a04f95cb4e", "sighting_of_ref": "indicator--5024f3d3-75d1-4b8a-ab1d-8a5a7ef57502", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333245e5-37b3-4258-b8ec-36ff20f3232f", "sighting_of_ref": "indicator--5024f3d3-75d1-4b8a-ab1d-8a5a7ef57502", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2096e51-3219-4860-a178-8bf95a5f1f5e", "sighting_of_ref": "indicator--76b8d522-e8c0-4225-8075-5db96384c862", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65de805-18ce-46d2-aaa9-fcebd5895c74", "sighting_of_ref": "indicator--76b8d522-e8c0-4225-8075-5db96384c862", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f9f1a0-480c-416c-a2b4-0d944dd8f911", "sighting_of_ref": "indicator--2cea25ae-5810-440b-a443-e46d0a4a6481", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97cf0cf-cbe0-4c24-b0ed-962ce6fddf4f", "sighting_of_ref": "indicator--b4fd7268-9078-4f99-89bd-4812f7c43adc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7b34a6-5e2a-4a2f-8778-5d8f939a3435", "sighting_of_ref": "indicator--b4fd7268-9078-4f99-89bd-4812f7c43adc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c40642-051b-4ddb-9bdd-8dc9c7b9ff8b", "sighting_of_ref": "indicator--547899c6-b1bb-4c35-9067-173f52009fc8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8705c25-4c97-48c7-b123-b4f8676bd3f4", "sighting_of_ref": "indicator--e13ea905-7acf-4392-ac5f-79420f40fb1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d8c86d-578d-4fc2-957e-58a8ffa24dd2", "sighting_of_ref": "indicator--e13ea905-7acf-4392-ac5f-79420f40fb1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484a5848-152d-4fad-a8fa-7f2e3a53bba6", "sighting_of_ref": "indicator--bc622bfe-4e47-4c63-a206-b5ce133a05cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88757181-3b27-458c-a11b-4f6da03b1af9", "sighting_of_ref": "indicator--7e92e305-6d27-4a1f-811a-fee75ac04b61", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1055d1d0-0b53-422d-abc5-589f019e807b", "sighting_of_ref": "indicator--7e92e305-6d27-4a1f-811a-fee75ac04b61", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e39ead4-9a9a-406f-a28c-4e53c38f6096", "sighting_of_ref": "indicator--e75c917b-97f5-4f65-9005-0794af5e5079", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445f67e5-1963-45ff-817c-ef28ab27512a", "sighting_of_ref": "indicator--df18fb5b-8dfa-419c-b84c-e9b3e53b0bf9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2964b03d-4d50-4b56-990a-806dbb5d7fb8", "sighting_of_ref": "indicator--a0b17694-59c4-468a-beb0-293839f12cef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92638b6-ba8d-4ea1-a7fd-6382c5019997", "sighting_of_ref": "indicator--f135e476-907d-4fc9-9334-a82e4c177884", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d863b-143c-474d-88ae-cfabda899809", "sighting_of_ref": "indicator--f135e476-907d-4fc9-9334-a82e4c177884", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664e2a6b-3ff8-47aa-8ce2-859753335bd4", "sighting_of_ref": "indicator--12c733c7-0ade-4c48-a01c-a9084169d79e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e166871-0bdc-4081-bd5f-1ae565a6e63b", "sighting_of_ref": "indicator--09e25a29-1ed4-412e-98f9-5e075576e2ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fa9acc-2f9f-42fd-82ef-40abf827b98f", "sighting_of_ref": "indicator--09e25a29-1ed4-412e-98f9-5e075576e2ec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fb1f93-4dcd-4587-b869-c862624cfbf0", "sighting_of_ref": "indicator--5bc766b8-564a-4f7b-bfa5-4019ea6c7842", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462fe4c3-651b-4587-9d31-5e08a03c1f77", "sighting_of_ref": "indicator--b2e700a4-5eb2-48f0-b60c-0dc3237b7f19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef96eeb-149b-4429-8246-902bd4d84d31", "sighting_of_ref": "indicator--b2e700a4-5eb2-48f0-b60c-0dc3237b7f19", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89875906-0417-4e57-868a-74badd45a632", "sighting_of_ref": "indicator--5d36b6b7-f0b7-45ed-a390-b155c113ad49", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6ecbc3-08c7-4049-8302-80df637ae7f4", "sighting_of_ref": "indicator--6146bf21-6c37-40fb-adbb-2ccea9dd81f8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67d1327-8bcb-4b67-af5f-d9a762d8a923", "sighting_of_ref": "indicator--98cbcbdd-63e1-44a2-99bb-a9ca8954ceee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b08fecb-166f-4c4b-8727-0f8c77e686f4", "sighting_of_ref": "indicator--98cbcbdd-63e1-44a2-99bb-a9ca8954ceee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebb0658-1055-4215-8c06-ea139a1c63c9", "sighting_of_ref": "indicator--1d6f7fb3-ea44-43ad-8632-f50787009a0d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbab05e1-a4f3-4666-9e4c-5a738ee6e083", "sighting_of_ref": "indicator--1d6f7fb3-ea44-43ad-8632-f50787009a0d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3011e3eb-12f2-4864-a651-1e3fb275f4f8", "sighting_of_ref": "indicator--bbd94651-e27d-437a-9d9d-05a969000a55", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fa95f6-2c4d-4079-8dff-ba4bc43d17ba", "sighting_of_ref": "indicator--bbd94651-e27d-437a-9d9d-05a969000a55", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f94ff14-6b18-491a-af6e-55b2cf73f7ee", "sighting_of_ref": "indicator--beebc60f-73bc-4a83-96b4-a5ad6910de5c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4797995-a5b1-40fa-9d6f-fc36ec83f214", "sighting_of_ref": "indicator--1d4286f7-b23f-48c3-9a86-f369b1e4db13", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fdcce3-ee6e-41ee-a0f5-3fffe3daeb88", "sighting_of_ref": "indicator--1d4286f7-b23f-48c3-9a86-f369b1e4db13", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c08218a-5268-4daa-bcec-117a02835b83", "sighting_of_ref": "indicator--57bb95dd-7a83-4d54-9b99-e256e98773f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edecfc82-f03d-4ebf-92e8-3b16c16e5c9d", "sighting_of_ref": "indicator--57bb95dd-7a83-4d54-9b99-e256e98773f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefa1462-beff-47b1-b85c-58d6a204c8ae", "sighting_of_ref": "indicator--85d34e42-0ab1-4fce-ab9e-7d004c2eb1fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffd7949-9910-4cfa-932e-f831c938cb93", "sighting_of_ref": "indicator--ca657bb4-9ad0-49b9-b719-871abc29640e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7895e35-c15a-4ba5-a948-12ab5f6bd503", "sighting_of_ref": "indicator--ca657bb4-9ad0-49b9-b719-871abc29640e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec031d37-3584-46c0-96bc-80da3b3130b8", "sighting_of_ref": "indicator--eeea7fa0-5037-4e80-9f28-466ee48f41d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bb2a0c-715c-468b-a3fe-44408bd02df9", "sighting_of_ref": "indicator--cf41972f-93f9-477c-a4f7-5afc57ba6929", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6748c5be-d9fe-4535-8b34-051cad56bf53", "sighting_of_ref": "indicator--cf41972f-93f9-477c-a4f7-5afc57ba6929", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2127036c-0d4d-40d7-ade4-86d10e55e7b2", "sighting_of_ref": "indicator--f5fa92a1-f578-4b38-8c06-50c735139114", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1505adf-7ee7-4aeb-9dd7-cd794d98590a", "sighting_of_ref": "indicator--f5fa92a1-f578-4b38-8c06-50c735139114", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46833bf7-ed57-4633-a77b-49e82c0eb990", "sighting_of_ref": "indicator--073d6bf2-6b8e-4202-ab7f-707b9da30b98", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db56a0ed-96cd-45d1-909d-72d98caf90f3", "sighting_of_ref": "indicator--f79312cb-bfae-4dbd-9e76-6b72d5e98939", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e718beb-e78d-4a66-949c-76d700685fca", "sighting_of_ref": "indicator--9704704d-257f-4870-9b9f-277269a11b00", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357caeda-e9c1-46d6-baf9-32d235321a95", "sighting_of_ref": "indicator--9704704d-257f-4870-9b9f-277269a11b00", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbbdd9d-f861-4d14-b4f1-3b02f417d195", "sighting_of_ref": "indicator--047dfd96-bf7c-426f-90c4-e124a1d6e781", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9646a19-1836-493d-aec0-fd1a9ad69db2", "sighting_of_ref": "indicator--047dfd96-bf7c-426f-90c4-e124a1d6e781", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad71e19d-0a4f-40d4-b7d7-e2546177bc4a", "sighting_of_ref": "indicator--b95ac0f1-73df-413a-9f39-2eff90766923", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3604a6a-da2a-4c0a-ae72-e8e5ab1069cb", "sighting_of_ref": "indicator--16789bdb-0da3-420f-aebd-7d2f35dc48b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb2b784-c99b-42e4-a323-f5341d4f60cd", "sighting_of_ref": "indicator--16789bdb-0da3-420f-aebd-7d2f35dc48b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747004bf-9ef3-45d0-9036-2bc1be4f8518", "sighting_of_ref": "indicator--16789bdb-0da3-420f-aebd-7d2f35dc48b8", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28a8dad-f157-4956-a432-5c822a5d8405", "sighting_of_ref": "indicator--15ff0699-9bf2-42c6-9f72-15e02c827e65", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40444363-3b7c-4a0f-b11f-01ca4f574065", "sighting_of_ref": "indicator--15ff0699-9bf2-42c6-9f72-15e02c827e65", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0758fa-a9b6-4a23-8286-fa27eee34398", "sighting_of_ref": "indicator--d72a095a-f7a6-4abd-8c59-f1baa476b5d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cb9a09-bd47-49a9-a2bb-c3d195feb114", "sighting_of_ref": "indicator--cd526b4d-268c-41d8-bd08-85128ebe0219", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f69417c-3fed-490f-aef0-8bd07a744605", "sighting_of_ref": "indicator--cd526b4d-268c-41d8-bd08-85128ebe0219", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fb607c-0ce7-4adb-a5f7-0dd3d270a996", "sighting_of_ref": "indicator--42cbe5cd-a645-4783-ba16-23f2396fc843", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68067f4-169a-42fc-8809-c2aa58e51c31", "sighting_of_ref": "indicator--42cbe5cd-a645-4783-ba16-23f2396fc843", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77fce4e-f0b7-4d67-bb40-3aea499eb985", "sighting_of_ref": "indicator--f5816e6e-d2b8-4bcc-a000-120fadcf8907", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d06bf64-f9f5-4403-88f8-9f681dd308a9", "sighting_of_ref": "indicator--f5816e6e-d2b8-4bcc-a000-120fadcf8907", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6f3130-7b0d-405f-a933-917109a4318a", "sighting_of_ref": "indicator--3f6b22a7-498f-4c98-a3ba-62b4e0e6f6cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f8f6fb-da82-408f-b79d-b6e09cb2c09c", "sighting_of_ref": "indicator--ce854090-099d-451c-8202-7f5a399a9991", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e8174f-b3ad-46a6-9e95-a6858070d868", "sighting_of_ref": "indicator--0543b2f6-49b2-4378-8c25-b87e919d1341", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb44a6ed-7c3f-4f0d-afaa-a49ebad31947", "sighting_of_ref": "indicator--314f7caa-84ac-4695-b180-5db715e280d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0f5a71-e8b1-4865-a744-4677deda8a68", "sighting_of_ref": "indicator--e2541c12-efe6-429b-a654-029a8647f77d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98c3986-defe-4520-a8b8-a2f9c69f64ba", "sighting_of_ref": "indicator--0ace0847-ced1-4622-b1fc-4be4807087f8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d0bab9-c8c5-4615-b0db-1b6e6526bfe4", "sighting_of_ref": "indicator--c636edea-7f34-4eeb-a8b5-e8981ee993ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73583031-a194-436b-a223-d5d062e16709", "sighting_of_ref": "indicator--4a913991-fbaa-44c3-888e-ddab7cb049bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1725e0f1-0670-4684-87db-3a4d230fab76", "sighting_of_ref": "indicator--e98411d2-40b3-4619-841f-c9ea073c85f8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958a6ab2-3d24-41a8-a7b1-995da70ab68d", "sighting_of_ref": "indicator--0ec22b8a-9401-49e1-b6d3-3c634c2516be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b11591-e0db-4bae-a827-5264bd8670da", "sighting_of_ref": "indicator--0ec22b8a-9401-49e1-b6d3-3c634c2516be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842649a1-cbaf-4748-9ee2-b4486f1c37c3", "sighting_of_ref": "indicator--ab80e0a2-9401-4ccb-837c-fac1a14e2950", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8784d9-692a-413b-a11f-61b3ba88a813", "sighting_of_ref": "indicator--5422a1c3-25a9-45af-a272-d0461ff0256b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b240e8a2-47e4-4260-bc1b-e2cb0e0f6331", "sighting_of_ref": "indicator--a9f78796-c41e-4210-a99a-331d2905e94b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9a614a-3b43-458f-aacc-efbcc844cb9e", "sighting_of_ref": "indicator--39a0b854-776e-4a00-a68c-11fc88196843", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a994ee66-cb97-4b31-bb9e-58ffbf534363", "sighting_of_ref": "indicator--39a0b854-776e-4a00-a68c-11fc88196843", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16295e53-7c99-44b5-9192-9d28c7e1450c", "sighting_of_ref": "indicator--8e0d1124-d1f6-4834-80e8-a1b9f3833350", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7a7edd-63ae-44e8-969e-b01870f35fb7", "sighting_of_ref": "indicator--99fe60ec-9a20-49a8-8422-8d901e47cab0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a43396-0690-4b0a-aeb3-967298a1c056", "sighting_of_ref": "indicator--fc6b628d-70b5-41a1-a583-d886e7e706ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a0e059-61ef-4395-89bb-40614926ebc4", "sighting_of_ref": "indicator--2a9bea40-b0c1-4846-977a-7d80a5da08b3", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b85bd8-ee01-4ca9-ac7f-af6a7e4c60a2", "sighting_of_ref": "indicator--b39488a5-267c-44ff-b5ff-6463cf141194", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ce3fb4-81a4-4df6-b082-95768f09409b", "sighting_of_ref": "indicator--b39488a5-267c-44ff-b5ff-6463cf141194", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11209711-2d8f-4fd1-99e8-553300f42cd3", "sighting_of_ref": "indicator--dea0f3d9-43ea-4fae-94e2-a2f32e94d1ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d796ff4-9785-4fbe-b5af-060c3a68b582", "sighting_of_ref": "indicator--a09a1485-583b-41b8-879e-a2d54d4daee3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02341bb8-5b39-4398-8384-36f90c7f66fb", "sighting_of_ref": "indicator--d05fa6e8-9d47-4809-82e2-276a1680d772", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04dc563f-266b-4abb-8a7e-5481280773d6", "sighting_of_ref": "indicator--386ba358-3a3c-4687-abf8-d1569f9a87da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38f68ca-dda2-4c67-bfa4-850908cc4ebe", "sighting_of_ref": "indicator--ddbf76c9-1308-48cd-945a-1dfb3fe10f27", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f65623-993c-409d-a6e0-e78da7b358ea", "sighting_of_ref": "indicator--ddbf76c9-1308-48cd-945a-1dfb3fe10f27", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4366c6c-59bf-46da-817f-f9094f321ebb", "sighting_of_ref": "indicator--904ee0a0-5a44-4c79-8fba-5e1a44940419", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c27bf1-882f-42b9-9b31-d96b380f824f", "sighting_of_ref": "indicator--7823f390-6f6b-4c8a-99a4-dad34e09291e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3080e3e-498c-4e37-bd2f-2edeb4c8226b", "sighting_of_ref": "indicator--1b85d00e-73c6-46ac-8be4-3400bb8a4be4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcac468-ddff-47ae-820d-e6e8ac22053e", "sighting_of_ref": "indicator--7785743e-1f5d-41a0-8e60-e6d0338d7082", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d05016-eed9-4d48-b886-9f310fb8e62c", "sighting_of_ref": "indicator--373a8642-d63a-4cb8-a9c3-6685dc78afa8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8ee3b9-f352-46ba-acc2-69f1a280fe4e", "sighting_of_ref": "indicator--381999ec-82f8-4b64-a82a-e5a90bad6c79", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d2ac51-c6de-4296-a882-d553a900ec3f", "sighting_of_ref": "indicator--ee7f9541-db4a-4e11-bf69-bb466618d21f", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549f21e8-1d67-42f4-9b82-a9326958ca27", "sighting_of_ref": "indicator--6f5b615d-8995-4d9f-9ea7-1a5f6f9024fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a54eff-1d9c-4e74-81eb-7b14fa4b0a93", "sighting_of_ref": "indicator--f7701617-d0bf-40de-a89f-c57374ee6e67", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76b3ded-0bce-429e-9354-d839dd7cbefb", "sighting_of_ref": "indicator--f7701617-d0bf-40de-a89f-c57374ee6e67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473c8222-17a8-43b1-b086-3e05c1b382dd", "sighting_of_ref": "indicator--0f1ba02e-6b5f-4804-bf51-a5fdf77cbfc1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd374beb-5cf6-4feb-bb48-8f9ac1070cc3", "sighting_of_ref": "indicator--c2743f7b-9f83-466c-ae3d-440a865fe74e", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50e8586-c5ff-4cfb-9e70-1d7558b8cee3", "sighting_of_ref": "indicator--0775ecd0-ad73-41b5-9b4c-c753c509c64b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682a1a6d-d6e9-47b3-be31-a84747ed3c41", "sighting_of_ref": "indicator--e4450d4f-9f4c-4379-89ae-710fafe3067e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a19e428-c02e-4bf7-bfb7-54ee546c4613", "sighting_of_ref": "indicator--6dd8d828-6228-40f9-a3fb-d0dfbcf88be6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aededf8-0f55-40d4-8b07-951f3974c5f2", "sighting_of_ref": "indicator--ae636c6d-6080-482f-9f5a-75ce68b996e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e1d6ab-3370-46a0-bbe6-6d4ee0e48325", "sighting_of_ref": "indicator--ea075639-8ef8-4ea3-9a80-811bed478c63", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec80b6a-39a1-47d8-8caa-752edc037383", "sighting_of_ref": "indicator--ff8a1922-ab53-467a-9169-bb3428c346f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a18e628-a62b-4866-b9ba-520f8dcc83c7", "sighting_of_ref": "indicator--d04bac2a-61de-45ea-8adb-9660363515b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cba200-a168-4245-ba89-b5350d6ba89e", "sighting_of_ref": "indicator--adfa0044-7ec9-439d-83e7-4d40aba49d3d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104b7921-8801-4218-b4b8-eb6e2a72e423", "sighting_of_ref": "indicator--9d2df1a3-9abc-4a46-8dde-228b4e01e5a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9c1afc-47f0-4d53-8c32-094ebf207dae", "sighting_of_ref": "indicator--5898d785-e7f5-43a2-9f98-7fa495db6c91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8d499a-9e00-4422-8e13-5580e10dafae", "sighting_of_ref": "indicator--1f701ec8-2a6f-4169-b8d0-9e1822ca1f7f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a6ac7c-890c-4a1f-8e8b-5697571befe7", "sighting_of_ref": "indicator--c89138e2-2293-46eb-a822-d836ba041790", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361d183d-89b3-4c36-af79-f3db02d64f6f", "sighting_of_ref": "indicator--ba3ec1fe-2a69-4896-a0fb-d671d97792aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94e7685-d89e-44f8-9610-b76ba710529d", "sighting_of_ref": "indicator--dc4c00c6-68e0-414f-a6e5-ac2cad4d9fd4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ce724a-f37e-4536-91bb-c49dad60601b", "sighting_of_ref": "indicator--694f4785-e75c-490b-8f67-2952323b39cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb40562-5c18-4ab2-9fc4-4d40acba32ec", "sighting_of_ref": "indicator--1bc15a54-153a-4276-ab9b-185d3539b769", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cc0231-e903-4f8e-ac6c-7c1f8e6d6ef8", "sighting_of_ref": "indicator--8ee70ad3-cfd4-4219-82b1-1afd383106df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8306f00c-ff46-49fc-86b8-c5340fe52823", "sighting_of_ref": "indicator--6a965cd6-d252-46f7-a379-0b31f812ae8e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4087c366-b1f5-4b17-96d4-25feef7b7921", "sighting_of_ref": "indicator--6a965cd6-d252-46f7-a379-0b31f812ae8e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660790d8-5c1c-4285-8877-a5737393aa25", "sighting_of_ref": "indicator--0a95646d-410a-43d9-8390-230f716f370a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5077354-2539-4a41-bee4-ccdced379954", "sighting_of_ref": "indicator--91fd923e-904c-447e-8467-c953fde284bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358320df-87f5-4f90-8e4c-2f16b2f96caa", "sighting_of_ref": "indicator--ebb821d6-7595-474d-9632-8381060952bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c49644-7b88-4730-8a7f-45a68e571d5d", "sighting_of_ref": "indicator--bbe03acc-e7f7-4610-a0c4-36effe189ff8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0719bf-bb4a-4b61-a08d-d586d8aa349f", "sighting_of_ref": "indicator--73557c63-cbfb-43ab-b191-18b035d6973a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a608d0-1a1c-4376-b1e3-84b39c9005e1", "sighting_of_ref": "indicator--cb939d5e-0d3b-4db6-9dd9-c5c0b32469d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9d9f15-03ca-49a0-89d4-09c5cdc7efbe", "sighting_of_ref": "indicator--9b5556c3-6881-4b7b-9716-49e83f137588", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdcd3a4-84a4-4240-9a30-1ff3c6a1fc61", "sighting_of_ref": "indicator--98e03b19-b6b8-43c4-b4f3-98d7527cecd8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dd802b-f83d-4b9e-8be4-28390f620983", "sighting_of_ref": "indicator--4317f7f8-363f-4d23-b0c4-ef444c9bcb59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e43f5a-f845-440f-bcbe-d24f87bca5e0", "sighting_of_ref": "indicator--4317f7f8-363f-4d23-b0c4-ef444c9bcb59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc1cfcd-248d-4d71-b209-1f769f4bafca", "sighting_of_ref": "indicator--90226b89-7d25-40cd-970e-18d7fcf5d97f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a93fb9-fb5b-41bb-8b99-9fd3eecb8452", "sighting_of_ref": "indicator--90226b89-7d25-40cd-970e-18d7fcf5d97f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba0348f-7b1e-493f-b120-1354944174f2", "sighting_of_ref": "indicator--6048fb05-d5c9-48b8-9de2-0c3b4869dcff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064cf0f4-694b-42e3-a1e2-5d8338e92780", "sighting_of_ref": "indicator--6048fb05-d5c9-48b8-9de2-0c3b4869dcff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dd7881-8a7d-4a6b-962d-d60b9c40a88b", "sighting_of_ref": "indicator--be6d5528-ca2f-4a53-b03b-8a1150830909", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3ed8e9-46d3-43fa-ab1b-9d52c99d56ca", "sighting_of_ref": "indicator--be6d5528-ca2f-4a53-b03b-8a1150830909", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f24254-4f04-427e-9bff-ad2fd46260dc", "sighting_of_ref": "indicator--2d998f67-7db5-49b7-bea5-85a8e3b2dde5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f479cd11-6112-4af4-8aab-52008b9c6427", "sighting_of_ref": "indicator--0e98a9c1-7c0a-4b58-a1dd-9ea8d4931741", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f076af-0c6b-4c4d-b227-e308f56eea10", "sighting_of_ref": "indicator--bad539eb-aee7-4e92-8705-013a0ce49159", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c513f048-6312-42d4-ab19-9a00426f50c6", "sighting_of_ref": "indicator--113b3989-774c-4634-9755-b34c9cf9faa6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578d2907-d8ab-44dd-b55a-5ff43c4749df", "sighting_of_ref": "indicator--a70d10d7-65e4-41f8-b43b-db725327824e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc6d5ef-441d-439a-8468-7262235df8b1", "sighting_of_ref": "indicator--5995aa15-40f5-4a00-84c7-5a2ab5c964e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16156132-43a3-44b8-bb70-b3759d6f0e77", "sighting_of_ref": "indicator--1699e3e2-cd0d-4332-8a8e-f0fc53cc3817", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec2c732-7afb-4167-8dbb-9d7a42ada7ed", "sighting_of_ref": "indicator--bbeddd03-cd45-4879-aabb-8d3e21f6ecf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67ae11a-6275-45c6-a4a5-5eca4655db90", "sighting_of_ref": "indicator--8039ba19-07e8-4e33-aa46-75b7306c1bb4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b9894c-cb6f-43b7-99bc-283eada725c6", "sighting_of_ref": "indicator--7d5936f6-b11c-45a6-bfd5-f0e65dd704cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972ee815-2233-49e1-8406-77d0462f6aba", "sighting_of_ref": "indicator--bdb6147d-c752-4c00-84d4-7604ed9fdcab", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e095913-6bee-4f32-b5d1-596d320a677e", "sighting_of_ref": "indicator--8f058c1a-2cfb-470e-b0aa-1bd975bfce2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4813e14-6a4e-46e7-9cc7-060ae0a818f5", "sighting_of_ref": "indicator--5b7bd4f2-d3a6-406e-9256-dc85e3527999", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92c50f1-64cb-404d-94e6-214ed7923592", "sighting_of_ref": "indicator--8a080022-11ad-4fde-9bea-8d625f7fd1a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73adfe47-cb5d-4534-a9aa-683ea9102d70", "sighting_of_ref": "indicator--501f2132-1f45-4d90-bd7b-7f564356b558", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04445a85-3524-4e97-b60f-62624474ff47", "sighting_of_ref": "indicator--1659106e-9f0e-4db9-9dd7-484cb69e032e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0635f2dd-a488-4362-8eaf-922ace6b9f68", "sighting_of_ref": "indicator--f352d178-69e1-4a59-b03f-47e5f7e08601", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d368cd47-3772-4f66-b7d6-90ad520433fc", "sighting_of_ref": "indicator--45188a97-ec30-4a32-b3e0-1823ef0754f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2aebb79-4ccc-4e00-9325-a9cb3391e6d1", "sighting_of_ref": "indicator--f08dc898-d6bf-444e-9696-7abfd872ad1d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3165a1-c1b9-4efe-bbe1-32c49056b1ca", "sighting_of_ref": "indicator--f08dc898-d6bf-444e-9696-7abfd872ad1d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa3bf03-6204-446d-bbf0-70fff00689e4", "sighting_of_ref": "indicator--2fb9969a-3a11-4e7b-8b57-9338a0ca6348", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2ddccf-41ea-4ee8-ad3b-b7a93936a059", "sighting_of_ref": "indicator--9478d375-cdaf-4dc5-802b-e5ea37ef9b38", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf1cdff-b1da-4c6d-af15-a1026a83a34f", "sighting_of_ref": "indicator--fa21fa07-5fe2-47b6-8d29-7b78fba149a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76abb481-2669-4b3d-b690-bc0c8154826f", "sighting_of_ref": "indicator--e579e4de-788b-488f-b749-c0f751f99e2f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d326140-0cbc-4a86-b321-23c3f909554e", "sighting_of_ref": "indicator--9831de82-f50c-4947-93a5-781264419303", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e28467-c31d-49d4-ae94-9637b01c3498", "sighting_of_ref": "indicator--5f98c41b-5a90-43d3-900c-6512a27328c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5275a3a-d008-41c3-a180-4c53b6d575f4", "sighting_of_ref": "indicator--8a06feb9-b28e-4699-af8e-793f31ef92b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ef2059-c913-4bec-91cd-999b52dd387f", "sighting_of_ref": "indicator--8a06feb9-b28e-4699-af8e-793f31ef92b3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5fee40-72ed-41b4-b5a7-9f2ae85f15a4", "sighting_of_ref": "indicator--d4c59220-6e17-408d-80ab-28deca9b420f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbf539d-2f48-44c7-b81c-6110a9463d14", "sighting_of_ref": "indicator--179b20e4-3efa-4813-8e95-93360f32b794", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb1b84a-6822-4c27-a60d-831bcf46ec3e", "sighting_of_ref": "indicator--017640f4-5d9b-4c8f-85bb-3bc72f4458e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bf1b18-fdca-4778-8cd6-ae0e0c8c643f", "sighting_of_ref": "indicator--2eab5ad2-0008-4c3c-96b7-c7f19fb69477", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ee85da-d46d-43ab-9c19-1952761fe4b9", "sighting_of_ref": "indicator--acccbc3f-c3ae-4c6e-824f-d18d37f99b3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049dcd23-83ff-4bac-9e5b-f5e1afe51cef", "sighting_of_ref": "indicator--d8e2e15b-2f8d-47af-8653-9c9216a5117a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1449feca-6ed1-4615-9c78-425638d4589d", "sighting_of_ref": "indicator--95830d41-db92-4707-b4d9-d209862c1077", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45dcf99-3b2a-460c-9118-573ad509d3d4", "sighting_of_ref": "indicator--ec7241d8-8552-40a1-b3dd-21aef325ac60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad00a9d6-0f58-4d34-9720-efdd4ac95626", "sighting_of_ref": "indicator--57b95546-1188-422f-a068-68e234781ccc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d39617-29ad-469f-bfa0-cd50505c984d", "sighting_of_ref": "indicator--1866d4c3-b271-4e0d-9eda-3e3a1249c725", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05651371-d6e4-4884-b4a1-72a42cf28289", "sighting_of_ref": "indicator--413ad9fc-23e3-4979-b6d2-c939bb082300", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12ab009-e974-4364-8bf7-36764bd746ef", "sighting_of_ref": "indicator--5104a47d-47cb-4833-86a6-8679b3fac08a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f16d0d3-99b1-43e7-819f-b9be70067e71", "sighting_of_ref": "indicator--00761966-15dd-4fa1-9f89-876cabc21029", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0cb5af-b818-48d0-8f31-e7fdc436f8f7", "sighting_of_ref": "indicator--35198955-fcd8-4262-97d3-39cefea1b606", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea4fb80-9bd2-4cfb-bd16-7604848e22ae", "sighting_of_ref": "indicator--660fcbbe-8ad5-414e-a66b-e823a2ed56fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c57740-b9c5-4deb-af95-b6aaf9a42c24", "sighting_of_ref": "indicator--487548b3-4795-47d2-b089-98751a23890f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885b882f-32dd-41f6-8d5f-0d66c544e17d", "sighting_of_ref": "indicator--53b565e9-ce03-4501-8b9d-8da7398bde18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1c1295-1293-4743-83e6-0429bf0eccf2", "sighting_of_ref": "indicator--701fdaa2-efdd-49c6-bc10-200248044946", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3fc21b-36b7-42c7-9c2c-358bc5c5a9b3", "sighting_of_ref": "indicator--05fec1cb-bef5-4462-82ba-547f1636823e", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4378627a-9d83-47f7-b1ef-94b30329394d", "sighting_of_ref": "indicator--063b67c9-fe8d-40d3-aa14-28da2425c0fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b63085-7ce9-4bb5-9e31-bb16375c6925", "sighting_of_ref": "indicator--063b67c9-fe8d-40d3-aa14-28da2425c0fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cb0fe9-d074-4ddd-b916-c66608bf85f0", "sighting_of_ref": "indicator--85eb5e77-abb4-437d-90f7-9ba33ed03a03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1856b6d-cab2-4fd7-ab18-22d1fb29a850", "sighting_of_ref": "indicator--d1f7fac4-37c5-452c-87f5-e9102d87354b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d38f69f-00e2-43cb-9feb-e513ecb541c0", "sighting_of_ref": "indicator--5b92c70d-a0c1-42ce-b7d7-d5559febaf43", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471241a8-aa9a-480e-9dd1-ce1a5223588c", "sighting_of_ref": "indicator--36468051-b4b8-4ce3-a337-0529c3a982ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deab90b2-4db1-478e-9afc-e4e627de4aef", "sighting_of_ref": "indicator--97154e7d-e0d3-4c3f-a013-cd04f65e0e02", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a87976-6ea3-431e-bfd0-be9b35fec887", "sighting_of_ref": "indicator--a3465322-8645-43f8-93ce-6e9b7c8a7609", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb97ba6c-9a2a-4474-ab76-a6abeab4b385", "sighting_of_ref": "indicator--791d08bb-23a6-4059-828e-e8286bf379d6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0178e17e-77c8-4631-b571-9ff746f27aeb", "sighting_of_ref": "indicator--f10bb0ba-4bcc-4af2-9f1d-37f9fcb25b8d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c225050-1c02-4478-87fc-1651404195d7", "sighting_of_ref": "indicator--1cefdb9a-abad-44de-a636-22cf32d82346", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f6d754-12eb-4ce4-92a4-9317fe0a976c", "sighting_of_ref": "indicator--ba4599a6-01ff-4596-92fa-81bce829e7e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1831531-4fd9-418e-9149-6dc0114e8b1d", "sighting_of_ref": "indicator--d9974cdf-a3bf-47b4-a638-3615f70ea07b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588d2cb7-d5ee-44e4-bed4-cbba183f397d", "sighting_of_ref": "indicator--d9974cdf-a3bf-47b4-a638-3615f70ea07b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb1f128-b764-4390-91e9-7f69dbf4168d", "sighting_of_ref": "indicator--d00b10e5-d9ad-4b97-a160-2786519f286d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31834bd1-eafa-4aad-aa06-69d04cc68307", "sighting_of_ref": "indicator--0515a9f1-513f-4e0b-a0bb-540d1222fdb9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847ddd05-68ff-4437-94c4-da3fcb21b518", "sighting_of_ref": "indicator--555e53b3-b478-4361-a6d6-8d19aca8ec41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e688cb-d5c9-4d38-84fa-11accf011e89", "sighting_of_ref": "indicator--0c19dab5-2e0c-4574-b815-bca522ade099", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a64e35b-c5cf-4c62-ac1b-fc0d0dc3b736", "sighting_of_ref": "indicator--9d011901-e5ad-407a-8372-44afe3b70f3e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c09470c-18a0-4de8-8a13-9aeb670292be", "sighting_of_ref": "indicator--339cf0a7-47df-4f38-87e1-6be1f968247d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbc4722-31ef-4ce9-a200-09091410628b", "sighting_of_ref": "indicator--4b8d0069-c09c-4302-a81a-8ef81885f974", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28f6bf2-7f8d-4125-bac5-c5fa3a9e7185", "sighting_of_ref": "indicator--626f95b4-2d15-4e59-94bf-d79aeed5b747", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2947c3-4634-4cd0-ad62-c9498eaa8145", "sighting_of_ref": "indicator--1578e3da-7585-45b6-b017-5d3efb4fa895", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f98c9e-3007-4159-b661-b47dd1ddfa34", "sighting_of_ref": "indicator--81bcc900-d24b-43e6-94a7-c697e5f8b8cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065d4d11-d999-4483-aaa1-e8da56a4fcb5", "sighting_of_ref": "indicator--1f534bd9-b4fe-4799-82e7-43fce650fddb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f64880-187e-4710-9e8e-f9cc7811dc19", "sighting_of_ref": "indicator--5175cc91-4829-4e18-a6c4-7ebcef8fa0dc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2247d271-d671-47d6-888c-bff71576c3ed", "sighting_of_ref": "indicator--b0a9e908-80e2-4def-b6ff-6b9c138d606f", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea84c610-92f7-4b63-aea0-2843f4c4e01e", "sighting_of_ref": "indicator--6a323eb9-3743-4005-9c72-c318b0a3b434", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fe509b-ad07-47b7-a96d-84272a0f3b82", "sighting_of_ref": "indicator--88974c1e-7881-4fc4-85b5-536f06977a9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b134d8d1-d855-4c06-ac4e-f9486d399c27", "sighting_of_ref": "indicator--68dc911c-628f-4701-b057-bca3ee8c4adb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b598a84-8dce-4c85-876f-ff1c75a6ad3c", "sighting_of_ref": "indicator--68dc911c-628f-4701-b057-bca3ee8c4adb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c63b36-ab68-47e2-aaef-41b475c172e7", "sighting_of_ref": "indicator--2226deec-2abb-4237-ba99-b1d6c620187d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c3d85f-9d73-4f73-bbec-b1ceb8ac5fbe", "sighting_of_ref": "indicator--2226deec-2abb-4237-ba99-b1d6c620187d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a438048d-654e-4b1f-a6c7-074d4906325a", "sighting_of_ref": "indicator--80d3fc41-cd49-4c47-901b-5275880044ac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35214056-2f01-4914-b890-8bc27443ab5d", "sighting_of_ref": "indicator--80d3fc41-cd49-4c47-901b-5275880044ac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3821fbb-8e7c-444d-9d4a-6bd48e939931", "sighting_of_ref": "indicator--78761fe8-dce2-4848-bff5-85d9f1ad0f5e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb554ad0-7209-4eac-bff4-747ace08f5a7", "sighting_of_ref": "indicator--35a2fe6a-3ae9-45e3-a351-3783a0c2c8e1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0f8817-f592-40a0-8c87-2c91ef39faed", "sighting_of_ref": "indicator--c6a87aae-b3a8-4653-bf56-0ae9fa0bf359", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f88d49-7ba7-4284-bbfa-728a59624523", "sighting_of_ref": "indicator--9ebd3f23-5d97-4aec-b311-d7257688fda0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d375e73-5a90-4533-8db0-4ff3cb419067", "sighting_of_ref": "indicator--6640a422-7b36-4f82-a0e7-642eefb3a80d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5723e4-03f3-4785-a099-2ef7ed93b4d4", "sighting_of_ref": "indicator--8c809c5d-393b-4498-88e0-87180311695e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a6b830-4fa5-41b9-a7b5-a8182f1aadce", "sighting_of_ref": "indicator--eecfcdd2-b639-482e-8483-98d5c3d23aa0", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9610a8b3-7056-4301-af89-326a92a69d74", "sighting_of_ref": "indicator--90a8b208-3f7b-41ce-b1d8-38c3ef1f9ebd", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987d5d78-2f40-416d-8784-2f7659975548", "sighting_of_ref": "indicator--4cd4efa7-6f28-4734-be0f-5de5a0b593c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d4d7b1-f5eb-45b8-bf9f-db541bea6a72", "sighting_of_ref": "indicator--f299b497-d5f2-4d49-b13b-583886c0d0a6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c61b18d-6dcf-436d-9dcd-02aec93c0be1", "sighting_of_ref": "indicator--30ea835e-a826-4754-8931-f83513760b7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc2f994-ea31-446a-9663-b4a3007e6ad7", "sighting_of_ref": "indicator--0ef8a210-79b8-4301-9701-b14334404dc1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebd0a22-eddf-4106-baab-204a970f1d29", "sighting_of_ref": "indicator--ec2d94a1-ea23-4a95-b700-716ef048b62d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2afc23-6fa8-4e21-87b7-c54041b645cf", "sighting_of_ref": "indicator--ff66fd79-5212-48cc-8ad8-fd89454f7217", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fc62ad-4f32-4493-ac45-c64e16dadb27", "sighting_of_ref": "indicator--e5e35100-3033-4f6a-87b2-2d3fa467bf6f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a1371f-5967-4030-ab8e-75336bf40057", "sighting_of_ref": "indicator--e5e35100-3033-4f6a-87b2-2d3fa467bf6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ab0b44-9949-4067-8840-119395c2c84e", "sighting_of_ref": "indicator--0e72de14-7af9-4143-a353-0f5cf8f4c8e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14feadb5-1db6-40d1-a13e-f6e8936e90cb", "sighting_of_ref": "indicator--f4e4cbf0-2595-4dd8-888f-941772f9a659", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5302da39-5bae-466a-ac5c-6b83cc725b7f", "sighting_of_ref": "indicator--2447b4c6-acdb-462b-8648-cc55b04d4dbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e3f9ed-9e66-4b9f-8a6e-27bfc93f9eab", "sighting_of_ref": "indicator--5051eddc-aafc-4ed4-adc7-4b60860ca6b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf402a9-19a0-44c6-91b5-4098b07a511e", "sighting_of_ref": "indicator--78fc5466-6962-4758-a09e-f03b0302eb7f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2c21c8-17e1-4426-b2d9-de2832edb1df", "sighting_of_ref": "indicator--76335ecc-1511-40d7-8b98-c759e3151fcb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ebee86-409d-4514-a3ab-264fb17aecbd", "sighting_of_ref": "indicator--5f6cc570-8c50-48ad-9543-e60045defa4f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31e73ac-c60f-4262-b855-5dad949d262f", "sighting_of_ref": "indicator--4edf385c-df53-437f-94a0-917ba9af99de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1e6168-b466-424e-a4f6-7e43bae2229f", "sighting_of_ref": "indicator--09894800-7aa7-4c4e-b2a6-2ca4a84c54f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce42666-9339-4e64-be2f-e286a28bd5b1", "sighting_of_ref": "indicator--acc56c10-3dcc-48b8-99bf-457d80fb8bde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bc8fd6-80e0-4506-b3fb-36153da80003", "sighting_of_ref": "indicator--3c0833b7-8264-4982-872c-ae4ceefcc719", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7b557c-641c-48c6-a4ab-c9fef4de7672", "sighting_of_ref": "indicator--1f3b1dca-e981-4f32-bf4e-7ef815ca3ae4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed2e4a8-74d3-4c5e-a372-68659e49d25b", "sighting_of_ref": "indicator--1f3b1dca-e981-4f32-bf4e-7ef815ca3ae4", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57777a96-7ebd-4516-8f1d-0f54f7095a6b", "sighting_of_ref": "indicator--ebdeb270-6c34-4626-97e7-050b46e59e24", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9263d11-8a4b-430a-8345-b1c7094666be", "sighting_of_ref": "indicator--b99d5c8a-3164-4a5a-96bf-cc94fc8c4248", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84083c0-7ffb-454e-abaf-3bd7840625cf", "sighting_of_ref": "indicator--ca8bdb44-4aa5-4282-afb2-2b7bd89ca048", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f0dbdd-7965-4222-a435-7c86b63ea49c", "sighting_of_ref": "indicator--4e5552ef-3b59-4bf9-9634-42fe39cd0ce9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aefdb18-9684-40cc-97cb-3f07277928f1", "sighting_of_ref": "indicator--792a3dc6-6501-4f81-b61b-380f47fc08e1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b1c1c2-fcb1-416a-82a3-13dd084a43b9", "sighting_of_ref": "indicator--39c0777f-b639-44b2-a187-5480044527f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6d70d8-6fba-4367-9889-7001cc953d1f", "sighting_of_ref": "indicator--627937cf-17cf-4c31-98b7-ba441add39f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ff224f-2a3f-4882-9667-a276c12b3c85", "sighting_of_ref": "indicator--627937cf-17cf-4c31-98b7-ba441add39f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59dced1-b863-4653-abce-448969ae73d3", "sighting_of_ref": "indicator--842a5f15-b760-471b-8cb0-7e267c24fd86", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df13bb3-afe4-4299-a717-53a96077d938", "sighting_of_ref": "indicator--842a5f15-b760-471b-8cb0-7e267c24fd86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71021c46-1a3e-4615-8166-0fa3f305592b", "sighting_of_ref": "indicator--40331807-5457-4272-9037-5516ca116ab4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae8ab77-b12e-45b0-8243-b5a7529194eb", "sighting_of_ref": "indicator--675d2070-f832-4fcb-94e3-5517d0f7093e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be47ff2c-462e-4800-936d-12cb5b5af3d5", "sighting_of_ref": "indicator--5beed2b2-8fe3-447b-9c13-da9e75d291bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a117de9e-029c-46fd-a385-89c6ab2db27e", "sighting_of_ref": "indicator--89225e28-d243-49ff-825d-e80ae630c3d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae71fdf9-58d4-4e7f-80c3-a8390ddabcdc", "sighting_of_ref": "indicator--b90457ec-7a0d-4868-9dbf-42fb9dfed15a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c91023-7048-48cb-a7f4-3a98440b2b85", "sighting_of_ref": "indicator--3bd7d203-afeb-4ce6-bfe7-cb069231f775", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3516bbb9-54c8-4c47-854f-7701c833f739", "sighting_of_ref": "indicator--3bd7d203-afeb-4ce6-bfe7-cb069231f775", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56031074-6860-49d4-ba21-75883fe58cd7", "sighting_of_ref": "indicator--f263591a-e328-4fd0-bdae-8dc8ebd5d1f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b217bd-4579-47fe-8de2-4f87f105b319", "sighting_of_ref": "indicator--af9a0c62-2119-488b-8a72-8c9f4a38e416", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c53230-482a-43d4-bd8c-c4dc2234fc95", "sighting_of_ref": "indicator--af9a0c62-2119-488b-8a72-8c9f4a38e416", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556e1a07-9851-4580-a34c-83cffb1fbc50", "sighting_of_ref": "indicator--1e16be3f-032d-44a7-b941-793c7b4234a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ebc862-acb9-47a2-8650-bffa00700d58", "sighting_of_ref": "indicator--ea950b45-3338-4a1a-b34d-67a24737118d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56331d29-b4e5-4be6-b55a-b6b9c2c7831a", "sighting_of_ref": "indicator--9ac11afc-14d4-4957-8f27-e8b0d92b5d67", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53233040-086c-47ec-9263-64b42cfdd635", "sighting_of_ref": "indicator--9ac11afc-14d4-4957-8f27-e8b0d92b5d67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f371bc-d507-4c09-a2a3-b9aada667d33", "sighting_of_ref": "indicator--3724b264-2e3d-40e5-bf0d-5e3013b760c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91bcc66-22a3-4762-95c1-9b8253262039", "sighting_of_ref": "indicator--ed1d6636-5847-4191-aab7-e458d1856873", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287ac689-072b-47fe-8677-86c90c08d89b", "sighting_of_ref": "indicator--0b4d77a3-d9f3-467b-8aec-5720fc474549", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc78535a-3b76-4645-8541-5aba5f5923d4", "sighting_of_ref": "indicator--86cf2d53-6c6e-4dee-bbaf-abe45ba98b75", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7209e4b1-db14-4240-a638-7538639b2242", "sighting_of_ref": "indicator--e98acf4e-d5fb-4957-b3f7-58d2b30c419b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46df638c-ccc2-490f-95c7-7bd606f907bf", "sighting_of_ref": "indicator--500cd14d-e1f8-4662-96c2-178b39739c44", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6b8da5-6a0f-4e5a-b028-eef37830958b", "sighting_of_ref": "indicator--df59085f-ef44-4fec-9718-e48bda633008", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2242cc8c-5358-47e4-befd-0e7474315173", "sighting_of_ref": "indicator--e1b7a53a-d307-4394-a841-14792031e6ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8312248-f554-4a7f-8872-9328ffa0a91c", "sighting_of_ref": "indicator--ceed330c-8cf8-40d1-bd53-838939cc0eac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d2b060-0cfb-45ef-a4d2-4efa05acacc7", "sighting_of_ref": "indicator--0926922b-5e39-4c81-a7a2-39aeefeb68fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343df09b-6f85-4b1f-85ae-1a301474f928", "sighting_of_ref": "indicator--768623e8-10a1-43a0-bca6-e43ccba48770", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc5004b-dd48-4f2d-9a1e-154c219b37ef", "sighting_of_ref": "indicator--3a928e11-0330-441b-a133-c3a13eefb0dc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93269ae-9d40-4ba0-a902-39a15f0f6bd1", "sighting_of_ref": "indicator--0257cf90-86ae-4e25-830b-2466c4ad56b2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6006cfda-5dd3-4e67-a24d-9e51f53fffe1", "sighting_of_ref": "indicator--c9215a71-ac60-4413-a3ba-3cd08461ecdf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eec4cbb-e8d9-4708-9c48-d599dad3a8ff", "sighting_of_ref": "indicator--0dccd5af-a722-4acd-bfa5-3c1cb5c3d46d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a8648e-7a94-4b16-bb66-c23ace1bb3d6", "sighting_of_ref": "indicator--3ff03d93-47fb-44d2-ae13-b4a22eaff0d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90205c4d-ad92-49a0-8d09-aa3a47dd1794", "sighting_of_ref": "indicator--5705748e-59b7-4e2d-bd26-eb513cb863c5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c93a16-7d44-46e7-8811-1bab2d432973", "sighting_of_ref": "indicator--b6824b06-cd09-46af-a3b0-9660ac46fe2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fa89e5-16bf-4dc2-8782-df9f95ee3cc8", "sighting_of_ref": "indicator--b6824b06-cd09-46af-a3b0-9660ac46fe2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad9e37b-f054-4a58-936c-5c725e61557e", "sighting_of_ref": "indicator--241fe7c5-fcb4-4071-888e-132010ea286b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecaf922-b614-48ab-aa60-79e8490c91f4", "sighting_of_ref": "indicator--8d6fea02-c1c8-418d-8d57-35e8ff3ca5eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80caa6a6-c21c-4b08-812e-ccbfd3fed895", "sighting_of_ref": "indicator--45d7977f-aed6-4bc0-abfe-cfaea0cdf6fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4b1a4d-4f96-4d20-bd17-8feab55da788", "sighting_of_ref": "indicator--0cd9518e-8072-49a6-b64e-6b6268a9d5ac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0649100d-5ad1-42f7-83a8-f62c6db351c6", "sighting_of_ref": "indicator--a15c1b68-e18c-4fee-b3eb-8e5fe1c1803e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9ea455-31ea-494e-85d5-995c26a05a0b", "sighting_of_ref": "indicator--989427d0-d678-4531-9b0f-6d997682deca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a659b9d1-c577-49b2-ba2e-62b3a1855611", "sighting_of_ref": "indicator--2ceeb165-fa6e-46b9-ac75-ca0f4d71226d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cf1d8b-7490-43e0-949f-85e31edff7e5", "sighting_of_ref": "indicator--36f22fd3-0d21-40db-9bb1-4ee81c157cc8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c338ca7e-242f-4674-bc13-a24aec8e6c6e", "sighting_of_ref": "indicator--ce6fbada-5493-4a31-b666-05ea1b161c88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51be28c-b96c-4611-9b4f-1d7ffa99c180", "sighting_of_ref": "indicator--4594a031-1b5c-4ba5-98a8-5e3bc7ad9d11", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d63e0e-00fa-4b3f-92be-281aaf9f2ce9", "sighting_of_ref": "indicator--006af4c1-eb5d-443a-92ee-f460aee15daa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c62198c-769d-4432-87e0-58708dbe4eb7", "sighting_of_ref": "indicator--6bfd1b35-76e2-4cc9-a77c-b317cc855054", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d068b71-7027-43e0-956e-2539edf52e69", "sighting_of_ref": "indicator--c4dfd5e2-27fa-48af-b446-f9901298e11e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0423ec88-d0fc-4f0a-837a-a9f1f1c66921", "sighting_of_ref": "indicator--6b540389-618d-4796-8371-3852b0edd7e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf71250-4566-4977-8595-f48b65837376", "sighting_of_ref": "indicator--890a6186-41f3-4512-bae1-435254e9c890", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f665cf-88c4-4024-b86f-191ae1bf430b", "sighting_of_ref": "indicator--ee444f05-dda5-4290-a857-68e6e69ea997", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d28c08-0c60-43fd-abfe-4fc43e3f0633", "sighting_of_ref": "indicator--6958c448-8cd2-493b-9b86-cbd79b734c91", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b56f820-0ffa-4cf5-9c6e-f704452e02c0", "sighting_of_ref": "indicator--803ddc13-6ba3-4f7c-8acd-3c682242bb0a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fb4e89-04c9-479a-83ea-95166b92f9a1", "sighting_of_ref": "indicator--692c8d59-7a7c-4979-b9df-8d25087f3026", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab392f6-27f9-482d-810f-2c29ceb99b2c", "sighting_of_ref": "indicator--bfbbaf7e-1750-4b32-a9bf-73ef6610cb94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436d0f61-4ecb-423d-b13e-cc4c7cea5362", "sighting_of_ref": "indicator--e7ac2de6-0e2a-4ec3-ab01-2e23045b03e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78d3931-8729-4e87-b192-8d7952b72261", "sighting_of_ref": "indicator--e7ac2de6-0e2a-4ec3-ab01-2e23045b03e7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa67ce5f-bd9c-480a-bb52-0153464727f2", "sighting_of_ref": "indicator--6aa8464c-39dd-4496-b80f-9dd36c0559fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4994bf6c-6eaf-459f-85ab-7670d8d43b50", "sighting_of_ref": "indicator--130c8942-20b3-498a-8fed-7debce50bc24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3709fed6-14c8-471a-9538-5eea85fb6827", "sighting_of_ref": "indicator--64eb0091-ea7e-4c8c-a780-44ae59d02a9b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c93520e-4d53-41f5-b7bd-52524ddf6104", "sighting_of_ref": "indicator--201212b6-8b0b-470d-9168-b55704e61dfb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a37abb-be5e-4f8c-bede-5fb5d2f14ee3", "sighting_of_ref": "indicator--58f0a10d-9239-428c-92da-875a1181bb89", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9993cf6f-fd41-4738-a712-330b103c2410", "sighting_of_ref": "indicator--33a821f9-a765-4d6a-a418-2721fbc530cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51c23b8-086e-4483-b5df-cac4efec422c", "sighting_of_ref": "indicator--0ebdc9ed-47ec-441e-b115-fd876bce20ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2834142e-0438-41e1-b7f9-ce7cab97ae97", "sighting_of_ref": "indicator--01ffea2d-ffe7-4190-a06f-ae2f7cd77365", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972b0281-1e08-464e-9b53-4f687a9b61bb", "sighting_of_ref": "indicator--2d103019-8af4-4539-8502-03857f6b108b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45152d89-7c9d-4821-a684-708e36cc0fc1", "sighting_of_ref": "indicator--55e1e380-32a0-443b-94be-f7223ed65da7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d364a5f6-7e73-42ac-a358-a5d9f7066031", "sighting_of_ref": "indicator--6da2101e-86a1-46e0-b579-b94d7b977da9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecd3d36-ca1e-4fc8-a4fd-da066a44db81", "sighting_of_ref": "indicator--d96a9668-f8df-4cf3-ab73-0fe5a2fab4dc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c517645-c957-48ee-8a7f-29c487150ae0", "sighting_of_ref": "indicator--c1b1bef7-12bd-44a3-be12-d4b927bae1a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adec8fc4-a7ba-4348-a688-63ea00ebcc51", "sighting_of_ref": "indicator--6d0ec2d1-22a1-4d5d-a624-5654aa5f836f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097ba057-c341-47f5-9ec5-2ecc32510e5d", "sighting_of_ref": "indicator--2475d0d3-74b3-4467-b606-2548e7bbc4f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c66683-3ef9-4645-9ef9-3b2a92c52cb1", "sighting_of_ref": "indicator--c0ae2288-02ce-41d0-b116-839c8f90e2f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c89271-a660-4847-bc33-53611d57574a", "sighting_of_ref": "indicator--6b776c3c-08bd-49b9-a014-ea82e57b99f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36368a01-67bf-4636-b1f2-71e115cc9467", "sighting_of_ref": "indicator--43575e50-fe73-4eee-93fa-76bdc6579d5a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a60f6a4-cd23-4d11-b0e6-1214da1df0fc", "sighting_of_ref": "indicator--63f254d2-892a-451d-bc87-2212ca11cab7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fd4d7a-e5b4-4ae5-b563-d2f48ea5af50", "sighting_of_ref": "indicator--63f254d2-892a-451d-bc87-2212ca11cab7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7187fe5-8c15-41b4-a660-74852ffe519d", "sighting_of_ref": "indicator--e3a411e4-c314-497c-8bf1-7754576a8f5d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ce8451-1e1f-4481-92ff-104caba6f88f", "sighting_of_ref": "indicator--849f4487-a600-4cd7-89be-5eda5b53368a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5607ae90-9dc3-4ca2-94c6-251229b5b5a3", "sighting_of_ref": "indicator--6021ba9d-fc3e-41b5-b38a-a58753743a91", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66390c4-bfcc-491f-a50e-e625ba0cb348", "sighting_of_ref": "indicator--f404aece-8371-4be6-9f0f-a9ee75564a56", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6297eb6-a8fb-4c2a-b11f-875f9be8875c", "sighting_of_ref": "indicator--5a29eca3-6371-4dc9-93c0-e27453bcddd1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e50d89d-b75e-47f4-96ef-6baafcabb0b5", "sighting_of_ref": "indicator--184bae49-6745-4b1d-a6fc-3ff9019f21ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce03eb6-db01-4a60-b625-d15c6f049fbf", "sighting_of_ref": "indicator--9199496f-bb8f-4ab6-af85-61f8637e0b63", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeedfe4-a292-433c-a2ac-1540368845bc", "sighting_of_ref": "indicator--9b0dc490-1e19-4678-9c90-57ab77daae8a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbd6dcd-7514-4f0c-b870-206620872fd2", "sighting_of_ref": "indicator--c1abf17c-bb32-4bfe-a739-d4ec837da1d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb54ab97-d1b5-41f9-bd1d-503a6e10eb48", "sighting_of_ref": "indicator--b10b6152-7ee1-49f7-b7b0-4aa80c2018de", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714c5879-4ad7-47a8-9845-60e5e782176c", "sighting_of_ref": "indicator--3f02547e-2a29-4b88-bc4e-5ad09741cde4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694618c2-7944-456f-9e03-03a4cf331357", "sighting_of_ref": "indicator--055ac15e-8514-46f8-b0b1-8c436a7d467c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fa4118-3f8a-4ba8-877e-4fba27f4e375", "sighting_of_ref": "indicator--66c7cd1e-4213-492f-b186-de90e257f40b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6935cd-8679-4f97-ab63-64e987b233f5", "sighting_of_ref": "indicator--16270d41-0d71-420e-9eb5-5fb22758739d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36887059-66f4-45c5-912f-0f99249aa349", "sighting_of_ref": "indicator--15425b7d-e5a9-4ee8-ace0-b804a81aea6b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91eafc12-64fe-40cb-a7a6-a9755a86d8bf", "sighting_of_ref": "indicator--2e46467f-8b19-417c-a6a8-3a1cf343571c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e08680-77a8-4906-9c8f-482d46ddf32c", "sighting_of_ref": "indicator--bcabada5-fb98-4ca0-bf92-16bc6f71ef33", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48db8e1e-1eb9-4093-8c88-dda902e51b7b", "sighting_of_ref": "indicator--ddac8b97-2cde-4bd5-a537-6b5e3a1a24f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c2b8f7-214e-46bd-b69c-85f089b70a72", "sighting_of_ref": "indicator--75484e95-66ae-4b40-8464-c9af7c9995a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8592ad8-d784-4db6-811e-223d61a958fd", "sighting_of_ref": "indicator--638c5e0a-b064-4427-a839-d50bbadee707", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccbd07d-d656-4c5d-839f-a4f2acb1c48e", "sighting_of_ref": "indicator--06bd7aee-1e64-48a0-a90c-8a7479bdf189", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a95c11-a42b-4e8a-876f-030de4ed6ea4", "sighting_of_ref": "indicator--6eb1a595-ded2-4965-8831-5639d4b4d946", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519be9b0-de6c-421d-a0ef-3ff0312ef8e0", "sighting_of_ref": "indicator--fac4915d-225a-4fd2-92e8-354e4459cd82", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11cf179-b387-47f6-a230-514610617ba6", "sighting_of_ref": "indicator--ef38d2a2-f4b0-4a1a-9257-d87a025720e4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c39b9b-462a-4f68-8e5d-df40015f0303", "sighting_of_ref": "indicator--0e4eab06-e793-4aad-b06f-4c15c840d99e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ef71a0-9b58-47e4-afd4-e43cbf22d471", "sighting_of_ref": "indicator--77d0fae5-30e8-47d9-8b6d-81da0dc2ffd7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e113ad5d-b481-4a2d-8f79-0f272fe55917", "sighting_of_ref": "indicator--54736a5f-cf95-4e2b-899f-3028e55efc97", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a0dee8-d258-48b4-aab0-d617c4dca2bb", "sighting_of_ref": "indicator--4bd49487-c4a3-4320-bfa9-b76182ff39fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31bc1e2-1805-41ef-8d03-9ff0ae20cc72", "sighting_of_ref": "indicator--c0461eab-e327-4b10-a201-a02f57f364aa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee2bd27-88a8-44ed-a741-a38096624105", "sighting_of_ref": "indicator--69e7900f-f009-4cba-9a4d-f4ac6209bf34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c01afb-baae-450b-aa07-12f66560e8ba", "sighting_of_ref": "indicator--0937c174-54a5-462e-aa80-3bed376e63ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfe30e4-7ab8-46d7-80eb-be90717d2025", "sighting_of_ref": "indicator--ecb23952-c9c2-401d-b2fb-fd42e904aad2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2853d436-134c-41b1-819a-86c7d9a830fe", "sighting_of_ref": "indicator--333b7f97-01bf-4c02-829a-370f99c21c6a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d57ef6-5196-40ee-a881-77422165c365", "sighting_of_ref": "indicator--3dca0fde-3b90-48f2-86a2-e999dca98316", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97897eb2-db8e-4566-8820-7c6d312c8f96", "sighting_of_ref": "indicator--f2ff0881-a3c6-433e-a0ae-42206a1f3ebe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bf9b49-c41c-4477-85c9-ed3b7aaa4592", "sighting_of_ref": "indicator--7857f9db-cb71-47c0-97c0-c3527735db7a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8216a583-615a-4b0c-aa75-599c12076264", "sighting_of_ref": "indicator--6adfb511-1ad1-4b12-9e53-a6872aea6a81", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d106a320-d35b-49fd-96f1-b90bae33a739", "sighting_of_ref": "indicator--e0fb69f1-38f3-4532-a58b-c02ba3b3b2d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01f9757-5a70-498d-a249-f109bb28320c", "sighting_of_ref": "indicator--a064aef2-7306-4c3f-9154-e737c5e8019a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3271bf-aed7-4f0f-a889-7c3337ebd3a6", "sighting_of_ref": "indicator--1278198e-057a-40eb-96ad-4ec3e4d79be3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08923317-b828-4c53-9d17-e82a92b4bd95", "sighting_of_ref": "indicator--0272b342-7355-41e9-b050-0cf624341e9f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13464a4e-8ed8-4aed-93a3-f554a676492e", "sighting_of_ref": "indicator--87042fc4-3e2f-4a72-a48f-8025f2d2101c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2a67c9-703e-410d-83be-34acbbedaf45", "sighting_of_ref": "indicator--151e33b4-d6d7-4dfe-8ae4-16527190e96c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc69c892-38d9-4134-8ff8-212bc9d1e851", "sighting_of_ref": "indicator--4ad5b8b9-4913-44cc-a809-4602f36fc6ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1929a59-2cf6-4888-a1b4-82bdff26ffef", "sighting_of_ref": "indicator--f6a922c9-e71f-46b1-a423-40ae9b107c3f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351d4694-5229-45ab-91fe-14ec7665d4ad", "sighting_of_ref": "indicator--4493b38d-3e0d-4cc0-baee-d75308daf843", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc02df9-6190-4ebf-80a7-6b2c0a43cc1d", "sighting_of_ref": "indicator--0ddb3543-ddda-4313-a9d6-febc78b78e3a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d518dc62-ced1-41f8-9d09-ff9957530687", "sighting_of_ref": "indicator--9e7d4823-1c8d-43b0-b033-a25bf4bc9757", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381da49d-c64b-4757-beaf-97bb917a79b8", "sighting_of_ref": "indicator--724e0dab-d976-4218-93f5-4258fb946fe9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9138543-4781-4e54-9415-e4e91210631b", "sighting_of_ref": "indicator--ad41f926-d57a-4b0f-bedb-2a14b418b38d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b0e6ba-ae50-49a1-896a-777141f2b373", "sighting_of_ref": "indicator--ae0b1066-7f2b-4505-84ca-24e59856defb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d93b0d-5a7a-4fb5-a50c-0802b2ad8026", "sighting_of_ref": "indicator--d4fd03a2-86dd-4704-b4d3-604323eb5b7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90468ade-1ae8-40de-a375-37a0a62f6e53", "sighting_of_ref": "indicator--f59eec32-0ce1-425e-b486-0602fa7527c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38b5c4b-a832-4dfe-8cf1-98a2d3a7d370", "sighting_of_ref": "indicator--93459ea7-036d-4ac5-9553-f59aa9cd5420", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0cbfb2-57fd-4a53-8b43-a06ff09ca85d", "sighting_of_ref": "indicator--6b20cd90-d515-49a3-9845-a812cc095638", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bf1d73-d514-4d68-ac85-f971982822b9", "sighting_of_ref": "indicator--bd5b9572-f025-412c-8768-3a0970bd6228", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de121b78-56bb-4cec-b31a-93102096bfaf", "sighting_of_ref": "indicator--63d5a9a3-5053-41b7-b3f7-986eb9b330b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dbf07b-478e-4fa8-88fa-d813c2d3908c", "sighting_of_ref": "indicator--308fd7bd-26da-45e1-87a5-beba7707f90e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b061411-d92e-4c6f-8d4a-f5a1aebaf45c", "sighting_of_ref": "indicator--e93d1837-0f08-46eb-8ac2-e4ad9aeee7c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27270793-6877-4a06-9449-26f271c7fa52", "sighting_of_ref": "indicator--c5a1301a-2d81-43ae-9b12-90997be525a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5710584-a650-40bf-a735-f753abbdd85b", "sighting_of_ref": "indicator--eff2fa4d-2826-4e0b-83f5-50e6f5ed2611", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6d95dd-bc77-4b95-b666-3e9c856efdff", "sighting_of_ref": "indicator--1848c282-83b3-4c4a-8a01-7b14c1823391", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d49d45-e034-4fd6-865f-c13ceff056e9", "sighting_of_ref": "indicator--229809a6-35c6-4e1e-82ff-ba279e3f7fcc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e180408a-2fab-4111-9f39-7aab7929e024", "sighting_of_ref": "indicator--229809a6-35c6-4e1e-82ff-ba279e3f7fcc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbff5281-b4ac-4048-bd1b-4535319adbc0", "sighting_of_ref": "indicator--d04f64c5-c8b0-49f5-b7ff-780335a55be4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe76fd5-5f56-4521-93d1-d3a8f41f2de4", "sighting_of_ref": "indicator--f8548670-2a49-48b5-8127-973cfccea93b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c298686b-74dc-4bc3-a876-f1731990d88a", "sighting_of_ref": "indicator--90dc4981-eb5f-4999-8a3d-6cbf2efca49d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4d1cc6-cde7-475a-b564-78794ca7a0c4", "sighting_of_ref": "indicator--97134266-944a-4a77-a9a5-26e52568e7e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad490335-4308-4dd0-8b30-e93bd1fb5137", "sighting_of_ref": "indicator--5922e7cc-6a6e-4abe-be88-8d2f7ea03cf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb2fb15-c464-4143-b83d-4e310ab96598", "sighting_of_ref": "indicator--802ac3c5-a19e-44b6-803e-689d1a64468d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39654a2-62ea-44fe-93ee-e6b6ca2e8c22", "sighting_of_ref": "indicator--802ac3c5-a19e-44b6-803e-689d1a64468d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d8d082-b123-4691-8622-6d6d5ea39e88", "sighting_of_ref": "indicator--1e113c89-055e-45ca-94a6-42c6ced21853", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335a2811-3912-4798-b1d4-9d0163a65308", "sighting_of_ref": "indicator--4997cf48-f9ca-4e9f-a275-0b74713c2859", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac821dc-af7f-4b4c-881f-138911fd96d0", "sighting_of_ref": "indicator--4aab0550-0b57-43c2-8c1d-6670a3f2c342", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab9c0e4-f1bc-4ffe-be2b-04999b21549c", "sighting_of_ref": "indicator--02bf219b-86a5-48b2-88ef-1646c4930721", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e256bb-a530-4413-b982-af46911bb702", "sighting_of_ref": "indicator--02bf219b-86a5-48b2-88ef-1646c4930721", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f8b95d-5f9d-42a5-8d6a-fa4f1c56f410", "sighting_of_ref": "indicator--8642749b-a7f2-415b-935f-afd12ab5d4d6", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a206b2f0-3818-4a65-b117-1a94e758ad85", "sighting_of_ref": "indicator--f0938e65-398c-488e-a787-e669381ea14d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c0b557-ffda-4514-bdca-04746d5d3e49", "sighting_of_ref": "indicator--b198c319-957b-42f5-bdf9-33a7ea534573", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4edb71-3071-44a3-b05d-71692e0bb801", "sighting_of_ref": "indicator--0425b4c3-be06-4a0f-811e-227644012c1b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0010f7d6-db3c-476c-a412-a38bde921e03", "sighting_of_ref": "indicator--0425b4c3-be06-4a0f-811e-227644012c1b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9a8db4-6b6d-4797-aa1d-47e4e8a40527", "sighting_of_ref": "indicator--95c52600-db73-4b8e-87b3-07ef85a44f48", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004d5b78-1b8a-4786-95cd-f5d7c04e6b0a", "sighting_of_ref": "indicator--86e2da3e-e1fa-42b4-8bc9-0a337215751f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9392d0e7-9992-4fcb-8690-83385dad74bc", "sighting_of_ref": "indicator--86e2da3e-e1fa-42b4-8bc9-0a337215751f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9af187-d03c-4e83-9df9-07c336f6e4da", "sighting_of_ref": "indicator--f9ebdcb5-5821-4bf0-9213-d8ccdfd71e11", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7eb482-2021-4156-969c-5cbc062e8efe", "sighting_of_ref": "indicator--f9ebdcb5-5821-4bf0-9213-d8ccdfd71e11", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c1407e-1bb7-4c72-927d-c9470b1028b1", "sighting_of_ref": "indicator--f20bad3b-8027-47ce-b03c-7ead9e0e9e83", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d399c0-f9f9-45f7-8d45-2456c2274045", "sighting_of_ref": "indicator--08b41aa6-b969-4d49-b357-36ed1a44d8d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4b644f-c374-4713-8fe9-beab2f6867ea", "sighting_of_ref": "indicator--5d4c142d-1f21-468f-abb5-d01e2e84969c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3eb474-e93a-4df3-aa0c-db8ddb6b1138", "sighting_of_ref": "indicator--e5191e2d-5fd0-469e-baae-8412068a6c37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3128a489-1435-4740-90b5-30e46cc4f705", "sighting_of_ref": "indicator--9659b053-bded-4a96-9ce3-9923eac77087", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8567ec81-4f51-4adf-8186-d748cabb9f49", "sighting_of_ref": "indicator--9659b053-bded-4a96-9ce3-9923eac77087", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8833f167-243c-483b-bf35-640a8d7d4edc", "sighting_of_ref": "indicator--752f0973-6e48-4173-91d9-4cea2c4ea5f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5690dc-33a8-491f-b702-ef1ff1714edf", "sighting_of_ref": "indicator--752f0973-6e48-4173-91d9-4cea2c4ea5f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7f278b-4f70-4d3f-9d69-1a4574a4eca1", "sighting_of_ref": "indicator--5824ae6c-fd3d-448b-a491-67711855c436", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f10b9d-c865-447f-b725-c23d089dafb2", "sighting_of_ref": "indicator--5824ae6c-fd3d-448b-a491-67711855c436", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a28cd1-b25f-4603-a1b7-b8c4e688a246", "sighting_of_ref": "indicator--0997980c-7d98-4802-9919-befb8a59d991", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a7800e-b77f-460a-8452-6266ccb924cc", "sighting_of_ref": "indicator--e054f851-966d-4b93-97fb-cf1374acd7de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fd53f4-ca0e-4bac-8a72-dbf345d4b4f3", "sighting_of_ref": "indicator--dfc01170-95f9-4618-81d9-0c8ef55313e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac3ad25-9dee-4afa-8316-6d74ec13ebba", "sighting_of_ref": "indicator--def12020-501f-4264-8019-c57b412b6bd2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993b6991-7af4-43e5-b12e-b4c24eac1b94", "sighting_of_ref": "indicator--4db14640-97e1-4530-8b7e-a044ae1edd53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bd93b2-58a8-48aa-b366-4633a0cd5b94", "sighting_of_ref": "indicator--495c9be6-879c-4445-91eb-1db1c34f64f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b799176-8610-45ff-9391-b79580ab907c", "sighting_of_ref": "indicator--4166d437-13da-4360-bf14-9658ae11254b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b581cfc6-b641-4d45-91ed-183b77388337", "sighting_of_ref": "indicator--e9665b7e-bd7c-4759-903a-058616e45ab7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd45d033-ef0f-40c4-a474-7ee4089652a6", "sighting_of_ref": "indicator--e9665b7e-bd7c-4759-903a-058616e45ab7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c89943-a08f-4c9b-bf9d-8488b8fef3c4", "sighting_of_ref": "indicator--655443d9-4698-4027-853a-4c6efefc5f81", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438c4f7f-0680-456a-92eb-4e736dce9ce3", "sighting_of_ref": "indicator--3f52a2f3-83e3-471d-a25e-01714cb202cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fb8dcc-c8fd-4a79-aea4-d723c3d9c110", "sighting_of_ref": "indicator--3f52a2f3-83e3-471d-a25e-01714cb202cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b60b214-aaf0-4e9e-8e59-7f681b795fca", "sighting_of_ref": "indicator--b0e33c63-80e7-481f-b972-e14fdf49bb2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311944fb-2f6b-4ca6-9c0e-c943df9c33dd", "sighting_of_ref": "indicator--b0e33c63-80e7-481f-b972-e14fdf49bb2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ada150-2d82-4768-8c55-857f7861cd10", "sighting_of_ref": "indicator--38a42e96-5814-46e2-a5b4-d2efe870549e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851317e1-9f99-4e25-b636-13b8b63eab8d", "sighting_of_ref": "indicator--bf6d564f-d2a4-4eea-a860-1fa41559a1f7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337dac49-2952-4e3a-9a8e-ba4958666905", "sighting_of_ref": "indicator--bf6d564f-d2a4-4eea-a860-1fa41559a1f7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70da70c-8754-4971-9d8b-f22852125c0a", "sighting_of_ref": "indicator--30f55b25-381d-4088-9b1c-0c24fbb735f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9ce274-e851-410f-9257-bb4b424fb2ca", "sighting_of_ref": "indicator--f0be9208-b64c-449c-b00e-11dbaab08be7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b76342-64b1-434c-8805-5fcd2c83bfdb", "sighting_of_ref": "indicator--7d7d6ed7-6d3d-4a6e-bfec-e839d01b568a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0ae8a3-0969-4d83-b104-68cb8a30a791", "sighting_of_ref": "indicator--527f28a7-6158-4499-b11b-f9b3b1c741f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca89b8a-41e0-49ee-ada3-6d77e70744fd", "sighting_of_ref": "indicator--527f28a7-6158-4499-b11b-f9b3b1c741f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445a208f-5f91-4f6f-ae5b-0bcd9eb8cf61", "sighting_of_ref": "indicator--e9bb9e10-796e-4eb2-b4ea-9100a8adf581", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6708a9-6eb0-4006-8111-ffb7687db5f7", "sighting_of_ref": "indicator--900fb623-cd86-4fbd-983b-6d537c9370d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91e0f07-7089-465e-aad9-e6acd45d8f06", "sighting_of_ref": "indicator--900fb623-cd86-4fbd-983b-6d537c9370d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba775ffc-6593-4716-8620-396a71c55d03", "sighting_of_ref": "indicator--a291fd43-b5a9-4262-92e3-9720db711a97", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2db1db-e6c3-4b98-9a2f-71e509d89438", "sighting_of_ref": "indicator--51567c4e-5df1-4e5c-b9e6-0b93436c9aaf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b7ec3a-4843-4d26-9744-80f0f5a0dba0", "sighting_of_ref": "indicator--84c894c4-5b45-45e3-a50b-3d457b66d341", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7aba40-6b03-4a30-ba43-4a5c9d1dc7a4", "sighting_of_ref": "indicator--84c894c4-5b45-45e3-a50b-3d457b66d341", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cb2373-4466-417a-b675-f352229d86f6", "sighting_of_ref": "indicator--28148674-9523-4da0-abef-605f1d9a524f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0267b3-79c0-4cbd-ae01-1351a28c68e4", "sighting_of_ref": "indicator--def0b14e-143b-4a22-ad57-af5233e2b4ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652df9f0-ad99-4de0-a294-009e017e2d73", "sighting_of_ref": "indicator--def0b14e-143b-4a22-ad57-af5233e2b4ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa83c864-a29b-4bbc-b1b9-7fd95fc1b259", "sighting_of_ref": "indicator--b133c043-3b0e-47ef-b063-424aaaba3c82", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee59984-5106-42ce-a799-a4fb87eedb25", "sighting_of_ref": "indicator--9d1eeabc-f72d-469e-b9cc-0b285d0f85d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf0d6a8-171f-4cce-9263-1921a984debf", "sighting_of_ref": "indicator--de477f2c-7bb7-4751-a235-43c6c6ecc66b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4047f40a-b9c4-4874-af8f-2c0f9fc435ff", "sighting_of_ref": "indicator--de477f2c-7bb7-4751-a235-43c6c6ecc66b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ae8212-1055-4a8f-9883-9f0fac13d9ea", "sighting_of_ref": "indicator--4b97ba5b-88df-493c-9bda-1fcbe1866db0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99bb97e-ecb7-4f71-92f5-2fdbe41887ae", "sighting_of_ref": "indicator--27522279-7b4b-4fe5-bf1c-6c73714a8245", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17be7f5f-ab80-4345-abb1-f51ab689e623", "sighting_of_ref": "indicator--68e6cd66-8809-4517-8293-b340dd874e78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b855292-eb42-41e1-91f9-567a09f35fce", "sighting_of_ref": "indicator--ae52ec38-6d61-415f-aee1-0ca0e5eb14a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae2fdc1-ecd1-419f-b134-dd709d066eee", "sighting_of_ref": "indicator--ae52ec38-6d61-415f-aee1-0ca0e5eb14a0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fd6748-6acf-45b9-889b-4f244867bf10", "sighting_of_ref": "indicator--62f9eb25-7eb4-4108-89f5-7a754eae115a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51601de-af09-4b12-a4dd-8e5302354544", "sighting_of_ref": "indicator--62f9eb25-7eb4-4108-89f5-7a754eae115a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea3e3b2-bb63-4d77-a1a8-0c227f812fd0", "sighting_of_ref": "indicator--d3367a60-f06d-4e9a-89af-fedfb95cd62e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb09ae1-d42d-4848-86f0-04c28f4859c5", "sighting_of_ref": "indicator--d3367a60-f06d-4e9a-89af-fedfb95cd62e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaed064e-d15b-44ef-a2e8-699d0961a4f4", "sighting_of_ref": "indicator--994a518e-5042-4211-8727-969c86e2f6c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2934e983-22d2-4e8c-8a12-f2ee1507dc07", "sighting_of_ref": "indicator--01ebeb7a-8994-40d7-b8ca-0fb6926976c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be56c48-883b-4605-ac1e-488b847c932a", "sighting_of_ref": "indicator--cf9f9c46-bb5a-4979-9a3e-857d232f11d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759ced9e-a624-47f3-af4f-c093b901e449", "sighting_of_ref": "indicator--4b62d630-bf77-4757-8ac1-7d32b217b5ea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42a9419-05f4-4833-84d6-baf574cf8220", "sighting_of_ref": "indicator--2ef753f5-6ab7-4069-924e-e2d0cd415c9e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc279db-9e5e-4ee3-bc68-5bf3b204d962", "sighting_of_ref": "indicator--2ef753f5-6ab7-4069-924e-e2d0cd415c9e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cd98c8-dc7c-443f-ab32-4e1b6b0d93e2", "sighting_of_ref": "indicator--ebe30e20-0963-4576-953c-65a3d81106c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98049b94-fcca-4bf1-9ed6-f98140dae5d3", "sighting_of_ref": "indicator--025189d7-da8e-4852-a064-dbf56c15a857", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48b0d0c-b473-46ca-af47-77e09ba27d76", "sighting_of_ref": "indicator--ae74a3d8-255d-43c0-9acc-0a69e4ccfab6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1408fd0-a689-439f-8daa-48465947b326", "sighting_of_ref": "indicator--e1a642bf-cb1c-43e5-bf43-5ce12b372e76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc7a09f-85f9-472b-89fc-807523929e11", "sighting_of_ref": "indicator--f0e27d8e-2996-4c1b-b04b-bbc1c6c72a03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932cafc8-df6b-4b99-bd88-5b150bb2c97d", "sighting_of_ref": "indicator--f0e27d8e-2996-4c1b-b04b-bbc1c6c72a03", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2174185a-8b21-4e59-be94-7086aa697ec7", "sighting_of_ref": "indicator--97b8ad96-f056-49d3-bc53-c11be19c5133", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05579676-7060-47dc-a9cd-821fb61b7ff4", "sighting_of_ref": "indicator--97b8ad96-f056-49d3-bc53-c11be19c5133", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a001b5f-cdcd-411f-b369-fbe00fc772aa", "sighting_of_ref": "indicator--cc568d8f-31a0-4d98-8cf2-cc0d74a02d9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d8cc4e-2f83-40a9-9b19-458d98b97b45", "sighting_of_ref": "indicator--90d799cb-3819-4834-a439-deea331629f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c85558-c5f4-4dac-a00f-d9de7436655c", "sighting_of_ref": "indicator--dd73a2e5-9fe1-45ad-b4fd-825b64d43edd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f426ca-b462-41e1-b3a2-11d7d2e15540", "sighting_of_ref": "indicator--dd73a2e5-9fe1-45ad-b4fd-825b64d43edd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6462765-bcc2-479c-aca4-1fb16eda685f", "sighting_of_ref": "indicator--2b621711-3b71-4ab9-a091-efad5d0ddc23", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ba1a91-8333-4a3b-b664-386f1e540e87", "sighting_of_ref": "indicator--4afa1136-4cc8-4d97-98b8-847b48a2052f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac4e723-fc9f-4cd1-8325-2833b2c608d1", "sighting_of_ref": "indicator--a274d51f-6d4c-4762-a3b5-38329579a1dd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9039be4-c3fa-4c7b-80df-8f6531b4b440", "sighting_of_ref": "indicator--93108ac3-e2b4-4677-8d8a-4b9585f0a9bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e0d9e1-5398-4f07-8095-cc0c04f96b96", "sighting_of_ref": "indicator--93108ac3-e2b4-4677-8d8a-4b9585f0a9bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb885fe4-fbbd-45fb-9b40-0df933b0adf8", "sighting_of_ref": "indicator--9e395172-81e2-4e0a-a331-f81bce09a9a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e814501-c86a-4683-82bf-87696c6f7240", "sighting_of_ref": "indicator--9e395172-81e2-4e0a-a331-f81bce09a9a4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf39ffa-7d34-4a1a-8cec-a6e05a81c8b0", "sighting_of_ref": "indicator--c302e6ec-ae47-4261-ae44-c0b374b15169", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdadd74-89ca-4972-877e-b4a3ac0e61ed", "sighting_of_ref": "indicator--c302e6ec-ae47-4261-ae44-c0b374b15169", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138c0e38-2532-4f12-9c36-a919eefcefd4", "sighting_of_ref": "indicator--7bfa2fec-b14f-494d-b1e5-6998c8bbb124", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a88f4e-7394-408d-8747-7cadade639b5", "sighting_of_ref": "indicator--2b2e38a9-8568-4b73-8267-2f6dcdef473f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84594999-1193-4f04-9512-d0787e9dbc10", "sighting_of_ref": "indicator--0e075d4f-a996-4e57-8c5d-d93528434f2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1876967d-2907-45e2-8961-0eb75df56dd3", "sighting_of_ref": "indicator--eaed0ac9-7650-4e9a-9624-2eb28507bbeb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0376a66a-2972-497a-8b45-6b1525e0c824", "sighting_of_ref": "indicator--54565a33-79cc-4134-9696-751da7b3ece8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f83815-4774-47bd-ac1e-43fc82e6fd1a", "sighting_of_ref": "indicator--b9203cae-4e10-47eb-a65e-46800c91d304", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95c7d9c-bb8b-4cc5-96f1-f79efb1a1aed", "sighting_of_ref": "indicator--e73e4260-de93-4f58-a0c5-c2c39b404410", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6e0ab1-fe81-45a2-8829-44d30e158a5c", "sighting_of_ref": "indicator--71e47ff2-498f-4acd-9004-56db64a82c49", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b2f7a4-c2a3-41b1-b44f-1fd9334d0325", "sighting_of_ref": "indicator--3a202918-1873-4e07-bc02-23e6b2fa4f76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b0dda3-be76-44ee-9d56-9e3c4c4bde82", "sighting_of_ref": "indicator--3a202918-1873-4e07-bc02-23e6b2fa4f76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0302ed9c-52cc-49f3-a79c-f9ca653f8500", "sighting_of_ref": "indicator--43039b7e-b88c-4b3d-834d-1ce0cc8c8c68", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7ca2ff-5328-4478-92c7-0075084f135e", "sighting_of_ref": "indicator--08b54aba-d469-40d9-a347-3390496a3037", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25111348-2599-4432-b949-1db4387770e9", "sighting_of_ref": "indicator--222ad803-db86-4d76-bb7a-0a5d85d2d5c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40fd0a7-f2bf-4c1d-9eba-77d80108c000", "sighting_of_ref": "indicator--e9812c55-0a18-410c-8b01-8ce74107c20a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d225f1e8-9b7e-4173-b1f5-ada13f0223c0", "sighting_of_ref": "indicator--0b5a7da5-5c7e-4bab-8626-cb8b945f4ff1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bb0f72-ea71-4897-85d1-ef9ed44e52ea", "sighting_of_ref": "indicator--e2bf65a6-f161-4e46-ad6d-2d2fbaedd74c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7645a331-a49e-4884-9e6f-9cd7393fe913", "sighting_of_ref": "indicator--6bdfe354-4b7f-4d55-9717-4cc551cd332c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c0fcf4-8969-4b26-bfaf-69236a4a7d17", "sighting_of_ref": "indicator--221bb832-fd38-4c2f-b3d8-3736269894c5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9044ef-af7f-4901-9f3e-cc4f019a5bd3", "sighting_of_ref": "indicator--221bb832-fd38-4c2f-b3d8-3736269894c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54c3cb8-fd0e-457e-a4cf-1e649e2e5fbc", "sighting_of_ref": "indicator--03942d4e-450a-4d29-bffe-3995d54974f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb90d25-591b-4a9c-9977-5ff09575834b", "sighting_of_ref": "indicator--03942d4e-450a-4d29-bffe-3995d54974f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdab93e-1e62-44e3-b770-6d164c0017bf", "sighting_of_ref": "indicator--62322a49-8d1b-4763-98af-405b4a7723ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322e3598-0538-4ecf-bc7b-3ef6a792fd4c", "sighting_of_ref": "indicator--09bc75c1-b40b-4d5d-a5aa-ad1f523fbd17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b467a603-c05f-466f-af91-19b08442605a", "sighting_of_ref": "indicator--ef877177-c179-42ba-b431-6d77f5f785e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4ce054-9e75-4fa1-b258-eb20886a5ba0", "sighting_of_ref": "indicator--5f27f7cd-dccf-4540-baf3-c60b0b3d983c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61583d6b-5fdc-4505-8ba4-7b9ced1f6201", "sighting_of_ref": "indicator--17c05100-d2e3-403e-ac6c-2c4a6b38a509", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20954965-5ea9-4829-be01-e0ffe8bbb59e", "sighting_of_ref": "indicator--047a75db-d1d7-418c-96ed-87a1cc320ab9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f46778-1d80-4876-84e6-cacd1f5df64e", "sighting_of_ref": "indicator--c412bc5f-9bb8-49c1-ad8a-70dafeacc470", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad6a347-1329-4910-99b6-ce89ea0535a6", "sighting_of_ref": "indicator--d29a268d-0a14-4f66-8e88-9d17239fda26", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d0a8ef-b165-420a-a948-998fed90b8d7", "sighting_of_ref": "indicator--70e9a9c8-9c58-4fc5-9b03-42d41b17a0e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9f4838-c52c-4c88-9bae-329b42b92cdf", "sighting_of_ref": "indicator--70e9a9c8-9c58-4fc5-9b03-42d41b17a0e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524592d0-9fcd-4ca3-9954-732a316b5d43", "sighting_of_ref": "indicator--636507ea-32c5-42a4-8513-5a0096ec0788", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c14805-2714-4e39-aae1-2030cc6b6eee", "sighting_of_ref": "indicator--935f67ff-3b50-424a-aa62-a65a8b3c5ac0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60726a58-a161-4e24-bafe-f42e9b6b39a2", "sighting_of_ref": "indicator--6639d1b5-2620-49f7-8396-8ebf0a7429d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ccc6d1-f3f0-44ac-9773-2456b8bd1af7", "sighting_of_ref": "indicator--46f044f6-0f4e-4f30-b45b-bb99610f1a5b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3028f01b-abc3-4656-96a0-335b6075e4c3", "sighting_of_ref": "indicator--8e27aecf-206a-4588-87a4-d051995f871d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70abf563-4fee-422d-93f3-b399c09fcbc9", "sighting_of_ref": "indicator--100dc13a-92bb-4b2e-accd-646b3254ec36", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda92222-6300-4bc8-a53b-35c510c999fa", "sighting_of_ref": "indicator--e152a569-64be-4861-b890-6a53bc702fe2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7f5015-0e85-4c2f-8df6-4fb84a4730e1", "sighting_of_ref": "indicator--e152a569-64be-4861-b890-6a53bc702fe2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e13ecb-42bd-4dd0-82b3-8b90222086b4", "sighting_of_ref": "indicator--1dd32dbc-a91d-4e57-a336-7173ce8fbee8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5e2cae-8c15-4fc9-9fc3-74a3134ed2dd", "sighting_of_ref": "indicator--0bc26561-6cb2-4767-af57-34754dc0de66", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d04957-2856-412b-9cdc-33a15d31a010", "sighting_of_ref": "indicator--75c4dbbf-11f8-4fa9-8112-c55d22cce899", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716baa89-0e4b-430f-8a2b-56751aeeeb17", "sighting_of_ref": "indicator--02615482-a06c-48c9-985c-ed543b612408", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d230b21-42e4-4ad6-aad0-c151304dc0cc", "sighting_of_ref": "indicator--02615482-a06c-48c9-985c-ed543b612408", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d2ad43-442f-4682-a51f-c755fac988d6", "sighting_of_ref": "indicator--54b3af1d-fe58-4137-8957-c284274de8d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd6e2cc-ac10-4931-aa94-8974898953f5", "sighting_of_ref": "indicator--199ee4b0-d703-44c2-ae97-2d00e366dd3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d9e809-6925-4556-98c1-df67ae26bc6a", "sighting_of_ref": "indicator--92d6ecb7-ca91-4876-ae00-7dfee7f07ad1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1908170-8217-4034-ba6e-dd6c0b1917e4", "sighting_of_ref": "indicator--422af69c-0b7c-403b-aee2-70c051cb9945", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a336d9-4293-42fd-ba4c-aab7f9bd55e1", "sighting_of_ref": "indicator--5acedcf7-8a12-4164-9813-773fc15acd17", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ae15f2-d170-4241-93e2-d7d02b0b738b", "sighting_of_ref": "indicator--41ff4b30-6db6-4a4a-b1a1-86ef9b489df7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a51e56-0bee-4ecd-8355-b0982296d9e0", "sighting_of_ref": "indicator--d2e047c1-4aa4-4feb-b250-a9d60f91f90a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255d3aa7-8059-4f8f-8ec2-da40bc745fc9", "sighting_of_ref": "indicator--66aa591f-49fd-4940-8f36-eebc8fefa67a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d8cfc4-e52c-48b6-b893-4d9985805aa5", "sighting_of_ref": "indicator--cec4a3a4-f9e5-4783-b370-a7fbbd30ef95", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2febb2c8-4d58-40d9-97e5-1b3c5196fdab", "sighting_of_ref": "indicator--91175d50-f1d2-4eca-ade5-31ae486d8b45", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7905ad3a-f025-4630-9a40-3f954f693366", "sighting_of_ref": "indicator--91175d50-f1d2-4eca-ade5-31ae486d8b45", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d7279a-33c3-4666-8515-c09c0d3dec29", "sighting_of_ref": "indicator--32c5a5f7-8533-4d93-8fa0-e77955c45ca4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfa8b9d-9c1d-4949-bd24-88f72e86c6f6", "sighting_of_ref": "indicator--a10a2071-2041-461a-a644-7c8223c5447f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba525eda-de24-44a7-a1c3-aa6cd330a1e7", "sighting_of_ref": "indicator--5bbb0e9f-0c29-46d8-b0d2-ae676c15bb57", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291cf64e-cd69-4b0a-853d-a008a02c9e37", "sighting_of_ref": "indicator--5bbb0e9f-0c29-46d8-b0d2-ae676c15bb57", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0f9258-72e4-4dc2-9320-5ca9427b5f00", "sighting_of_ref": "indicator--23b580a1-ba6e-45fa-836a-25e7a51e34f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5883ce4f-9e3a-42a2-be22-d7c519f6fa94", "sighting_of_ref": "indicator--5a20a9eb-e34f-49d1-a2fb-4dc5c3b4ee3b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61498942-91b7-4684-86e2-e364c3b7b549", "sighting_of_ref": "indicator--e3ffd4b9-1d36-4347-a80f-f4ec5436ce95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b44455-b1e2-4d16-b23c-ca0a98d2da18", "sighting_of_ref": "indicator--12cf03b0-1fd8-46fa-adfc-a22be3dad553", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fac6547-b577-4afc-bbc4-6380aaa4a0cc", "sighting_of_ref": "indicator--12cf03b0-1fd8-46fa-adfc-a22be3dad553", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a616f5-d34d-4f85-9166-5fabd47ee717", "sighting_of_ref": "indicator--45358634-8410-4786-a72d-9a8270d18d6b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f084affc-c3d3-4208-a3d1-7487ab047d90", "sighting_of_ref": "indicator--310d1ebe-616d-4b27-ba79-f85aca533f53", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3303e0-cc76-41d8-929e-3f0e75dcd406", "sighting_of_ref": "indicator--73b08a17-b8f3-48b7-97f4-f500d17c1cb6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e815cae9-8026-4c3b-b848-9cecda03102a", "sighting_of_ref": "indicator--73b08a17-b8f3-48b7-97f4-f500d17c1cb6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b9710f-41d4-415f-94c6-ac65a556ea43", "sighting_of_ref": "indicator--9a6c3f7c-7011-4701-9f24-6c97adcff284", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee52337-72ba-4783-a80c-55a4cc928c95", "sighting_of_ref": "indicator--03177bc9-835e-4949-b4ac-7fd46ba89c09", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3883285a-1b11-4444-a50e-f5f00214f834", "sighting_of_ref": "indicator--03177bc9-835e-4949-b4ac-7fd46ba89c09", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b3143d-6621-4dd1-93d8-7ec47b768694", "sighting_of_ref": "indicator--e4874b63-58a8-4cb4-a83a-30acf18b6957", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d168f0-8de6-4c27-b490-cf015da3797d", "sighting_of_ref": "indicator--9b1d44ba-f5d6-44cb-9fe9-73afbbc25b34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e3eae7-1a2d-4808-8117-6625e38bccf6", "sighting_of_ref": "indicator--2fe52a02-b135-4873-83f1-81da05a6f4cf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e96aba-005a-428e-915b-75513b5c503f", "sighting_of_ref": "indicator--8891639e-0e71-4b2b-98c0-2f9d730e961c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d85ba2a-bc60-41eb-a9f4-70802a050aae", "sighting_of_ref": "indicator--b14d1482-273a-4866-ba5e-ebab25778510", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e349eeb3-e761-4e13-b939-e027c06830ab", "sighting_of_ref": "indicator--8768d39b-93df-4a34-967a-892a76cde394", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa0849a-8598-4414-b4b7-6f06f1bad69a", "sighting_of_ref": "indicator--516ee850-46aa-4721-9b07-e6bbab01f820", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a9281a-cbde-41d9-9540-f154bfe41cf0", "sighting_of_ref": "indicator--8c2b0c5c-1c96-4c56-b2c2-6199a711e078", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f0a56d-5f14-400c-a7d9-7ec37449e9f4", "sighting_of_ref": "indicator--8c2b0c5c-1c96-4c56-b2c2-6199a711e078", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7f4a10-b9f4-4ba4-bb4b-2e13d8dd34aa", "sighting_of_ref": "indicator--795a4f75-639f-4635-be05-fb16b4133129", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b8a1ba-68e7-49dc-9003-2dd4428acbd8", "sighting_of_ref": "indicator--5e6bc59b-e60a-4b2a-be1b-6603b23ce3cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087e9b55-fdd9-45d4-b775-b1347bfc074e", "sighting_of_ref": "indicator--5e6bc59b-e60a-4b2a-be1b-6603b23ce3cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4526034-ee60-4eac-a09c-7a86529439c9", "sighting_of_ref": "indicator--a3fc2f76-5bfc-4f3f-ba10-502e14bf9eff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3c934c-f964-4ebf-a035-c79d68d07f86", "sighting_of_ref": "indicator--b3b90983-9668-4128-a51b-ed8509d0300e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77641606-9dc0-4c71-b47e-cc343de0a617", "sighting_of_ref": "indicator--9cc78156-710a-4d01-96d8-efae033648ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6085eee-49ab-4470-9620-d6bafa522e6e", "sighting_of_ref": "indicator--c004a047-a4fa-4dfd-b735-38fd9e5e4b56", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5d3a28-492e-4a0f-89cd-d9fc13c7f818", "sighting_of_ref": "indicator--c004a047-a4fa-4dfd-b735-38fd9e5e4b56", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf25fc0-0729-4979-b46e-9ba5e392aa74", "sighting_of_ref": "indicator--d7e947ad-c758-41a0-bd43-4d34acd40315", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9323e0f-c9ac-4e68-84ce-08a7c503db0d", "sighting_of_ref": "indicator--c51e71df-1c17-4e81-88c3-1e7826e312c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ce2a75-c35c-4e4d-8fec-f81a9daf9a02", "sighting_of_ref": "indicator--82c8ad68-7c78-48d9-a0cd-5400cf6b4258", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504d071a-c89a-49c5-a7be-77ffe9c7b7ec", "sighting_of_ref": "indicator--c5016704-fccd-4410-97eb-cd3caa8e6465", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349ce8e3-6517-4522-abde-f0ead71cc18a", "sighting_of_ref": "indicator--f83cfca4-0a1c-4e97-bbb3-1faf18a18f26", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0245f38e-5ce8-4c5a-afc0-cc908319a252", "sighting_of_ref": "indicator--c0adb398-8cb8-4ef7-b7f2-99f582ff4228", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433d7492-3d46-46ec-8b47-03b989093db6", "sighting_of_ref": "indicator--5ed5e06f-fb70-482a-a1a5-04f599e00985", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e5b981-0d71-4da3-8baa-25845a702cbe", "sighting_of_ref": "indicator--13af1c7a-436b-4248-a149-77410c50a0a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff53559-7bb5-42d0-89c3-0ee91008921f", "sighting_of_ref": "indicator--30ee91ad-974b-4f1f-93f3-bb2ce27acb5c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cafc570-9542-4ec9-ac11-3062280cab45", "sighting_of_ref": "indicator--2768432a-0167-4a1f-a533-5e82985793f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f88601-6efd-40aa-af97-cad6692d16f1", "sighting_of_ref": "indicator--2bf8acd3-e111-4d5f-8d64-021743c263e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68d9bd8-3637-4dda-80eb-dcf2209ff0d9", "sighting_of_ref": "indicator--6d3ce087-e7d3-49da-9f80-cf2ab4248e81", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917cd951-5d1e-4ff2-9f99-b545917d2b67", "sighting_of_ref": "indicator--6d3ce087-e7d3-49da-9f80-cf2ab4248e81", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf6b44b-ebad-41cd-9e84-c45cf77725e6", "sighting_of_ref": "indicator--097cc8fc-5548-46f2-a5b7-ae91879a2459", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b54f9db-df92-4005-9297-1ead695b5a2a", "sighting_of_ref": "indicator--3d3290de-61e8-4189-bbab-50c659db4de3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac607592-3a7a-422a-9226-e7e42cb72c2a", "sighting_of_ref": "indicator--f7078307-2f9a-48ad-bef2-6f0afc49722e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95565ab4-cd1b-4195-8f77-73aec3ab727c", "sighting_of_ref": "indicator--05945c62-4d8b-47c9-98e3-4ff84dab4099", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9409b233-dc46-4c2d-8958-502ffd8d97a9", "sighting_of_ref": "indicator--34f8cd35-32fe-4c91-91cd-9b67da3ac6a6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53adb76-2e33-4166-85f1-23993441bba3", "sighting_of_ref": "indicator--a635e3ba-1bf4-44cc-8e4e-9bc4467d72ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc84f136-8f3f-4107-8727-be2cfaf7272d", "sighting_of_ref": "indicator--9b60446d-2a81-4c1d-909c-b776e7d80075", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be600910-d4b8-4bf3-add0-0acf3e2859dc", "sighting_of_ref": "indicator--9b60446d-2a81-4c1d-909c-b776e7d80075", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b25718d-5faf-40dd-a721-828fbe218ade", "sighting_of_ref": "indicator--59c83f5b-1738-49ab-93ff-de377b0bbb3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da27a1af-64e6-43f1-8fb0-033308d09480", "sighting_of_ref": "indicator--3660af8f-5fd6-4714-bc30-0b1dfc0132ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9425514-9e23-451a-839e-4c43ef30ca08", "sighting_of_ref": "indicator--847c7c7b-a75e-4465-88f4-d5d671ac1d40", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9416cd-508f-446f-b9ce-eb9f9c777ade", "sighting_of_ref": "indicator--ac5c6cb8-81ea-42d3-bbad-508efda24bc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828562ce-9934-42fc-83f5-65589df2cd46", "sighting_of_ref": "indicator--1c35bdbc-8e0f-4228-965f-43b81b8df405", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84047b59-4a7e-4046-b7a6-64e6de594fa9", "sighting_of_ref": "indicator--8e571122-0d01-4ac6-8465-df8f7ae647c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e67ae2-f707-4747-b19f-403fe833075b", "sighting_of_ref": "indicator--8e08a579-bbde-4b77-8580-d88110e9b9ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be1f6d5-397c-42cf-8e24-a45fee28e6a0", "sighting_of_ref": "indicator--8e08a579-bbde-4b77-8580-d88110e9b9ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb798b4-c69f-4f31-8128-21cee3d5c3b9", "sighting_of_ref": "indicator--6aef8373-7a7c-4ebf-b772-ab4994a91ced", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e17ae93-8c5b-4875-8d2b-768fbf430cfe", "sighting_of_ref": "indicator--c686b324-2d3d-46b5-bc3d-6d968ac1a0e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b6e225-fc9c-4c83-8bdc-18da9af67df7", "sighting_of_ref": "indicator--a71f6cf1-b74d-41b5-8c83-88bdbd95ef88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad4e936-8f9b-438c-a858-c06c8c2ec274", "sighting_of_ref": "indicator--967fc3f7-acc6-40d4-9400-a1378c4c9d9a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61b25a8-92ce-41d4-9750-0c0c21d9a859", "sighting_of_ref": "indicator--9ca54d0d-7b54-4299-abc6-8689b4cbe4e7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435d8a6f-e81a-4dfd-b6ef-57bb00a0da42", "sighting_of_ref": "indicator--29f59e90-c9b0-4f6e-bbd2-f889fe8dec71", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3d3dfc-5dca-4081-8744-c832a80e3a3f", "sighting_of_ref": "indicator--8c82e472-7f59-4ae3-ba73-1e87a796d941", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397b4324-818f-476e-b418-2c007ae9374a", "sighting_of_ref": "indicator--669d836e-2dd1-4d93-8ff7-23e64dd8589e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1dd3a5-1a78-46e6-aa70-8836668d559f", "sighting_of_ref": "indicator--86db5eef-19b3-4c14-baea-f6c68ec5d763", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ba26a3-500b-46c5-8a30-9e5f92cd5e86", "sighting_of_ref": "indicator--08b11487-753e-487c-93ff-57e25d311a59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca51fc4-76dd-4bb0-8ef9-162d53ed124d", "sighting_of_ref": "indicator--08780cd9-8ba4-4958-9777-ea8693fb292e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fa2c17-d0b6-4c9e-a37e-b5cd77b1fee0", "sighting_of_ref": "indicator--08780cd9-8ba4-4958-9777-ea8693fb292e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e531b0f-db62-4097-a4c9-b83316bf439f", "sighting_of_ref": "indicator--7819a4c6-c5ad-4c2c-a75a-706523627187", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b6a2b3-d045-4036-ba5a-9a2efd85700f", "sighting_of_ref": "indicator--d8661a54-6e28-469e-9dd4-0a6daf06fe4d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc636fd0-1cdb-4612-810a-66b928846a5b", "sighting_of_ref": "indicator--a808e129-2643-452d-9f20-6c46b8ae4c9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071067f2-1b71-49fb-aed0-b2c79da20978", "sighting_of_ref": "indicator--e7e79541-7f0f-41df-93da-36fdf9f1346d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11069572-aaa5-4014-9a76-ed233038c5df", "sighting_of_ref": "indicator--bd0f4c45-b539-47a2-8f9c-3f8eaecd2a6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f535f2-94ca-4c2c-95ba-4e3880997913", "sighting_of_ref": "indicator--bd0f4c45-b539-47a2-8f9c-3f8eaecd2a6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28418a4-90ad-46c1-91d6-c665179788c1", "sighting_of_ref": "indicator--28d13a5a-e56b-4003-a70f-f37c28f7443c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68183c6b-4996-4751-9602-fdd802c97869", "sighting_of_ref": "indicator--28d13a5a-e56b-4003-a70f-f37c28f7443c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a9f5e7-04c1-4010-b686-f8f9eae4a820", "sighting_of_ref": "indicator--83b1c39f-a760-499e-ad68-02aa41d5c020", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed87c2d4-a735-4386-b625-d012b23eb18b", "sighting_of_ref": "indicator--fd0d499b-f9e5-4be0-b1db-debcad464b5a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c2a81a-40cf-43a3-8e6e-48be27880319", "sighting_of_ref": "indicator--fd0d499b-f9e5-4be0-b1db-debcad464b5a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b309867-113b-4811-952a-699ef63a6b3c", "sighting_of_ref": "indicator--4fac3364-4de9-4b5d-84d0-4d03a2bd95d4", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8d9a61-c867-44cb-8f46-feff7a8a72a1", "sighting_of_ref": "indicator--76567143-74c0-4277-b34a-cd0647b49a17", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e42455d-1ff2-4b04-877e-9e0f24e020c4", "sighting_of_ref": "indicator--76567143-74c0-4277-b34a-cd0647b49a17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf18a3e-47c3-4fc8-8239-49c7e5fdd51b", "sighting_of_ref": "indicator--8b8dee41-50e8-4c48-b9af-f5c868babfe5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d299b16-d920-4e1d-b457-d1ad38d9d82f", "sighting_of_ref": "indicator--8b8dee41-50e8-4c48-b9af-f5c868babfe5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6c9be3-f03a-4dac-bcd7-fb45030e4672", "sighting_of_ref": "indicator--12663fc0-60ee-48b0-a318-638c20938e92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d61e3b-f1f4-4206-bff5-cd20a621cd12", "sighting_of_ref": "indicator--12663fc0-60ee-48b0-a318-638c20938e92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e61f691-0e85-413a-a407-8c7ba028d5ab", "sighting_of_ref": "indicator--b663434f-a962-4757-b315-2f817c67f758", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e81eb33-4f65-414f-95df-f43a3df34943", "sighting_of_ref": "indicator--4d08e418-618a-4e47-be67-5a4df465c371", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cb230b-aa05-43b8-8fa3-b19202d742ee", "sighting_of_ref": "indicator--70f629ad-eae6-49bb-ad75-6dd0bbece165", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ce4d41-7da4-405e-8870-8b118728fc58", "sighting_of_ref": "indicator--70f629ad-eae6-49bb-ad75-6dd0bbece165", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbba4b9-1ba0-4875-9694-cf45e346caaa", "sighting_of_ref": "indicator--1bf7cc48-b975-4f6d-b6f4-05ac1308e2d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2328d0c2-ff3d-4cd3-b52f-db9766e36860", "sighting_of_ref": "indicator--1bf7cc48-b975-4f6d-b6f4-05ac1308e2d7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf143ec-08ae-4758-a8d9-5ea68257dbce", "sighting_of_ref": "indicator--8aa39ae1-3a04-4b69-a0e9-c9e348e89855", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a77b6a9-f4ed-4cd9-acdc-3c6f85f7b0c7", "sighting_of_ref": "indicator--08694830-37fa-48c1-acbf-c57e9489936e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adaf1639-1249-4127-b04e-5db793130449", "sighting_of_ref": "indicator--f3ca945a-efc1-492e-bc4d-5cb4fa01e40a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1820b52-730f-42e1-81bd-b7d4f4a1f494", "sighting_of_ref": "indicator--36db19ca-3214-4c3f-80b6-04f5aaf22eff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c209e13-70f4-4da1-9e7e-e5a88821ad28", "sighting_of_ref": "indicator--36db19ca-3214-4c3f-80b6-04f5aaf22eff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9b60e1-8ecb-4882-b0f3-8a134937be84", "sighting_of_ref": "indicator--b7259327-3497-424a-b30a-805d4784d237", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1be19c-09cd-4fe9-8a0b-fe29cf1418b9", "sighting_of_ref": "indicator--b80e52b2-d014-4c6e-aa9b-1c26f56dc4f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15c536e-6f4e-4d21-8f5d-f0fdd800b62f", "sighting_of_ref": "indicator--88edec79-922e-4d5b-952a-0898bda9798d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e29db4-83d1-4e3f-9020-23847b6b9046", "sighting_of_ref": "indicator--88edec79-922e-4d5b-952a-0898bda9798d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8367a0-c9fb-406f-9a4b-48f5a9716414", "sighting_of_ref": "indicator--d1877c9e-9b65-4275-8ba7-c911d1d10375", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e749901-710f-4d4c-903e-5042d393fa91", "sighting_of_ref": "indicator--4942c933-d519-4311-95c8-0b79af5e38e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08904bcb-adbc-4cf9-9f2b-fcd2c34b9fe0", "sighting_of_ref": "indicator--ef49d3f9-ee57-4cc1-b620-07f2778e68fd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10347b42-9c88-4eb0-b168-62cdbd27ab89", "sighting_of_ref": "indicator--46881386-3465-47ef-a189-77f8b31182a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a190753-1a43-48dc-b81c-dabb242c9462", "sighting_of_ref": "indicator--c5857f69-bd7b-4939-bde2-83900cd09207", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed293560-6ec2-43f2-872b-34fedc4ca7d2", "sighting_of_ref": "indicator--fdfa78de-6d83-4d11-8bf5-9176744d1ed2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aabee39-5e84-447b-82ae-47ed1ccc0c64", "sighting_of_ref": "indicator--fdfa78de-6d83-4d11-8bf5-9176744d1ed2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ff62f0-92f1-48af-95bb-26532b9120dc", "sighting_of_ref": "indicator--10dbd244-4aa1-465e-ba99-0a38f1cc9d46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418ce722-2422-421a-87cf-3c0fd5a0318d", "sighting_of_ref": "indicator--cc06f758-ca3b-4849-8a68-2dcddfdb7f5a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b22d09-fa5c-4f79-bf34-33735956fb62", "sighting_of_ref": "indicator--fe457272-a730-45a0-9fc0-026edb1e3414", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2d3693-e8c3-4fe7-b412-8d16cc4fedb7", "sighting_of_ref": "indicator--ac5f96c6-c3aa-4d59-95c8-76dc48eb27d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99da60d-84e6-42aa-ba86-ea32734f4d3d", "sighting_of_ref": "indicator--ac5f96c6-c3aa-4d59-95c8-76dc48eb27d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a215c34-39a4-4d8a-a6e6-2735dddf3761", "sighting_of_ref": "indicator--9ad494a6-05f9-4f13-8eb5-dd43a1ea7919", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670ed36d-ae0f-419e-b043-17d883053bec", "sighting_of_ref": "indicator--380aa04f-04cb-4f51-beb0-20448d0131ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b4d578-c9b5-4135-b1d5-30df37521c64", "sighting_of_ref": "indicator--a3f149ab-1849-4ea4-bac7-345123390f62", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6249da50-a90d-4793-b683-1481ace02f25", "sighting_of_ref": "indicator--a3f149ab-1849-4ea4-bac7-345123390f62", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7969e7b-707d-4e7c-a7ca-c9281a998633", "sighting_of_ref": "indicator--49f33d1f-a5e4-419a-bb61-7a4096b46f92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77155abc-4354-44dc-810a-0e9c8c90d991", "sighting_of_ref": "indicator--8b4ebb04-44e6-490c-8102-88d48c5ef235", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5f9b8a-fce2-497d-b363-103143b9f171", "sighting_of_ref": "indicator--4ab2e5a4-5ef7-4de0-bd97-9d3edec7d72b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3745fb6-9245-4ecb-aded-71cb4e019d6d", "sighting_of_ref": "indicator--4ab2e5a4-5ef7-4de0-bd97-9d3edec7d72b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7338ab-d607-4e0d-ba4a-c702c1d1c5b8", "sighting_of_ref": "indicator--330bc1bb-478a-4d23-ae60-6fb0cd8a8f5c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926b969a-f504-4c21-9613-7efcb3ffbc5f", "sighting_of_ref": "indicator--0d8ebf11-ed73-43c9-adbd-7a7104ded5c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf03c04-2882-47b5-a29b-1a807648b2d0", "sighting_of_ref": "indicator--0d8ebf11-ed73-43c9-adbd-7a7104ded5c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887c7b22-30c6-4c99-991b-c5e8e59b4270", "sighting_of_ref": "indicator--6cf93b00-e10e-4f4e-92eb-ba38a5186c9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db0ca1f-82b7-41f2-9916-1da6c10c6b2a", "sighting_of_ref": "indicator--6cf93b00-e10e-4f4e-92eb-ba38a5186c9c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caec1fd0-4512-4544-9103-a6443bc91111", "sighting_of_ref": "indicator--1827b953-dd96-4a19-9fd6-b54459010886", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17290a2-ab2d-4b16-a064-f4b32d57218b", "sighting_of_ref": "indicator--254faeb3-8583-4901-8d22-d4cc471654c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943974ba-d8f0-4579-81b7-f6ef63642f07", "sighting_of_ref": "indicator--254faeb3-8583-4901-8d22-d4cc471654c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91fc0de-f5dc-4e8d-a83d-aaa25d2da1a9", "sighting_of_ref": "indicator--b82141f7-b20b-4984-964a-f5b2352f360f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc48071-2ceb-41f8-a53a-aa625db6891a", "sighting_of_ref": "indicator--0c4c8672-aa9e-40d4-92b3-4b70e3ec0bf6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d92b6dd-478d-4c95-8f32-038117b2e8df", "sighting_of_ref": "indicator--0c4c8672-aa9e-40d4-92b3-4b70e3ec0bf6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3266e4e0-be38-4ba9-a9bb-a3380f4e4451", "sighting_of_ref": "indicator--7fe005d8-d944-4567-b7c4-cbe8082a42bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51627b89-e280-4a04-bf05-74571b6e42ca", "sighting_of_ref": "indicator--0b6508a6-8e07-438d-8e62-c12a5b7fd3c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb679506-97a3-44ee-8a11-f9bfe052d30e", "sighting_of_ref": "indicator--73306af8-0f35-4399-b428-bc1d36c974fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1712d03b-23ad-4637-a96a-c8b7ccb516b8", "sighting_of_ref": "indicator--808981cb-be1c-4f9c-b688-17208ce677ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e5966f-f9a2-4883-9aed-572235b3561e", "sighting_of_ref": "indicator--fadd0531-fa12-4f92-8624-16cfcb41a266", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d919233-11bb-45ab-9bcc-05812453a3e4", "sighting_of_ref": "indicator--46aab10a-b4e7-475c-883a-1436c7b92b2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14716cf3-18f6-4263-995f-d370d81a5a4c", "sighting_of_ref": "indicator--8dfbe6ff-6f06-4e7a-8498-4ce0404aa8c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9c8295-82bb-4d28-8736-7a7c50a6ba3f", "sighting_of_ref": "indicator--3171b4c3-df8c-44db-be79-13e0d902f564", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e20c02f-6c0d-4143-a2ff-ddf8203362cd", "sighting_of_ref": "indicator--c431fa65-3e3e-4ae6-87a8-d2b09a67b180", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84b3945-d04d-404d-8af8-7c0c594064da", "sighting_of_ref": "indicator--d38bb628-d798-4f75-9c30-f4e6d7d6fd0b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be07b4bd-cd0c-4419-87fe-377cd9070c90", "sighting_of_ref": "indicator--fa546083-c477-4a45-8e50-63f8a20ef87f", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab1415b-1d19-4152-96b6-301afa5e4118", "sighting_of_ref": "indicator--fa546083-c477-4a45-8e50-63f8a20ef87f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088def1c-da4f-438a-ae53-da6ad9d11949", "sighting_of_ref": "indicator--31926ab8-1ff1-4f49-b7c4-0b42dee6f4a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d754c272-fac6-4e02-955a-81d40657a557", "sighting_of_ref": "indicator--5091271c-b2fe-49bc-af9a-3f0746c2465f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da490863-69f3-4616-9bf5-697cf7aec61e", "sighting_of_ref": "indicator--ccc9ba58-0bb9-4c08-b48b-e208acca78f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79d9c06-dd10-4599-bd8c-7b5b07d453dd", "sighting_of_ref": "indicator--ccc9ba58-0bb9-4c08-b48b-e208acca78f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee413dd-9b64-4430-b20f-c3804e8606de", "sighting_of_ref": "indicator--c260a5e1-a4b0-4ac9-97dd-ddff80127d4e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6cb4a7-d6b6-469e-84e5-fe809526da68", "sighting_of_ref": "indicator--1dcf4e49-9cc8-4489-b768-b3cb6f675de3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a04710-5aa3-4c52-bc1d-b1ab24bb54a3", "sighting_of_ref": "indicator--16c5ef87-123b-4271-a800-270989ff4ce0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3527fc59-690d-4c34-89b6-a9e06f4fbf49", "sighting_of_ref": "indicator--16c5ef87-123b-4271-a800-270989ff4ce0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faf495c-ea2f-43a7-ad11-1514dca3c671", "sighting_of_ref": "indicator--bd78d1c5-c74a-43e1-979a-c3f3a2b61218", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e911ca6-8b93-437b-97f9-522a866cca52", "sighting_of_ref": "indicator--d4d90f6a-071b-4d2e-8dcc-0830b5696d45", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c69437-b938-4b44-9e06-611f74a4363f", "sighting_of_ref": "indicator--3c1bf166-4cb4-44cc-bdb1-6309cfd374d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b7aced-7c92-431e-bb82-8194f069d0c4", "sighting_of_ref": "indicator--442bd5ec-b640-47d3-a6e0-b00ec56e3506", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603c3403-357d-4134-b8a5-49665f3c842a", "sighting_of_ref": "indicator--9d904d88-0cbe-4035-8582-66fee074e796", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60c0b2d-11c0-4561-967c-c7d73828b694", "sighting_of_ref": "indicator--2a2d15c6-a69f-4d1a-95c7-2dda78eca47c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75ae92-8da6-404e-8c73-242e70fd0017", "sighting_of_ref": "indicator--ae8831f2-56d7-4aa3-85eb-05daba2eab0b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd45d401-a932-428e-a1f4-278e686d02fd", "sighting_of_ref": "indicator--b305ace5-b658-4626-b9bc-43b7c72881b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d7e4cd-b978-44fd-8607-37202614de42", "sighting_of_ref": "indicator--a2e4c672-c6b2-45eb-b1f9-ed7068cba460", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2301a63d-5cbd-42cd-b985-d1dc4d7c6219", "sighting_of_ref": "indicator--0008c017-081f-4bab-a0d3-1b577f8a2792", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c047787e-eaa5-4222-badb-3ef7076cfd97", "sighting_of_ref": "indicator--0008c017-081f-4bab-a0d3-1b577f8a2792", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726535f1-a075-4ee9-a951-fe70645379bf", "sighting_of_ref": "indicator--a59f2eac-703e-46c4-8a98-81276167a966", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c916aa1-b356-4c1f-bb71-4c025819b033", "sighting_of_ref": "indicator--62726c7d-b742-40ad-8f9c-f014a99a227a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428740f5-225d-418c-9416-8f7e66c452e4", "sighting_of_ref": "indicator--41585d4b-30af-4fe2-897b-b515e2a31d2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d8026a-dcc1-4273-a2eb-ce7808a04067", "sighting_of_ref": "indicator--a807ef26-c987-4ae2-b377-102bf9d455dc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41144d3d-449b-4a34-94e5-a2655d3b6e2e", "sighting_of_ref": "indicator--76b360d9-dcb2-4326-ba89-bb812dc5374c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9017e1-2e8b-437b-8d62-6297b8252780", "sighting_of_ref": "indicator--e0b1e2db-de37-4b2d-bdfb-759a9927c4c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b152b2a-2ed3-4ffc-a0d6-e04f808c0de6", "sighting_of_ref": "indicator--e6019d8f-8898-423e-b173-8ec07bfbed9b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dab471-785b-4f28-8fca-ee80393b388e", "sighting_of_ref": "indicator--e6019d8f-8898-423e-b173-8ec07bfbed9b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1c3261-134c-43ff-befc-88935069ae56", "sighting_of_ref": "indicator--6c6023e7-fe8b-4200-a231-63e3a1cf976d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82d8950-a9cd-4def-be4a-55cd2528feb6", "sighting_of_ref": "indicator--6c6023e7-fe8b-4200-a231-63e3a1cf976d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0f2ffb-6346-40ce-bfda-1401e334683e", "sighting_of_ref": "indicator--7728492b-3716-408f-b482-568ff61dd620", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbf5c3b-1bac-45e5-aa3b-377e4a055201", "sighting_of_ref": "indicator--7728492b-3716-408f-b482-568ff61dd620", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a710ac0-4e33-482c-98e7-701fd3fd8cd8", "sighting_of_ref": "indicator--46355dba-6043-4465-9aa1-30fe6940d75f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522ac6e7-6bd1-4335-b75d-eac46454610d", "sighting_of_ref": "indicator--6efa5add-4e58-484a-87b4-2d64972e4f8b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b96613f-7002-47f2-b9b7-ab1db5d01bdd", "sighting_of_ref": "indicator--e8e7d7da-0b51-4cd2-805e-932db4c6b65c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7463ea24-a636-4a9e-bda4-33aef5481578", "sighting_of_ref": "indicator--6d16cd40-64c5-4295-8779-098c34f025fd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8e267a-0e3d-4335-b613-6c6a818f5920", "sighting_of_ref": "indicator--6d16cd40-64c5-4295-8779-098c34f025fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4528431-f6df-471e-aa91-78ab5ad2e9ab", "sighting_of_ref": "indicator--cf760dbf-f8a6-421a-9864-5eb5e354a169", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e4c42c-0751-486d-a9ad-e6589cebece9", "sighting_of_ref": "indicator--cf760dbf-f8a6-421a-9864-5eb5e354a169", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11843fb3-252c-4b98-8a70-53dfb9723b19", "sighting_of_ref": "indicator--9938b839-17cb-4536-b98e-55d2bcb1f13d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916efaee-a8b2-45a8-8cb9-b26b76beb5d9", "sighting_of_ref": "indicator--9938b839-17cb-4536-b98e-55d2bcb1f13d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730c0a50-6889-4425-90c8-8292d3451d6a", "sighting_of_ref": "indicator--f0d46e39-a8af-46f3-8947-6682ab2d8994", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a1e49c-ef70-48cf-87cc-6df513948122", "sighting_of_ref": "indicator--1b6cfa7b-b7f2-4850-bda7-ca5545221aa1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ad41a3-fa9b-4737-834c-35514c9d325f", "sighting_of_ref": "indicator--1b6cfa7b-b7f2-4850-bda7-ca5545221aa1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef06b7d-b37a-40cc-a43c-aea6c967ae32", "sighting_of_ref": "indicator--c4182c6a-a360-4b28-8b7d-23455c8030f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f81afca-2ad5-48b3-84d8-a55a414495e1", "sighting_of_ref": "indicator--c4182c6a-a360-4b28-8b7d-23455c8030f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c572b6cb-14a2-483d-a899-03282d197726", "sighting_of_ref": "indicator--0c494c6b-236d-4320-b393-11a2492f402e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269b16c1-fe8f-4f53-a64a-3ea40fa8cadc", "sighting_of_ref": "indicator--0c494c6b-236d-4320-b393-11a2492f402e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ade2e96-251b-450e-9cd0-7aa3007d4cd3", "sighting_of_ref": "indicator--739a1357-11d4-411e-beb8-acc37c540d88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf417e0-fb23-4348-a330-c5288e5c3a41", "sighting_of_ref": "indicator--739a1357-11d4-411e-beb8-acc37c540d88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f22614-bdd7-4934-bbef-d55ae8b704a0", "sighting_of_ref": "indicator--b4d30d34-b38c-4090-87c0-4e8304f6fc7d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28aa803-8cd8-4062-8110-72849c11bb61", "sighting_of_ref": "indicator--b4d30d34-b38c-4090-87c0-4e8304f6fc7d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b4f14e-af4c-4969-ab49-1be539f4e223", "sighting_of_ref": "indicator--47d0d510-92dc-4bbb-9248-105be7810cb4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7457598-9b63-4e4e-96b9-6eeb29b43caf", "sighting_of_ref": "indicator--47d0d510-92dc-4bbb-9248-105be7810cb4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf1604c-61e8-45a1-9707-149149ec7517", "sighting_of_ref": "indicator--2fec7f7b-3f83-488e-8fb3-6d8a4a4a8963", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d6a0c9-9378-465f-ba50-73536acee9c1", "sighting_of_ref": "indicator--2fec7f7b-3f83-488e-8fb3-6d8a4a4a8963", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe54f965-fd4f-4ba7-abc5-9b99cfd21524", "sighting_of_ref": "indicator--fe31c7eb-ada3-4e54-b347-1a5148bfa87e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd72540d-092e-4611-b215-181f1771b6f3", "sighting_of_ref": "indicator--f6414851-7adf-4485-a364-9fa6e8665c51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9a0502-02f3-48fc-ab10-915c5957c1b6", "sighting_of_ref": "indicator--f6414851-7adf-4485-a364-9fa6e8665c51", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6880e6-d81b-40bb-b802-74d9a7851805", "sighting_of_ref": "indicator--0f68c482-c972-41bd-9f17-1c5bdb829078", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5727b4b8-36b5-4e06-b44d-45479f332f8b", "sighting_of_ref": "indicator--de67ee6e-3351-4e7d-9ddd-d00524c18754", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae68c58b-bfd3-4a3a-85c5-234ca059b07d", "sighting_of_ref": "indicator--de67ee6e-3351-4e7d-9ddd-d00524c18754", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59766db-792f-45a0-b81f-5e06fe6d13a6", "sighting_of_ref": "indicator--2c3fd557-1f0c-4e52-b078-a992a7b38e6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df57460a-19bb-4403-979b-33d6f83425b6", "sighting_of_ref": "indicator--1c6fc44d-91ae-40e8-91eb-6e7f00fcb019", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d239ca4b-e693-4fe3-a1b2-0df26531d3ed", "sighting_of_ref": "indicator--06cee10d-b68b-4d97-b73c-d524a8be088a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d0b483-6f78-415c-9fbd-a7c8ae4b27f7", "sighting_of_ref": "indicator--482d2cf3-db3d-45e9-a8e2-da4239feb18c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827819ba-20a2-4239-b146-042ff38b75a7", "sighting_of_ref": "indicator--8b5a0192-e2b2-4f6e-ba54-95a0725d8bbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4015dbe6-f58c-4fc5-a6a2-0bb9479a2320", "sighting_of_ref": "indicator--5f87566c-09a2-4201-b814-166ba994fd04", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a73b352-4e5b-4943-aa54-d6bb97d2a811", "sighting_of_ref": "indicator--13197717-b35f-47bf-8d5b-7ea2df094373", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e716b398-52ab-43e6-9296-bf080f7b7c62", "sighting_of_ref": "indicator--3348da3b-a1ec-41e0-9315-72c680773b0a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fb41fc-4530-49db-9dff-620cc6e2a32f", "sighting_of_ref": "indicator--629ed80c-47c3-46f4-ae0d-9d12166128b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226f2ad2-c0f2-47e7-8900-cb9bc306abb8", "sighting_of_ref": "indicator--cf9a6cc5-2696-4162-947b-31ec90dcc293", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d73d96-e895-471f-aa93-d59a835cb9fd", "sighting_of_ref": "indicator--8c0cdcfe-cd4d-44ae-8189-ceb27b11d778", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a38f43d-d00a-4f31-9839-dccf61a03ca4", "sighting_of_ref": "indicator--8c0cdcfe-cd4d-44ae-8189-ceb27b11d778", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb9d1a8-e89d-4af7-8f1f-7936141f4b37", "sighting_of_ref": "indicator--0cb2e2dd-f3b5-4b54-94ce-c3d9fd37dc69", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbc7102-1e22-4590-9c43-da681d59ef49", "sighting_of_ref": "indicator--049f988a-b798-4a27-88e1-5c2b4485d39b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ade8879-876d-48f6-b82e-77b637c55f83", "sighting_of_ref": "indicator--65a2701e-c59b-424b-b33e-6c217fb11415", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366c2195-3dd2-4265-a77f-2e0d012af85d", "sighting_of_ref": "indicator--b548f4cf-4715-4876-9e19-0bdbad3fd677", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e40de30-f34b-4345-99ef-b6932c2fc0d2", "sighting_of_ref": "indicator--184efcae-acf6-48a6-bafc-f4df15a6fe8b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b19044-35c6-4956-bcf4-8989a2b9f7ce", "sighting_of_ref": "indicator--5650aadd-c55b-4d56-a385-35cac8368aac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5511670b-979f-4094-8b69-a47cb55436f4", "sighting_of_ref": "indicator--6a5f367a-bf58-4cd9-a7c6-416c7a305ede", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d47f04-1ffe-4c81-a029-491f7f07063f", "sighting_of_ref": "indicator--2fb444df-ab68-452a-9cc2-27f81a789d2a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f09f68-b518-4639-9146-14403b665bf6", "sighting_of_ref": "indicator--2fb444df-ab68-452a-9cc2-27f81a789d2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3ee7a9-0d74-483c-94a3-3f2ffef2103d", "sighting_of_ref": "indicator--609adb40-76ba-4cb0-8332-d5ecb758d774", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114d2874-5f81-4f41-98f0-60c71928a3e8", "sighting_of_ref": "indicator--96d19ee6-608e-45a9-a1f6-b74d1d6dc97f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65464d84-0a6b-4b85-b78c-8e087974ab7e", "sighting_of_ref": "indicator--e29298da-f294-4f04-b0f8-d2010638e202", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ec3e06-d5c1-4648-9096-b80278e8579f", "sighting_of_ref": "indicator--0215c3d9-7703-4166-92b1-19fa9cbde4aa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da44068-e7f4-41fb-84b3-9f269cdd381f", "sighting_of_ref": "indicator--2a6db379-dde0-4e4d-ad01-d6a80c28ac7a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f98a84e-7786-4be6-a1a8-34ade4c04fdc", "sighting_of_ref": "indicator--aa0ce036-1df4-4a55-9693-cd79a93c28b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d491ffa3-b0d0-4bd6-92ee-0b64a944842c", "sighting_of_ref": "indicator--96564a2a-6942-4d9e-809f-47eae77214b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cdcd6d-5b96-4d3c-8ef8-bc661b04fe54", "sighting_of_ref": "indicator--0a4c8c28-aaec-4bd4-93e7-54da40ab480b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1480a256-d5d0-469b-8297-6327f81abc17", "sighting_of_ref": "indicator--67e16d84-3d08-470e-b357-d0159c909330", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1baea020-fa61-4fee-9d29-501d967eb324", "sighting_of_ref": "indicator--910e9329-ae29-4146-94ea-2b14aa09f3f0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246b5225-0e46-474e-bbfa-7580833b2e72", "sighting_of_ref": "indicator--7a0f008a-1737-455e-9a4e-20b44c00f873", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7fc6c5-292b-4425-8962-4649677f9f37", "sighting_of_ref": "indicator--7a0f008a-1737-455e-9a4e-20b44c00f873", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14bbbd9-c38e-403b-90a4-dea102c64287", "sighting_of_ref": "indicator--fc60e8d1-8fca-4681-9182-25714fea1ba0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce32f47-f820-47b9-9b76-ec3c398a3a15", "sighting_of_ref": "indicator--09ed4614-b422-4520-9851-3f65b52f66b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2f7f68-0bcf-4220-aa3c-3ea9b50e4191", "sighting_of_ref": "indicator--4fa01183-b6e0-4103-a4a5-7611d4ec8a30", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911eac41-ee97-4436-b054-20b6db05eee0", "sighting_of_ref": "indicator--0245ae67-2d27-463a-b530-fff285e06618", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b82653-5e66-4877-b83d-bc46c0fee48e", "sighting_of_ref": "indicator--1f81f392-ed76-4ac3-a4c5-5ec91053863e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf34de98-feee-40da-8210-6de537daee06", "sighting_of_ref": "indicator--ca024bec-a33e-4549-9b3d-1ddcd6d095f4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af43e11-51ae-49cb-a1c0-8aac541afab8", "sighting_of_ref": "indicator--b0efe403-6509-4127-a638-acd2e0357857", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da642388-3a99-4d03-9e1a-5c8986d15a36", "sighting_of_ref": "indicator--d5d82184-3a53-41e1-9071-db137fffe2e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3550b448-fe13-4f51-b57e-b366ad7d73d6", "sighting_of_ref": "indicator--778aa00f-06e3-4aa1-83a0-7e3059b7d5b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e84063-48ce-4830-aae4-8f4ebf482932", "sighting_of_ref": "indicator--9117b1a1-eb58-4bd6-958b-5383c987e61c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bb04fe-8f0b-4cc4-83e1-b65d42cdc591", "sighting_of_ref": "indicator--6abe88a9-96ea-4bbb-82af-ec0438f009b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94235bbf-6a82-4d54-b8bc-64a6d49efdef", "sighting_of_ref": "indicator--5b45099a-4863-4a06-a73f-4316d7544598", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb0011c-950a-472e-8239-11c6988cfd67", "sighting_of_ref": "indicator--f363129a-6698-4991-ae3d-6be7e05a5415", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ab8fdb-7d83-49b7-87e4-ffb6a34df571", "sighting_of_ref": "indicator--f78987fc-6824-4c90-97c3-bd2def5b5e23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a43f87e-ad83-40b7-8245-e842ff4f07e1", "sighting_of_ref": "indicator--1d156396-a444-4064-8d3b-30bfa978a4f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dcf4b3-655e-4d48-a72d-c412d7ec65ef", "sighting_of_ref": "indicator--f36e5d71-95b8-4d89-b393-4755192014f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd72f8a-3f8b-4e07-b461-0920c1bedd90", "sighting_of_ref": "indicator--f36e5d71-95b8-4d89-b393-4755192014f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748d9ad8-187d-48d3-ae81-90658b10b9d5", "sighting_of_ref": "indicator--0b10e05b-268f-4dbf-b109-7a12a28882bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c538881e-9034-409f-b560-77819a992b9c", "sighting_of_ref": "indicator--093112b4-bd71-4a00-b1c4-c393e9ef0b7e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c4a29b-22d0-44f9-8382-6a953dd00f9f", "sighting_of_ref": "indicator--093112b4-bd71-4a00-b1c4-c393e9ef0b7e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05833a3-f9e5-4542-b104-03526fe08808", "sighting_of_ref": "indicator--3ffd296a-42a8-4201-9d96-255cb6baace9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63f73c8-1ddf-40d6-9c3f-1e5abee17b15", "sighting_of_ref": "indicator--3ffd296a-42a8-4201-9d96-255cb6baace9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b91d45-00a3-4674-9f54-c9d3dc9a258c", "sighting_of_ref": "indicator--dfbc57de-c819-44ad-a34a-621ab91ecbd5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fcbd9e-f5e7-4a20-9366-b66b6792f8e7", "sighting_of_ref": "indicator--dfbc57de-c819-44ad-a34a-621ab91ecbd5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6476b4-f416-4b6c-a155-b077a6d262e8", "sighting_of_ref": "indicator--4c4a4f94-23c8-4727-a3b0-f766bc222792", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3578e3-3820-45f0-9cf5-0e1472b41a68", "sighting_of_ref": "indicator--4c4a4f94-23c8-4727-a3b0-f766bc222792", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e11d3e-388c-49fb-ad95-bf8dce7d261b", "sighting_of_ref": "indicator--bd1a83d3-aed0-4ab1-b5f6-58efafab9a31", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6dd08f4-1556-43e7-9d84-fb6930f990fa", "sighting_of_ref": "indicator--bd1a83d3-aed0-4ab1-b5f6-58efafab9a31", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520f8a47-34e4-451f-819b-bcb1a57a832a", "sighting_of_ref": "indicator--8480332a-5ac0-419f-bdf9-8c8373ab44b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa80573-6b0f-458a-8a14-c11c3aab7447", "sighting_of_ref": "indicator--8480332a-5ac0-419f-bdf9-8c8373ab44b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddd8847-ba9d-46b7-9586-18bc6972d404", "sighting_of_ref": "indicator--04692ee3-73b0-4918-9c8c-e9231cb0f3e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19335d65-2b9f-4049-ba52-73bad86c8df0", "sighting_of_ref": "indicator--04692ee3-73b0-4918-9c8c-e9231cb0f3e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e980fa-2d8f-4cbe-91b8-c197749cedfa", "sighting_of_ref": "indicator--44e5b9d2-25c4-4593-9290-14d1f696c562", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d1f42f-71fd-4678-a419-dd5ac38833b7", "sighting_of_ref": "indicator--44e5b9d2-25c4-4593-9290-14d1f696c562", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5ab23b-cc39-45be-ab88-7bab6a6144d3", "sighting_of_ref": "indicator--8f16a406-737b-42e1-9ad7-69dfc67025b3", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe727695-1222-4b71-8525-e06cf77671fa", "sighting_of_ref": "indicator--727ccc15-e047-45ce-a486-2388206bf6bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fa327b-a99d-4c10-9a10-3accd6f37ff0", "sighting_of_ref": "indicator--56ff73c0-a24e-4f9c-b104-dda691444a26", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd99236-b7cb-4bba-847c-9427c76016df", "sighting_of_ref": "indicator--2e853545-981f-44d6-8587-6137db5e5136", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93bde9e-e91e-4154-ac58-650bcadc9a72", "sighting_of_ref": "indicator--3d1e0db2-762a-44a9-84b5-670c0bd8b37d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ce95d2-3514-4591-8436-45f7c35fc845", "sighting_of_ref": "indicator--bcaeacca-4e08-4530-82f2-39851ac0d525", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85043417-b872-4a94-b08e-dd6bdee31d80", "sighting_of_ref": "indicator--2edab40f-3e41-48a8-9190-ab781231c0a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff852f12-539e-432f-b564-5e8f6e095546", "sighting_of_ref": "indicator--c752a802-d08f-4758-b517-d577b4d4791f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39097fe2-6124-48fe-95ff-520d2d6c45f0", "sighting_of_ref": "indicator--bba43038-c8cf-4dc1-bd06-12fbc106b440", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d263fdb3-2eab-4aed-a20f-b636a0b9ceea", "sighting_of_ref": "indicator--fd05ba43-3778-4c55-981d-548d27fbb940", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb69dcd-5c89-4833-8af2-84a21c3617d7", "sighting_of_ref": "indicator--41c58d6c-b0ec-475e-a8dc-9bd908a9833f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245b0ac6-051f-4ac5-b4d4-a9d7c23a29f3", "sighting_of_ref": "indicator--25df6ae0-1ffc-42a9-8327-fe5df744c36a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e61688-24fc-4e4b-adce-a43dce2ab503", "sighting_of_ref": "indicator--2951cdde-7924-4dcd-b19d-4044eacaef05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69401fc7-0ba2-483a-9972-9acca50f8f9f", "sighting_of_ref": "indicator--0a2e99da-4eb2-4926-a460-c8b9838cf01f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2435809a-f16c-40f3-9c3f-117699e85b95", "sighting_of_ref": "indicator--2381132b-d61f-4326-bfc4-53547901c09f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2471cef0-9db7-41e5-9763-84d530a59b0f", "sighting_of_ref": "indicator--3d896456-0d16-4f65-8115-b465ab4584b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83bf88d-4e67-4dac-8a69-369cbbb4b9e3", "sighting_of_ref": "indicator--d134dfbb-6e23-43a3-b605-b90ac2c63f1f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba294b47-3e77-47c3-b035-0e875811d707", "sighting_of_ref": "indicator--caaa02c0-6287-4ae4-9d52-18826a52f5df", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd7152d-e07c-4f5a-b49c-55ef807a0d73", "sighting_of_ref": "indicator--c33ec496-1a1a-48f1-b452-8a2c12c0fe37", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106fea63-6110-486e-bb36-d79997a86b34", "sighting_of_ref": "indicator--f69cfa7e-53dd-46e1-8e62-7aed185d3671", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129c502a-fa9d-4d9e-a485-8d9b9bc2e499", "sighting_of_ref": "indicator--f69cfa7e-53dd-46e1-8e62-7aed185d3671", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3645d2c3-f3e4-4ae5-a1ab-6a5d3561ec8e", "sighting_of_ref": "indicator--8f154e39-4e4f-4405-9579-cffc53a0c075", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567237e6-ab5e-4f11-84e7-4242dcada764", "sighting_of_ref": "indicator--8f154e39-4e4f-4405-9579-cffc53a0c075", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8397ef-8fd4-4f12-97d5-921cb03cecfd", "sighting_of_ref": "indicator--2c6111d0-945a-4c7e-9b33-ce3490ec6949", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990d2d61-57c8-4464-a91c-7188b96426ac", "sighting_of_ref": "indicator--f8c31eed-3d3b-40f0-b365-7fe452516886", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a736a8d9-0f37-4ec3-8774-334660fedc89", "sighting_of_ref": "indicator--b6bd0c77-e137-4b3f-bcd0-a469ce2c786a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b624d66-8606-46bf-8fa6-81a45ccc7aeb", "sighting_of_ref": "indicator--b6bd0c77-e137-4b3f-bcd0-a469ce2c786a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c26be2-b7cd-4cc4-a2ba-46f096e6ab6f", "sighting_of_ref": "indicator--701a69bf-cefb-4c11-8d1c-2bf0c8a5093c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7deab1-cc6b-4984-9b7c-8406ca6be523", "sighting_of_ref": "indicator--e504bbbf-3e98-49a7-af66-0903d4557fca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123cb831-63a4-4281-a0a4-87badda8eac3", "sighting_of_ref": "indicator--0ca43a2e-fbc6-47aa-b939-cedb939e7de1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebdc8fc-0187-4429-a1be-f30602867516", "sighting_of_ref": "indicator--a3260222-30d6-48f5-b5bd-d54d799ba1f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3744dd0-43f2-47a2-b39f-b390ecdd3215", "sighting_of_ref": "indicator--2b3e80e0-ebe9-4de7-bf53-5f49ff64e739", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14300096-a0aa-4047-867e-04c68c185364", "sighting_of_ref": "indicator--79635d0d-a8fd-4a39-b087-377632f08ed6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b46402f-186d-4634-bf5c-c7ca148c5bc5", "sighting_of_ref": "indicator--c8a3b234-4200-47e1-b700-63b4a3f9c6d6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac2c47f-fa2b-4b6e-b2c7-b81750093658", "sighting_of_ref": "indicator--ddf6d280-3b4c-4fc0-8bc9-f4685a7e3a1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9323809-3b95-4c0b-9700-562322fb6e32", "sighting_of_ref": "indicator--f9bbb5c4-387b-4b86-b1cb-40f58f010971", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8e2a79-2045-49a7-9aa9-cf319843c6d6", "sighting_of_ref": "indicator--94df487d-70ff-4e70-abda-64e61d9d366d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60e042d-d00b-41a0-8972-dd7baf2c8491", "sighting_of_ref": "indicator--ca7f1ee4-2390-44d5-a052-f25f83cee5dc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b01620-32f0-47d5-8082-b6f3f7b6dce2", "sighting_of_ref": "indicator--1d1d9763-a8c2-404b-9fe2-5d9a87846de2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f33c547-94d4-4b97-8865-c5071d7bb988", "sighting_of_ref": "indicator--eb6c09de-e556-48fe-bf83-a68240c69559", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afb0180-1e33-4da8-b825-e0e7b198b332", "sighting_of_ref": "indicator--b81b5e76-c20c-4129-8a7f-3e12c1773e1d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6478ae47-a534-4a3f-a8e7-1879270e0044", "sighting_of_ref": "indicator--6cd3a476-fe73-44ae-b586-89f94c345180", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa23b05-dc51-4c7a-be46-85140f6d1dc1", "sighting_of_ref": "indicator--6cd3a476-fe73-44ae-b586-89f94c345180", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7abfb29-d713-457d-9a40-87cd94f448b2", "sighting_of_ref": "indicator--2cdd763e-8b07-43fe-a0ce-c35e7b292ee1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af407db9-f81d-435e-a6f8-b7e74df8f943", "sighting_of_ref": "indicator--2cdd763e-8b07-43fe-a0ce-c35e7b292ee1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf22d36-09af-4ccb-8736-3edddb36362e", "sighting_of_ref": "indicator--41ceb011-18d7-419a-89cc-f6f54a1a7bb1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5deeeb35-2b9d-4db6-a17b-2f73095a7847", "sighting_of_ref": "indicator--de9a2100-a31f-4755-a397-4476125661aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4a479d-5d1f-40e2-b936-dbac617e0ac6", "sighting_of_ref": "indicator--cadce71f-a1d0-4dc6-af79-f5c65c068a9c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8589fc8-278b-4f22-897f-4f1d819b8f6c", "sighting_of_ref": "indicator--2edb30c3-ed4e-4e55-b172-7be49635808a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fd81a2-9114-4e00-914c-f9244e24a256", "sighting_of_ref": "indicator--59f9b3ab-eab1-4f7a-bcf7-a59af298df10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7739def-3e2a-41f1-8fa5-7930bc11b26d", "sighting_of_ref": "indicator--59f9b3ab-eab1-4f7a-bcf7-a59af298df10", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79ebbf4-3e43-48db-a7f9-5af0cd936b3e", "sighting_of_ref": "indicator--eb95815c-fe1d-4397-8da5-0afe25ae1b31", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7a7e03-4495-4626-809e-9bdf510b05e0", "sighting_of_ref": "indicator--eb95815c-fe1d-4397-8da5-0afe25ae1b31", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7d30cf-125f-4d9c-92c8-aed218778297", "sighting_of_ref": "indicator--eb95815c-fe1d-4397-8da5-0afe25ae1b31", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f541563-5fef-40be-a780-9222f465d6bb", "sighting_of_ref": "indicator--2230e93f-09a0-4668-8fcd-da97882e0d8f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43718b4a-c1e6-4cd1-b2e8-10e947ebc051", "sighting_of_ref": "indicator--2230e93f-09a0-4668-8fcd-da97882e0d8f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac73559e-ed0b-4ea2-bc52-49fa7e9fd8e9", "sighting_of_ref": "indicator--2230e93f-09a0-4668-8fcd-da97882e0d8f", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7250ddc8-ab1a-483d-a03a-2f5b81a5682f", "sighting_of_ref": "indicator--24ff51f6-0420-43ef-a77d-e48945a168e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192f5461-bff7-4286-8c87-07b2d7d2a368", "sighting_of_ref": "indicator--acb88e4e-02e2-47e8-964f-0b7fc59ca6be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e367205e-1e86-4b25-943b-fecd24e310a0", "sighting_of_ref": "indicator--acb88e4e-02e2-47e8-964f-0b7fc59ca6be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f09433d-6e54-44e0-8f5d-ffd4f1a80a19", "sighting_of_ref": "indicator--acb88e4e-02e2-47e8-964f-0b7fc59ca6be", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f49c3c2-36e5-45d0-afc7-86aecbec05b0", "sighting_of_ref": "indicator--51d7f00d-98b2-4e0a-b9da-86c63e2886e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea711f1-a720-454a-9a81-9291d0659e42", "sighting_of_ref": "indicator--51d7f00d-98b2-4e0a-b9da-86c63e2886e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a495020-34b5-43e7-9905-721e6aabc2b0", "sighting_of_ref": "indicator--51d7f00d-98b2-4e0a-b9da-86c63e2886e3", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c715287-e12d-4ffb-9f2d-ef289d2d226f", "sighting_of_ref": "indicator--b4cb3ca2-30e9-4266-bf0e-1553652a4f18", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88d4888-2dd6-456b-a0b6-20c675280963", "sighting_of_ref": "indicator--c3439ad4-3d23-47c0-940c-ae03ca92b233", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7e70d6-f171-4ceb-8314-91f3e2017777", "sighting_of_ref": "indicator--dfa280e5-f150-4bcf-a0f1-fab7db0734c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41421e9a-aef7-4d82-b6a6-03057292c2fd", "sighting_of_ref": "indicator--07e29427-48f2-453d-a37f-36e9eec1b73c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48ea57b-cec3-4e1c-9ef8-28a0eb25befc", "sighting_of_ref": "indicator--07e29427-48f2-453d-a37f-36e9eec1b73c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf2299c-aa79-4eff-a6ca-a27b93401584", "sighting_of_ref": "indicator--dc2f7021-26e1-431f-8eb3-f38a35c13de6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e64b4e-cddf-4a10-8711-8965af1d3024", "sighting_of_ref": "indicator--c348f19a-2b96-49c0-9d5b-d4079198747d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97f9af3-40d1-4c5e-a78e-af441600ef36", "sighting_of_ref": "indicator--6e6d6d2b-dca6-404a-81d0-ff74570ae945", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e585b002-1e1b-433f-af22-e4de98df0493", "sighting_of_ref": "indicator--39c616bf-43a1-4de0-9317-7edb05b45ee0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1266c4cd-55b4-4d42-9acb-0da09afd7ad6", "sighting_of_ref": "indicator--c5782909-1aa3-45c1-b6e0-2969601e9041", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e57461-6b0b-422d-ba41-fea98f536abe", "sighting_of_ref": "indicator--3ed61623-3a0b-4772-b2f5-23d9cff47408", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9308712-3dbb-441a-b13d-324a501d6992", "sighting_of_ref": "indicator--a9f6c602-b114-4235-b16e-db6e4a7a6c60", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6159539-c6ac-4fa5-968c-0388162ff7c9", "sighting_of_ref": "indicator--81f26531-4d5e-4d40-849a-da268f77f47f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d1fa0b-393c-4396-a7c6-88539b2de8ec", "sighting_of_ref": "indicator--fea1f472-a915-4940-96b3-9329308d0284", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9115c2dd-8ecb-4f91-a58f-e1ecec998c13", "sighting_of_ref": "indicator--cb2bc32e-d82f-4cc5-98eb-1b88d07b2734", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ed40a9-2dba-4f9b-acc5-a554213e8611", "sighting_of_ref": "indicator--544f13c8-c269-402d-85d9-9321f46460db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201499b6-9e6b-4e2b-9839-f0d78938e089", "sighting_of_ref": "indicator--09dd2d5c-6471-4c5a-827e-ea220c9c7ea7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2287c30-9c85-4a35-8f14-16a28ff1a28c", "sighting_of_ref": "indicator--64873fae-d801-4bcb-85fb-3f295c012164", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecba450-c504-4102-9d11-fc6347aaa7e7", "sighting_of_ref": "indicator--b7ba2266-9aad-4526-857b-d3869890465d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c164f18d-f29a-4a3a-8aaa-0a4640b95f49", "sighting_of_ref": "indicator--39cbb88d-bc01-43b4-8ea2-fb470e2927fb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86b4d09-7598-4964-8703-e20bbdf6e18c", "sighting_of_ref": "indicator--6047ef98-f29f-4282-9bdb-9d29317fcd94", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0ebf6b-2701-4dc9-99db-51b31705ec09", "sighting_of_ref": "indicator--c40aaa65-7dfb-4c53-95b1-ac602e2644fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45c5d68-ec2c-4824-8675-4440710d1eb9", "sighting_of_ref": "indicator--9486033c-f059-4868-86bc-f622abec0739", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef8a890-74ff-4984-a272-9b984d2858bf", "sighting_of_ref": "indicator--3aa35f84-0165-4821-8898-6598b75c8f17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadfb9cd-8a91-4d16-9621-18c6fe00c7c5", "sighting_of_ref": "indicator--01bb29a1-4dee-4bad-b3b4-8110f3a08653", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d22ee22-663e-4ccc-9a90-ca0a702210b8", "sighting_of_ref": "indicator--ebe982b2-be8c-40e7-9e3b-c4e120966de0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374b0dcb-f220-4150-9904-d7fa846471e3", "sighting_of_ref": "indicator--9d550d30-4e87-4017-8aef-e984d5be7eb8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c748d82-7e87-415d-bc1c-7c6c1199eb77", "sighting_of_ref": "indicator--8b9abac6-aa56-41e5-bc71-877ddbdff7e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36f68e6-76ba-46cf-9bf8-5da028d9aea8", "sighting_of_ref": "indicator--e0340017-0fa7-4c6f-b545-a9e69ba557e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e39f68a-eda2-4c3f-bd73-a9cdde50a239", "sighting_of_ref": "indicator--0b164ef4-b7e7-4136-97a5-1a1e02a65fe8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2549ac75-b674-4b8b-8b9f-b38bc037f352", "sighting_of_ref": "indicator--5abe6f89-d4e0-41fb-8b6c-f9f1d6c564ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89700108-86ea-4a63-89e8-6dae48da6175", "sighting_of_ref": "indicator--963eb9fa-16e5-493f-9189-1ae20b748d1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b543cdf2-1bde-4c98-bc35-11dea4ba6e2d", "sighting_of_ref": "indicator--963eb9fa-16e5-493f-9189-1ae20b748d1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295ff890-68ee-4649-803a-13afb7ccb57b", "sighting_of_ref": "indicator--22dded68-31f8-4522-be0a-c64c988408d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc70d277-0514-4f6f-9ca5-fd8326fd1c0d", "sighting_of_ref": "indicator--22dded68-31f8-4522-be0a-c64c988408d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a03e7ec-5027-40ba-8228-2d775e4af27a", "sighting_of_ref": "indicator--184ad207-d9bd-4512-bb12-d34531342ea3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a86928-2fc2-4a6b-9b94-bb0a780bf6f1", "sighting_of_ref": "indicator--184ad207-d9bd-4512-bb12-d34531342ea3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f010955-9714-47aa-a61d-282d688aae4b", "sighting_of_ref": "indicator--08365881-4689-4f1f-9a0a-c5b9ddee6998", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a3bfda-e227-43cc-a6b5-6bbc1df0960d", "sighting_of_ref": "indicator--08365881-4689-4f1f-9a0a-c5b9ddee6998", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a18c077-85ce-4127-b0a4-dd39b376c13c", "sighting_of_ref": "indicator--d922294c-c39d-40bf-873b-63db3662aae3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0262fc-2c14-48d7-9012-46c5e9a05d5e", "sighting_of_ref": "indicator--d922294c-c39d-40bf-873b-63db3662aae3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33edca28-44f6-4a04-aca8-ed05679d70e8", "sighting_of_ref": "indicator--e1294438-0de7-43fc-b251-3d106ef78e5a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37734258-f5eb-4142-8fee-7894f8eaa683", "sighting_of_ref": "indicator--e1294438-0de7-43fc-b251-3d106ef78e5a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c843ed-230a-4c00-a467-947c133fae12", "sighting_of_ref": "indicator--446e1c9f-39a8-4b09-b4c6-392c0b96fd20", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60c9b9c-ec65-4dc9-8dbc-f23383f781da", "sighting_of_ref": "indicator--446e1c9f-39a8-4b09-b4c6-392c0b96fd20", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5a3797-5d22-4d10-a966-e6894eb6d609", "sighting_of_ref": "indicator--023d116c-a235-412e-99fb-c57aca928070", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4358e532-2787-421a-a4e2-e92b04a5bdf9", "sighting_of_ref": "indicator--023d116c-a235-412e-99fb-c57aca928070", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841982de-ed8e-47c6-91c7-bf5535b87b8f", "sighting_of_ref": "indicator--f730afed-c9e3-43db-95fa-884d44dbf89b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4001114a-4ef1-44d4-b709-0c265b390450", "sighting_of_ref": "indicator--f730afed-c9e3-43db-95fa-884d44dbf89b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7800fa-b462-4a3b-9a25-886e9beee451", "sighting_of_ref": "indicator--9cb3df5a-a4fd-4768-a1de-a30555f0bf69", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff38708-cdf9-4f7f-86d8-bdb9c1373b3a", "sighting_of_ref": "indicator--9cb3df5a-a4fd-4768-a1de-a30555f0bf69", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e1a820-85bb-4525-b9a7-c9627c14cadf", "sighting_of_ref": "indicator--bd6acfe5-fff9-4cae-9c80-6a10f53540a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b9ab0c-9336-49c8-a19c-54fc4f42dec2", "sighting_of_ref": "indicator--bd6acfe5-fff9-4cae-9c80-6a10f53540a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5acb0bd-089e-4cc3-82e8-3d5728b2bdc3", "sighting_of_ref": "indicator--5e121b64-cb83-467e-a966-4ecdc4643356", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535ce2ab-4682-4c66-9a04-cff97d47e891", "sighting_of_ref": "indicator--5e121b64-cb83-467e-a966-4ecdc4643356", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdfd464-7d10-41da-85d1-312ff5f8abef", "sighting_of_ref": "indicator--f58d005c-dca1-4bef-af60-a963a37f301d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955f3a47-5f42-4a91-b37d-4a7d1036ee33", "sighting_of_ref": "indicator--f58d005c-dca1-4bef-af60-a963a37f301d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a5c1f9-5935-4cb1-b0d1-6a162d47f775", "sighting_of_ref": "indicator--8250fdbe-618f-47b2-a10c-c9d6dd3fdcc9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f16633-8fa5-4202-a85e-3551eab31b13", "sighting_of_ref": "indicator--8250fdbe-618f-47b2-a10c-c9d6dd3fdcc9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acb57d2-76d6-4176-92fa-b3b7d310bd98", "sighting_of_ref": "indicator--3224057d-0358-425e-9bcc-308269a21cfe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8506d5-40ac-4835-bb8c-0c3f98b32a1e", "sighting_of_ref": "indicator--3224057d-0358-425e-9bcc-308269a21cfe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41da00a6-a897-4e4e-89e2-d8fb5a0d9f78", "sighting_of_ref": "indicator--53eda24d-05b5-4451-b1a1-3569043c56c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd32d2e6-36d8-4d6e-818e-ae8ffef67dce", "sighting_of_ref": "indicator--53eda24d-05b5-4451-b1a1-3569043c56c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7284798-3fb0-4ea6-a7d3-dfe019fd6ab8", "sighting_of_ref": "indicator--2e0ac910-0feb-4157-8603-422bc02516b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df1e4c9-3824-47a9-b88e-6b16dc69ea52", "sighting_of_ref": "indicator--2e0ac910-0feb-4157-8603-422bc02516b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f898908-8b3c-462f-b33e-02ac623c5dd7", "sighting_of_ref": "indicator--d3447a24-b0de-45c9-8059-876716133f5c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e27b8c-e0de-49cf-81a0-25f918e451c5", "sighting_of_ref": "indicator--d3447a24-b0de-45c9-8059-876716133f5c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83fd2fc-225f-4629-907a-f8001fac29d0", "sighting_of_ref": "indicator--7f7f22b0-79bf-4f65-b530-3b7d8c988fd6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1667698-026b-47e6-878c-f4d9cbaf77ef", "sighting_of_ref": "indicator--7f7f22b0-79bf-4f65-b530-3b7d8c988fd6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70617ba-12ea-4f82-90f9-dee6bfc632fc", "sighting_of_ref": "indicator--403716ba-ff55-46b9-86ef-b42b25298e62", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb770605-c025-4b4b-8c1c-e36c22e012a1", "sighting_of_ref": "indicator--403716ba-ff55-46b9-86ef-b42b25298e62", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ed3963-e25c-4261-8b27-289987171041", "sighting_of_ref": "indicator--7e02e920-db4b-4cd2-8443-bc75cc466e4c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e19b981-839b-46a0-93d0-5ae75a299e4d", "sighting_of_ref": "indicator--7e02e920-db4b-4cd2-8443-bc75cc466e4c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d937bbc5-bf9c-47e9-a3ab-fe5a7c8dabfc", "sighting_of_ref": "indicator--e9d7667c-3520-4c7e-9ce2-46e5b29dd10a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2172f1fb-eb3e-49a0-a6f7-e5b3a6b764b1", "sighting_of_ref": "indicator--e9d7667c-3520-4c7e-9ce2-46e5b29dd10a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb016a-4e4b-453e-a0ff-708d2e13a5f4", "sighting_of_ref": "indicator--3bd31d3a-61be-4fef-9004-80cb48a9fe1f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb71466-3d32-4fc9-83cf-5ab73b9efeb4", "sighting_of_ref": "indicator--3bd31d3a-61be-4fef-9004-80cb48a9fe1f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f946eafc-426a-48f4-be3f-9a828e7ddf14", "sighting_of_ref": "indicator--8bc907c7-524e-4735-892f-7d11f3f9207d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c4b9d8-bcb7-4f6f-8d60-1bd6cf0b788a", "sighting_of_ref": "indicator--8bc907c7-524e-4735-892f-7d11f3f9207d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e048c8f0-f167-4726-b764-01eb7cc17e65", "sighting_of_ref": "indicator--ae9e1269-e4d5-4b6e-a4d7-af62c903e405", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3449af4-7640-4815-a8e5-a80bcca00393", "sighting_of_ref": "indicator--615ac358-e486-41b6-9fa9-d19c87b5cbf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b12f65-bfb8-4484-aab8-346311230907", "sighting_of_ref": "indicator--615ac358-e486-41b6-9fa9-d19c87b5cbf3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e436c28-d348-4bf4-b933-4ae31dfa2d46", "sighting_of_ref": "indicator--17970e55-2f76-457e-bc1a-e6a7c33476e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c610dda0-15cd-4120-8776-bf49094619e7", "sighting_of_ref": "indicator--1ed8c0e5-c2a6-43ae-ad8e-929915bf7aa3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b9a698-755d-4368-a4e2-ec5aaa70e0f6", "sighting_of_ref": "indicator--1ed8c0e5-c2a6-43ae-ad8e-929915bf7aa3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40d1c38-5595-410c-8a76-5182f28fe907", "sighting_of_ref": "indicator--c405f78c-c214-4eec-bd58-666db54f622f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0584ad4-2470-4244-ab05-b1620442861f", "sighting_of_ref": "indicator--c405f78c-c214-4eec-bd58-666db54f622f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7dd8518-6b79-40fd-9d24-86109d568a5b", "sighting_of_ref": "indicator--b5df9124-61a6-4203-993b-bafb5be23f80", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9465218-b67a-410e-9a8c-9d3037beb9ab", "sighting_of_ref": "indicator--b5df9124-61a6-4203-993b-bafb5be23f80", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c2ff47-7280-41e2-a3a0-d9c0abd2228c", "sighting_of_ref": "indicator--976a4213-135f-4fe6-ab97-764fcbe852b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a4f937-0197-4732-b993-6300d4d87d1c", "sighting_of_ref": "indicator--976a4213-135f-4fe6-ab97-764fcbe852b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b683f65c-2c1c-45e3-aa75-4b62d9087cbc", "sighting_of_ref": "indicator--53ac6e26-3027-4bf9-a343-ea8baf177f0c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66077154-5412-45a2-bfdb-3125c6312458", "sighting_of_ref": "indicator--53ac6e26-3027-4bf9-a343-ea8baf177f0c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f13e68-da02-4c04-8f9e-80571e2263df", "sighting_of_ref": "indicator--242e58cc-f029-4ad0-b5f5-d1971aa6ae9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333a38c7-8de7-49a4-b1c7-2a171c46ee51", "sighting_of_ref": "indicator--ea0c4cc3-6e5a-4ab8-84c5-8c2e132da7bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613280a8-5bcb-493f-8724-41b686774959", "sighting_of_ref": "indicator--ea0c4cc3-6e5a-4ab8-84c5-8c2e132da7bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa74fbbb-7bbb-425f-8faf-c08c6f240bbb", "sighting_of_ref": "indicator--7bea8878-225b-4c84-8f5c-9907daa30404", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd01a8c-edb4-490c-ac34-727ad2568f4c", "sighting_of_ref": "indicator--7bea8878-225b-4c84-8f5c-9907daa30404", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c547d3c-5621-44c0-9d65-38369d328454", "sighting_of_ref": "indicator--432fa8d4-3f5e-42e3-9107-9d944c3a5654", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1921d3f-1df7-4927-93b4-48e194867d2a", "sighting_of_ref": "indicator--432fa8d4-3f5e-42e3-9107-9d944c3a5654", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961c7bf3-f25b-48e8-a077-a963d462f0cf", "sighting_of_ref": "indicator--0bb48ae1-d8ca-4957-9c91-36ddaf813607", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0e950a-01be-42e5-869d-308b4756715b", "sighting_of_ref": "indicator--4f2bc98e-b268-4e79-9bdd-545cdcc6b6f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c7591e-5e67-491f-9d2f-c901f482016b", "sighting_of_ref": "indicator--d6d3b8a6-0867-4a9c-abe3-6c821245f77a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc367c35-cbd7-40a0-bf9d-78b2f724198a", "sighting_of_ref": "indicator--759e611a-0aea-47f0-8125-e4784f6aff54", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e41b962-9584-4691-ab04-d6fc13445838", "sighting_of_ref": "indicator--f9a3369c-df2f-4108-b637-d1d445b0199f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb5b2be-db75-4e9b-9123-bfa75de15d71", "sighting_of_ref": "indicator--9bbab942-67e2-44fc-b4a5-21492aab1bbe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae040540-0c73-4850-8a27-adf49463bff0", "sighting_of_ref": "indicator--dff6a90e-24a6-419f-91dd-486ff5a6fb3c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ffd724-35de-45a1-b121-21ac939291ec", "sighting_of_ref": "indicator--f7d4910c-3f70-45c8-ab7e-f8b15d32be76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4db4a82-ce9d-4e49-b589-b9124feeeedd", "sighting_of_ref": "indicator--f7d4910c-3f70-45c8-ab7e-f8b15d32be76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a30c2d-cf6f-4627-a6d1-9837099476a3", "sighting_of_ref": "indicator--e0a1736c-54ad-40d8-bb0a-593be492c352", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1dc5d2-31ab-462d-a7b1-fba0d4c79992", "sighting_of_ref": "indicator--e0a1736c-54ad-40d8-bb0a-593be492c352", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b555f49-c558-47cb-8ff6-9155c530888d", "sighting_of_ref": "indicator--923512c0-d541-4e34-8a90-e59756441453", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe4f791-e99e-4436-8615-efb9cb7f9175", "sighting_of_ref": "indicator--923512c0-d541-4e34-8a90-e59756441453", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04a900e-c424-4a50-9ebe-425a55288fcd", "sighting_of_ref": "indicator--379aec6b-1aed-44fa-b83e-363addb9ee45", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30afb0bd-d3f5-41a7-b4ba-827b3e008f4f", "sighting_of_ref": "indicator--379aec6b-1aed-44fa-b83e-363addb9ee45", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9848443d-6240-4bbb-9cf0-a539fba5be26", "sighting_of_ref": "indicator--09ce9354-1073-4f97-a223-cc0895d3694e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf5daab-77e4-41ff-b28f-bd514aa30c19", "sighting_of_ref": "indicator--09ce9354-1073-4f97-a223-cc0895d3694e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedf7474-a2d5-4271-a4f7-c56bf9f4766b", "sighting_of_ref": "indicator--957c9ad1-45c4-474a-b0bd-564bfbfe6e80", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9353cbac-4d42-487a-8ac2-1e900c0f5143", "sighting_of_ref": "indicator--957c9ad1-45c4-474a-b0bd-564bfbfe6e80", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a4f46c-5096-4df4-9bc5-582505d4e83c", "sighting_of_ref": "indicator--33d6abc1-25a7-421d-baa2-69ecd7c870a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3307fc-72fc-4ca8-a25b-541d09b15653", "sighting_of_ref": "indicator--33d6abc1-25a7-421d-baa2-69ecd7c870a9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f0c81b-170c-434a-aaec-906be5b7f709", "sighting_of_ref": "indicator--c3f35800-75df-4666-afab-c54525a4a872", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc45963-ceaf-40ad-a831-16e0d7770112", "sighting_of_ref": "indicator--c3f35800-75df-4666-afab-c54525a4a872", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869dd2ba-cc93-4065-af64-6a81d566211a", "sighting_of_ref": "indicator--075566e9-e063-4946-b3c1-12ab7bf07fea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09b461d-275c-4dfb-beb9-23d97e1d5105", "sighting_of_ref": "indicator--075566e9-e063-4946-b3c1-12ab7bf07fea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d98430-de97-44eb-95cb-c2f8360de129", "sighting_of_ref": "indicator--bb4b90e9-214e-42ac-8ce8-fe6426640ccb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c402ac8-979b-4c42-b5ba-2717369369ca", "sighting_of_ref": "indicator--6c8641d7-9dd8-4518-8a99-5c916a50f5d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb819d2-c647-4fec-96ef-679822388486", "sighting_of_ref": "indicator--6c8641d7-9dd8-4518-8a99-5c916a50f5d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11930fbf-cde2-42a2-a203-2c988310968a", "sighting_of_ref": "indicator--cb010dfb-c1fb-4037-84bc-73f36d52eab7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545e2a5d-aa2f-4e3d-8c21-d62c65483695", "sighting_of_ref": "indicator--cb010dfb-c1fb-4037-84bc-73f36d52eab7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e5ba95-e6c7-45ad-bb03-8052baff6c3c", "sighting_of_ref": "indicator--9594e81d-dece-46b0-8f33-42878b39ddad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863db2c9-1884-4aaf-aa59-07b73e17da33", "sighting_of_ref": "indicator--9594e81d-dece-46b0-8f33-42878b39ddad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1ecf15-368d-432e-815c-4c1db2f75074", "sighting_of_ref": "indicator--b46f1f65-81b6-435d-849d-cc0692c4f52f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dff3a8-f952-41ef-a7b5-6510f9e4e428", "sighting_of_ref": "indicator--b46f1f65-81b6-435d-849d-cc0692c4f52f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92beee3f-e5b2-4fcc-8a72-c8bec86bc5ba", "sighting_of_ref": "indicator--90e8bd4b-c15b-4706-8ab7-38cdd182e382", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231033a0-e1c9-4892-bee3-25bb66256421", "sighting_of_ref": "indicator--90e8bd4b-c15b-4706-8ab7-38cdd182e382", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f69276-afe1-4222-94e2-896289a2494d", "sighting_of_ref": "indicator--bbf976b4-cc44-46a5-a695-281484fe51f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9177c8f6-9f4d-4391-9298-4eff81263f63", "sighting_of_ref": "indicator--bbf976b4-cc44-46a5-a695-281484fe51f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a4374c-4c69-406a-b7b3-4ed18d8ac882", "sighting_of_ref": "indicator--56bd6d68-4afe-44e9-b22a-6e4fa27b1ad5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635ad83a-5b34-43a5-8c7a-0ed806ae39a6", "sighting_of_ref": "indicator--4c71c332-5d00-452c-abe5-4082c82bf196", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e87b2f0-33e9-4398-8cbf-db820b67eb0a", "sighting_of_ref": "indicator--4895a240-a3df-453d-bcd3-91dca3590054", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be3e0f8-016c-4e77-b4dc-41c312d078e2", "sighting_of_ref": "indicator--e1c2308c-a0c9-4957-b80b-f0156efab731", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704a2fb4-667c-485f-ba57-c3c279109861", "sighting_of_ref": "indicator--c99980d9-02db-4b7f-a8b6-963dd1b945bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d492cfd-b17f-4b35-a683-b8d1c28efbff", "sighting_of_ref": "indicator--b41e8612-2135-436c-a8ca-0787f4d396e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b145d95-100d-45f5-82ec-8c1e572dc69a", "sighting_of_ref": "indicator--80c23d74-faa8-4cdd-b230-594b5425ac73", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6fadaa-4458-4d30-960f-984e27c1ade7", "sighting_of_ref": "indicator--155c42f3-54c8-4c88-a26f-5449fbeb50d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e47ca2-3b31-47ae-9dac-1ff44bdc09ed", "sighting_of_ref": "indicator--d4935757-6fb8-430d-9686-23f5c8d13c7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356704c1-8bba-4c97-ba40-1a059f2d131b", "sighting_of_ref": "indicator--d4935757-6fb8-430d-9686-23f5c8d13c7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d857212f-80e4-4c58-96f5-331ecb1908ee", "sighting_of_ref": "indicator--ac0797b3-f3cb-4075-bbca-127d3e88a639", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cf28ba-98ff-42de-945d-2e0c15472d1b", "sighting_of_ref": "indicator--9ea80cb6-3a23-442e-93de-873695eed3f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f829a94-d133-44e1-9114-852a6efee365", "sighting_of_ref": "indicator--1208b29f-d169-411b-905d-71575c5bb77e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7bcdca-b144-44d0-b76e-4e70ac8230c7", "sighting_of_ref": "indicator--1208b29f-d169-411b-905d-71575c5bb77e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0a7179-df9d-4856-9458-5cf2c5640e4d", "sighting_of_ref": "indicator--857d1490-870d-4109-970a-530bf1d9a75b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47b50a1-23de-42ed-8080-cbc5261905ed", "sighting_of_ref": "indicator--757db0f7-ab38-4819-bb8d-fd470eaf51d5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112fdf5d-3737-4127-a591-a6a3d31c9e7c", "sighting_of_ref": "indicator--52e29b19-b3da-4951-85a0-3bcf9a21b813", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e261cf-d72e-494e-b874-93bf777b37b4", "sighting_of_ref": "indicator--bb960cf1-ae61-4b72-8d03-39847df1663a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65064791-de88-46ca-9f00-7fd9c37b6202", "sighting_of_ref": "indicator--c7f92731-3143-4a9b-b070-73e12cd9b853", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6279425-6f8f-47a9-9b6e-7b0c82581fd0", "sighting_of_ref": "indicator--608d917c-94dd-4c94-93df-293d143dbfb9", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe15275-1e0b-4d42-a682-f9e3ead12d2e", "sighting_of_ref": "indicator--d0f94b40-5f34-4646-93f6-32ad8f749dbf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee73b7a-9d04-4a2c-8b91-b0f375f4ffcf", "sighting_of_ref": "indicator--3d6b43e4-6d77-4794-97c8-922650dd1372", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38639908-eb6e-4493-875b-c5cb3393e342", "sighting_of_ref": "indicator--403fb575-2821-4844-bf26-90c01f65bc5d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9365867-0505-450e-b0f9-d5a13685f32a", "sighting_of_ref": "indicator--403fb575-2821-4844-bf26-90c01f65bc5d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929ee7e0-905c-45f5-a318-2c6f35c6af0c", "sighting_of_ref": "indicator--6e470bec-f086-4223-bf08-aa796ea29255", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e84710-1579-421a-9756-23ac8ccad64c", "sighting_of_ref": "indicator--ab117fd4-af64-45bf-aaa1-f0f452c3f49f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8edd864-46c6-47f9-9d96-c4df8fceeefa", "sighting_of_ref": "indicator--faa41dfb-d749-410e-a752-f75f3cd2ad8f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4fb229-f5ae-4f5d-807a-a301ad02848b", "sighting_of_ref": "indicator--3a4d1a01-37f2-4e27-b673-7375a236188c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4eb9a5-9a21-46e2-81f3-30de0fbf72d4", "sighting_of_ref": "indicator--3a4d1a01-37f2-4e27-b673-7375a236188c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5080b4-3f49-41ed-a1fa-2277284cfae7", "sighting_of_ref": "indicator--eea770c3-ea6e-4cc1-b745-2cd398907f65", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488b147d-48c4-48a9-93b3-397235adcb73", "sighting_of_ref": "indicator--eea770c3-ea6e-4cc1-b745-2cd398907f65", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3322e346-eaef-4918-b739-24791e8069cb", "sighting_of_ref": "indicator--7976f08a-3f0a-4212-9d49-18d1e6b33a5a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4d0e6d-7d84-475d-bc70-e5b10e65d732", "sighting_of_ref": "indicator--813fc72c-f245-461e-82fe-47a711743bc3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34094a7-9685-4f87-8dd9-3e790137edf7", "sighting_of_ref": "indicator--813fc72c-f245-461e-82fe-47a711743bc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d0c8b4-c6a8-4e11-bef6-8aa2cf43f52e", "sighting_of_ref": "indicator--36a2dc06-a3af-4baa-b838-3553b6e959e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453f96d9-842a-4f5f-8208-6cd3fcf4a121", "sighting_of_ref": "indicator--36a2dc06-a3af-4baa-b838-3553b6e959e7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2129c5-990b-425b-b3bf-4f330d92e856", "sighting_of_ref": "indicator--a6733581-7c6e-45a0-86e6-0f860fd1bfb7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b81593-ba88-4e7d-af0a-1a0c22306ed5", "sighting_of_ref": "indicator--a6733581-7c6e-45a0-86e6-0f860fd1bfb7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bab8233-1956-4ee6-a939-7355c8b55ec8", "sighting_of_ref": "indicator--fb35b08b-45f6-4b88-9a2c-575aa5e153a6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4b25b6-ca8c-4ac7-b418-1f6ce393ed07", "sighting_of_ref": "indicator--fb35b08b-45f6-4b88-9a2c-575aa5e153a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f15c71-936a-4c3d-8e8c-46e5f80c77cf", "sighting_of_ref": "indicator--cefcd318-6a08-48f0-96b2-8c6170954736", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ec67db-9d44-47d0-b6b8-9f35236f29f9", "sighting_of_ref": "indicator--cefcd318-6a08-48f0-96b2-8c6170954736", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dc48f6-c21e-4303-b70f-3c80e989a24f", "sighting_of_ref": "indicator--5ddde00e-a750-4c99-a89b-6b5aec9ab9e4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c706a04b-14f9-4a71-87c5-da9029974a87", "sighting_of_ref": "indicator--5ddde00e-a750-4c99-a89b-6b5aec9ab9e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1e87a9-7c45-43b4-89f3-e6398b344176", "sighting_of_ref": "indicator--72bb8bbe-3317-401b-b28e-d53033789a40", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31087725-d77e-4c60-9f19-bd60011ebecb", "sighting_of_ref": "indicator--72bb8bbe-3317-401b-b28e-d53033789a40", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07982826-9e89-4e3c-b6cc-aa35535c1071", "sighting_of_ref": "indicator--30344e9b-72ec-4404-9246-900f0dafcb88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fe9d4f-f0fb-4950-a52b-afb66ef45e98", "sighting_of_ref": "indicator--30344e9b-72ec-4404-9246-900f0dafcb88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c446559c-81d3-4549-adf7-c2dd01869b65", "sighting_of_ref": "indicator--94f6bb6d-90cb-433e-9130-e11c2d9b1ad9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612b81eb-bf30-4393-b091-0f822380035e", "sighting_of_ref": "indicator--94f6bb6d-90cb-433e-9130-e11c2d9b1ad9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c8aa93-f275-4a60-84f2-94c7d7f4dc38", "sighting_of_ref": "indicator--a408d5f8-785c-4283-97b5-d1593a2d6bb7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1137d938-9851-4095-9bee-8b0efd28c4f6", "sighting_of_ref": "indicator--a408d5f8-785c-4283-97b5-d1593a2d6bb7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fbc793-20dd-4fd8-bc75-e8c7550cecd8", "sighting_of_ref": "indicator--664c3a3b-2133-42b3-a206-b15aabbd1887", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d5ddbc-db6c-4989-959e-7dd335473aec", "sighting_of_ref": "indicator--664c3a3b-2133-42b3-a206-b15aabbd1887", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75852946-ec78-4fe5-aa06-4422aa74b0f4", "sighting_of_ref": "indicator--2e338d4a-7cd1-4460-9610-6c927e84d1e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c316453-dd98-4577-98ed-5cb9af8a1d9b", "sighting_of_ref": "indicator--4c2ff72f-822c-44e5-aac7-7113efc9bc2b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b604fc0-62a1-4471-aa0d-37813cbc5e06", "sighting_of_ref": "indicator--bd9b0164-deff-4dc7-9fc2-38e18cfeb2a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72575393-5747-4958-a354-f0076011cb1d", "sighting_of_ref": "indicator--ef4b84d0-281b-42ba-bb8b-0eafe8321cc7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cbae86-8013-4831-86af-cb0849719216", "sighting_of_ref": "indicator--440c9c92-c22c-45f7-a9cb-221455354940", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd8152f-0d39-4709-9f49-64c72c3e8902", "sighting_of_ref": "indicator--88d2120a-bea9-47b7-a5d8-088262f5e57c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08cccd3-de05-4605-ae41-716af8b8004c", "sighting_of_ref": "indicator--72aed20c-cee8-4639-bf20-6ee41565dfd0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ecdc0b-667f-4738-aeb3-72f1fc5cf8ed", "sighting_of_ref": "indicator--910ffcdd-0b08-401c-947d-c2ce7adc81b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79c842e-cdca-472c-8c2a-18a80857e127", "sighting_of_ref": "indicator--30968afd-67a3-4129-bae0-24718fe09b0f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f627ac-9e36-49fd-bc30-6563e0663154", "sighting_of_ref": "indicator--dcd195ed-36fa-4ce7-b274-c188f97ffa32", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48b727b-ce50-44bf-a209-d4aac3dcc799", "sighting_of_ref": "indicator--f457e4a4-8584-4ed4-9167-983f5458684d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c269493a-71b5-4776-b0fd-e43c4fe4abc2", "sighting_of_ref": "indicator--f457e4a4-8584-4ed4-9167-983f5458684d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7170725-298d-4ffa-ad7c-11f57f84a748", "sighting_of_ref": "indicator--173d8168-a734-42b0-ade8-2b76d0526cb9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e451f1-2807-4980-afb7-9c0047129b70", "sighting_of_ref": "indicator--173d8168-a734-42b0-ade8-2b76d0526cb9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f758033-c4c0-411f-8e66-13e833b75ee5", "sighting_of_ref": "indicator--ef0e1421-f04a-4253-9785-a61a0e142c79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437567b4-74c4-4dc5-a7e6-62fe01550dfa", "sighting_of_ref": "indicator--11a51ec2-1d07-4a3b-b6d2-f3b673c4226b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9366e84-0cf2-4180-9c00-014288a03eb3", "sighting_of_ref": "indicator--11a51ec2-1d07-4a3b-b6d2-f3b673c4226b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7852998a-0ce4-43a0-8e77-7205249ddb96", "sighting_of_ref": "indicator--39f73604-e5e1-4965-8e10-697df5b0a98a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c897b7-4868-4186-a19c-41dac4c69d77", "sighting_of_ref": "indicator--4acfa45b-373b-4988-91c3-b8b2acf7e100", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8232bc9d-f76e-429f-a2b1-18540bf45d1e", "sighting_of_ref": "indicator--4acfa45b-373b-4988-91c3-b8b2acf7e100", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87786637-0fa8-4ba0-82f2-67874ef6b5c2", "sighting_of_ref": "indicator--035ddd28-44f9-437f-a7ef-135aff33f6be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7576c80f-281f-4946-902d-6bb90ffe75e3", "sighting_of_ref": "indicator--ec42eb8a-35f7-46c0-afc8-2d0e88a7445a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e325688a-cc5c-45ec-949d-ed01893170c6", "sighting_of_ref": "indicator--bd2791a6-ed9a-4de5-825d-bcd0f106181d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eec21fa-33c1-4842-a70f-817bb078ff1c", "sighting_of_ref": "indicator--29ba2650-3c3d-4f85-a29a-f2c1aa505b53", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e965c1-0db6-4f2d-bc25-309081f366a9", "sighting_of_ref": "indicator--b543c3db-62dd-4db2-9541-02be3a8c871d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d101c7-4c96-43b9-aa5e-3b37e634706e", "sighting_of_ref": "indicator--1b5569bd-20d5-4581-9fff-2b64209eb07f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33cf343-6523-4c7a-b944-b15a7ed357d0", "sighting_of_ref": "indicator--d3ffabed-802f-4ae8-9e52-7e31eb2e2078", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f15844-69e2-4dc3-b6cf-cc79e9869664", "sighting_of_ref": "indicator--14dffca0-496f-49a6-8be5-9d934f177182", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2c5e93-dcc0-47c3-9e1d-a216344128bd", "sighting_of_ref": "indicator--d2dcb870-e013-48af-ae7e-19021a72200a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9406947-2602-4448-a3b6-a88f8ebaf72c", "sighting_of_ref": "indicator--d2dcb870-e013-48af-ae7e-19021a72200a", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc4a761-6dbb-468f-9364-6004c3ccba51", "sighting_of_ref": "indicator--58c7ca37-c7c7-4857-96f5-c4171de532ea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e51ad3-e7ee-4fa1-b3d2-7e6c6ce9718e", "sighting_of_ref": "indicator--c798347e-ef1c-4f55-930a-53933c836213", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59921b8-d21c-4142-ab97-980f9da2e03c", "sighting_of_ref": "indicator--c798347e-ef1c-4f55-930a-53933c836213", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76017f4-5753-48fb-b659-5c36c2c3e00b", "sighting_of_ref": "indicator--b077582a-dffb-455b-af3b-9ec4dd77b0c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12ff08a-251e-4939-9905-2c3476581505", "sighting_of_ref": "indicator--ac8851eb-986a-4075-af49-5279e3170d84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e208107-2d78-48df-a898-f8c045919c6e", "sighting_of_ref": "indicator--2234d959-3d67-425c-9839-3bc6dc5c394b", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20c1bf8-7d28-4134-b559-d2e063feb138", "sighting_of_ref": "indicator--2015ebe7-8939-4d01-a2c3-03e547298d89", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402bfc8c-8a5a-430b-9ce3-0a8a3d091a8c", "sighting_of_ref": "indicator--2015ebe7-8939-4d01-a2c3-03e547298d89", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f638029-5e41-41f4-a993-301dbac3d439", "sighting_of_ref": "indicator--76f58d89-7a50-45a4-8603-7c46638125ac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd620af-5c93-458c-9475-419a52739b98", "sighting_of_ref": "indicator--caf4de9a-09d2-4029-adb9-36d4219d7caf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc71ab3a-b2b6-4ffc-93f5-f4e4ced283e2", "sighting_of_ref": "indicator--57601457-9080-44b6-9ae0-c66daf52c0ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7fd25b-49b4-4a55-9cce-0f5a11aa940c", "sighting_of_ref": "indicator--7df7be01-484e-42d3-98e0-4f170f03861b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368a3147-1685-4652-bacc-9e5425709626", "sighting_of_ref": "indicator--c95e2dec-99a9-4c6a-a975-071bfa34afa0", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8aae52f-dd83-4035-b634-7ae5376074f9", "sighting_of_ref": "indicator--a7cea605-f198-4c31-a96c-b09d6fa87766", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d108c1-e6af-4688-bb2d-d66ffcaf16ca", "sighting_of_ref": "indicator--c3492849-44c3-4b55-ad0d-78e88566bdb9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08508dfb-4029-43d6-87ef-f8d0a1f7db4e", "sighting_of_ref": "indicator--c3492849-44c3-4b55-ad0d-78e88566bdb9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2d41e0-fff7-46fc-ab53-c40359955e22", "sighting_of_ref": "indicator--6592a919-6e9b-4004-b17c-a5e60cc2562d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d24f210-7133-4198-9123-9eac6a49efe6", "sighting_of_ref": "indicator--6592a919-6e9b-4004-b17c-a5e60cc2562d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aef82e3-2a92-4630-9393-cd1d9523bfb6", "sighting_of_ref": "indicator--5c775998-f81c-459c-a622-fad5c1a466e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c73e7a-f058-4d27-9236-311aed2847c1", "sighting_of_ref": "indicator--5c775998-f81c-459c-a622-fad5c1a466e7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34426096-c9f2-4f22-b09e-4f4d8d14d218", "sighting_of_ref": "indicator--53db37c3-c87b-404f-b718-27e7582f8a64", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22eea64-d4ed-4000-8608-a06a444e2636", "sighting_of_ref": "indicator--53db37c3-c87b-404f-b718-27e7582f8a64", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731c6284-ab4e-462e-8ef4-53b3ce98b253", "sighting_of_ref": "indicator--73ac1618-f02d-4b17-9428-e478327b46b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43356d82-5b48-4a21-b279-38eeb1157e17", "sighting_of_ref": "indicator--73ac1618-f02d-4b17-9428-e478327b46b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e252633-7ec5-4324-b673-6d0d2068c457", "sighting_of_ref": "indicator--9c25f446-1910-45d8-ab41-a9ccc7fe6a31", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cce579b-76c0-4824-9456-e9abbbcacf81", "sighting_of_ref": "indicator--9c25f446-1910-45d8-ab41-a9ccc7fe6a31", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dad73e-e657-4e8a-9480-091ce0e6a2b3", "sighting_of_ref": "indicator--00979eca-d24c-47c8-8d1e-601060c8b582", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be943ac2-2936-4826-a29d-135b2097cacd", "sighting_of_ref": "indicator--00979eca-d24c-47c8-8d1e-601060c8b582", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9ffb06-07e5-4818-8f95-2c167b601c7d", "sighting_of_ref": "indicator--00979eca-d24c-47c8-8d1e-601060c8b582", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c4c807-99b3-43f6-a9de-9c85ca67e0d6", "sighting_of_ref": "indicator--00979eca-d24c-47c8-8d1e-601060c8b582", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93765af-4dd0-4940-ac5a-795e50ff937a", "sighting_of_ref": "indicator--53af0b45-c9fa-47ea-9e78-8660d04377c3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90218bf9-2977-422f-992a-63a1d38239f5", "sighting_of_ref": "indicator--53af0b45-c9fa-47ea-9e78-8660d04377c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63dcef0b-9c99-46e2-9b3d-e4706974a22c", "sighting_of_ref": "indicator--bbd7635d-21cc-4d0d-9529-32228733461b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860b7e30-a3d0-42b1-8943-b206ecf38779", "sighting_of_ref": "indicator--bbd7635d-21cc-4d0d-9529-32228733461b", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9badcf-c913-4c9a-aea6-def4a2c5f998", "sighting_of_ref": "indicator--6b1a1974-e63f-4e13-8545-2d5740e77a58", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c71d883-27ba-43fd-bc19-96a4b1110f5d", "sighting_of_ref": "indicator--64a7dbe7-998e-483c-be73-7e418654f4fb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083960ff-be7c-4854-b081-5a3a22b743c0", "sighting_of_ref": "indicator--ec4d296c-d27a-4386-b3de-14647a754b62", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d954b36-0500-4a52-9bf8-07f269737b75", "sighting_of_ref": "indicator--ae38fe04-5312-4a0e-b960-489e1307231d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4eda4f-8deb-4b99-a072-29279313446c", "sighting_of_ref": "indicator--8f727cce-8669-407c-8bf6-4f95270d748e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e977e42-b9ca-46e7-a849-8ea383e14ae0", "sighting_of_ref": "indicator--187d29cb-df25-4a5e-8e78-8724e0cd2f24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c71fea9-304a-4775-a3a9-52cddb70b01d", "sighting_of_ref": "indicator--187d29cb-df25-4a5e-8e78-8724e0cd2f24", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48596fe-a436-4ac0-b58b-35d829a96bf7", "sighting_of_ref": "indicator--3cd4f713-1556-44fb-9d39-41fc97a684a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16e0335-ce07-466d-9134-b50fa5a20f4a", "sighting_of_ref": "indicator--3cd4f713-1556-44fb-9d39-41fc97a684a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3164552-20f8-4db9-b5df-82b45c54d2eb", "sighting_of_ref": "indicator--3cd4f713-1556-44fb-9d39-41fc97a684a2", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa9be15-0bdc-4b20-8736-dd66beb536a2", "sighting_of_ref": "indicator--28cc5e89-4531-4dcb-be9b-5a0b8669b695", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642fadf0-89be-412a-9e31-552e895b5105", "sighting_of_ref": "indicator--e841ba86-96cc-476b-a4bd-b1e172cf03bc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fadf032-7ebd-4c19-882f-cb72b4050415", "sighting_of_ref": "indicator--4345e6e9-d800-4c19-aa66-9b40e557bed2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b86a74-d716-4a81-92d4-dcf9455b7d91", "sighting_of_ref": "indicator--4345e6e9-d800-4c19-aa66-9b40e557bed2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0840d815-0207-47b6-aa2b-9c35c5810281", "sighting_of_ref": "indicator--a8e87b6b-1e9f-4bfb-8f12-dfb325ff4b8b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e1e447-69d5-4f9d-99c5-adbbbe0e1a39", "sighting_of_ref": "indicator--a8e87b6b-1e9f-4bfb-8f12-dfb325ff4b8b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce4013c-e2e3-4fff-a272-0cfc14e229da", "sighting_of_ref": "indicator--ef277979-ab94-4bc2-b1f7-669ac2cb3c3e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4147b6-10fc-40b9-a935-48f692bb9d90", "sighting_of_ref": "indicator--ef277979-ab94-4bc2-b1f7-669ac2cb3c3e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793ccdc5-6499-4202-a6d5-14eb215fb57c", "sighting_of_ref": "indicator--35590eb0-59a0-44c0-8a7e-ca944a9542e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361f9715-09de-4cc8-9994-aa5f73ff487f", "sighting_of_ref": "indicator--35590eb0-59a0-44c0-8a7e-ca944a9542e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc71fd5d-9739-4b1b-9389-7fd1a3a5e81c", "sighting_of_ref": "indicator--a2b16d2a-8c8d-44e5-a89a-f323002d06ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5ffcce-1545-4542-a548-355d9fc7fc8e", "sighting_of_ref": "indicator--a2b16d2a-8c8d-44e5-a89a-f323002d06ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b43a6d9-fd2a-481e-b71b-21eb024b6971", "sighting_of_ref": "indicator--e2a455c0-c2bf-431d-8cc6-4942992dbbaf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b50eb3e-8cbb-4918-9a0c-4250d588076f", "sighting_of_ref": "indicator--e2a455c0-c2bf-431d-8cc6-4942992dbbaf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e6785b-9500-4598-a215-67deba27a42d", "sighting_of_ref": "indicator--e3ba14b9-6b8f-41ef-a3fc-ded0cf0b4905", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43938570-b80a-43b3-9da4-4c59dffed9e0", "sighting_of_ref": "indicator--e3ba14b9-6b8f-41ef-a3fc-ded0cf0b4905", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80911f3-4e87-4a3a-afe1-1907087ffe1a", "sighting_of_ref": "indicator--fa71f173-51b4-4f04-93dd-b2bd2ee88e66", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650b25f9-9632-42f9-8555-fbc4f92dd5d2", "sighting_of_ref": "indicator--fa71f173-51b4-4f04-93dd-b2bd2ee88e66", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c142da3c-249c-40f5-9804-c56b540611cf", "sighting_of_ref": "indicator--45ec010d-73e6-4269-8eb6-d8de139fa573", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40721a7-d291-4ef8-ae61-436a926b7502", "sighting_of_ref": "indicator--45ec010d-73e6-4269-8eb6-d8de139fa573", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00d58c0-a46f-4d80-a75b-57c6f337be5f", "sighting_of_ref": "indicator--7f428ae8-8a2c-4c5c-942e-fa1db0659224", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067a1ee6-9d3c-4fa7-a0ef-f8b17fa253fa", "sighting_of_ref": "indicator--7f428ae8-8a2c-4c5c-942e-fa1db0659224", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a0bc7c-41e6-43ce-8c54-48d4c415418f", "sighting_of_ref": "indicator--b7094eb3-785b-4daa-b621-c816412da925", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2e179b-4b5e-49da-ae2b-97e787596b00", "sighting_of_ref": "indicator--b7094eb3-785b-4daa-b621-c816412da925", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ff9a8e-52ac-4a00-85d1-41e17999ce64", "sighting_of_ref": "indicator--97f0c07b-c548-4f49-863f-ef75cc1a9c23", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfb3917-ad6b-4ec7-b35e-1c8b58a6559c", "sighting_of_ref": "indicator--97f0c07b-c548-4f49-863f-ef75cc1a9c23", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c68ffd0-8173-4bce-8f92-81b854b56116", "sighting_of_ref": "indicator--6ceaf084-e177-4787-805f-bf0af58476ac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d980beb1-7d25-4ffb-838e-668cc0772dcd", "sighting_of_ref": "indicator--6ceaf084-e177-4787-805f-bf0af58476ac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dad302-63fa-4670-9e86-933131209e73", "sighting_of_ref": "indicator--1a8b448d-fae3-4947-8c8b-b46ffecda669", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb17dcc-b7f1-4771-8e1b-53c8b8f3e9f9", "sighting_of_ref": "indicator--1a8b448d-fae3-4947-8c8b-b46ffecda669", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b449d1-a8e6-41ea-9650-d19f72b943f8", "sighting_of_ref": "indicator--07efc8c2-1768-41a8-b290-7d89347405cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3576931b-a009-4372-920d-99d5490237c0", "sighting_of_ref": "indicator--07efc8c2-1768-41a8-b290-7d89347405cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29732b5c-f0fe-44f0-8430-351382f3ecbb", "sighting_of_ref": "indicator--6b7b748d-18b1-4eae-a72e-e341755c2e27", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ff4bd8-5072-4057-b54b-aa18b8de3752", "sighting_of_ref": "indicator--6b7b748d-18b1-4eae-a72e-e341755c2e27", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111f0a78-3da7-41e6-92b1-9cbebb52a468", "sighting_of_ref": "indicator--c7e8d616-c7f3-441b-9602-32dfd15c2f38", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b267a674-0891-4a74-a72e-b117471b170d", "sighting_of_ref": "indicator--c7e8d616-c7f3-441b-9602-32dfd15c2f38", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c74a8db-583f-4018-8585-3535688feeb5", "sighting_of_ref": "indicator--3a3f28db-0d5c-4a1e-bc07-8f5e53cddbbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b350a8-77c1-4056-bf2d-46ab92f43219", "sighting_of_ref": "indicator--3a3f28db-0d5c-4a1e-bc07-8f5e53cddbbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c670409b-54e7-44dd-acde-8409ae655e30", "sighting_of_ref": "indicator--532711a7-7301-4dec-983b-0f735f6b0af2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1035026c-d99f-4d68-b38b-2975e8646699", "sighting_of_ref": "indicator--532711a7-7301-4dec-983b-0f735f6b0af2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d421bac-7a51-4aa5-b6f8-5e8bc5cc30e7", "sighting_of_ref": "indicator--4133fef2-fa97-40e3-98e3-aa191d84af89", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5998eb9-3934-4dd0-bbc5-074f106ef542", "sighting_of_ref": "indicator--4133fef2-fa97-40e3-98e3-aa191d84af89", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dab2bbe-8a27-4526-aeed-6ad1cc494c0a", "sighting_of_ref": "indicator--fdc15d91-47b8-4bff-916f-9d4946acb889", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4150e049-2a56-431d-a611-5cd0ce580f46", "sighting_of_ref": "indicator--fdc15d91-47b8-4bff-916f-9d4946acb889", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdb6c09-6f55-475c-9633-997ca5ea4ed7", "sighting_of_ref": "indicator--7fe6e543-65a7-4973-a677-043c3a127f22", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989f058a-c8b2-4e39-a461-6e9cb285c7e7", "sighting_of_ref": "indicator--7fe6e543-65a7-4973-a677-043c3a127f22", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae0ba11-6948-4b33-8ef3-814d0fe2b360", "sighting_of_ref": "indicator--2cd57613-16d0-4543-8872-74dd6a817eb2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a329e4f7-01a8-4e4e-bef1-3eb20e4f3c0a", "sighting_of_ref": "indicator--2cd57613-16d0-4543-8872-74dd6a817eb2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d45f7c7-3f4f-4d6c-9bbd-79926587374d", "sighting_of_ref": "indicator--f6690ce4-30ae-495c-83e0-bb1e727bb754", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16c6faf-6f77-487e-b88b-67f346d8926b", "sighting_of_ref": "indicator--dce1f3e3-2810-4a66-8768-92c51dd6638a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddaf468-063f-4af3-aa28-fc0acd5d313a", "sighting_of_ref": "indicator--e3c1e00b-10c5-4f1a-9cab-eb8eb2437970", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79370eee-e83d-41af-b0e5-dfcae05c4786", "sighting_of_ref": "indicator--773b3440-2d95-4b5d-8e9d-77cdfff9eea5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c1fa5b-b5ed-4f6b-8f9f-725182aeaa58", "sighting_of_ref": "indicator--bd463ce1-d098-4ada-a6f7-051ad727a1df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64995de6-9345-445b-b724-2b730d011c09", "sighting_of_ref": "indicator--b17e616f-fd6b-4313-b36d-c9e0b778e47d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb10252-34eb-4c4b-8df1-3dc00954e859", "sighting_of_ref": "indicator--45dac05e-529c-43df-9cb3-0a71801ddfba", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1adc445-49e0-464b-a607-51599888e0b4", "sighting_of_ref": "indicator--9238fc97-81fd-4644-afc5-9015a951bc6a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573a8486-cca3-490b-9b10-a2a11e6328f9", "sighting_of_ref": "indicator--82cbc1d2-7690-47bc-aad0-f62a3de648db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdacf1b-9f60-4ba5-abd7-91c7325c885a", "sighting_of_ref": "indicator--0d0566c6-c1a7-4f73-80d8-ae23407516cc", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b4916c-b8e0-4453-ad56-480264b9b33a", "sighting_of_ref": "indicator--e7c85eaa-136d-4d82-9ad5-e78cdc410b01", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec12c07-7917-490f-8a3a-402ee9d12c00", "sighting_of_ref": "indicator--bab9794b-f16a-4dda-ba83-5edcb5598ae3", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e99189-bc3c-4544-ae18-a8076a43e3c4", "sighting_of_ref": "indicator--87c4d196-652b-4413-a817-cacb41c61230", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4afb956-3aa9-444b-b743-387bf33a9840", "sighting_of_ref": "indicator--e19c20a3-510d-4abc-9545-fd4e69e05764", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01970b1c-581e-4fa9-8581-782806316a67", "sighting_of_ref": "indicator--5b0db65a-3693-4a4f-9fe9-b9aa3c772292", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5141add7-fad6-49f7-a1e3-44c5928b2160", "sighting_of_ref": "indicator--c868e86c-8594-4dc5-ba25-10e66eaecbd0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e21547b-098f-4281-8357-2d39b6b18d91", "sighting_of_ref": "indicator--c868e86c-8594-4dc5-ba25-10e66eaecbd0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5688100f-6711-42f4-b97a-fb28b78248e3", "sighting_of_ref": "indicator--2a85019c-d126-40f4-985f-3dd9622e060f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a0f233-9d5f-43f6-a5c2-73279edde591", "sighting_of_ref": "indicator--7e26844e-e73f-42f6-a4b8-e5cb44977e72", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b457cf-f114-4f0e-ad1f-2623f2e24a8d", "sighting_of_ref": "indicator--6e146e74-59a2-46d9-a44a-ce348e4ed39c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8856b6ee-a3a0-4a92-9a2d-dbd96084b5de", "sighting_of_ref": "indicator--6e146e74-59a2-46d9-a44a-ce348e4ed39c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ee0786-6ce1-4c03-8c67-1ead5733b392", "sighting_of_ref": "indicator--b3d44f15-0d9b-4a47-8bd1-056b077bbc3a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd503e78-403b-43a6-870a-7daf7a812543", "sighting_of_ref": "indicator--1403e2a4-750a-4c59-bfc0-a7a98e6932c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5afac1d-c68d-49aa-90bf-a90e1061c9b8", "sighting_of_ref": "indicator--1403e2a4-750a-4c59-bfc0-a7a98e6932c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bf8a09-39a6-401e-aa80-9cf2f9f3ef6f", "sighting_of_ref": "indicator--8e560b74-51c3-45d7-b9d7-4ff9af8e40d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4c60ef-53d9-4a36-b7ae-7dabdccb59ad", "sighting_of_ref": "indicator--8e560b74-51c3-45d7-b9d7-4ff9af8e40d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25e0789-011d-4a07-af7b-61af4c1c527e", "sighting_of_ref": "indicator--adc4c6a1-ad74-496d-8763-0d0f35682f95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf392946-656c-4bf1-8bad-b24f4996e132", "sighting_of_ref": "indicator--adc4c6a1-ad74-496d-8763-0d0f35682f95", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18589aa0-2c33-46cc-a489-c63ac7f72828", "sighting_of_ref": "indicator--c71f7340-0801-4e6d-a427-9b5bb1718667", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62964525-c410-46df-be20-7c24ef112512", "sighting_of_ref": "indicator--82056c09-f90e-4ec3-bc9d-5c11131b1b37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a42ce4-aaa8-44d3-8d2f-ba0c0d11c697", "sighting_of_ref": "indicator--66638fd6-9c52-4c13-be7b-f75caac3eb80", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d481554-189b-4484-ad2f-e07f46ea4e3d", "sighting_of_ref": "indicator--0dc81b2a-53ee-4694-9078-80d0365b19a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffcceda-9be1-4822-9498-709f29fd5a0c", "sighting_of_ref": "indicator--16b92562-7e54-40e5-8eab-40f1bc2b8f2d", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7582338-85dd-49fa-8515-6c43f40f8b8f", "sighting_of_ref": "indicator--d1744272-699b-4a89-b90a-e3449cf0cc13", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd77378-3ff4-41b4-9ab1-088767ace552", "sighting_of_ref": "indicator--e4b80c67-3efa-451a-9517-c65b34f6cb28", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf949dd-59b7-4c3e-af86-c3a0b5cf17fc", "sighting_of_ref": "indicator--d7f1eecf-5f0f-4c3d-a4dd-09e02a897b61", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036a9151-fd6b-43a9-9776-83a07f9bcb17", "sighting_of_ref": "indicator--552faa28-6a91-46fd-8440-2226ec9c5212", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92c5f45-e375-4cb3-bff6-aef6028c3f63", "sighting_of_ref": "indicator--2914b0e8-f6f0-4490-9d69-36c9e251253e", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460c2ee4-a932-4b04-9f54-f1c6e4359836", "sighting_of_ref": "indicator--05ef5a40-fb85-4f4c-ba31-85128607e4ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50ff584-6a2c-4a4f-bec3-03b287d80c90", "sighting_of_ref": "indicator--05ef5a40-fb85-4f4c-ba31-85128607e4ee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b81432-a24d-498a-ba7a-935f6acb3a6f", "sighting_of_ref": "indicator--e5d2b4f1-9597-4407-aba1-a644eff11be1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ec1420-d7c0-4ebd-8491-3ea50768a58d", "sighting_of_ref": "indicator--e5d2b4f1-9597-4407-aba1-a644eff11be1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1839594-71b7-46b3-b8ad-2211cffceceb", "sighting_of_ref": "indicator--8dd184df-fdbd-491d-8659-0d35ae74358a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e3c27e-2b5b-49e1-8950-565ff3b38d40", "sighting_of_ref": "indicator--8dd184df-fdbd-491d-8659-0d35ae74358a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977cf261-de19-4691-9940-dcc48fd63dc8", "sighting_of_ref": "indicator--b2eda376-af96-4193-8840-c7dd17c58517", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632b6f2c-0e98-4b99-b14f-065225989765", "sighting_of_ref": "indicator--223a724f-2db2-41e2-8f1d-d431929d2f92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad56c863-260d-4d59-bf0d-1b8f3ac97081", "sighting_of_ref": "indicator--223a724f-2db2-41e2-8f1d-d431929d2f92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a90b130-33cb-40fe-ab33-48f769cd8792", "sighting_of_ref": "indicator--f2439c35-bc7a-4231-a676-12c4d2326c7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c732a0f9-326b-4d38-a6fb-e71993965114", "sighting_of_ref": "indicator--55e9b57f-afa7-4afa-8d1d-992737b18926", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c157d4-c48a-41d5-b2ff-e2922cc48ca7", "sighting_of_ref": "indicator--a8a513e9-fbb8-4a65-97f2-ce85342b7d25", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31c7559-781b-4d71-b6e1-afb11676eb72", "sighting_of_ref": "indicator--a8a513e9-fbb8-4a65-97f2-ce85342b7d25", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d973760a-0720-4683-bec6-ba9c345e210d", "sighting_of_ref": "indicator--0f210d4b-39dc-4a47-a668-95cc1eddc500", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c59d787-fcd4-4448-9b6d-ac35b9d4e257", "sighting_of_ref": "indicator--3b5ea7ee-f9cd-4564-acc2-fef8aa049ec5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c00c23-9447-492c-84ab-c3aae5c13282", "sighting_of_ref": "indicator--3b5ea7ee-f9cd-4564-acc2-fef8aa049ec5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc904ca-250f-43c3-8dfa-faf96c35e7f1", "sighting_of_ref": "indicator--5dab38f9-6ace-42cc-92b7-b27aa5922d9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf0b99d-0e47-41c0-82d4-feb65e7a9ce7", "sighting_of_ref": "indicator--8e9071d2-3736-45e0-9e7d-cf1e2806685a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0700883e-f509-49ce-b137-715cbc50d9f6", "sighting_of_ref": "indicator--61c29d86-d50b-4f0b-a399-c3a790a78dc3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e07e0ce-0ba9-4f44-9251-2eea371f0127", "sighting_of_ref": "indicator--312a0c68-d8c9-4e3b-9cb0-eb9b3741b49e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11020bf2-a8b0-43a5-816d-2dbb23a0c1d0", "sighting_of_ref": "indicator--312a0c68-d8c9-4e3b-9cb0-eb9b3741b49e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80458469-e26c-4af3-9b52-5d202341c690", "sighting_of_ref": "indicator--64490e0d-28da-4c62-a98a-c7ee8c7bcea7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3634f775-6f15-4ef6-86a3-f6b23e2b1df9", "sighting_of_ref": "indicator--64490e0d-28da-4c62-a98a-c7ee8c7bcea7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b37ab18-e2f5-41c2-9d2f-9b780ac3cb57", "sighting_of_ref": "indicator--4895e57f-c1bf-4c8c-969f-e40337db8e28", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ddd208-bc91-4e04-ac31-6819ec765a97", "sighting_of_ref": "indicator--b1d9d9ba-2591-4dac-8212-fcac55a418af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954c0d28-70b1-43e5-aab0-eba85828d96e", "sighting_of_ref": "indicator--9f6cabcb-5300-4c12-a8c6-37e324ffabe2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5155fdea-2e03-4675-b4b2-cffbddcc5f9c", "sighting_of_ref": "indicator--9f6cabcb-5300-4c12-a8c6-37e324ffabe2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3a41a9-84da-475c-ae4e-59aa9cbc9b8c", "sighting_of_ref": "indicator--a219ddc4-ba43-48ac-ad6f-759cdef86e34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5926ad29-ac10-41b1-815f-71ca3a29adf3", "sighting_of_ref": "indicator--f3cdaee2-cdef-4ccc-aab0-5e19a940ecd0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92bc9e0-66f4-47f0-9936-abde5a8c697f", "sighting_of_ref": "indicator--0e0f5ac8-4c92-4981-9475-6e335b07e17a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d476b0-f5a5-467f-9a00-736a3c5fd3e9", "sighting_of_ref": "indicator--0e0f5ac8-4c92-4981-9475-6e335b07e17a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc215d3-41b9-4c88-8bbc-b83168948212", "sighting_of_ref": "indicator--c51ecc8c-189e-4ae3-8dad-ea8dfc2bae9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b2c296-61ad-47b3-9523-13355aa84384", "sighting_of_ref": "indicator--d26e7224-bdc7-4e45-9496-a2bf8eab8e49", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d4ae95-c887-44e1-8ab4-ca445676699a", "sighting_of_ref": "indicator--d26e7224-bdc7-4e45-9496-a2bf8eab8e49", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d228768-3351-4ba0-9132-1017126c45cc", "sighting_of_ref": "indicator--1b7b5734-6765-4131-85a0-968d2751e58b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220976d5-7a26-4d56-bef8-3952743efe53", "sighting_of_ref": "indicator--1b7b5734-6765-4131-85a0-968d2751e58b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e34addf-1ee2-43a4-9eb5-4ce1fd560a28", "sighting_of_ref": "indicator--3e6db43c-6f6c-47cb-9ee7-ecf79886b07f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc604885-0358-47c9-a1e2-afc7ff75eb40", "sighting_of_ref": "indicator--5d220469-a81e-49dd-991d-a60839df3013", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1f1d05-117e-4eb9-9860-02ee1cfe0e4d", "sighting_of_ref": "indicator--108f3e70-d5df-4dea-a23e-a21e290e6037", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a64b2d6-b46b-443a-b37d-1a4c401194f0", "sighting_of_ref": "indicator--ab3c6eb9-291a-4ede-b89c-2e0a4f02eab0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8cf1c3-8d78-44eb-a488-60953e42be51", "sighting_of_ref": "indicator--4cb32a46-d0cb-4fc0-bc51-43badacc9ab4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff396a1-4e5c-4922-ba63-515db10a4945", "sighting_of_ref": "indicator--4cb32a46-d0cb-4fc0-bc51-43badacc9ab4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf40152f-a73d-4780-b4d5-385749145435", "sighting_of_ref": "indicator--f3eec945-82ae-4367-9cb1-81788eca5da9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea9a746-94b2-44c4-ad55-19885a1052be", "sighting_of_ref": "indicator--f3eec945-82ae-4367-9cb1-81788eca5da9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8c8c5e-e59e-4aa3-9026-ad889097a70d", "sighting_of_ref": "indicator--4c0a6d73-1b33-4517-b462-68222148b5c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e496cf4-0156-4521-a688-fa88f98b5db9", "sighting_of_ref": "indicator--d4d6f30f-d821-4937-adf1-ab080b9dbbe3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a869e4ec-3385-45b5-af18-0c8c04b700cc", "sighting_of_ref": "indicator--8ab799e2-b385-4d3d-b810-5426cd69eed8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03ab07c-8c53-49c1-9837-a591623963a0", "sighting_of_ref": "indicator--9d66e4f0-051b-41b5-a139-9affb5fb5fd8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bfb99e-2572-4509-a53e-1fc64496bf5c", "sighting_of_ref": "indicator--f6593504-af03-4cb4-b052-85647ca6e70f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03618f7b-487a-4b12-a846-a71765f1119b", "sighting_of_ref": "indicator--cc998d80-0b9f-4584-b80e-5427f026c4ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb83ecf-e256-4ff2-b220-065ad6365d23", "sighting_of_ref": "indicator--d6d53371-c332-44be-a127-818501897507", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0e6ced-2971-4603-81ea-6773f39cb0a4", "sighting_of_ref": "indicator--cfd50e2d-7c2f-497b-933a-42a200a3f8aa", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8802d11a-8cee-454a-a145-46a8f115e6be", "sighting_of_ref": "indicator--92cf6784-25dd-4bb9-881d-6f2fbed6da49", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb3fc63-4d4e-433e-aafd-d29249abd051", "sighting_of_ref": "indicator--81500eab-4fd2-4218-8b45-9277bfc5beee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cfdf4b-e6e7-49e9-ba3e-db30aca13d0a", "sighting_of_ref": "indicator--42d47e67-8a72-4582-8d53-ced174e65bf1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe0272a-a10f-4652-80d7-6dab82092bd7", "sighting_of_ref": "indicator--a18ccae8-1477-4d4a-a3eb-d6a42774736c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9f2149-f3e6-4090-aeee-0f664919d0bf", "sighting_of_ref": "indicator--970c9775-3e3b-42db-b730-1508706ba500", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4867e6-709f-4af4-bfcb-4c402510f2b8", "sighting_of_ref": "indicator--6f6625dc-962f-4d0a-a319-6dc421609b61", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b978ccf-95de-4e88-b167-7496f7153d9f", "sighting_of_ref": "indicator--cf8d9f11-cf65-489e-95c2-c723b0ae8798", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8cc6b9-dbef-41e3-b30d-32c86b723a90", "sighting_of_ref": "indicator--0b76f01a-6ad2-408e-a043-8cb2e07ff97a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62349f66-81e3-43be-aa21-d9344665f4bb", "sighting_of_ref": "indicator--f8406c01-9871-404f-b0c9-9cfac873ebdb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d3e7df-9d30-46fa-8d59-7a48c2b537bf", "sighting_of_ref": "indicator--b90e4810-6108-481d-927d-490885d96b7f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8ce0ae-2a3e-4cf2-a873-6b0620d9bb1a", "sighting_of_ref": "indicator--a1d523cb-3b80-4732-b75d-710c3aba04ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cfa144-2779-43a9-b94a-e24b17d061c7", "sighting_of_ref": "indicator--1958caf6-1a8b-4a34-9074-88166ebd29fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10bd03b-1991-4c86-b7d5-eb4df8faf5c6", "sighting_of_ref": "indicator--a2e57b2e-2f79-4c37-b8dc-4c672cb088a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1285de5f-e33e-4c3e-9864-09334038ba42", "sighting_of_ref": "indicator--9a75a881-b306-4cf9-b309-b66872b73e76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17532a50-7395-4041-bcc4-2199e676a099", "sighting_of_ref": "indicator--83a9f460-9602-428d-b9dc-6286e15c72e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf78915d-8e8d-45c7-bd4e-50d378b50ce9", "sighting_of_ref": "indicator--afecab52-da8e-4106-8033-1daa46d2e509", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff160c28-aa4c-4d10-8e53-3eb324c9d470", "sighting_of_ref": "indicator--8b115705-9a3c-4b11-898e-9102d338c9f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf1a524-754b-4549-bfda-5b232aa12e5e", "sighting_of_ref": "indicator--eb3f1809-b53f-4334-aaf4-358f211b9d81", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473e96ed-8ff4-44ba-9dc0-366def464410", "sighting_of_ref": "indicator--ab258676-07a1-4c8e-8915-949ac2d48ec0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dc9793-90e8-48ef-b01b-f4a8c0e3421d", "sighting_of_ref": "indicator--bf31a911-5da7-4da2-b644-c903f5c4668a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2bff30-c0d7-40da-a03a-1a3d3065b093", "sighting_of_ref": "indicator--f1bfb250-d080-4fdf-94a5-2d17deeb27db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbe5308-ad3b-4986-bc13-9362e04919f4", "sighting_of_ref": "indicator--f1bfb250-d080-4fdf-94a5-2d17deeb27db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803ef5ee-c49b-466a-9e7d-0c66d50f8e3a", "sighting_of_ref": "indicator--4983531e-b296-4c61-8fdb-acfb9ef6fae6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3353b4-8204-48df-bc5d-b21adb8e335d", "sighting_of_ref": "indicator--1d50396d-d542-4ca5-9033-d39da6c75b54", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506039ad-9fef-43a7-8fb3-2d6f6b470175", "sighting_of_ref": "indicator--dbd93daf-3629-4098-8aa4-02026ada6371", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feaffcb-4e0d-4fbf-bc24-0db138f1cca5", "sighting_of_ref": "indicator--756cda9f-61ca-4be1-b91b-60d29358de03", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d82436-c291-4415-a593-a44d6c3f2105", "sighting_of_ref": "indicator--147386d6-4ccb-4e9f-80e3-c95025a147b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b63bea-e1d1-41d2-b3be-e5a4984f87bf", "sighting_of_ref": "indicator--24addb91-ad5e-4bcc-81a0-da10f483d6bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fa4ca2-5980-476c-aee5-ad205f8d374f", "sighting_of_ref": "indicator--671bb588-0971-4c58-9906-bd39fa61eee8", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cb914e-079d-4897-99d3-95deac414d73", "sighting_of_ref": "indicator--391376c1-daec-492e-ba51-9df73a431a03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e388f6-b34f-4fe0-a02e-2c9ab9a7d696", "sighting_of_ref": "indicator--69e74842-1a8e-495a-a8e8-d3fa5ed44057", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4d9813-48be-4282-a3ba-ce422605d559", "sighting_of_ref": "indicator--1f734157-e2a8-4722-aa98-81d3e8eaa1c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcb4708-89c0-4178-bdf7-3494e9b51e2d", "sighting_of_ref": "indicator--e2b376fb-e144-416b-b079-8e813242c0d9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8fbf3f-1760-4187-9ecc-6ae835b8b3ba", "sighting_of_ref": "indicator--67cc50f8-c34a-4cac-ae86-90176a5750ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddc8b15-ff6a-4b4c-8dee-1671d453fe5a", "sighting_of_ref": "indicator--a2badb9a-faec-453d-abad-fc48cf7db60d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cfa3d2-e244-4c5c-9e26-39255443dda1", "sighting_of_ref": "indicator--5bc23e5e-e142-41ed-b84a-0f826e82a266", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fc6719-d181-4fcf-b25b-f33f5b3cda7d", "sighting_of_ref": "indicator--7463fe2f-68ce-4539-aab2-23dffa985059", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf84523d-926a-4b58-ae1e-6e3898ba3faa", "sighting_of_ref": "indicator--28f5a4ff-5c07-4437-886d-ceac250f8d38", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b336107b-d1a1-43b2-bb75-7fdb5c088cb4", "sighting_of_ref": "indicator--f51edb04-096c-46c6-82b9-4b645326e056", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f896c1b5-822b-4386-9788-a23757eb5fb5", "sighting_of_ref": "indicator--5b9376e9-79a5-43a8-b247-6f0a51ad04ea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cddbbc-7532-422d-9e1f-a84efad9055f", "sighting_of_ref": "indicator--78950420-b9ed-417a-9be6-2f527fff413f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529ec559-fff2-438d-ad5a-20107dd2e6f6", "sighting_of_ref": "indicator--e9de1221-9967-4d9c-a5b5-16b9808cc182", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3aae38e-e9f5-4bab-9d06-3fe2e12a00cd", "sighting_of_ref": "indicator--8d91290a-4303-4ff8-a2c0-6b7a40b2d517", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0b4efd-3b74-4022-aeca-49e2eb53fd9a", "sighting_of_ref": "indicator--22fd6898-1143-4026-9f19-179cadc37d4f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cbea3f-b3a1-4b3d-b8ce-45a13677b085", "sighting_of_ref": "indicator--22fd6898-1143-4026-9f19-179cadc37d4f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcac37c-74fd-462d-bf7d-908322ff92b4", "sighting_of_ref": "indicator--be0c4ca3-cc66-43d3-afe7-c9dc71aad812", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03414a05-7522-4b26-a495-e21bb3d4152e", "sighting_of_ref": "indicator--5014cd5e-a4f6-4902-a921-eb763f31b196", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6be660-a60e-4761-8d72-9faf677125d9", "sighting_of_ref": "indicator--e8ab5b51-9558-4641-afca-33559606bf07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0b9947-0e2d-44c5-9319-1b6c4c7f638e", "sighting_of_ref": "indicator--be4735bf-123b-4280-82c3-f898bb2895df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed706e2d-e378-4fdb-9f8e-0c1f567d113a", "sighting_of_ref": "indicator--ca7ce8d8-d931-414e-9609-0c0ac50aa333", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4cea78-d1b9-4887-a3bf-fa84b273a86d", "sighting_of_ref": "indicator--6cca4931-a0c3-40b8-a50a-428ff5ca776c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cbe8d3-d561-463b-9036-2e84a4d09b55", "sighting_of_ref": "indicator--5f5e87b4-2c0a-4ffd-963b-57190b22760f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c0a353-c554-41cc-88ec-be047d8c85bf", "sighting_of_ref": "indicator--97d98d9b-7af1-427a-a238-f585f75d6a5f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49789229-8557-4b60-b1c5-c33568826c4b", "sighting_of_ref": "indicator--62f58c62-783a-4006-8561-95313839f584", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d18d912-7b2d-4e4b-a435-9b754bf90de1", "sighting_of_ref": "indicator--8290d21a-b1ba-4220-9553-8f305e75b242", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bfb86f-f125-4471-a87f-4e158cc0b006", "sighting_of_ref": "indicator--6dca2c29-9a01-4c8e-9c89-d5202c806b73", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77edeeb7-b3c3-4772-a591-ebc1f1de7627", "sighting_of_ref": "indicator--a6dbc341-765d-409f-b3f6-fcd9b47b4975", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5f9c0d-45cc-4b57-9b23-e88e8a8a9e72", "sighting_of_ref": "indicator--355d935a-efdf-45cb-bca7-95ba7ba6bf4f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143f7323-eaf3-40b8-a04b-3fe394095fd5", "sighting_of_ref": "indicator--355d935a-efdf-45cb-bca7-95ba7ba6bf4f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abce6061-ed2a-4ef8-a21b-37c4fe124208", "sighting_of_ref": "indicator--c77a27ef-4240-428b-9c4e-17b512f0918a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dab4e0-17e6-4939-b56e-2e3dbd4d769e", "sighting_of_ref": "indicator--c7920e07-84bb-4397-9c7f-1bda11b9489d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4a1846-16d6-4dbe-8f15-3e30c1579264", "sighting_of_ref": "indicator--a55a3721-abd5-4004-9249-b974f3698626", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f36aa4-99fb-418d-90c1-87cefc72b7e7", "sighting_of_ref": "indicator--c0b08339-c8df-4a77-a637-51c7dc27a8cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf566c48-26a0-4f39-8593-8951fdd436b9", "sighting_of_ref": "indicator--c467cec1-2a88-41f0-a2b7-1a99526347ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d3d216-17e3-413f-bc8a-9a8683139aba", "sighting_of_ref": "indicator--05c8ecbf-f645-4fb8-badd-45f5fb3ab096", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a65f176-1783-4c43-a245-0b3e8c545db0", "sighting_of_ref": "indicator--05c8ecbf-f645-4fb8-badd-45f5fb3ab096", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ebf4ff-08c4-4a3c-82a2-0754e816e919", "sighting_of_ref": "indicator--42069d12-cb8e-4658-b5b1-de1153495e37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80e455b-e4cd-4dbf-8ece-62c3b6b162e1", "sighting_of_ref": "indicator--cbcda19e-4cda-45bc-a278-0bb32bf29bef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c3406c-e6e3-4055-ace5-cebeffd1260c", "sighting_of_ref": "indicator--d1c8c70e-6208-4cdb-a03b-eb6d2c76610f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8aea68-9b30-4ac7-b915-1c369be0565a", "sighting_of_ref": "indicator--fe56b86c-4dfb-4410-8965-d0d712fe3df1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4d52ac-4219-4cbd-ad90-ac8b23cb6705", "sighting_of_ref": "indicator--fe56b86c-4dfb-4410-8965-d0d712fe3df1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b748a63-e322-40d3-aad6-65124846a464", "sighting_of_ref": "indicator--444cf72a-52d0-40ce-b174-eb9d496492a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afa4dec-b429-41dd-a14a-6441c07942a2", "sighting_of_ref": "indicator--9ee436a3-2dd7-4239-9849-f74e8dbba282", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8b1838-79f3-4b6f-946c-dc4517df00e6", "sighting_of_ref": "indicator--8d4377b2-893f-4cc3-b48a-acb0eb961cd9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2877d56f-332f-4227-9eb0-ab2e0ac6c670", "sighting_of_ref": "indicator--a84ee9f0-73a9-476f-98fa-e7656aed02e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9901101-95d9-46c1-9643-9864e3925ef1", "sighting_of_ref": "indicator--f2490121-2307-4fa2-90ec-a10989a71a11", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4c4b78-f974-4e3c-bc0c-51c3e3b3f9bb", "sighting_of_ref": "indicator--85efd071-4f2e-4f16-b059-3b3669d154fb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf9fa1d-131d-4a45-a2c9-fd7926299023", "sighting_of_ref": "indicator--85efd071-4f2e-4f16-b059-3b3669d154fb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c5fc4d-1de6-46f8-a38a-ca830aa44b76", "sighting_of_ref": "indicator--5d67982c-11b9-4bc3-893c-a157b3540919", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b9f88d-0c57-4179-a589-9fa938d133af", "sighting_of_ref": "indicator--5d67982c-11b9-4bc3-893c-a157b3540919", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba54c61e-34aa-4d58-a92e-2b1ff74ab0d5", "sighting_of_ref": "indicator--d79b9c06-20e8-4921-ae0c-a60475594826", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a968afb0-afac-49db-814e-1e4ebba065c9", "sighting_of_ref": "indicator--f92bec08-4f76-4ae2-b15c-a396471f1309", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907f6861-3837-4e5e-9538-1d023b0a08aa", "sighting_of_ref": "indicator--4d07386e-ebe0-4b36-8f6e-cfd47e957801", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ef3987-9727-4819-b995-e4a3268960a5", "sighting_of_ref": "indicator--4d07386e-ebe0-4b36-8f6e-cfd47e957801", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf76216-9c6d-4232-948c-3c64f97b06cc", "sighting_of_ref": "indicator--0b0a9e6a-213f-4bb5-a896-435b0b08790a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc5c643-7c15-41b1-8925-90318f623b2f", "sighting_of_ref": "indicator--63cc9dd2-27c2-44e1-b6ec-2e0ebe401ca4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7435506d-b9cb-4b71-b932-239f0c3b45c1", "sighting_of_ref": "indicator--d280edd3-c1d3-4b95-9678-3803b6de27bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45e409d-7b60-4b6e-9d9c-561ed83ded2c", "sighting_of_ref": "indicator--0207eeed-2acf-4b56-b4a7-7b88bdf94bc0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5816feb4-854b-47e9-8dc6-91b83a8ccb21", "sighting_of_ref": "indicator--e262625f-d25d-49ca-87f1-1dee1eb9b058", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702e2229-4be0-452c-a05e-21a88b8821b4", "sighting_of_ref": "indicator--8c1605c7-b7af-47cf-810e-377ce433f647", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0cafb9-fdd2-41e7-afc8-2f33b9eb1001", "sighting_of_ref": "indicator--cfd32ae0-3ca6-4430-964d-ea29e991fa63", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbdbc36-0485-4c04-aff6-d1c7097dd6f5", "sighting_of_ref": "indicator--cfd32ae0-3ca6-4430-964d-ea29e991fa63", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cbbd86-2412-49db-9aa2-b90f851ac08f", "sighting_of_ref": "indicator--c05b8f9a-4594-40ea-a092-a8c9c680b86f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf08b2a-845b-483e-a1ca-f6c93ac714a9", "sighting_of_ref": "indicator--1ebb9c5a-13a9-4e40-9e0e-f6cb91f7573c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e122c4-9f63-40e2-81b8-137819dc58b6", "sighting_of_ref": "indicator--b256e6d2-3c42-49ac-ae17-7f18043ab408", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23ba5bc-173a-457c-90ad-be207ca2cf70", "sighting_of_ref": "indicator--131de8b9-46ba-42d8-878b-049b66c87bd9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea1fda3-7269-46d9-ab80-162b46c31cd8", "sighting_of_ref": "indicator--fad935ed-06b4-4afc-8ac5-da3c46bef94a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc83c29-dda7-4a5f-bb47-4ab195e4bae9", "sighting_of_ref": "indicator--fad935ed-06b4-4afc-8ac5-da3c46bef94a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2c8364-6e13-4746-8715-8fc8c2fff697", "sighting_of_ref": "indicator--9e73d496-277d-4cb1-86c5-81796a2c3156", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26a0d9a-c3d1-4430-a0f3-62272678bba5", "sighting_of_ref": "indicator--23f9e5d2-e463-4cff-b060-47e49f88f569", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1827b0-fd30-4fef-8212-bcefa24cd7ac", "sighting_of_ref": "indicator--23f9e5d2-e463-4cff-b060-47e49f88f569", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3662749f-978f-43c2-99e4-4030f52300b2", "sighting_of_ref": "indicator--3889962b-0be3-45f3-b3dd-49b696b00d7d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d3498b-97df-495e-bae6-c06a1b5cc9f6", "sighting_of_ref": "indicator--9f3cd513-e170-4d8d-83e0-c3a272a499e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08adb3bd-a61f-441f-b328-ba4be04c41a0", "sighting_of_ref": "indicator--b45e773b-1c1d-4040-96d2-a8e984748296", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64427379-66cf-441c-b0f9-3c556f003591", "sighting_of_ref": "indicator--eb4354fc-ca61-4f96-ac84-637f62efdb10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c08ac5-d73f-4e99-bde6-5c19c04a5d7a", "sighting_of_ref": "indicator--495e0fe3-3d98-413b-b96b-af076264c42e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4695ccc-e5f2-4997-bab8-a2f3c6282e71", "sighting_of_ref": "indicator--495e0fe3-3d98-413b-b96b-af076264c42e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba28a25-d28c-4d79-8738-d53749305ef9", "sighting_of_ref": "indicator--6872b053-f6fe-42d3-b8c1-c4da9f28b5bc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d91c6ca-866d-4d38-bdde-667d5e1b3d03", "sighting_of_ref": "indicator--b56c9d48-dcba-4355-a15b-abe327ded55a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb04ed0c-33dc-4258-ac3c-0a655b7ad9ff", "sighting_of_ref": "indicator--b56c9d48-dcba-4355-a15b-abe327ded55a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c135447-f00e-48b8-b995-b9aefa04bb81", "sighting_of_ref": "indicator--28563ba5-5bfc-440b-8f2a-31c9142ede4b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69812a1-1eca-4bbf-99fa-f20fc0b589db", "sighting_of_ref": "indicator--28563ba5-5bfc-440b-8f2a-31c9142ede4b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff519909-83b4-4e20-a807-93e0e966e521", "sighting_of_ref": "indicator--1be33279-7f52-40aa-9cb2-402e82087f78", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b0c11e-13c8-4a6e-8c1c-d53647a6288e", "sighting_of_ref": "indicator--1be33279-7f52-40aa-9cb2-402e82087f78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962f5487-9e95-49ff-81f7-06d6a4d6f217", "sighting_of_ref": "indicator--6a1f2483-8d17-45a1-acfc-aa460b28fffb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634dfc8b-32db-4d66-86ef-30145591600a", "sighting_of_ref": "indicator--6a1f2483-8d17-45a1-acfc-aa460b28fffb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ce4be3-1fe0-4e60-af78-61017b38ec93", "sighting_of_ref": "indicator--3e8379e4-de6c-4341-bf45-2e5b73386d84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006fec3a-f3e5-4ad9-a251-4a96aed3cc12", "sighting_of_ref": "indicator--d0024d0b-9007-45c5-9d57-5ec5ee9b6098", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4b5ac2-e762-4fc2-a344-ec52c4a30074", "sighting_of_ref": "indicator--97c6e692-8414-4609-bce1-c8322375035e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133a85cd-b59d-48e7-b9cf-a6e3d1b85a92", "sighting_of_ref": "indicator--f119867b-d487-456c-bcf9-e28921842e86", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2defacdb-5e4c-4883-a455-939fc55b17aa", "sighting_of_ref": "indicator--ebb475f7-0588-415c-aa6d-81beb296c0b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea947ac-bc2d-4701-87a4-13d8d5f1945b", "sighting_of_ref": "indicator--ebb475f7-0588-415c-aa6d-81beb296c0b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47ce5a7-4349-440e-8460-09ef87ec9eff", "sighting_of_ref": "indicator--e968ce06-f193-4b1c-99cc-9773a18f6b76", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce985d56-deae-4ea8-a80c-0cb54bb58bde", "sighting_of_ref": "indicator--977d1390-444e-443a-9e73-ac8d6ed1c91b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0f4419-d150-4045-a4d1-ba7e80381ad9", "sighting_of_ref": "indicator--793934d6-8c6d-447d-abed-786c4aa5e59d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5e87ae-d840-4106-b09f-7217d203fbb3", "sighting_of_ref": "indicator--30767948-cc5f-44dc-9809-de4156fe17e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeec762-d19d-4420-a7a2-dd64e0f89ff5", "sighting_of_ref": "indicator--b4cfc843-4f99-454a-82eb-84bafb7484ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd329cb6-2b67-41c3-9fb1-608ee1ca2835", "sighting_of_ref": "indicator--c4ef69fe-6f04-419b-9364-0b583aa6b851", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc99ecd-40ba-4958-bc69-48bc3366cf0b", "sighting_of_ref": "indicator--f7f7a878-f64e-4d37-a6e3-11ebadafce98", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4ea3fe-6ce8-45cf-bcc9-c1b17c916609", "sighting_of_ref": "indicator--cc88add9-288e-49e7-b2e9-5fffc35cc4cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5d1608-8264-44d5-bbc1-a73294f94bee", "sighting_of_ref": "indicator--e1c68961-44a7-46be-b066-3405fd77f178", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ba220c-301a-4eae-8a1d-2d6d3cef135a", "sighting_of_ref": "indicator--e1c68961-44a7-46be-b066-3405fd77f178", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6abe92-97e5-44aa-9ed2-18004d00802b", "sighting_of_ref": "indicator--06dfd6bb-710a-4e9c-97e8-f067c9168058", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d50513-cc67-4be6-8ac0-c07d032c3d14", "sighting_of_ref": "indicator--06dfd6bb-710a-4e9c-97e8-f067c9168058", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2587bcf-1dea-40e8-a16c-b4ffb7268d9f", "sighting_of_ref": "indicator--adce7fd2-2018-48e7-84fc-ff367e4673d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392a2170-a495-4d0f-a4de-20667a63808b", "sighting_of_ref": "indicator--486bfae3-e047-4408-be09-ff08b3d1118c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c2c457-935d-4f0a-8576-a82e8b9cf8af", "sighting_of_ref": "indicator--52612c92-22c5-46e2-b188-fc2dc2154b1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d33f7de-cdcf-4d91-8473-02d4a8b2fb5c", "sighting_of_ref": "indicator--310fc29f-a775-4d91-a314-3861ef455485", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041d1bee-b896-49fe-bfef-4597ac073dc3", "sighting_of_ref": "indicator--690be8a8-dfe7-4cb7-8305-07b2bd6a37d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50552c8-c731-4c31-88ee-4881fc099de6", "sighting_of_ref": "indicator--c91d41c6-10a9-458b-b2b3-9f6f17a3a718", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d400ba0-7f75-40fc-845c-5e95fd950d43", "sighting_of_ref": "indicator--d22e2715-6ca5-4969-b9ec-14d3c1492221", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158a0823-a553-443f-9c88-13af10de467a", "sighting_of_ref": "indicator--b6e01388-1647-4e72-afdb-4f0cce2255a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317d4e50-ab8b-4032-9eba-d6e6c82be685", "sighting_of_ref": "indicator--7a51efff-adf4-4cc2-85b7-19a54ad6cac2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e012d1f-e932-46ac-9785-afc8f215c015", "sighting_of_ref": "indicator--1e34c384-b620-4fca-9ca6-a0ca0989cccf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4bfd44d-cf49-4614-8c27-5a2f136a874e", "sighting_of_ref": "indicator--c25d6695-a976-4cbc-8efd-3c557eb72dad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c74025-b3d6-40ab-a560-7eb4a2b87c29", "sighting_of_ref": "indicator--73a6df45-d367-4e4d-ba57-e38c4d8091ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98961a0-6db4-4515-b1ac-1efdcf2a1111", "sighting_of_ref": "indicator--c1898776-6745-4c6d-b6b6-d4f6fb1de9b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7a8704-883c-4300-8053-55df3587c600", "sighting_of_ref": "indicator--a45ca813-a49a-438a-837e-a7852030dd7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7c5598-544a-4d35-a8da-db82fb613aaf", "sighting_of_ref": "indicator--21901111-a24e-4fde-8672-04e087085aaa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7d50b8-110f-4437-be32-f1378e109ed3", "sighting_of_ref": "indicator--647d743a-0ad7-4869-aae3-3e53a98a00ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08cc21e-07da-4056-8d51-26e9cc3729dc", "sighting_of_ref": "indicator--49e17da0-a068-4b80-a74f-89ebd3b14058", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2bf7ab-4201-4380-8667-735370f7721c", "sighting_of_ref": "indicator--f45ccd71-c10d-4760-8e1d-348701f4c652", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767f5d8e-be2f-4688-8f2a-0e35c7dfd111", "sighting_of_ref": "indicator--d83b3199-5b62-425e-ba1d-d846f03c07fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e96180-e3ce-4af6-9951-f11145b560ff", "sighting_of_ref": "indicator--47f7acf4-d878-41b2-b5f5-8b2c77e00773", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a78e92-be9a-4e49-93e2-9821ea0f46a4", "sighting_of_ref": "indicator--aff48081-e219-48ae-85fc-41fbe393d829", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140388b0-8f68-4f13-8863-b63da0210fa4", "sighting_of_ref": "indicator--9fb32e93-3d99-4259-8a92-0d7dec24c6ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1ad9ae-585f-418a-bf51-2fdd4d8d54e9", "sighting_of_ref": "indicator--9fb32e93-3d99-4259-8a92-0d7dec24c6ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1430b2d6-21d1-4cf9-997b-30637d976110", "sighting_of_ref": "indicator--91ee1dee-3b8f-46a5-a0c7-e25094e9eb51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7742fec2-fdcf-468e-a481-9f7a7d4def12", "sighting_of_ref": "indicator--91ee1dee-3b8f-46a5-a0c7-e25094e9eb51", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f5e75e-1b24-4cf6-be93-f56f4bcb9410", "sighting_of_ref": "indicator--14e22589-d3ee-4c9a-bcfc-ff3f2e7023ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8e5a39-d262-4deb-8b89-70c4ba3fb442", "sighting_of_ref": "indicator--e3554778-8bd6-4bb5-a2b9-302b59da8ded", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014c563f-da9e-49e1-b22b-5f4456988486", "sighting_of_ref": "indicator--000948f1-939d-48b9-b345-6f6f4a7a72db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8d752c-2d58-46a9-b695-30f64b18fb2a", "sighting_of_ref": "indicator--9fcc0d0e-176a-4223-b9df-0ac994d92539", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54864a2-5436-47e5-a0de-0730486a6606", "sighting_of_ref": "indicator--bc6d4f55-1e48-4b53-9a00-072eac958f1c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1b7ba4-00ff-4548-8054-bfd1e237ee47", "sighting_of_ref": "indicator--b175a8e3-7255-4c51-ad25-5311e84b373d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850087a2-f5ab-4926-b3db-d4c94cf54ff8", "sighting_of_ref": "indicator--35856984-b421-468b-82b2-708299a716f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb2b80d-4c70-45b3-be3c-1a49aad20e5a", "sighting_of_ref": "indicator--b7d9f9dd-546c-48c0-9b6e-8d345edcecc5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4063e35b-099f-474c-a8e5-06c0a3834a51", "sighting_of_ref": "indicator--b7d9f9dd-546c-48c0-9b6e-8d345edcecc5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf879e56-0295-4317-bd80-488fc64ecb34", "sighting_of_ref": "indicator--6cfa19cd-bd69-43ba-8eba-746e8b6c7db8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccba6a6-9be6-461c-9e87-187b1c56a178", "sighting_of_ref": "indicator--eb498a35-711e-4afd-b63a-e4c35f42c035", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fbd897-8819-4069-9c1e-c4c214dc497c", "sighting_of_ref": "indicator--eb498a35-711e-4afd-b63a-e4c35f42c035", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3fe1d4-00a6-4f52-bb1e-c766a5227d40", "sighting_of_ref": "indicator--5a19b89a-d91c-4af0-8eaf-6d74ad33b073", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917d5554-ef43-4262-afc0-4542e770628e", "sighting_of_ref": "indicator--5a19b89a-d91c-4af0-8eaf-6d74ad33b073", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635342e2-104b-4f76-a4d1-9c433e829fee", "sighting_of_ref": "indicator--aadc1dc3-7921-443e-8be8-1f11244242a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6347bb-4182-4695-ae57-93a0a76dfca9", "sighting_of_ref": "indicator--aadc1dc3-7921-443e-8be8-1f11244242a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4181cd54-1f2b-4b79-a0ac-0e7fda1d162d", "sighting_of_ref": "indicator--126ff514-f4b7-4d93-88ff-bc32b5fc7596", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d38182-ec7f-4232-91d6-e51ce6b74663", "sighting_of_ref": "indicator--126ff514-f4b7-4d93-88ff-bc32b5fc7596", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaec9b07-2bfa-4a9f-9e7e-9f72606789ff", "sighting_of_ref": "indicator--ef9eee1d-fbfd-4cb9-ba24-8fbea7896b23", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286a7465-23c6-4d43-a194-254560351d5b", "sighting_of_ref": "indicator--ef9eee1d-fbfd-4cb9-ba24-8fbea7896b23", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e748588a-ea77-4165-bf2d-07a15338d27f", "sighting_of_ref": "indicator--98ad573d-63a7-4f75-a1f9-e2e4c26769dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7415a817-3cc7-4bdd-a850-21bd6ac623c9", "sighting_of_ref": "indicator--98ad573d-63a7-4f75-a1f9-e2e4c26769dd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ba1262-6ff1-42a6-8509-b754587dc002", "sighting_of_ref": "indicator--c8d3cc3a-062e-46f9-bcf3-6b57898907d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568f5455-88c8-49bf-91a6-7a34ca5ae31a", "sighting_of_ref": "indicator--c8d3cc3a-062e-46f9-bcf3-6b57898907d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fa0d61-6f69-4830-a881-e028a805e408", "sighting_of_ref": "indicator--b645868c-3043-409f-a8ec-095ec4ee910a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca69eea-7a17-4f43-9f0b-f0e1815ed044", "sighting_of_ref": "indicator--b645868c-3043-409f-a8ec-095ec4ee910a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6261f402-8923-4255-a8bc-38396c93da47", "sighting_of_ref": "indicator--0b9d63eb-396b-41b2-9cf5-ac4e0094af0c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4defd4ef-1a21-4cf0-879a-b5a8437a15bc", "sighting_of_ref": "indicator--0b9d63eb-396b-41b2-9cf5-ac4e0094af0c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6392e05b-a02e-43d5-ae15-5e88b9a6bd80", "sighting_of_ref": "indicator--6745791b-3534-430f-9ae4-027c589771d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da85ea75-7d89-4b4c-b357-96103aa4e1d4", "sighting_of_ref": "indicator--80c0f7cb-438a-4930-a32a-12dfb70478a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294f9f17-4827-43d6-bc7b-9847f94f8ef0", "sighting_of_ref": "indicator--80c0f7cb-438a-4930-a32a-12dfb70478a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fe1b30-f417-4eca-aa28-e379bcb40e7e", "sighting_of_ref": "indicator--7ebb9bed-f5b7-4070-93fa-2ee079ce632a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daede982-5796-44e5-950c-3d4b3829c369", "sighting_of_ref": "indicator--7ebb9bed-f5b7-4070-93fa-2ee079ce632a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6631294-3c03-4310-a550-25a5766cd22b", "sighting_of_ref": "indicator--4772f839-b62a-4aad-8fa7-cdf14f8091c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1715265-e9ae-482c-a99d-4e19b5c6799d", "sighting_of_ref": "indicator--4772f839-b62a-4aad-8fa7-cdf14f8091c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fd6859-e0b3-4adf-a4ce-bc52d61b80c7", "sighting_of_ref": "indicator--6cf884bb-960c-4908-bf40-8235606ee9f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d468b1-a74e-40e5-9546-88b075974723", "sighting_of_ref": "indicator--38366acd-7907-46d2-8866-7e74be286aaa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28278802-4429-4000-81f2-e8404e4f8f9d", "sighting_of_ref": "indicator--38366acd-7907-46d2-8866-7e74be286aaa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bbe45f-be93-42f1-adfa-732970a57167", "sighting_of_ref": "indicator--7a3cb899-9169-4568-bf9c-e7fa83bf2bae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4579a706-9c5e-486a-b15c-3acd361e2200", "sighting_of_ref": "indicator--cff1b7d1-2428-42e4-9937-a276d9b7ae73", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fac9cd-7992-49ab-b468-2e5c55cf6ebc", "sighting_of_ref": "indicator--cff1b7d1-2428-42e4-9937-a276d9b7ae73", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d0c666-c934-4428-9a6f-551928c12c14", "sighting_of_ref": "indicator--9c455dbe-524f-4991-85ac-e4c420bd43cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270d384e-7f5b-4e56-a0d9-b06914408f34", "sighting_of_ref": "indicator--329dae2e-cc29-426f-8f09-037b61d827c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c3656d-7560-42a0-adaf-91308255a015", "sighting_of_ref": "indicator--f7093412-f516-4b5e-8db0-b600523099c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579fd984-45f8-422b-9625-cfc057485576", "sighting_of_ref": "indicator--c36a54ee-be72-411b-8b18-a437e4cbb7d2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d11cbc-1d84-4662-bd95-f5011b5b0ff9", "sighting_of_ref": "indicator--ab6f175d-857d-4bda-ac6a-09e842503e10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a65aa9-0fc6-4a62-8d93-d5c69ac667c0", "sighting_of_ref": "indicator--a47cfeaf-acce-4925-8f5b-c0bbea685ba1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce0f3f5-249f-4486-8e81-a67d2b847bf1", "sighting_of_ref": "indicator--a47cfeaf-acce-4925-8f5b-c0bbea685ba1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd9eca1-d770-4810-ac22-2408bb618dbf", "sighting_of_ref": "indicator--8683e7cf-0fc1-4079-9d85-1c5056c13d19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28613353-afa3-440c-a322-97d19283a800", "sighting_of_ref": "indicator--8683e7cf-0fc1-4079-9d85-1c5056c13d19", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f88816a-94a5-4f19-89f0-6ba0c1895c2e", "sighting_of_ref": "indicator--d79ef40e-7852-4301-9b27-25c0a491ae76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495466a4-a876-4d13-9da4-b4e449714363", "sighting_of_ref": "indicator--8c685eeb-9daf-441e-943c-8b513edbb581", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf823616-ed47-4fb3-ab42-9ce651cf0764", "sighting_of_ref": "indicator--aecc24f5-adc7-443a-908d-760e55418365", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468f41ac-3271-4e4f-bc5c-234778ae3fa4", "sighting_of_ref": "indicator--3dc3ad10-4b11-4aae-b4f6-32ab2105d8a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c632162-7567-4ba4-a130-c5f52161b843", "sighting_of_ref": "indicator--b8ffc73b-3b88-4e2f-8a96-a1a1c022ddde", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc8bdd5-326b-432f-ad00-6f5313279d52", "sighting_of_ref": "indicator--b8ffc73b-3b88-4e2f-8a96-a1a1c022ddde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a12ab2d-6466-4922-a100-8c88bc9352a1", "sighting_of_ref": "indicator--f2bb86f5-64a9-4793-b007-e8a776b5cfd7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4749cfd-55fa-4bd2-baa1-09194dcefa53", "sighting_of_ref": "indicator--37e95af3-3188-4d2a-9b9b-8ae26f36e987", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92465853-0933-4c3f-90bd-b8f9552d19c2", "sighting_of_ref": "indicator--dd56ec17-4841-4965-9227-80221a7384b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9846c568-646d-4472-a20d-67fe306748fb", "sighting_of_ref": "indicator--dd56ec17-4841-4965-9227-80221a7384b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7375957-2d5e-49ed-a2e7-9ff9bdcc9eb8", "sighting_of_ref": "indicator--c39a6bf4-2c26-4d90-8161-8d6cae64b31e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c25948-4c16-4a67-aac8-ee23be8085a5", "sighting_of_ref": "indicator--3b60400e-b09a-4195-8bbf-868e59bb361a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72242aa-af74-43e1-a325-bd25e54e3748", "sighting_of_ref": "indicator--65d9a9f8-1b38-4ecd-832f-3e5281a2ce98", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b19edb-e7ee-4e6f-9444-15a9559d7580", "sighting_of_ref": "indicator--65d9a9f8-1b38-4ecd-832f-3e5281a2ce98", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4332d541-996a-46ef-9254-5dbacb876d79", "sighting_of_ref": "indicator--1eddef46-1171-4b41-9077-754066198b2e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d889e0be-9090-4ced-97f4-50ac0203ced3", "sighting_of_ref": "indicator--35834d27-8381-40b4-82a4-bdb897b0bc79", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee53004-6f44-4393-8cf6-444d85597754", "sighting_of_ref": "indicator--35834d27-8381-40b4-82a4-bdb897b0bc79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7304696-7db3-433b-b5fa-ace503a92a7a", "sighting_of_ref": "indicator--42dc1d24-6e3b-40c2-bd5a-b8e6a6592f59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4698fcbe-a0e8-46d3-87a1-ddec5a9fe0d4", "sighting_of_ref": "indicator--92178a63-6ac0-492f-813c-52420f1bcbec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4cfae9-6b0a-4013-8bb0-032725a065bc", "sighting_of_ref": "indicator--92178a63-6ac0-492f-813c-52420f1bcbec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0789ff50-4e02-4bac-acdd-ca831e6e895c", "sighting_of_ref": "indicator--6b5739db-801e-4266-8723-af1a9ff79233", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc8c4ea-e620-4908-a613-67dc04b0e1f0", "sighting_of_ref": "indicator--6b5739db-801e-4266-8723-af1a9ff79233", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36234186-96b0-4fea-be94-81846b4d9c18", "sighting_of_ref": "indicator--29d3d816-4259-47b9-8eea-1b89de600392", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5807be-fb1f-4746-9d8f-dcb3e08fdcdb", "sighting_of_ref": "indicator--8481500b-1db5-4d35-a6db-46a3ae594573", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fddaff-633f-4766-98cf-258215019272", "sighting_of_ref": "indicator--8481500b-1db5-4d35-a6db-46a3ae594573", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff4a983-4c55-4c9f-bb87-157336ec28da", "sighting_of_ref": "indicator--df2dd67b-74e4-45a8-b7d3-bbc4035713e1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df66f3d-2224-48bf-9ec0-c78912e6430f", "sighting_of_ref": "indicator--85565e40-dcdd-4bf2-b192-a5e6d358024a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f70261-ed4f-4e88-a70e-fec898ed3215", "sighting_of_ref": "indicator--80036c79-86a0-4eb6-a418-89c52fb1685e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee44de1-de18-467d-ac7e-94f901b9437d", "sighting_of_ref": "indicator--80036c79-86a0-4eb6-a418-89c52fb1685e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d32ab1-7e40-44c4-8685-6c4454b40861", "sighting_of_ref": "indicator--3eca0fbd-62db-4334-9907-7fdeeedf5db2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43229a0-5ea1-4e9f-af48-be6f72b7900c", "sighting_of_ref": "indicator--5adfc901-cbd8-41bf-bb34-a2446dddf9a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be37f2b6-1880-4072-87dc-749d2c3a6074", "sighting_of_ref": "indicator--c0ea2208-59c5-4ea1-90ab-b53954240e9f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1198f2-1944-4918-8d68-14281633cea8", "sighting_of_ref": "indicator--e1104bf2-3663-436e-ae91-6cc93d09c4a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f89bdc-0e66-421e-b71f-a9d407a9645a", "sighting_of_ref": "indicator--eca2fc9b-106b-4bb0-9b01-59c3c2a63c47", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5887cd80-0a89-46da-80ab-d4e31e7ea3e7", "sighting_of_ref": "indicator--f1d95631-84ac-4a4d-be25-2081d80be2f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd13e3f-9d4e-48eb-8572-347f5bf459b2", "sighting_of_ref": "indicator--e7a4747a-2bb1-4ac1-a619-b00892012ae8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaec0c9e-f51d-495c-961c-607f12fa9fa0", "sighting_of_ref": "indicator--4fa684bb-b968-4da5-bc72-ac4603423cb2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c1bc86-5ba2-4268-826d-a1dd0209b17d", "sighting_of_ref": "indicator--cb6a32b7-c1c8-492a-af6f-fa73e2b40b37", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e59b7fd-2ed9-4eb4-abec-9a8974a79fbe", "sighting_of_ref": "indicator--abf61f57-1234-481d-8bdb-83a89228faeb", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939979a9-ec79-4cff-83e1-4805f3b499a2", "sighting_of_ref": "indicator--a3ca5637-53ef-4386-8114-e8f305b5be7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc10b226-19f1-47c3-a950-3b8a67a178b9", "sighting_of_ref": "indicator--a3ca5637-53ef-4386-8114-e8f305b5be7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4610093-777e-468d-869f-4e2ea208877e", "sighting_of_ref": "indicator--9049f985-12f0-44f9-8b27-d4fe8bdb3b79", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8052550a-6eb9-45c0-b624-1c48a2300fa9", "sighting_of_ref": "indicator--9049f985-12f0-44f9-8b27-d4fe8bdb3b79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0649fe1f-6c27-432c-9435-3a36a8c27345", "sighting_of_ref": "indicator--72d3c0bd-6026-4bad-a599-d71d371fed50", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ce968a-5c0b-4d81-8bb3-33cbaa7ea8a2", "sighting_of_ref": "indicator--1a889948-36b4-45ac-ac95-d5da6013c3b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87f7e84-90ff-47d8-b904-66b8e3700eb0", "sighting_of_ref": "indicator--1a889948-36b4-45ac-ac95-d5da6013c3b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7870182d-4f62-4316-a2ad-1272b32edfff", "sighting_of_ref": "indicator--e6f9e96e-bb86-44d2-ac4f-7089f73912b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfdbf18-56c4-464b-b8de-80219799a26c", "sighting_of_ref": "indicator--8eaa7116-19a9-454e-9f30-89d4626c3394", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2043ac-ec3d-4f27-b623-e5aa4926988f", "sighting_of_ref": "indicator--4859af9c-2f20-485b-91d3-1f439abca9a4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50186ed-9dc3-4ec7-8cd7-0e7464ac1dcc", "sighting_of_ref": "indicator--8535d5b1-86b3-41ba-acdc-b9b42853d3d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92899899-44e2-494d-8fef-a2981518834e", "sighting_of_ref": "indicator--8535d5b1-86b3-41ba-acdc-b9b42853d3d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2847341d-f6db-4c83-a078-3c2f613860d3", "sighting_of_ref": "indicator--1e98b202-c830-4b8c-b110-36af324592ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d829e083-0eda-453f-88ae-da0dd99de180", "sighting_of_ref": "indicator--1e98b202-c830-4b8c-b110-36af324592ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b21ab50-e4c3-48a3-946b-9d0de933af20", "sighting_of_ref": "indicator--49e4bee1-0381-4785-a83c-220fac45c8a0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875699ce-17f3-4ce3-8929-64ae55ab0055", "sighting_of_ref": "indicator--83c8dc3a-511e-481c-a9b8-0c81082e2ac4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f80fca1-1cfa-4d98-9640-58a9b3da1a32", "sighting_of_ref": "indicator--83c8dc3a-511e-481c-a9b8-0c81082e2ac4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b49989-29f6-4ee7-b26d-7cb4a7f39618", "sighting_of_ref": "indicator--9482ab6f-935a-4bcf-9b06-cd0df964c146", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5b777e-917f-47a2-8757-cebefa07e8ae", "sighting_of_ref": "indicator--cc73bfc0-f68e-4f8e-b61a-1adde70af966", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f95b0b9-916a-47a0-8d5c-a4f20ab04ffa", "sighting_of_ref": "indicator--1ea411b3-da3b-4263-9137-272a93edff47", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8e490a-ca69-4d06-8242-74d2a63288ac", "sighting_of_ref": "indicator--d776e0d9-bdcb-4fa4-bf5c-93fa2c1386e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc200ec5-3334-4798-9449-65e537f1ea23", "sighting_of_ref": "indicator--1b95762a-69f1-4c08-b7fd-a8827a570d79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c22863-f68a-49fa-a0b7-fdb6551d995f", "sighting_of_ref": "indicator--b70234eb-b994-4845-829e-d7ce44928dff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ae7c1a-5f01-4566-ae99-b645b7a2e7c1", "sighting_of_ref": "indicator--3681e0de-654c-4749-8360-8a179e978a8e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952198d9-1af8-4094-9929-2ad539e3c568", "sighting_of_ref": "indicator--337a4bc3-b2d8-493c-9d24-03e4013041b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592be9a4-0468-450d-a961-3325b6ffc75c", "sighting_of_ref": "indicator--337a4bc3-b2d8-493c-9d24-03e4013041b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712e9e01-1b8e-4320-b2b6-4b68a7f83b43", "sighting_of_ref": "indicator--c17b00c3-a822-4a16-a898-eab7f17efaa8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6d66b8-7537-4583-9748-5f9587ec0f38", "sighting_of_ref": "indicator--28509856-cbd7-4b9a-84de-7bafc546f6dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcb4d78-4329-427b-9733-f9ebe334e3ee", "sighting_of_ref": "indicator--28509856-cbd7-4b9a-84de-7bafc546f6dd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98272baf-644c-443e-b4e4-f86e1b979c01", "sighting_of_ref": "indicator--ab4f5b0b-6afd-4031-a864-5c932aef806b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd5ba84-5657-47ed-941f-50bd48b7d76b", "sighting_of_ref": "indicator--55bdbf77-cf47-4634-950c-3bc0498c9506", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475cb65b-72d0-4b51-bac7-b83b1b7f1166", "sighting_of_ref": "indicator--55bdbf77-cf47-4634-950c-3bc0498c9506", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03875f69-8b44-4ad8-a59c-66cdf093a801", "sighting_of_ref": "indicator--998d8ca0-5f18-4ba9-809d-2b4cabd77958", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9b13c0-e13a-4113-ae7d-7b60d6555de6", "sighting_of_ref": "indicator--50807b5c-3bb2-4281-a887-c39bdb66275a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f60285a-8be1-42da-a6c9-269b208370b9", "sighting_of_ref": "indicator--1d119161-6e25-4800-b49c-acac280edc3f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fd04b5-c641-4ac7-89ed-35fd06090423", "sighting_of_ref": "indicator--1d119161-6e25-4800-b49c-acac280edc3f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ce1378-236f-45e3-bcd7-437077165302", "sighting_of_ref": "indicator--f4ffd611-e3ea-4f83-830c-8f3885e44deb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f8db60-48d2-4dfa-a01e-ea1737f59172", "sighting_of_ref": "indicator--3deb213c-3fc1-4ffb-ac16-e45234d1deb3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b05013-ca4c-48fc-8e65-daa1e7f72b6c", "sighting_of_ref": "indicator--aa8732ff-5bbd-4413-a501-500aa5cf0155", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e499205-a81c-49bd-bc49-d0da04d2ca3a", "sighting_of_ref": "indicator--aa8732ff-5bbd-4413-a501-500aa5cf0155", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e197a6-07e4-4dab-85e7-cb641918e3ff", "sighting_of_ref": "indicator--c31f986f-6152-49ce-9b6a-38f2c7b149b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16384230-535f-4baf-8c1c-e0bbcfc0f650", "sighting_of_ref": "indicator--b66c7a7e-67a8-425d-bae7-ffb6d5812593", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b64807-7e59-4865-b35d-91246bc58a74", "sighting_of_ref": "indicator--b66c7a7e-67a8-425d-bae7-ffb6d5812593", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b48b7f8-2334-4cec-90a6-9d4cc8161948", "sighting_of_ref": "indicator--a61adf27-4fd2-48b7-a344-2af92401de08", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bfc86c-2004-407b-9fc4-b2737c0d0728", "sighting_of_ref": "indicator--1d32989a-61d7-4f50-817b-1a3d7f3cdc78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeee4e4-0f4d-4336-9d57-2e67720276d3", "sighting_of_ref": "indicator--43714875-8602-4e03-bfb2-a917e6cc775d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc2482d-39b4-4f80-99ab-2b9342a91e9c", "sighting_of_ref": "indicator--8085e887-e4fa-4c63-a2ec-0bd3e4513d41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92461f6-b0b3-48d2-8177-c8bf3a06e9bc", "sighting_of_ref": "indicator--d5a4c73d-54af-4e11-a038-9e417ca3ea4d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893d9c97-b635-4992-b635-f1981c372bc7", "sighting_of_ref": "indicator--c1c4014a-77d0-4062-a82d-c52ebff5c752", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c8179d-342d-45ee-8a29-b8fed6c70e28", "sighting_of_ref": "indicator--1b545145-ba25-4ad7-a458-6311acadd1a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d2f0a5-9b5a-4134-82df-d5ddcd487836", "sighting_of_ref": "indicator--099716c1-4f37-442e-ba41-42e8aea63857", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7fc602-a15c-4ed0-8f51-ac876da2c2ad", "sighting_of_ref": "indicator--83f43379-1a72-46ed-ba04-8ee30ab4e907", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6866034a-7c32-4c07-86e4-40c3c489c32b", "sighting_of_ref": "indicator--daf3a901-48aa-4c58-b90d-d9c8d69ad4de", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777b885d-4371-4936-a919-2e0f5d0a5a4b", "sighting_of_ref": "indicator--45527cad-0acf-4ad3-8eea-798a0f277945", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58fcaa4-011c-4a97-a90e-28778897c747", "sighting_of_ref": "indicator--45527cad-0acf-4ad3-8eea-798a0f277945", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f236ab-7b58-402b-9544-dc85abd8e5ee", "sighting_of_ref": "indicator--8dab15b0-1772-4720-96d2-9566d16b90c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e30d0d-7d7c-417c-b8fd-d706880d59c4", "sighting_of_ref": "indicator--439bd1c2-f139-47aa-88f5-68ffe29f7a3a", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c74dd06-811d-4e01-85d7-a1016474f453", "sighting_of_ref": "indicator--dae1cd5a-dfce-4e10-834d-5f249af438b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0829d590-9265-48b7-8199-e69851f5708b", "sighting_of_ref": "indicator--09e8320a-f036-4621-9dd2-5795fe5c3173", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ae9f23-7b3f-46ab-89bb-9fa9fa6da078", "sighting_of_ref": "indicator--0485b2b7-59b7-42ca-8407-a9fbb046f97c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cc4cdc-c79d-4214-97cd-0150c609ee01", "sighting_of_ref": "indicator--b430f41d-aa9b-480f-8025-74ca14d6a433", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246157e8-c7b8-4fc2-bac2-97db762a8f63", "sighting_of_ref": "indicator--b430f41d-aa9b-480f-8025-74ca14d6a433", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c6d0f4-6ca5-457a-8c12-1c2f8ecc555b", "sighting_of_ref": "indicator--6bb6b827-b8f9-4308-bfaf-e36a192b00ea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbea1a0f-070d-4816-b4d7-c0c3c1bf8fcb", "sighting_of_ref": "indicator--6bb6b827-b8f9-4308-bfaf-e36a192b00ea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0ac243-cfbd-4043-b9c7-a6e4da2521af", "sighting_of_ref": "indicator--3135b45e-b7f1-4f98-ae2d-3a48f2c0dd31", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1d4e51-5b99-42bd-9556-01e2fb80d595", "sighting_of_ref": "indicator--af08479a-596d-4af8-98b5-4b992f85404c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1ee2cc-a184-4e93-9470-f6a3874cd395", "sighting_of_ref": "indicator--ff6a8175-b811-4e5d-9233-ea5e93179bc7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b62b4e-4a3c-4763-9b5a-209beeb53fd2", "sighting_of_ref": "indicator--ff6a8175-b811-4e5d-9233-ea5e93179bc7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ba5931-43f4-4a75-9634-266193575f84", "sighting_of_ref": "indicator--336b2647-97ed-4e0c-83c2-481116f04ff5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc1de36-dfac-4e82-949b-a3e8a3dc0139", "sighting_of_ref": "indicator--06a6a08c-6463-4c19-9405-1bda81b97f13", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab6fad0-3153-4b32-ae5b-0d7312be5c61", "sighting_of_ref": "indicator--ab7c8795-2597-49d2-868f-fb9f23df8f1c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1820a956-bbe2-47e9-a863-69d8fa517c37", "sighting_of_ref": "indicator--daf15d7b-52ef-4905-bb08-4774e355e4a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dafa66-7a61-4b25-9603-ae263e67e2a7", "sighting_of_ref": "indicator--c16da5f7-16c4-4806-a321-d95f086e1510", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b989991d-7ed1-49cf-9533-ce0b083ac5bc", "sighting_of_ref": "indicator--f9996384-cfb2-4bad-95c5-c61819899d4a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4424e0-c007-492c-a798-2b3d7a8a5477", "sighting_of_ref": "indicator--f9996384-cfb2-4bad-95c5-c61819899d4a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7a6fd1-6aeb-40b1-a789-4b1d8a804d2c", "sighting_of_ref": "indicator--f2ae0481-91a9-4df9-b66f-9defb283cd75", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a8d1df-a04e-4910-96f4-bc5652e11165", "sighting_of_ref": "indicator--68fd7142-184d-4eb6-9cc5-15a5ec10d7b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00581ccf-6ae3-4f2b-92ab-47b160e726c9", "sighting_of_ref": "indicator--63f6fa3f-8e2d-41b3-b647-799f8dbcd7f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0423d4-1bd0-4be4-b4d5-dfa51280708f", "sighting_of_ref": "indicator--61f855f7-38c6-4f67-8460-02b20b4ef040", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a001ad74-1aec-4e3c-8274-6158c74bb830", "sighting_of_ref": "indicator--748465ca-9ed4-447a-945b-9464881cd7c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a896bf4-ab19-44f0-ba0c-0a9e4f164e39", "sighting_of_ref": "indicator--b59a93cf-092f-4385-b0ce-418acc0fc9e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef322ac0-3bd9-48aa-8e4a-4235a1d11c5c", "sighting_of_ref": "indicator--cadffeb5-617f-4ac4-8ce5-7e7ed5a969b2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e071b1-be52-44c9-8908-2487c929970a", "sighting_of_ref": "indicator--e2c3b32d-811e-4b8c-aabc-0e2bc1439d61", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e987de8b-4723-4ebe-b742-7b0298159d94", "sighting_of_ref": "indicator--86c4c74d-98af-40dd-87b7-a32ec7a601cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3c6562-89f3-4974-a861-688f29a1ea03", "sighting_of_ref": "indicator--c4025c37-d37a-4de2-aa98-5f0f7b63e852", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db38e14-b05b-4137-bf24-9528c886cc4c", "sighting_of_ref": "indicator--5ed2e913-cafb-449b-b1cb-b8291dc9c39e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93541fc2-7c4c-4a8a-9afd-2bbab0e5bfad", "sighting_of_ref": "indicator--acc7a917-46f2-4d1d-968e-a3102feb0930", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef3b767-5c71-4832-b742-e86b630ef1fc", "sighting_of_ref": "indicator--31fc26a7-5428-486c-8756-3d8f7822cf3d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b21ba97-c7e9-4f2d-931e-4f5217415a25", "sighting_of_ref": "indicator--5fa0c736-9c7b-4ac1-8bdc-d55bd5225021", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7df632c-b85b-47a2-95b9-42dbc1df6a52", "sighting_of_ref": "indicator--5fa0c736-9c7b-4ac1-8bdc-d55bd5225021", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9cac1f-4ae0-4caa-9b71-c241f1b76105", "sighting_of_ref": "indicator--3737d8a9-27a4-4646-836d-5fd436d48671", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf42c21d-e5c9-4eac-b7b5-1388e5f75565", "sighting_of_ref": "indicator--4ee7f66c-7059-4817-bbe1-0a1346a7be70", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e960afc1-fd25-408c-9db2-53fd6955dea5", "sighting_of_ref": "indicator--afb56758-2704-481b-96f6-5500e4b235cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9769e76a-b447-44ff-aa4e-db7adf5e969e", "sighting_of_ref": "indicator--27a883c4-2058-442b-910f-76981a2eb9de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d00e7ac-aca0-4cba-ac63-dd6e39a16223", "sighting_of_ref": "indicator--c6b7a1bd-f2ed-47c9-ae4d-7cd462ad80dc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262ec251-061f-448c-baf4-f1d738d1c7d2", "sighting_of_ref": "indicator--a2332e56-2da0-4ac5-a83f-348b87490b14", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be62213d-dd58-4c5b-ae10-696c3eefedcf", "sighting_of_ref": "indicator--bb0a133b-9cb4-4fff-95e4-5f12d1b060e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d85c382-c635-46a8-9bf2-58371c1a431b", "sighting_of_ref": "indicator--fcf4ad0a-ee48-4056-bbf0-fd0e55d29dc1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb03b99-ce59-45ef-b519-ebf3d0f72c18", "sighting_of_ref": "indicator--ce4ed8d2-5e1a-46a0-9f12-5f5ee41c2d67", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1097654-8a98-4433-839a-3f556b481fd5", "sighting_of_ref": "indicator--842c5628-db35-4413-9dda-b74808bec121", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79646b02-f8dd-4667-bc13-493844fe101b", "sighting_of_ref": "indicator--842c5628-db35-4413-9dda-b74808bec121", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c89b3d-edac-4ed4-9517-c943f894dff4", "sighting_of_ref": "indicator--73d99381-c0ef-49e7-9298-97158fcf6be3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec16443a-85e2-49f0-ac54-8b5f06ced280", "sighting_of_ref": "indicator--53fd2c22-6c7e-4a1e-94df-5508b3d43c38", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2ecbb5-9a49-4300-a9f4-b6045a240def", "sighting_of_ref": "indicator--53fd2c22-6c7e-4a1e-94df-5508b3d43c38", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b058af9-bc30-4f2c-ad65-4e42dca65aa6", "sighting_of_ref": "indicator--b017d935-595f-4528-9996-763356134369", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baca6162-c6c3-4ad5-ace5-b1ef6e1cacd1", "sighting_of_ref": "indicator--e53627a9-6d1e-4513-b1ce-9b8ddc46000c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb522bdb-db7b-4856-b1e7-2c96db469f0a", "sighting_of_ref": "indicator--e53627a9-6d1e-4513-b1ce-9b8ddc46000c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6861e43-7a04-40d1-b52c-1c8fe26d9ad4", "sighting_of_ref": "indicator--0f085b2d-513a-4ef2-9179-b0b37665729a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88082bc1-6b16-44e3-b458-1729aca48da3", "sighting_of_ref": "indicator--7e2f12e9-b16c-46b6-acf2-bc598e15d069", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60a5d66-a6c8-4669-8001-821f48371f41", "sighting_of_ref": "indicator--d38d3602-685f-4d51-9deb-cfb54a74737b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433f79e7-315b-4034-b9b2-718d81231e1c", "sighting_of_ref": "indicator--d38d3602-685f-4d51-9deb-cfb54a74737b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d7b95d-2d1a-4047-8e2d-49a1cf23c7c7", "sighting_of_ref": "indicator--d23b6c3f-54c5-4b16-a72e-1bbaa9de9c0a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f50114-4a0d-4262-ad6f-6a929ea31249", "sighting_of_ref": "indicator--d23b6c3f-54c5-4b16-a72e-1bbaa9de9c0a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5356fc0d-3290-4a39-9d44-5aff5866c7c6", "sighting_of_ref": "indicator--19f7514f-2a4f-43aa-8d34-d39de35b5be5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05debc2b-a854-4cb9-9df1-ebfe2cbf23a1", "sighting_of_ref": "indicator--19f7514f-2a4f-43aa-8d34-d39de35b5be5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a336c40c-53fd-4f86-96ac-244eebf92f37", "sighting_of_ref": "indicator--115df1bb-b701-4c85-863e-3e68da9a93c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550834e0-45b1-4f6d-b6aa-f23772674bc8", "sighting_of_ref": "indicator--115df1bb-b701-4c85-863e-3e68da9a93c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098e00e9-cef8-4ded-a84c-e8442b9d0c96", "sighting_of_ref": "indicator--de9810fd-6f87-43c8-96c6-141d9cf3ea79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3ad40b-3594-40d7-bad7-f513de36f6f2", "sighting_of_ref": "indicator--8f188c7f-8be8-4302-b69d-fcc379011b33", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba32df9a-21a2-4b4e-8637-779fc4c3c5b7", "sighting_of_ref": "indicator--4ecdad6f-9d44-4cc0-81f4-669501a34c07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe37170-3de3-4eda-b9c4-444aa2944daf", "sighting_of_ref": "indicator--4ecdad6f-9d44-4cc0-81f4-669501a34c07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e644be62-328e-4849-9367-82e1883394d9", "sighting_of_ref": "indicator--a25face4-b7aa-4692-abd0-b1f12911b789", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8a9762-f280-4d35-9f05-7112b5121de7", "sighting_of_ref": "indicator--a25face4-b7aa-4692-abd0-b1f12911b789", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c29adb9-c628-4fc3-8049-1adf4a7100c9", "sighting_of_ref": "indicator--0d39dbcf-3cf8-456a-ae5a-d289070a70da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdb504e-87ed-4110-b696-a28cd1ebb946", "sighting_of_ref": "indicator--0d39dbcf-3cf8-456a-ae5a-d289070a70da", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f80aac-2e63-4b42-9bf0-b4c3d5bddd49", "sighting_of_ref": "indicator--6fa7a06d-20aa-45b9-8289-d59cd856890d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4276d2e7-bfb5-4e47-b7b9-a6c669b1caba", "sighting_of_ref": "indicator--6fa7a06d-20aa-45b9-8289-d59cd856890d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82b8d35-6cd0-49de-bc3c-dc2042191b0d", "sighting_of_ref": "indicator--3e26f2e0-07b6-403d-8212-886bccf7f3da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83c4e8c-1b5c-4c19-b107-a444bb1f4ff1", "sighting_of_ref": "indicator--3e26f2e0-07b6-403d-8212-886bccf7f3da", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e269c470-dbb6-471b-9ae9-bf4714261031", "sighting_of_ref": "indicator--f1d99701-1969-4ab0-af54-27d0c4b495ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a02b61-5e82-4200-8916-75e6650adb57", "sighting_of_ref": "indicator--f1d99701-1969-4ab0-af54-27d0c4b495ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbe3d1b-c02f-40d1-8a50-5604226f920c", "sighting_of_ref": "indicator--cd2cd9c8-1174-479d-bf23-c47c37a9be76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a250b8b-87f9-44b9-a3fa-0414b2b08ef2", "sighting_of_ref": "indicator--725b415f-83b8-410d-9ddc-826411a7c355", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2faa4b14-7105-40aa-a818-178cb5647ac1", "sighting_of_ref": "indicator--70f79f28-1833-4a4e-bd1b-f536a295cee3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f1f21f-d108-4bf5-8f09-808b0ce11b07", "sighting_of_ref": "indicator--16000d1b-e7d2-4634-9968-fc8f8ea546b2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3684fb-6576-418b-8391-71d07f6f8ef0", "sighting_of_ref": "indicator--81265b1a-4c1a-43f3-bbcf-cfd0861febeb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1baf0be1-09fa-420e-a15e-f70f4b750c17", "sighting_of_ref": "indicator--7bcf0a51-250e-4610-95b0-89586faaccf9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0deeea1-408e-4922-bbad-8d2fcf36ebc1", "sighting_of_ref": "indicator--73a8cb29-fcd9-4231-b849-534d542fbcaa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86df2d92-5f28-467c-a975-2d2c84530da3", "sighting_of_ref": "indicator--202f42c9-cf45-47f3-88ba-e5d7d02370fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4bd3c7-cf19-4ee2-9042-e6a7b2f7c4d6", "sighting_of_ref": "indicator--202edc15-f8a0-4136-9acd-e9eade275cf8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dee70c-9e5e-48e3-8bd7-453920adccdd", "sighting_of_ref": "indicator--818f8a43-635d-4ef7-a194-6db889ff1ef8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5ee265-efaf-47bf-b0e8-2927f00ebe05", "sighting_of_ref": "indicator--dd68a367-86aa-4658-aaa7-67313b6adee8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb94e26-c0d6-4140-8436-5ab58fee1026", "sighting_of_ref": "indicator--0f1e483d-9fc0-4f40-8d1b-5bfc206f88ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73b854d-9aaa-4b9a-84a4-02ce27d4f7f1", "sighting_of_ref": "indicator--201999db-7afa-462f-99fe-bbbbf315e512", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca409f1-7b8f-452e-9349-95383781b257", "sighting_of_ref": "indicator--3629b9a9-07f0-4023-89a7-d501c89ae4a7", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fad42e1-a243-4fcd-9a34-2af67a690eed", "sighting_of_ref": "indicator--30bba97d-5464-4b35-98b9-019fd116e6cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036e11d4-3374-48af-b998-5fb98ca7ab7e", "sighting_of_ref": "indicator--00021496-e735-4b15-8966-2eb0ec062d98", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254cf5db-364b-4308-a5bc-9b639d197313", "sighting_of_ref": "indicator--228d78d4-833f-452f-82f4-94970c0424fd", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f657aa-423a-42d1-9a59-4dfbe37a8c86", "sighting_of_ref": "indicator--6530842d-0f97-4eb3-9e25-740a8420c0c7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30d9839-c5d1-4326-b00a-de8508727a11", "sighting_of_ref": "indicator--2aa3e8ce-f00e-4514-8a2a-ccad14c91bc8", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcc7b81-2563-4f1c-8e00-a1cf7b93c6b3", "sighting_of_ref": "indicator--bf20a044-a3dd-474f-857b-77320abf6c2f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b752a5e-dd1d-40c3-8a80-9a71d955f9a3", "sighting_of_ref": "indicator--2a2b9a93-95fb-4b38-98af-4b1440d1d35e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad88691-68a5-415b-b6c8-317ead6f5a8a", "sighting_of_ref": "indicator--b3d72325-4827-4481-92dc-b391ffa70180", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529bd1fb-6b32-41c5-9a15-9ef6ed6b7640", "sighting_of_ref": "indicator--918a402b-caf7-43b9-b399-47ba4de7f7ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4454c5c1-d95d-45c1-a6f5-a980908f17c8", "sighting_of_ref": "indicator--354fdc1c-7f81-4df3-9e75-5e21eefd3f3a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5c0402-836f-4a70-899e-b61394066521", "sighting_of_ref": "indicator--39849b51-8abc-4614-81f6-4d9ec1e6dddb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2055d5f-3c81-4c74-b3c5-026abe653654", "sighting_of_ref": "indicator--2071576f-e15d-4699-8eb0-0ac78c9b4a61", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98732b9-42c1-4fc3-b177-8a8fb06f0da4", "sighting_of_ref": "indicator--a1db1e37-58a3-4eda-9e36-92642461f5ea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f33a39-2bab-4066-9adc-05d2a6d4199d", "sighting_of_ref": "indicator--f8d31cb9-3f2b-4690-8b4a-48f93d5f6ed2", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7fe700-7a91-49e2-a6bf-9041c8ee29f3", "sighting_of_ref": "indicator--b7de3544-0fc2-4d3e-821f-88757980dc3e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5733c4-e22a-48d9-bbd0-38b6ff9dbacf", "sighting_of_ref": "indicator--5115514d-9477-4c7e-a221-00ba91866457", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d03285-3a9c-4854-8861-91129e17fd24", "sighting_of_ref": "indicator--e944340b-5938-4e7d-a8d6-58dc59f3da88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab79523e-16b7-4db8-ab77-4ad8db4e2865", "sighting_of_ref": "indicator--794455ee-5c56-4330-b5b2-52a274a93fc9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02c7e61-da4d-45a3-a24f-249f69502290", "sighting_of_ref": "indicator--be94b1d5-dfa5-418e-ad90-0c42816f28e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5aaeac7-8b95-4ae9-940d-bb8835f5d86c", "sighting_of_ref": "indicator--20700ccb-c0c1-4e52-8aa7-94f1ddb8dbbf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee2178e-689e-4bf7-8a7d-922de57a8285", "sighting_of_ref": "indicator--803a2b8b-1505-4558-974d-2f74a8ac274a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b155a531-936e-4251-b299-8b6c7b7e41b3", "sighting_of_ref": "indicator--78616f3b-0365-4910-9d39-52d1f8cd7713", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5de708-4241-44ff-b4ab-7b115b85d004", "sighting_of_ref": "indicator--a3a53084-c51b-4c67-a0cf-b194ab8add10", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960e8ba8-452b-4ca4-bf9b-975bb00ff3c2", "sighting_of_ref": "indicator--a3a53084-c51b-4c67-a0cf-b194ab8add10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c42fcdd-564b-4c25-b662-7b206eb6f12a", "sighting_of_ref": "indicator--4df7c31a-e4b7-4ce8-90d5-ee859984fe77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c9e9dd-7c3e-4f41-a8b1-1fa890c3f31a", "sighting_of_ref": "indicator--794967c9-c480-4723-85ca-b3f374df13de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ff9a14-d7c2-4a30-8474-0325e549d062", "sighting_of_ref": "indicator--979273e5-e25b-4f7e-b9ac-61a762af2fe9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cb1085-c941-43b4-8173-bc0efa7786b0", "sighting_of_ref": "indicator--c19515dd-670f-4416-8f05-e1c463c38d32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32dfbcf1-fa2f-4150-bf6c-175b6f105163", "sighting_of_ref": "indicator--9632cecf-219b-4bc1-beb3-6771e39956e1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bced84a-2426-4b2c-b5e0-a392b64a8267", "sighting_of_ref": "indicator--9632cecf-219b-4bc1-beb3-6771e39956e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096b4e04-eced-4ade-97a7-2f9aa771daaf", "sighting_of_ref": "indicator--ff41726f-fe60-4dbb-a7b3-73226f7e7c4e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8a2102-fbdd-45d4-8571-0f788c03e8a4", "sighting_of_ref": "indicator--6d859508-6a45-41d5-917c-fb1ddf7c9790", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ce5e61-2210-4ec9-83b7-440f02972747", "sighting_of_ref": "indicator--29019a08-ddf3-4685-beb4-685579c44a1c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a77f587-e0b0-4285-9d74-60d71560767a", "sighting_of_ref": "indicator--29019a08-ddf3-4685-beb4-685579c44a1c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6c3444-66eb-425a-9c77-c7a0177c1b70", "sighting_of_ref": "indicator--ad7d35de-dc18-48d7-ab7a-651dab5f94c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4df6c67-c031-423f-9dce-6efd1a11a921", "sighting_of_ref": "indicator--ad7d35de-dc18-48d7-ab7a-651dab5f94c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933b4a37-7f94-4803-9960-c9993337e100", "sighting_of_ref": "indicator--af361cb6-e292-4744-bccb-385b2a8a7d21", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05755d30-ba45-413d-a77b-2afe787d8e11", "sighting_of_ref": "indicator--2e3fef06-993f-44a7-a2dc-7c2c94539841", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2025b03e-15d9-42ed-83e2-cd25c8fea3f8", "sighting_of_ref": "indicator--2e3fef06-993f-44a7-a2dc-7c2c94539841", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8e7a1d-9c36-461a-b2ed-47f7ead3b7dd", "sighting_of_ref": "indicator--32c7e2be-3999-4c2b-b08b-e8ed56f48f25", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed1f1ff-33a2-4f52-a92f-08d0bd92568b", "sighting_of_ref": "indicator--b5ce8d7b-f5b3-47ee-b50c-b59327485ec9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c8e4f2-6a7b-45c0-9749-282b96737ed9", "sighting_of_ref": "indicator--db2d4d57-1a04-4037-ba71-658eba850ef9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa79150f-07f9-47e0-b8bc-7bbcb0f9d1bd", "sighting_of_ref": "indicator--4504b502-7542-4b93-bc9e-c8a3461b8dc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6905bf2b-9da1-45a8-98f0-d670bb74e8d5", "sighting_of_ref": "indicator--adc3acaf-bdc9-47b3-b0d4-473b4ecb69db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90708e2a-42a7-478a-b079-e5e42909a847", "sighting_of_ref": "indicator--adc3acaf-bdc9-47b3-b0d4-473b4ecb69db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aeade9e-f71f-40f0-9602-2925cee630d6", "sighting_of_ref": "indicator--07ed24c3-c55d-446e-918c-c444aff1aceb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163e9558-da1c-4db3-8de2-5c9bbb8631f2", "sighting_of_ref": "indicator--7a0780d9-398b-44e7-befa-a19f91ded81a", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac82f261-a047-42dc-8f63-b29d5a08d365", "sighting_of_ref": "indicator--6cb1b0c1-88d0-4ab8-915f-be4b7d5381eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfeba95-04fa-44cd-9e95-219fc604c34f", "sighting_of_ref": "indicator--20d5ba64-c3ff-4585-8dcf-4e543305f4fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe10e34c-c644-4b2e-983c-a1705e112bc2", "sighting_of_ref": "indicator--4980302d-3269-4d12-bfbb-4e1a5ddf41ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891aa0a8-da73-488c-ba57-f74dd5c6fc01", "sighting_of_ref": "indicator--ead4befc-fb32-48f4-bd43-6cd0ecaa1524", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1384eddc-5a6a-4473-8d07-85824030b668", "sighting_of_ref": "indicator--4a60e6fe-2ae3-49bb-829f-0ef53625ef77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed78bf58-bff5-4d53-b039-c6f7ed795432", "sighting_of_ref": "indicator--733b7017-dbc5-4a89-96b0-b85385ceadb2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40161edd-4138-4161-9e30-e7a0d82ce2d6", "sighting_of_ref": "indicator--733b7017-dbc5-4a89-96b0-b85385ceadb2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1959b63-54a6-4927-8bf9-3869ed500ac8", "sighting_of_ref": "indicator--1d9ff7d6-4a6c-4224-a507-ba807edff454", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c88e34b-5bd8-4b53-81ae-bb60591aa334", "sighting_of_ref": "indicator--b8606f7c-775e-4573-8759-b8ef0c2c13da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d290a1f5-29fc-46cb-b60c-53792ac36ef5", "sighting_of_ref": "indicator--6707eeb2-14f8-4f48-b31d-4e786c77cd6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fb5683-06c6-46db-9798-717dd7b5d7e2", "sighting_of_ref": "indicator--6707eeb2-14f8-4f48-b31d-4e786c77cd6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e64ffa-a88d-4a5b-b553-eb3346308bbb", "sighting_of_ref": "indicator--7d0ebe95-08a1-496c-9c39-15016757615b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221a6b8a-f160-4b55-bc20-576d53080b4c", "sighting_of_ref": "indicator--7d0ebe95-08a1-496c-9c39-15016757615b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cccfa3-d357-46e1-8cb5-7b11bbc3a1e4", "sighting_of_ref": "indicator--2411e62a-f5a2-4eb0-ba33-82bc9c5c10e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f2de18-3d43-4d06-a8e4-5c5c9e86491b", "sighting_of_ref": "indicator--2411e62a-f5a2-4eb0-ba33-82bc9c5c10e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d591968-25ef-4d52-a556-69ae3d1c308b", "sighting_of_ref": "indicator--b07e2e12-c3c4-42c7-af6c-7c77dc949494", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d1d82c-f256-4cd5-8267-01e41cdbd4d5", "sighting_of_ref": "indicator--c893a61c-d035-4a31-a45a-b9983edeb5c2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae95ede1-89b8-42a9-9a92-6d973352419d", "sighting_of_ref": "indicator--c893a61c-d035-4a31-a45a-b9983edeb5c2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a179a701-7586-484a-97db-47e4285aa109", "sighting_of_ref": "indicator--1233cced-8af6-4b2a-a692-43ae8e0605b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27ac586-2f05-4561-9446-113103658db4", "sighting_of_ref": "indicator--1233cced-8af6-4b2a-a692-43ae8e0605b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da60e08-49a7-4baf-a77c-0dc00e12aa7a", "sighting_of_ref": "indicator--5c83e4fc-ddfd-4904-81f1-a192368d46b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6464b6-8c01-418d-882b-42b7933f4f0f", "sighting_of_ref": "indicator--5c83e4fc-ddfd-4904-81f1-a192368d46b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76da4672-7241-43f9-9c27-1f5c0bb4e399", "sighting_of_ref": "indicator--b525dc1e-9d6b-4599-a3ff-d78dee4bdda1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8444708a-1d9f-485a-bc4f-7cb9db6a43a3", "sighting_of_ref": "indicator--b525dc1e-9d6b-4599-a3ff-d78dee4bdda1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31de07d5-80fd-4e62-b7a4-653fbecc302d", "sighting_of_ref": "indicator--88b3454c-735b-4f48-b1c9-a271c8eb09c3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c63bd9e-d8c5-4545-b1b4-3f9821d93abc", "sighting_of_ref": "indicator--88b3454c-735b-4f48-b1c9-a271c8eb09c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a07b68-fdad-4309-b426-c1c0bad9b0aa", "sighting_of_ref": "indicator--ec0a2fc2-ca73-46ad-91ce-b1cf49fd1b65", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c6d7a4-db5f-4b52-b0fd-6316405a8244", "sighting_of_ref": "indicator--ec0a2fc2-ca73-46ad-91ce-b1cf49fd1b65", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762a77d4-359b-408b-b02d-2680cc028cec", "sighting_of_ref": "indicator--5f6ff0db-0c81-4ae7-b346-a91eb6a3b819", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac6ee34-eb6b-40a9-b35d-2bb491d10544", "sighting_of_ref": "indicator--6ad673e2-89fd-4859-bcd5-d61261b8ddc9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1b505d-d0bf-484e-826a-7316bcf1e6b9", "sighting_of_ref": "indicator--6ad673e2-89fd-4859-bcd5-d61261b8ddc9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0df2e7-f160-4f49-8348-d53b063741fe", "sighting_of_ref": "indicator--2b75c547-cd4b-4e5d-a7d6-8341ed1cf9b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66175ee-1c4c-4735-b569-a7d9a56ccc83", "sighting_of_ref": "indicator--2b75c547-cd4b-4e5d-a7d6-8341ed1cf9b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285e2b54-fabb-410e-bcfe-d3a8286fa7af", "sighting_of_ref": "indicator--7cfe6f81-e78a-4e52-88fb-8efc7f6dc193", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda7f09b-8a1f-465f-9851-e2f3a993a0e9", "sighting_of_ref": "indicator--7cfe6f81-e78a-4e52-88fb-8efc7f6dc193", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87adcec1-8b85-4c5b-87d2-7bc1370297fa", "sighting_of_ref": "indicator--2c133599-2153-4ad3-831b-3b7ed79e809d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3eb4ea8-3826-4b6b-9032-9b7bce48167f", "sighting_of_ref": "indicator--2c133599-2153-4ad3-831b-3b7ed79e809d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab46809-8f41-4bbd-8fb3-276b16021f9c", "sighting_of_ref": "indicator--5c11c382-621e-460d-a873-c4c2cf4c42ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a4c32c-2f9b-4c3d-8bed-7b5932baa93c", "sighting_of_ref": "indicator--5c11c382-621e-460d-a873-c4c2cf4c42ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0213168-13b9-4491-98f8-dcae4b7e6bf2", "sighting_of_ref": "indicator--8baa2bf2-4c1f-4463-a9fe-e8fb0492cd09", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf82ee07-06bb-4b82-8876-269d217a87bc", "sighting_of_ref": "indicator--8baa2bf2-4c1f-4463-a9fe-e8fb0492cd09", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e9f57c-093b-48f6-9cd9-f2aa67d46890", "sighting_of_ref": "indicator--f4ea82fc-f1cf-445c-a47b-197d79129734", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9835c0da-27f0-4294-a5fa-c0e418826bc2", "sighting_of_ref": "indicator--3b179ada-9767-42b6-a3db-e6d685587f10", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658561db-ddae-462e-869c-115af2aea5c6", "sighting_of_ref": "indicator--3b179ada-9767-42b6-a3db-e6d685587f10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc53e7bd-776f-4cc5-9f3f-f5621e9a7378", "sighting_of_ref": "indicator--639b0fce-2b67-4924-b864-aed77a716acc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40d3ffc-9c2e-4333-bde2-0990cabcf286", "sighting_of_ref": "indicator--7f8d5bed-9a7e-49c4-9a97-89af9be9f075", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fa5136-62f7-4998-9ac1-9b8a94c1f90e", "sighting_of_ref": "indicator--aee1f6cf-dec6-4a2a-b17c-e21e0b1a8fb2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee360c08-bee4-4dd8-96de-02e4e78fdcd8", "sighting_of_ref": "indicator--fa21b220-9e01-4eec-ad1b-4ac422ea35f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c14065-b202-4891-b657-30000884e7da", "sighting_of_ref": "indicator--9baacdf0-9f19-49aa-a4c2-a5523f6ef566", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdd5d0b-89ec-4c97-a52f-f1c36898ee90", "sighting_of_ref": "indicator--6ecd4d21-18af-43a2-a5ee-7a9eac88e4ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3205f6-9d4c-410f-8db9-df063cd3f15a", "sighting_of_ref": "indicator--4997eb88-d7c8-4e67-aa0e-7651c09091d9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59258825-a37b-4ec5-940b-d9e1c7e34cc3", "sighting_of_ref": "indicator--26b8b7d5-0ab3-4e95-821e-9009138cd845", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c91ab8a-867c-42c6-9e8d-b651f209bfab", "sighting_of_ref": "indicator--c7b5bdf8-924e-4277-83c1-e0583e7468d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3840347b-13f6-4258-afa4-3d3d1f7f9247", "sighting_of_ref": "indicator--9ec2134d-d9f1-4079-9dc3-c3449da8f0a7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bfc224-17bf-4036-abe6-5b9ad7bdda5d", "sighting_of_ref": "indicator--17510939-9c73-4582-b404-e76191d79ecf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fa6f61-d042-4a21-81a1-c3bf9a6b7786", "sighting_of_ref": "indicator--d7612d7d-101d-4381-be70-161f0a5dfaaf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70935b9-6bd8-40bc-8ee1-299c3d69765b", "sighting_of_ref": "indicator--5845b3d0-2d65-481e-93a1-c1e9788c5b63", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4d4ea5-ac31-4d94-a9fd-435513581196", "sighting_of_ref": "indicator--e8a3897f-b311-4641-8570-7d0586a4c681", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93833e3-f7b0-42ca-a03f-d54cb802df1a", "sighting_of_ref": "indicator--c44273f4-2b5c-4ee1-9dad-e53a010fe5e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa085dbc-7de6-4872-88ed-584528524717", "sighting_of_ref": "indicator--1383758a-7c53-43f8-94ad-ae1d201168d7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d5cb08-ea91-4bdd-a32f-5789ec914b9e", "sighting_of_ref": "indicator--d89e7100-3572-44c4-8832-af41fafac548", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb8758a-4fa5-4d72-95f0-8843febc6142", "sighting_of_ref": "indicator--a22607c0-9416-4219-ac02-07cbb2023073", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01315c3b-480a-4b9f-aa9d-396214cf6bf5", "sighting_of_ref": "indicator--9f69cdd6-fcab-411b-bcef-30a6a0896da8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1d6928-0e57-4cad-b082-5a878fed3929", "sighting_of_ref": "indicator--478e8163-9a54-4772-885d-e24b8c87c393", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72004715-27ed-44cb-ab37-0a2463b2e19f", "sighting_of_ref": "indicator--e6f04ae7-acf9-44fe-b56d-49d23d35abf8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f453c8b-e83e-45fe-974d-517d9cd22085", "sighting_of_ref": "indicator--3ce3e322-5efd-42a6-a337-66b57a631ee2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c783f9f3-fc75-4840-88cf-5d159a6b5eca", "sighting_of_ref": "indicator--6734b157-febd-4ec1-99cc-bdb2520f8717", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d544a4-828a-4428-8199-a090cf095fcb", "sighting_of_ref": "indicator--7647c75a-dcb0-42f8-9f23-e9ddedf7cef4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596f03d4-a5bf-47e1-b5e7-32a30911d9f0", "sighting_of_ref": "indicator--f99ddbee-cc56-4e55-a931-c3b528ae22f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020eb9fa-74ac-4b84-b525-38bdfc2162cd", "sighting_of_ref": "indicator--6fc58947-aa5d-4bfc-ab38-e216f04749d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f429faed-81b0-4a67-bd3f-25c9d9ce6ad6", "sighting_of_ref": "indicator--fc5a460c-c943-478e-a323-5161f31144ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805dbbf9-4d7a-4ba1-aef5-2aee21ef008f", "sighting_of_ref": "indicator--ec802f32-3715-46f7-bf3c-dbcf7c16cfde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a68dc74-5467-4445-9cf6-1faad8cf7a11", "sighting_of_ref": "indicator--61edbf22-5734-4a34-8d00-7ba0d2c005cf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143d5421-8d68-4a41-bc26-b89e2235ee8b", "sighting_of_ref": "indicator--abb43f3d-abfa-4cce-a97a-efaeda6b7c2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaee37d-4478-4e2d-8101-677a10f3b23a", "sighting_of_ref": "indicator--f4445b75-b727-4bef-964a-96e9db51a5c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8e0a3e-f5a5-4e62-9b69-47e315c1a53c", "sighting_of_ref": "indicator--d7bf59fb-4c05-4d76-b83f-9853bd0319bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47eb5b15-dbe8-4e7a-b226-65ac9fe33595", "sighting_of_ref": "indicator--4ec0cf2d-792b-464f-8b9b-05f55135a7b4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae16a8d-fb3f-4c0d-a179-4efa91c3570e", "sighting_of_ref": "indicator--d8022ea5-0769-4304-a6cd-45a4b6f6146f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a5312-79fa-4020-af45-ac90fc0d45c1", "sighting_of_ref": "indicator--32a467bf-53e1-419a-9f4b-b2d69ffbc288", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87984531-906e-45e3-afea-a338cd0d5c53", "sighting_of_ref": "indicator--3533354e-f337-4e33-9581-de7c757c38e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f74524-ae62-4875-9650-b6f5a2e2440d", "sighting_of_ref": "indicator--0e5f95ef-3915-43d1-95e9-5213d7f2d6e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361e02b4-1125-494a-bba3-c791c2c73c79", "sighting_of_ref": "indicator--bf794e1b-2867-480a-936b-231f5f07e193", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2914e653-dc81-4024-8a51-a11e7dcac59d", "sighting_of_ref": "indicator--f5f385c4-22d2-4ba3-8aee-7163e1b8dc39", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c307c5-9f9d-44c2-8d19-138f551e7a3f", "sighting_of_ref": "indicator--a91b9c1c-78f7-43b9-9606-75e285a6281f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75d27bb-d2f2-4de7-890f-253ac9937c35", "sighting_of_ref": "indicator--08ecd0ad-3c2a-4c7f-9541-f48532139eb7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e077b76d-38ae-438d-b1f9-d3fd8dd2c436", "sighting_of_ref": "indicator--fd360627-e9ee-4ba3-bf84-e8f95fbba480", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3511fb25-08af-4b72-8f7b-806385145ff6", "sighting_of_ref": "indicator--dc8e9bb6-928b-437d-9729-acb3ebdd5bf2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c36690-c267-41e7-8bea-47a5152651d5", "sighting_of_ref": "indicator--4c77651e-2a97-4988-8f04-c0a37d2937af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c244d457-d6dd-4f42-8c4f-29ec06c93119", "sighting_of_ref": "indicator--b730be28-5b50-4eae-a02a-1764bcf4f856", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580e5f7c-00bc-4a80-81ae-85cf3eba9a40", "sighting_of_ref": "indicator--d1d70892-c509-4d2c-b20c-a67c6cc81e2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a032b5-32d5-4741-973f-b7435ff49190", "sighting_of_ref": "indicator--1ddfb46f-5db1-44d9-9c7a-6d09ed3ea7ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2660b44b-2712-4cef-bf31-c6af543b0284", "sighting_of_ref": "indicator--4dac4c8d-4c5a-4726-a128-a69ad3f43a59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8327c05b-2e90-4598-837b-b4c3bd9e6803", "sighting_of_ref": "indicator--4dac4c8d-4c5a-4726-a128-a69ad3f43a59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bcf463-5971-4a78-8b2e-0f0b9fb28fbe", "sighting_of_ref": "indicator--5dad64eb-9d71-48cd-8e5a-1e029817387e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3056c5e8-95ee-4af0-8f38-38e39b0e2a59", "sighting_of_ref": "indicator--8b999b0f-34b7-4a67-a586-6d5528060c81", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4429995-ef73-4748-b521-c5c568ac35ec", "sighting_of_ref": "indicator--779358e8-a9d6-46b9-bb29-81d2d39d449c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ea0822-129e-4b45-81dc-00236a83bc33", "sighting_of_ref": "indicator--8f8f2720-4b24-481a-9a20-60cbed7329a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7830a69a-e395-4d2f-8ffc-b1101d4fbb09", "sighting_of_ref": "indicator--be3d9c26-ca0e-485c-bc43-81c21828bd6f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785ed45b-f988-4f20-b72d-e3d98579b17b", "sighting_of_ref": "indicator--61dab720-df18-4a4c-a8a5-179ea13c015a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf67161f-95b8-4510-bf11-c4bdf7336522", "sighting_of_ref": "indicator--7c1015d0-69a9-4dd9-a5ed-924948687968", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bc7654-8d7b-42e4-b91e-ea2f5aecceeb", "sighting_of_ref": "indicator--a76162d6-0fa7-4475-869a-1e6e8e029b05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210231e3-fd01-48e5-af55-b00c52ec5de8", "sighting_of_ref": "indicator--aa80bc6f-d152-4856-b087-12727de51a79", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd96d8cb-cfb4-482f-8220-12600276ef1b", "sighting_of_ref": "indicator--25560bdd-c212-4f78-846d-ad6fc17b0836", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6934c527-c6ba-4016-a901-25f232ba9a99", "sighting_of_ref": "indicator--14bedfb0-6cfe-4260-8076-f8b788041d6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8721ebbc-3d78-4c00-9941-aee21fd9846d", "sighting_of_ref": "indicator--85548efd-0e25-4931-93f4-5a3070c71f03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523a8ca3-a3c1-4a61-b393-bad3de90f301", "sighting_of_ref": "indicator--062017d1-c29c-4439-a60b-e7b876e8d4dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d1f801-dd02-4349-9da9-dad5a51e9fa5", "sighting_of_ref": "indicator--a11a968c-13f9-4fea-b47c-fe034a790bf1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4415ab3a-6b3d-4d5a-8bd8-3311bc8f6865", "sighting_of_ref": "indicator--52aeb615-f025-4879-ad30-7d4d14bfa583", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10710a31-559e-447f-a126-a9066294e7ef", "sighting_of_ref": "indicator--6ed60956-bc5b-468d-bff3-ee21265d4c1e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090bc4ae-8c74-4561-bec3-335b347f007f", "sighting_of_ref": "indicator--9d41037d-6875-44f4-afb8-c65b0d04bbf7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d52558-6f1c-4ba2-b0cd-69a278f6bf9c", "sighting_of_ref": "indicator--e0fb0958-0865-48e7-b0c2-ce87f673a671", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004da45d-66cd-441c-8791-2fdfd0161125", "sighting_of_ref": "indicator--6d82836c-a37b-4adc-9d69-663a5100e990", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726533e1-6968-46b4-b030-e7c6cf54bd0d", "sighting_of_ref": "indicator--29f18100-4c39-42bf-a5eb-a282b84cbaf8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d36b91-c9f7-4823-a9b5-8bbc3b81fcc9", "sighting_of_ref": "indicator--b7186790-a6ed-4754-8de3-86be812f3858", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c181a39-1baa-4c5f-ae93-9979acab9d11", "sighting_of_ref": "indicator--a401f5ef-bd2b-47e6-b7d2-083088a9f374", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b722a11-02db-4d89-9696-1115cbd76628", "sighting_of_ref": "indicator--927f4332-0b20-49a8-a7c5-f66b1eea4cc4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cdf113-758c-49dd-b670-e5e8c624cf2a", "sighting_of_ref": "indicator--d84f6e97-ea81-4377-a74c-2cec78391492", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb07265-3590-4b1d-a801-cbdc2173e3b2", "sighting_of_ref": "indicator--68761963-0547-4246-8fe8-4623303a05c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcd7837-110c-4d5b-8ace-fb1341ea88e9", "sighting_of_ref": "indicator--8ee361c5-fbbf-4f09-ad6c-716afbeecd9e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d020c2-13a5-442d-a55c-9c5e9530780a", "sighting_of_ref": "indicator--1f47886a-3ddd-4454-bfc1-2c7ebf574202", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e34d34-a409-4903-8db1-b4e953f5dbe1", "sighting_of_ref": "indicator--737d9346-9597-498b-94f8-97d5deb4b0f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e1d385-04b8-41f0-9666-73420a2976b1", "sighting_of_ref": "indicator--737d9346-9597-498b-94f8-97d5deb4b0f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df915a9-ff55-4887-9760-e1c173ecee0d", "sighting_of_ref": "indicator--03d9f593-d243-4c13-b251-c384ac9c6c3e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d7cc33-1113-4ae9-91d4-c485e1b010d3", "sighting_of_ref": "indicator--8ce67cb0-511e-47b8-b5b2-1a15f15542f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd925e2c-942d-4855-8a72-cb1db75ba367", "sighting_of_ref": "indicator--857767fb-9e3e-4f38-957b-557788dd12ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeae8359-79bc-47d4-95d0-da1c95ce2028", "sighting_of_ref": "indicator--857767fb-9e3e-4f38-957b-557788dd12ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81b630e-b0e4-49cf-9341-4fec9996ffdd", "sighting_of_ref": "indicator--2df8d9c9-ed92-4f3f-993d-e168790cbb21", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db81e0c5-d657-4339-9db1-e97dbf732c47", "sighting_of_ref": "indicator--2df8d9c9-ed92-4f3f-993d-e168790cbb21", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4e03c5-4725-43d9-82f7-a08a9bb546b6", "sighting_of_ref": "indicator--4beba2a1-90cf-40cf-bd64-a1e2bacafa7e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785bddbb-4ddb-41c8-8cd0-2ca501db5a50", "sighting_of_ref": "indicator--f2ec853d-b652-4f62-9009-fca907daf838", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c40ec6-fd9c-46e2-966a-5c32453a8e17", "sighting_of_ref": "indicator--f2ec853d-b652-4f62-9009-fca907daf838", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5740eb48-f24e-4549-b4ec-01b9bafe2aee", "sighting_of_ref": "indicator--3dd41282-b1bb-4ba2-bf21-2f909bc790a7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ac65d2-5a78-4f22-9e34-38f399bffb0e", "sighting_of_ref": "indicator--3dd41282-b1bb-4ba2-bf21-2f909bc790a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4be702-7a9f-44a0-9eb4-d3b4186db411", "sighting_of_ref": "indicator--492006c5-2586-4f4c-bfbd-b49e6a2aea8a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68485a9c-6e27-494e-af29-4f90ab36e9bb", "sighting_of_ref": "indicator--492006c5-2586-4f4c-bfbd-b49e6a2aea8a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1956d0-3ef0-4930-a0c7-2130212e8459", "sighting_of_ref": "indicator--873e4615-1bd9-46fc-aead-597c4d221908", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c47f8b-6612-4c14-a31f-2c8d9251779f", "sighting_of_ref": "indicator--343b948f-4ae8-4596-afdf-6276edf16fde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cc1408-3b78-4552-a82d-d5803617ba27", "sighting_of_ref": "indicator--9f47c4bc-8472-4526-9446-b5ea206a18fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbcfda5-af1a-4b35-afbb-786bae1bf451", "sighting_of_ref": "indicator--9f47c4bc-8472-4526-9446-b5ea206a18fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071dee2d-ba50-4955-ae89-09521bdba8fd", "sighting_of_ref": "indicator--29f5215f-a404-4db0-b1d9-746bcfd0ff4f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5669009-2c30-443e-ba3a-4cd2285857dd", "sighting_of_ref": "indicator--29f5215f-a404-4db0-b1d9-746bcfd0ff4f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062596c2-316a-401e-9851-3c3c6c355e11", "sighting_of_ref": "indicator--7337bed8-093d-49c3-916c-5a16af37dbda", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff55396e-e04f-4b70-9d75-40f860eddcfd", "sighting_of_ref": "indicator--7337bed8-093d-49c3-916c-5a16af37dbda", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e79e372-6af4-43fd-8ced-975d3738a661", "sighting_of_ref": "indicator--1d35b382-ac5a-435f-9a6b-98603cfafab6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b69577-c636-420a-8a83-cbbeb5e88b4b", "sighting_of_ref": "indicator--1d35b382-ac5a-435f-9a6b-98603cfafab6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88bc178-fa44-4fe1-a940-61de5c351370", "sighting_of_ref": "indicator--208f9ccc-52ad-4859-9078-f91818838df8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45667bf-358c-420f-8e4b-843f48a594e5", "sighting_of_ref": "indicator--208f9ccc-52ad-4859-9078-f91818838df8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d304fc5f-7d05-4dba-9982-470e41ae4e7e", "sighting_of_ref": "indicator--5bc63f83-c5cb-4bd1-b7e2-7973c7ea8656", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cc2fec-0ef2-44c2-aef7-c625094f46a4", "sighting_of_ref": "indicator--5bc63f83-c5cb-4bd1-b7e2-7973c7ea8656", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61368ce4-8e0d-4c92-b448-db0ac8c203a6", "sighting_of_ref": "indicator--795107f0-ec11-40bf-9b07-fec77e84d803", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8716f72-20ba-4efe-9c25-ff20c744fede", "sighting_of_ref": "indicator--795107f0-ec11-40bf-9b07-fec77e84d803", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282c9785-dc52-4dbd-85d1-003b4e2db519", "sighting_of_ref": "indicator--8d8b214b-8a01-43d5-8549-9e7260923a98", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70bde9e-9260-451e-8b27-d28599caa3ce", "sighting_of_ref": "indicator--8d8b214b-8a01-43d5-8549-9e7260923a98", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ad4668-359c-44f1-8efa-235b31487b5e", "sighting_of_ref": "indicator--648da328-8771-45ef-a4ba-5c18d20d44fd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfcdcb5-bcb1-45e8-af6d-0825e228ca35", "sighting_of_ref": "indicator--a143fe3e-9cab-44c3-9abf-56edb699783c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce4b1ab-026e-4c78-9319-87e063a26f97", "sighting_of_ref": "indicator--efb9a14e-2f6d-4b64-90da-ec3341e25948", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c68e17-aab3-4bfc-ba66-260b367b5270", "sighting_of_ref": "indicator--c9fb34ba-15ec-4773-acec-a475ba52f487", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89102eed-499b-4acc-9ca2-347358c258e5", "sighting_of_ref": "indicator--ef03e8a6-5877-45e7-b48c-453bf86ac974", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8addb0e2-891f-485b-9a82-23ed2c8a2586", "sighting_of_ref": "indicator--ef03e8a6-5877-45e7-b48c-453bf86ac974", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6927af9-4294-44f7-8510-ca7bc94e4ebd", "sighting_of_ref": "indicator--b95dfd69-f8af-46f4-93e7-86aee8f9039d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae92233-8778-419e-9222-886184da250c", "sighting_of_ref": "indicator--02e2579e-0dbd-4d90-b060-9b4f03509a9f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268ec051-4888-491d-8ca9-aa7272274072", "sighting_of_ref": "indicator--ef86802c-bf8c-4870-8ac2-a5403e8d70d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccb4493-1454-4768-a65b-1069d4b4e95a", "sighting_of_ref": "indicator--4bb886b6-7092-4f98-8d88-d98d9ced7827", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503a86b1-7403-47c9-bdb3-a8299a5c9d0e", "sighting_of_ref": "indicator--80a8812f-95f2-4311-8b81-956698c0eb3c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958538d6-bdce-496a-b3b8-3b205fa4ae83", "sighting_of_ref": "indicator--80a8812f-95f2-4311-8b81-956698c0eb3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5027cc0c-ddac-43f6-bfbc-d7c5df8fdd34", "sighting_of_ref": "indicator--f6d0a860-27aa-4ad5-9565-bda22a70b1f7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c1119a-70f4-4116-ba0b-9e0ee2d3bd01", "sighting_of_ref": "indicator--0e0c2a89-0163-47b2-98f3-4108216e3236", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c5c93e-7433-4cd8-b595-78c329ddf9ea", "sighting_of_ref": "indicator--0e0c2a89-0163-47b2-98f3-4108216e3236", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8533f1-6456-4536-a078-04bd357f57a6", "sighting_of_ref": "indicator--e5069ec0-bf1c-4d15-9781-62f82debb95b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b5db53-e870-4dcb-870a-d4615936f77e", "sighting_of_ref": "indicator--249beede-1b77-4c47-a695-651297830f06", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e411e012-9aba-4470-a378-3a91ad9902f2", "sighting_of_ref": "indicator--1b203a8d-b5e0-4ead-999f-812c4df280cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5962ff7e-4c4b-4413-b1fb-fd8896864395", "sighting_of_ref": "indicator--1b203a8d-b5e0-4ead-999f-812c4df280cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6da230-e8b3-46a6-9769-260e5866b242", "sighting_of_ref": "indicator--b736f746-1e5b-4f16-b0ac-71cc7aba493c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef670e8-1f8a-401d-947b-c465cdd23d1d", "sighting_of_ref": "indicator--b736f746-1e5b-4f16-b0ac-71cc7aba493c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1016ac2-f3dd-4b3c-8f6e-48b16cf03e9c", "sighting_of_ref": "indicator--5741278a-bc0d-40a1-8e4a-7f10a4f5cb6a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f61d478-8354-4e54-90da-855c6f46245a", "sighting_of_ref": "indicator--83d000a4-9964-4e8f-801e-44a00925fb54", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed447c74-d85c-4214-92bf-01ffa00e9c98", "sighting_of_ref": "indicator--2016c51e-3e07-48f8-962a-8fbc62578786", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad24f4fe-6e54-44d3-b2bd-e54e4a068bc5", "sighting_of_ref": "indicator--4a62670c-c2f5-42cb-af7c-987fa29982d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c274d19-0288-43f3-b694-87db49f69e0f", "sighting_of_ref": "indicator--07f4f7d0-f4df-4a3d-a3c0-2767f8c1d83f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4ed195-985a-4957-b508-5150d7421fd3", "sighting_of_ref": "indicator--07f4f7d0-f4df-4a3d-a3c0-2767f8c1d83f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b795a50c-20b7-46ec-8242-2bd93ce72209", "sighting_of_ref": "indicator--a4617ac7-7b0a-4c5f-8bd9-11dd6d5d9047", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92be6e4b-484d-4fbb-be19-bee2f0131f36", "sighting_of_ref": "indicator--1e9306b8-a46f-48dc-bf30-d4afe7f49254", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b134fc3-8da6-4e13-9e1e-c61adf41c585", "sighting_of_ref": "indicator--fce2d718-c4dc-40b9-a6e6-9fae232f8095", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08a5371-f918-4640-85e4-790450013ebc", "sighting_of_ref": "indicator--e9c34fe8-4745-4201-805c-b3267e3bdfee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302ad008-6848-428c-a995-fdf41898f155", "sighting_of_ref": "indicator--9f1ec6ad-e024-4b15-8180-e992f3c5f789", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d977fbf3-0997-4587-83cc-3af08f947568", "sighting_of_ref": "indicator--ead8c942-7827-499e-907f-0c43273c0f25", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f9f4ee-de25-4e43-8be0-5b9de18b6f5e", "sighting_of_ref": "indicator--500add69-e009-408c-a3ed-7b5cd44058a2", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873aa211-11f6-4cd0-b7e7-0410c4a5527b", "sighting_of_ref": "indicator--f3af087e-4885-4723-8beb-151d513932e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e88b099-ba85-4630-91eb-8c31c87ff5b4", "sighting_of_ref": "indicator--8db51126-85c1-4552-8b38-95edd9b97537", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23b8c35-29cb-4389-a845-e7bb39564ff2", "sighting_of_ref": "indicator--c3883fff-f454-4c6a-b43c-528d5438eb72", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e085b87-af63-45d2-84d9-6cdb854fb6a9", "sighting_of_ref": "indicator--2ed13730-8b23-416d-b56d-347b182ce7cf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34aedb4-0fed-481c-99a9-17442907e89f", "sighting_of_ref": "indicator--2ed13730-8b23-416d-b56d-347b182ce7cf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e13adf9-5449-494e-a196-a75da7a63716", "sighting_of_ref": "indicator--3cb252ba-1921-4b6a-8114-2dbafbca61cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e206bdee-45c3-4ecf-a6a6-e4e750a9d944", "sighting_of_ref": "indicator--49722fb1-d9c5-4e95-8ef3-19033c8fb815", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5dac9d-1489-4ac8-9a37-9f985bc8ac23", "sighting_of_ref": "indicator--49722fb1-d9c5-4e95-8ef3-19033c8fb815", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2765c480-188c-4cc0-99ba-6bfd0bc07012", "sighting_of_ref": "indicator--8dbcc697-640a-4e47-b390-63c3ceb3e876", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51c3f77-3c95-40ed-ab15-2fda97766d14", "sighting_of_ref": "indicator--8dbcc697-640a-4e47-b390-63c3ceb3e876", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584f1431-0197-4c6c-9a5c-434c03f0e57f", "sighting_of_ref": "indicator--7a198c88-385e-4dec-bccd-294baa06e8e4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22a0662-e907-4830-ada2-766fe4581563", "sighting_of_ref": "indicator--2d926361-790d-4128-ab22-854fd7328249", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380a9c5a-85e2-440a-a82f-32ac8d9bcc4a", "sighting_of_ref": "indicator--9e90e0ee-1850-47ef-9258-f52088338a70", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a91eca-c087-4eab-a8c6-6447575f30ca", "sighting_of_ref": "indicator--9e90e0ee-1850-47ef-9258-f52088338a70", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac23c38f-f115-47d8-ab3c-db2a9fff1a41", "sighting_of_ref": "indicator--63962d8e-89ae-4541-a868-de7dc4638a78", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd819589-2fac-4d9e-879a-f05792f267bf", "sighting_of_ref": "indicator--72775972-6d3a-426e-af2d-106ac8ce5977", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d284ef4f-f73f-40bf-9bb7-dea12fe035ec", "sighting_of_ref": "indicator--5f85e390-f067-4b11-a5bb-a37de50246a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e036190f-a9c7-43c0-ae5f-3a447061408c", "sighting_of_ref": "indicator--75b24a3a-125f-477b-88eb-21a07ff1d86b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb7fd37-260f-4e4a-978f-2dc8fe8d9807", "sighting_of_ref": "indicator--75b24a3a-125f-477b-88eb-21a07ff1d86b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a543f1c8-a501-4e5a-b389-61dfa8f01bd1", "sighting_of_ref": "indicator--8810c44b-77b1-467b-b587-7b5112feacde", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e2ae77-2b00-4a13-8ae3-01788e20e89f", "sighting_of_ref": "indicator--c8368797-45d8-4125-abc2-756735668147", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee01441-0a6a-4f34-b541-e8963f753ba5", "sighting_of_ref": "indicator--82282006-229e-4417-9bcb-0b8a99e3851f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04c1e31-4e09-4223-888e-c65c88e4f4b9", "sighting_of_ref": "indicator--2435cb7a-e068-4f47-a141-e44fa40f9614", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2424cd-cf54-4e83-bc99-96d77235d3a3", "sighting_of_ref": "indicator--2435cb7a-e068-4f47-a141-e44fa40f9614", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341d5848-7e1b-4cc1-a661-ce618b87e212", "sighting_of_ref": "indicator--11eb94f7-38d2-4f61-a4b2-66b2c7bee898", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25b56bc-b447-4321-a7ed-ba903670d1a9", "sighting_of_ref": "indicator--51da98d4-c4cb-4449-88aa-47c6827cf56f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe85378-ef74-4ea0-97ea-f27700d3dfb9", "sighting_of_ref": "indicator--608852e0-5e04-4b32-a0e7-6218418da5cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c73894b-37ce-4204-b1cd-1a25e353088f", "sighting_of_ref": "indicator--608852e0-5e04-4b32-a0e7-6218418da5cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dfd308-c8a5-431f-b260-04b8df4bbd59", "sighting_of_ref": "indicator--efa2b195-4f2a-48c8-964e-4eceede4c1e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9ca561-c632-4742-951e-014e9e6a8496", "sighting_of_ref": "indicator--efa2b195-4f2a-48c8-964e-4eceede4c1e7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae9ff61-7a4d-43e1-94c7-36a09586fd55", "sighting_of_ref": "indicator--300d7085-c1b1-4abc-bb88-1d61fb9fc6b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a100a7-bc61-463a-90ff-e86b3a89fe98", "sighting_of_ref": "indicator--e5fa77ba-ad9f-4e0d-9b65-0ac0e2ecbce8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35719225-3ba7-4e02-96cb-f4fd5ddf2836", "sighting_of_ref": "indicator--622f4781-d550-42a6-aa6f-3b1627c1a6fa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a381b59-26b5-4e6f-aac1-18a34af453c6", "sighting_of_ref": "indicator--01394751-8aab-44dc-b8eb-3a6657ae66bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a842b3a-eaf3-4fa7-874f-9211845aa3cd", "sighting_of_ref": "indicator--584e7738-cb77-40b1-b6bc-8f6f0751ea32", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919ae0a2-b355-4eae-ae59-7c4e2d8c115e", "sighting_of_ref": "indicator--7643db5a-2a8c-4bb3-9af9-9850814a0212", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0900bba0-f5f5-49aa-a924-2546327b2b8b", "sighting_of_ref": "indicator--3183eaf5-a134-4bb4-8c53-eaa23b12b8d2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c17cfa-9dcc-4ae9-a066-7bf57fb4f154", "sighting_of_ref": "indicator--0bec921a-90e6-4928-9767-2ec35cc6f2c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462496ff-0c01-4705-8bc6-203f04b6dc53", "sighting_of_ref": "indicator--88adce57-fe72-4f70-8432-6ae3caad22a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dd3d10-efd9-4131-986c-04eab08feb93", "sighting_of_ref": "indicator--1ed106a3-48be-4bb2-b11c-c1a29454d36f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790d1861-dd48-44b4-aba1-571de8c66cc3", "sighting_of_ref": "indicator--1ed106a3-48be-4bb2-b11c-c1a29454d36f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f16e412-157a-4724-bf80-d9036836a054", "sighting_of_ref": "indicator--1f476983-18ff-4908-aeb1-e842e4c11281", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f10bd1d-278d-444c-908e-987c71caeaea", "sighting_of_ref": "indicator--741fea4a-34b5-4507-ae22-0d78def99624", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491d06aa-12cc-491e-92d7-58b21a9ab3af", "sighting_of_ref": "indicator--741fea4a-34b5-4507-ae22-0d78def99624", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb60970-2232-4f69-8646-991e2e75a403", "sighting_of_ref": "indicator--7cb789fd-d3c8-4e58-9c31-dee987f69ec2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1586afc-649d-4ef5-a478-3a994fdbc9bf", "sighting_of_ref": "indicator--7cb789fd-d3c8-4e58-9c31-dee987f69ec2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2703c33d-4dce-4ea9-8db4-cbf3e54e05e6", "sighting_of_ref": "indicator--67261df2-7bd2-40e0-98b6-4c3a40782a93", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb4e9a6-70e7-4a45-a5ed-c4a96f9b5483", "sighting_of_ref": "indicator--67261df2-7bd2-40e0-98b6-4c3a40782a93", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be99ea38-d2fc-43d8-9f8b-017b20d665c3", "sighting_of_ref": "indicator--382ce9b2-9afe-41d2-abf3-69b82674699d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d7c9d4-d758-41ad-bd0a-effbd27b728c", "sighting_of_ref": "indicator--382ce9b2-9afe-41d2-abf3-69b82674699d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce7fbde-810b-47b0-b712-02da4e9c9621", "sighting_of_ref": "indicator--ed5ca164-ad0b-4743-af94-ef2553a73143", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b212df-04b4-4a2e-9310-b3ff09afdd22", "sighting_of_ref": "indicator--ed5ca164-ad0b-4743-af94-ef2553a73143", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b433c98b-e880-4af7-a1d2-32ea66150814", "sighting_of_ref": "indicator--c104d24e-e36a-48a9-b61a-197f782653a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f876632e-7568-4e25-a22f-2ad80ecfd6eb", "sighting_of_ref": "indicator--c104d24e-e36a-48a9-b61a-197f782653a4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abf7723-5093-4c2b-8bd5-2373f7353004", "sighting_of_ref": "indicator--e5f56de5-5bd2-472e-882b-9a557920ccd5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a790a21f-a600-4365-a052-895c84243ab3", "sighting_of_ref": "indicator--e5f56de5-5bd2-472e-882b-9a557920ccd5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1cb10d-4905-4971-9fb1-e99e4b897ba3", "sighting_of_ref": "indicator--108c8e13-07d0-433c-b669-6eb1b6680e62", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc29154-19d5-4531-a5f0-85cc8af2f35e", "sighting_of_ref": "indicator--108c8e13-07d0-433c-b669-6eb1b6680e62", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c023f0-c53d-40f9-9978-5321a1f868cc", "sighting_of_ref": "indicator--9096e170-933e-4a91-bcc8-8a41fb3ee5fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f825ed5a-4d23-48af-af53-27050b2cb643", "sighting_of_ref": "indicator--4e1c7ffe-6ffb-4d92-8da2-778b9291ff9b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db9e9c9-5040-4ac1-80dc-dda8837dbd83", "sighting_of_ref": "indicator--76b6a382-7332-4683-9252-94d045a077c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5763cb6a-cc07-46ab-8833-98c31955a5c6", "sighting_of_ref": "indicator--76b6a382-7332-4683-9252-94d045a077c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b886329a-b7b8-46a1-aca0-eef9462d3a93", "sighting_of_ref": "indicator--996f81fa-549c-4e3d-995c-8e4c2e220c88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cb8277-47df-4586-8297-62b0771f08b2", "sighting_of_ref": "indicator--093b274b-06ca-4100-9e6b-6fc7cf45d6dc", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ee0873-25ea-4901-991f-ebc540acfbd9", "sighting_of_ref": "indicator--51016bff-fdf1-4770-98dd-a2b32b4293a4", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7736b31f-338c-4843-b36d-58de242e9b5e", "sighting_of_ref": "indicator--c5a8522a-fe55-4576-8a36-6391b90b6a25", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b62069-a78a-496f-be35-14b06bb9095a", "sighting_of_ref": "indicator--3c425343-4e1e-4694-9b46-307ff5a187bc", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe97e5e-2781-47f3-a177-be81fc23858c", "sighting_of_ref": "indicator--d0371261-0e81-4e2a-a67a-8531125ba57d", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c052edf-b653-4dbd-be41-d9fff541d7ad", "sighting_of_ref": "indicator--c50803db-8360-42a8-b660-098a670c6f8f", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705d5daf-2624-449f-af58-fe9b0d868a4b", "sighting_of_ref": "indicator--d4b978f9-87b3-4db6-a831-2a3d3580a00b", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652732d2-de57-46d5-b99d-1f4b93132d67", "sighting_of_ref": "indicator--c0b57eda-6807-4b7e-95d3-22dcb8a1360c", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b3c110-ab92-4178-b1ed-cac7ffc1fd29", "sighting_of_ref": "indicator--79b33cc7-c0f0-4aa5-913b-b2945ad9daf0", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a426b3-82d8-405c-a8cb-64f8b2986eaf", "sighting_of_ref": "indicator--f180fd33-aec7-42df-8d75-01044c3d2245", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9b6a85-bffa-4677-ab8b-17f936d7fc5e", "sighting_of_ref": "indicator--72af431b-c4fb-47eb-9efe-7bed80a74dcd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66608dee-4757-4d34-ab4e-d87e92103c09", "sighting_of_ref": "indicator--72af431b-c4fb-47eb-9efe-7bed80a74dcd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b46cf3-1970-4433-85cc-0c82dc83bea3", "sighting_of_ref": "indicator--49f26d43-96d5-4188-a66f-d3862e3acc2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c11a1ea-2491-4d19-b0cc-2a2982784dc2", "sighting_of_ref": "indicator--0ee22b07-07a8-4234-b1a0-d38f0cc1dc05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97872b4-266c-4a17-961b-4d5e18a52001", "sighting_of_ref": "indicator--0ee22b07-07a8-4234-b1a0-d38f0cc1dc05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28abef8-118d-401d-b575-6ba099a88935", "sighting_of_ref": "indicator--c6ebaef9-4441-4fc2-bcc5-e190e089d8ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2fdb3c-3d07-4a47-9a6a-9f3137a6d1ba", "sighting_of_ref": "indicator--85372797-f30d-4054-9833-be3ea85df2f4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1134ec7e-b000-48b5-b0ed-b24052c918d8", "sighting_of_ref": "indicator--85372797-f30d-4054-9833-be3ea85df2f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724323b0-7705-41aa-a5f8-e5111cd1326a", "sighting_of_ref": "indicator--2dca03f5-312f-43e6-9035-25bc9d19e1a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b179328d-6e35-4f7d-a7de-3ec33b4862b6", "sighting_of_ref": "indicator--0dc84bc0-b5c3-4781-adf1-df31faf3cb77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b636feb3-863a-4faf-be6b-d2e067c44855", "sighting_of_ref": "indicator--62fbd3a0-4bcd-4d52-921c-7b32cb6daa39", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf16b67f-ab3a-4acb-956f-b59e6a9155d3", "sighting_of_ref": "indicator--82e47863-c5e6-4636-a3d5-d63724d00071", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964e969f-3c54-4199-ac8d-c240cfdb75f7", "sighting_of_ref": "indicator--3599cf03-8e51-4cdc-877d-2501a2262d5a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08abf74-007b-4dfa-a690-4ae71cd8f781", "sighting_of_ref": "indicator--f95c68f1-86a9-4438-8e57-606c826972cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2e784b-84f4-4d29-8c4f-3122c1173004", "sighting_of_ref": "indicator--7dee4f21-c9c8-4202-a5ef-533f00e757c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b90d61-3ce7-4fa5-b737-f11f8eb73c0b", "sighting_of_ref": "indicator--cf5d16b6-058b-436c-be13-a9fc0b476317", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5c82c0-000f-4db2-beee-09bcc7eb69c4", "sighting_of_ref": "indicator--cf5d16b6-058b-436c-be13-a9fc0b476317", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8716335-54ed-4007-ad0a-be6d1af2426e", "sighting_of_ref": "indicator--dc8be242-f9e3-4281-9f6e-e75c99440f8d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c34ee90-749c-4a77-ac4a-c494c7274b34", "sighting_of_ref": "indicator--dc8be242-f9e3-4281-9f6e-e75c99440f8d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6104d4-7487-4410-88d1-bbd38c1c0ea2", "sighting_of_ref": "indicator--0a2afa9f-007e-4fb9-9fca-a92f2f4e23de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d06349-1b7e-453d-910a-1546c55def61", "sighting_of_ref": "indicator--9f803574-34ca-4510-b0ee-3ff4a8440e12", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed48dfea-1b29-4df7-b56d-c4ab22d46091", "sighting_of_ref": "indicator--dd1f5d1d-5518-4d91-9738-03e9d46d1563", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095546d3-bfd1-40b6-b5b4-f61349510327", "sighting_of_ref": "indicator--150ab2b4-7806-47dd-abca-8afbdfcda6f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09405e3-2273-4a89-bf35-8079d6b2af4e", "sighting_of_ref": "indicator--8939e2b7-5ad7-4ad8-9d81-8fe1976dda30", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d892270-4697-40de-ad29-0a8d5f641a7c", "sighting_of_ref": "indicator--76e78db9-7a65-41df-b9ff-14cb8aee6724", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e9afdc-db20-430a-84b0-54b1a285ad9b", "sighting_of_ref": "indicator--76e78db9-7a65-41df-b9ff-14cb8aee6724", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66f4e40-67e0-4ccb-b575-8cc0066e6971", "sighting_of_ref": "indicator--9e5522b6-b00b-4aea-9a1f-d08137d06b02", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d70187-edaa-42f1-9c9b-b17fcb89fb5f", "sighting_of_ref": "indicator--f19bf559-16af-45c2-a0af-71ebbbd7ec75", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24487566-3cdd-418a-a59b-b6297c60a5e3", "sighting_of_ref": "indicator--2c726c40-7f66-44b9-915e-0dcca04a38a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268514f1-0580-4db6-a261-7a4ad3966ff7", "sighting_of_ref": "indicator--207c8850-2073-4ff3-8d1b-bbe14d7e28a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684546e8-b15a-4e41-9036-50f9302f30cd", "sighting_of_ref": "indicator--2db0d3ee-d83f-4018-af07-7d2374fe66d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bada6a0-aec6-479b-9dd8-8b744f88e46a", "sighting_of_ref": "indicator--2db0d3ee-d83f-4018-af07-7d2374fe66d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ff693f-5927-406d-8f2c-410152573501", "sighting_of_ref": "indicator--e00e1087-267f-4d12-9f67-4d92c6e36a3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff00d00d-dbde-4259-9812-638f791860eb", "sighting_of_ref": "indicator--d4db8138-3060-469f-b72e-5806e4a1a289", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd90202d-9eb2-483d-8473-c4ea89b701d4", "sighting_of_ref": "indicator--182fd81e-4178-4f80-8b48-2a923db5b061", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952090ef-ba58-4d79-aa18-2ee38b6e259a", "sighting_of_ref": "indicator--0f75da19-a463-45db-bbcb-750aa43a205c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e23920c-e076-47e8-8cca-f159466659b2", "sighting_of_ref": "indicator--ab374126-72c2-4453-827c-4996401d8903", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a7420b-1a32-4a92-854d-f9d30d135d8a", "sighting_of_ref": "indicator--84946237-e257-4a04-b5e5-e78447258954", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32dc0ed-8834-4329-a6ef-e1de20d728c8", "sighting_of_ref": "indicator--84946237-e257-4a04-b5e5-e78447258954", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7cc161-7542-446f-8fe5-b82b27ae7265", "sighting_of_ref": "indicator--af598a25-554d-494e-bc6c-ef469f23df39", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c71214-0b2b-43d1-90a3-3c467023df9e", "sighting_of_ref": "indicator--af598a25-554d-494e-bc6c-ef469f23df39", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dfcfd8-780f-4921-8a7e-f2aeebb735d5", "sighting_of_ref": "indicator--489001f8-1c05-4554-b804-87a81fb0b073", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a6c23f-cae3-47e2-b09a-1903a24dcbe1", "sighting_of_ref": "indicator--489001f8-1c05-4554-b804-87a81fb0b073", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18125a09-1857-44a7-975e-06845e4508b6", "sighting_of_ref": "indicator--f1601aa7-caed-44dd-9b54-79c02f9c8e61", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efedb74-7275-46b4-8867-4d137c81b1f3", "sighting_of_ref": "indicator--f1601aa7-caed-44dd-9b54-79c02f9c8e61", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc255b5f-2ea4-41e5-83a6-1d4e61717aad", "sighting_of_ref": "indicator--43049a86-50d6-4c1d-b301-71a62b74b150", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4795a3d0-3eb8-4948-87b7-f550a7af456a", "sighting_of_ref": "indicator--43049a86-50d6-4c1d-b301-71a62b74b150", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2adc05-1981-4b62-8881-90d5c60c829f", "sighting_of_ref": "indicator--454698ef-371f-4dba-ba1b-1e2cea512f4d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd6f0f8-b304-44bc-8ada-65c505b443b0", "sighting_of_ref": "indicator--454698ef-371f-4dba-ba1b-1e2cea512f4d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35867482-b198-4749-a629-5cc3598da3e8", "sighting_of_ref": "indicator--c2c5663f-170a-4c82-b47f-7bd0fd4d94e0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a497854-b74a-4379-a065-85aab9aef468", "sighting_of_ref": "indicator--9b3d4d6d-3f70-4c21-9491-e4f931848328", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac6dbca-248d-4fb2-b1a9-0e82653249cb", "sighting_of_ref": "indicator--9b3d4d6d-3f70-4c21-9491-e4f931848328", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa62539-86da-442d-be06-973f20c3fb0c", "sighting_of_ref": "indicator--3a201a56-e676-483e-a2dc-f170a283318b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3774b605-6fc8-44ef-8b02-82d5301ec51e", "sighting_of_ref": "indicator--3a201a56-e676-483e-a2dc-f170a283318b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e791af-9cdc-4089-bcd8-d3e0b05a5692", "sighting_of_ref": "indicator--733996ee-1db5-4e4b-a9ed-443b29aa2c6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5816cfd9-9fb0-401b-9427-25f35a501d4f", "sighting_of_ref": "indicator--733996ee-1db5-4e4b-a9ed-443b29aa2c6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159753a3-a757-4442-8e7a-747445a35ad3", "sighting_of_ref": "indicator--9a8779d4-e780-41ef-a4d2-17bc74295921", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93c1b53-a69a-4b49-aa08-1df9cc275582", "sighting_of_ref": "indicator--9a8779d4-e780-41ef-a4d2-17bc74295921", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc19122-97bc-4425-b25b-c15aa079d82e", "sighting_of_ref": "indicator--91b5c1a5-3ec6-4f6f-883c-a3290279ca87", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b574b3ac-9600-45c7-b56a-e4da620240a4", "sighting_of_ref": "indicator--91b5c1a5-3ec6-4f6f-883c-a3290279ca87", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a936ba-6a9b-4af1-8dad-637429d63096", "sighting_of_ref": "indicator--24f07436-8470-47ab-b0f3-343d63b8305e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa5b9fe-07a1-4ed1-b160-ffd063e4d478", "sighting_of_ref": "indicator--24f07436-8470-47ab-b0f3-343d63b8305e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c167167-b446-4e33-9c4a-bf8cbd0cf5fa", "sighting_of_ref": "indicator--2c1ab187-f4f3-418d-9bc5-9ed449e6a95f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a87c43c-0e85-4016-a200-fe0bdb807300", "sighting_of_ref": "indicator--815f8c72-13b8-4967-9810-038d912bf945", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44afd8a-8fe8-4cd5-a174-1b556ceef443", "sighting_of_ref": "indicator--4611eb0e-e715-496d-b02d-f124ecd83d11", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa1f4a0-4022-4f0b-81b6-1e8a085fa26f", "sighting_of_ref": "indicator--4611eb0e-e715-496d-b02d-f124ecd83d11", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633c2e8c-52da-4296-ab9d-56f0cd92fde4", "sighting_of_ref": "indicator--6a9b8ba6-846a-464f-8e9e-75c81391fbd0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ed4ed5-c4ee-4e17-ab3c-11a4d34f3c71", "sighting_of_ref": "indicator--90afdfb4-7d68-4067-9531-0f41d83284b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e2a1bd-61bd-4a1b-b314-cc54c6cc82cc", "sighting_of_ref": "indicator--90afdfb4-7d68-4067-9531-0f41d83284b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d05d398-5df3-405f-bf7d-997ac26f42c0", "sighting_of_ref": "indicator--c31d2f78-3cd3-4ced-90c5-731cc04301a4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188cafca-203e-4e4f-b3fd-5d91f818a278", "sighting_of_ref": "indicator--5caec0f7-d00f-4738-a57b-f8d4504402ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d228e59-20fd-4da5-8308-5060406deb74", "sighting_of_ref": "indicator--5caec0f7-d00f-4738-a57b-f8d4504402ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbe283d-a8bc-487a-9eec-f7de8d743dde", "sighting_of_ref": "indicator--0c633a21-2dab-4b7e-a91a-d319d48c4c49", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b353f56e-9caa-4f15-8b08-84a74454d027", "sighting_of_ref": "indicator--310cbed3-99aa-4afa-8085-752a506ed531", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0b9b81-96d1-4e5c-adcd-83cee6143995", "sighting_of_ref": "indicator--310cbed3-99aa-4afa-8085-752a506ed531", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b46e258-e55d-4afd-a042-a63d9a26cdbd", "sighting_of_ref": "indicator--9109732f-4b7e-448b-b2b8-d045fc004472", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16e049e-1e90-402f-9e69-af4c673dc53b", "sighting_of_ref": "indicator--9109732f-4b7e-448b-b2b8-d045fc004472", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5139fd66-64b5-4de1-a3ed-9c0b52a51677", "sighting_of_ref": "indicator--4833f243-289d-4737-a172-f3090c32c8e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9277ce-8b8a-4dc1-bd10-1fcb15cc6208", "sighting_of_ref": "indicator--faf1da83-f6a3-4623-962f-13de219b8913", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7233e99b-8d57-44b2-a8c0-1ee905c33915", "sighting_of_ref": "indicator--faf1da83-f6a3-4623-962f-13de219b8913", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc3178b-59a4-4319-a1f1-bbd31cf0734a", "sighting_of_ref": "indicator--c89fa2ac-92c9-4e35-b91e-a86ce4927e23", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62b1d6e-c708-4f61-aba0-7be9babfa9e1", "sighting_of_ref": "indicator--c89fa2ac-92c9-4e35-b91e-a86ce4927e23", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1194ce08-7c4b-4c7f-a5d1-ab56953f58ee", "sighting_of_ref": "indicator--1e2df7d6-00e9-4a7b-8e4a-139dc0dd08a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1256d01e-af81-44c0-84b5-c96323fa6cb4", "sighting_of_ref": "indicator--1e2df7d6-00e9-4a7b-8e4a-139dc0dd08a9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201d914b-9cf2-4b75-8908-7cb3373b57e7", "sighting_of_ref": "indicator--01752e31-296b-4636-9228-261ba574f664", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c8f65b-6101-4816-a5df-3735c78922cb", "sighting_of_ref": "indicator--01752e31-296b-4636-9228-261ba574f664", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d00759-c072-4091-99ba-1e54990efd42", "sighting_of_ref": "indicator--9be07400-3a49-435e-af1e-62b623672abc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea220d09-5157-4058-8a93-17ccc70617cc", "sighting_of_ref": "indicator--9be07400-3a49-435e-af1e-62b623672abc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f67a6b-c59d-421c-ac22-3eac884c9451", "sighting_of_ref": "indicator--30668f64-3f6b-4489-9bb9-da56a2ae4d47", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61f1bb5-cf34-4546-905f-a3ce33e26201", "sighting_of_ref": "indicator--5c97063b-7281-4ad8-86b1-3c9e0f21e678", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bb4c17-76a8-4099-8ec1-06a6166aceec", "sighting_of_ref": "indicator--5c97063b-7281-4ad8-86b1-3c9e0f21e678", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70462e5-dd4a-4256-953c-917e30feca34", "sighting_of_ref": "indicator--6a4dd556-6dee-474e-b70b-bbbdb213c513", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d10aa7-0e76-4531-83b1-98d379dd49bf", "sighting_of_ref": "indicator--6a4dd556-6dee-474e-b70b-bbbdb213c513", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6de2a9-d095-4e93-b866-867e165fe1ee", "sighting_of_ref": "indicator--a1769594-e53a-4ebb-b36e-2776fd920c1e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7795cf7c-56d1-4270-8cb6-69754974f9e0", "sighting_of_ref": "indicator--a1769594-e53a-4ebb-b36e-2776fd920c1e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f3bb83-1a1b-4929-b395-09f7455286ac", "sighting_of_ref": "indicator--68d96356-d041-480c-998d-cb809abb24ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e855d84e-09ac-402a-9265-c6fa1d0b8dad", "sighting_of_ref": "indicator--68d96356-d041-480c-998d-cb809abb24ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ac45cf-bd7e-472f-978c-12d444f19eb1", "sighting_of_ref": "indicator--99c1e9ac-4eeb-4eed-afdd-a946fc21414f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d8a687-e9d2-4684-bac4-347a37e6b3b7", "sighting_of_ref": "indicator--99c1e9ac-4eeb-4eed-afdd-a946fc21414f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a5552a-6a38-4d83-b2c3-d0fe2ae99462", "sighting_of_ref": "indicator--4b3ac98d-aa23-4462-91c8-f51edfd8b9a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ececa6-e145-4881-b9d9-76cebe236b62", "sighting_of_ref": "indicator--4b3ac98d-aa23-4462-91c8-f51edfd8b9a0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68fcf14-2345-46f1-9375-abc0dd9f5738", "sighting_of_ref": "indicator--9a29e916-37df-4db5-bd62-3ad63bcccfe5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd95c3c4-9b57-4ffb-90d1-8519a7d8806e", "sighting_of_ref": "indicator--48f5a186-2a3b-4025-a82e-9ce8682cba36", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4bb43c-98eb-4a4b-911f-474123634c21", "sighting_of_ref": "indicator--48f5a186-2a3b-4025-a82e-9ce8682cba36", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bac9025-5d2b-4018-97e0-34e2cfda8d71", "sighting_of_ref": "indicator--7f778a31-d5a9-430f-bdd2-cccdebc38df1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e977fe-a47c-4aeb-91ff-0048df1415fc", "sighting_of_ref": "indicator--aa6f5fe3-6006-4e59-add8-dce5f61c1bb7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ca0f9e-6625-42f4-bb10-dba7b41e8f4a", "sighting_of_ref": "indicator--aa6f5fe3-6006-4e59-add8-dce5f61c1bb7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa57895e-b702-420d-8f58-ce410cee693c", "sighting_of_ref": "indicator--959e9283-e3e1-411a-a811-fc4c7a94c8a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da731813-fcae-4788-9250-0a4fa59c7fd2", "sighting_of_ref": "indicator--2a78412b-e5a3-4c19-87b7-db27a6407751", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e887122f-c15c-4a62-a531-59cefba6cd4e", "sighting_of_ref": "indicator--c271f5a2-f9b4-406d-a513-be04efa578fb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8862ef-51bc-4331-af00-9abec876f71a", "sighting_of_ref": "indicator--c271f5a2-f9b4-406d-a513-be04efa578fb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be05a00c-a956-431a-b368-0228916fd0bd", "sighting_of_ref": "indicator--1fd3d9aa-39b6-432b-83f2-4d0315dc457c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0d9d00-9ad4-42bc-9347-18d267627b86", "sighting_of_ref": "indicator--cd5a510e-fe41-464e-8ed0-f84b769e4ce8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842d10cf-166d-4add-9b85-15836cf7ef66", "sighting_of_ref": "indicator--ac7d324f-c518-443a-a361-137d32d1a53b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dc4c63-c478-41b6-b226-2f01908aa833", "sighting_of_ref": "indicator--ed5ac99d-9074-42c6-a19d-7be5809f4d80", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deac0e89-eec5-40fb-a637-fedc1aba51f1", "sighting_of_ref": "indicator--088c28b5-76ed-4422-8292-ab27a698d37a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e43a6b-83bb-4122-bca5-085478ce2559", "sighting_of_ref": "indicator--74f776d6-c3f2-4d4e-b631-d35528988bcb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d17600-09bb-4825-adeb-6496853d7b4c", "sighting_of_ref": "indicator--74f776d6-c3f2-4d4e-b631-d35528988bcb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a056c8-0b32-4480-a56b-c7c41cc1bc82", "sighting_of_ref": "indicator--f72c7b33-63a7-4872-9c08-fc01c8511a4d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a44930-6ef0-4b07-b00d-7cce4f160722", "sighting_of_ref": "indicator--f72c7b33-63a7-4872-9c08-fc01c8511a4d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c7aacb-2de9-4a82-8852-f3576ca15147", "sighting_of_ref": "indicator--fd70de2d-143c-4919-8a88-5ba019f28932", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4e351a-529b-4332-9111-46d0e1b59fd1", "sighting_of_ref": "indicator--fd70de2d-143c-4919-8a88-5ba019f28932", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4af499e-9894-4518-8c0f-0abc64cb9c55", "sighting_of_ref": "indicator--0dbdb10c-b5b7-46e7-81cc-993c792235ea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915244bc-fe98-4451-84f9-1557dbbceb20", "sighting_of_ref": "indicator--0dbdb10c-b5b7-46e7-81cc-993c792235ea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1fe7cc-6904-412d-b5ef-bdb952972bba", "sighting_of_ref": "indicator--d75d0d13-98cb-4174-9cb0-c17f08806527", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bf3006-f2ce-46bb-8533-0e9af0d26983", "sighting_of_ref": "indicator--d75d0d13-98cb-4174-9cb0-c17f08806527", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3125f40f-5de7-4666-befb-d1618e394fdf", "sighting_of_ref": "indicator--661024ea-74a4-4eb9-88bc-6b4520a9702d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f362d7-e611-4372-add4-ec4991494e7d", "sighting_of_ref": "indicator--34374ec5-13ce-4293-94fc-1f90a140c471", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bce335-79e5-44b9-be7b-c251519dafd1", "sighting_of_ref": "indicator--34374ec5-13ce-4293-94fc-1f90a140c471", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c395ab0-8f40-4ad0-bc42-1c9bc096b14c", "sighting_of_ref": "indicator--017649fb-37be-4711-a5d4-9ca8a2d3feba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a78fea-e909-4884-954e-67941eaebacd", "sighting_of_ref": "indicator--017649fb-37be-4711-a5d4-9ca8a2d3feba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcc6bb9-8d0c-4802-8597-07e3949833f4", "sighting_of_ref": "indicator--87516965-0d0e-48c0-987e-ba959d012003", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfca351f-34f9-4974-bd6e-159361144b22", "sighting_of_ref": "indicator--87516965-0d0e-48c0-987e-ba959d012003", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec0154c-2875-4751-b1e8-2a8f16c097b5", "sighting_of_ref": "indicator--2f667151-c103-4272-bece-bf9a17025706", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cddf8a4-c049-4aed-a0bc-aa21b841e214", "sighting_of_ref": "indicator--2f667151-c103-4272-bece-bf9a17025706", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ba70c3-25ff-4a5f-a5f8-983d02d6952d", "sighting_of_ref": "indicator--b5eeab44-168f-48af-9b64-b5da2b49049b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bd988a-f0f8-4315-af46-ad2aa3db0e56", "sighting_of_ref": "indicator--b5eeab44-168f-48af-9b64-b5da2b49049b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8a9592-7e75-470d-be01-317251ed96e0", "sighting_of_ref": "indicator--c9575133-57ce-4f08-9226-4a80c5a9fad8", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1a509f-a3eb-408f-b0d1-8030392e39ff", "sighting_of_ref": "indicator--44814ca5-1fdf-47ec-8f61-e0e635502970", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbec80b9-8091-4f38-af98-649b74041b25", "sighting_of_ref": "indicator--3a9691e6-5f75-467f-9505-50a24ece228c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2528688e-ec3c-4e3e-a951-8082ba554b73", "sighting_of_ref": "indicator--ebfc9cb3-7885-496d-8f88-f746401a47b4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c528e6d-e7d6-4791-b561-0af7c9954fb4", "sighting_of_ref": "indicator--a9dca27c-4f02-4c2b-a182-707d3e037b04", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16798429-6a0c-4a2b-ad85-c7dc53e72521", "sighting_of_ref": "indicator--a5f7ef3d-92d2-4bfd-95d5-e19ea1f77745", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff802e4-c9fe-48f4-86ad-d488034000e3", "sighting_of_ref": "indicator--733c2e37-83b5-41de-acec-7c5b97d4e92e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6591b046-cc2b-46da-b14f-03018e66af70", "sighting_of_ref": "indicator--999eaa15-9fec-4203-8082-42adc3159482", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e96d865-8083-4953-8ffe-782836276aa6", "sighting_of_ref": "indicator--2a929b3c-3ffc-46f2-b369-4cd8a14725a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9bd498-7652-4b78-befd-997ac6f3a3a9", "sighting_of_ref": "indicator--5337d76b-98d9-4994-bea1-01f5e9e3ee21", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13817927-f37d-4207-827e-7d5687ea74cd", "sighting_of_ref": "indicator--404adf62-f651-4a41-92d3-0d413d9409df", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7ab74a-acb2-4b3b-8a83-cbb148af05b9", "sighting_of_ref": "indicator--13843789-2f24-4069-abc0-4e637db9fe7a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc6c3a2-e2fb-417d-b263-136d53d721c7", "sighting_of_ref": "indicator--a9cdf78f-51e2-4925-9e2a-25c491978553", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f496a1-38f4-4521-8904-de0c52a525e7", "sighting_of_ref": "indicator--fc68886a-2074-43e1-bfd4-cd2cefeac6d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51fa5b4-eb54-413f-9b92-19b3bd80848a", "sighting_of_ref": "indicator--caf7daa4-bead-4259-b14a-44970e0b98bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b041d76-1183-469a-b952-d18769bdf10c", "sighting_of_ref": "indicator--20adef6c-8031-4257-b291-57b00ff13bb8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75d8c1d-33ea-4f31-a1f2-f3f3f8e1d83d", "sighting_of_ref": "indicator--d6b56190-cf45-4769-852f-fb9c00059df7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a704a39-7b84-451f-a87e-c83c47f682e3", "sighting_of_ref": "indicator--f240c9b8-f4d9-447e-9830-7f6949e01ecf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed40c17-0df3-481f-8947-9db326e4d2b5", "sighting_of_ref": "indicator--e15afcff-fc5b-4b2f-bb6d-a5ca0676a4d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae9be52-83a4-4fef-bd9d-c0ced61df868", "sighting_of_ref": "indicator--684ef466-4e41-436f-8d70-48dcdb3d055d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8c9d58-d92b-4b09-b729-2d3d23f2dd98", "sighting_of_ref": "indicator--23ccab04-2c1d-4af2-8233-6b9d90993c8d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092bc192-87bf-46e0-a166-8d385e243b6c", "sighting_of_ref": "indicator--d9265002-5858-47af-81f6-6eabb4e7a987", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b5db3b-3ab1-4a7e-b26b-757d484c64dc", "sighting_of_ref": "indicator--1797ac7e-ba34-420e-a16b-84cc4902093e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0e908b-9f98-488e-b4a5-13fe758c275a", "sighting_of_ref": "indicator--6563f3a6-7f04-4634-a500-bb17ff4bd214", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47159d03-333e-4a6f-bc87-ddefc67ea955", "sighting_of_ref": "indicator--e32b0e47-94d4-4e72-8317-5fac04ce658c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f0e94b-462a-4a67-bc0c-680aa70fe3bd", "sighting_of_ref": "indicator--c2ab6641-712e-4e47-b3e0-c4da8e32b99b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090d1a29-93e4-440f-9670-b5d86f1ae1e4", "sighting_of_ref": "indicator--e037814d-ded9-4c18-81a8-31ef812e57c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627bc73b-d674-4831-aa89-d38f4beeb1bd", "sighting_of_ref": "indicator--857aa65e-8a12-4168-8fde-7f58dbf9caa0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7ac729-9b56-4ec0-a025-9d3f7b796c61", "sighting_of_ref": "indicator--a33e9519-abc2-4092-b4f5-1e623c33e71d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5796f1e5-3dc8-45e8-91e7-4a109b78d7a6", "sighting_of_ref": "indicator--59f04c01-46c4-423e-97a5-f162ccf7c29b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bfd7d0-6ab1-4415-99b1-c968458e5b63", "sighting_of_ref": "indicator--d5e7b669-d124-4c56-b0c8-8dd2cb2d02c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f1c709-3652-48b7-96c6-b15c5044f1a8", "sighting_of_ref": "indicator--1e14a689-0a8b-4243-936f-2e5b19ad706e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3ad137-e14a-433a-84b1-95f23a3032c8", "sighting_of_ref": "indicator--aa1a965c-6acb-4947-a759-f6b600046281", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d643cd21-6ac3-48d7-8044-b5246d76d12d", "sighting_of_ref": "indicator--b190b04b-d327-445a-a04d-21bfffc83252", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c784120-cb22-46d7-9692-c75e2e5f7f22", "sighting_of_ref": "indicator--2a4ad0c5-ca67-4002-adcd-c814a59a4bb7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254948a1-d0db-4ff4-802e-a86d4b1781ad", "sighting_of_ref": "indicator--4a121a21-9c0b-4eb7-9e8d-548bd7770646", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1741ffc7-5fad-4610-9410-e9025383d8e7", "sighting_of_ref": "indicator--5f5bd720-fb18-4395-82fb-308b111255da", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcbdf9a-07aa-4e13-8536-96e5d8c25997", "sighting_of_ref": "indicator--6601fad1-d362-4037-b54e-43ddf5e11040", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac32bb6-71f7-4b1b-8e86-7a0f0f6689da", "sighting_of_ref": "indicator--348c62b3-5333-4b92-a42f-f3b72dd5924a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc8ad37-69ed-4a70-bead-3aa6aa5e26a4", "sighting_of_ref": "indicator--4d6521af-ab14-4a86-98b5-9e0a98a99e47", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b942f3-3d78-42f3-b605-183999964f44", "sighting_of_ref": "indicator--878d454f-7d33-4aa5-8c16-bab3300fd6af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b4f1c0-dd1a-48ab-8ff6-ad136490d839", "sighting_of_ref": "indicator--7c4c3669-6be6-4eda-8275-e1e40802faf8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73396168-af64-4199-8e31-1e330c02c6ff", "sighting_of_ref": "indicator--399280ea-3c5f-4036-98d2-f2ba5a90e41f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0422ba80-934d-4cc4-adb7-bf7b094c65f2", "sighting_of_ref": "indicator--aab09478-ec61-4476-a750-85cac3c1be77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9755011-4a96-43c0-91fd-a9ce5fbc3b6c", "sighting_of_ref": "indicator--e3a7282b-7269-477a-85c2-6918ba2db09b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbaa3f4-0c90-404c-8fd8-a95043cb0aaf", "sighting_of_ref": "indicator--2e3151ef-20cc-44b6-9ca6-ec5314029e88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd75f81f-0fe2-4e6f-8990-072a10ef4c4c", "sighting_of_ref": "indicator--73524101-295a-41b5-9a36-10866f503767", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c01c33-7e7b-4997-ae8f-b71ed5e1cc7e", "sighting_of_ref": "indicator--3e05f297-f1f6-4970-96bb-87b43a8e2e91", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf1819f-8e14-45b2-a96d-c987a18ca0a0", "sighting_of_ref": "indicator--176c53d5-ac80-4409-83d4-f824a6215880", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383d2e66-2810-48d5-a0b3-252f6b704a11", "sighting_of_ref": "indicator--dd17f38e-2c9d-4e15-bace-5f02007c5373", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86760976-57a8-48fa-9f03-ae1bf56e083d", "sighting_of_ref": "indicator--5384cc06-ee25-41e1-b289-a7915324575e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f243193-ed5e-4ca7-9ba7-186cf5f27c47", "sighting_of_ref": "indicator--ef0f8d49-7146-4e91-b8d4-a580678dc5f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e97b454-b3d1-4ad3-952d-a8e7902c55e7", "sighting_of_ref": "indicator--87471032-f697-4a21-bc56-9efa7d0f9ca6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ef1461-230b-4b46-b095-2f92bd835dc3", "sighting_of_ref": "indicator--06ac99b3-b4da-4225-bd7d-104a7073acb1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fe67f7-0f73-413c-854b-faff812ff82d", "sighting_of_ref": "indicator--a7551cfb-6517-4219-a737-b5faa80b985b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca4f32e-c360-487a-8059-efaf043a68ec", "sighting_of_ref": "indicator--2edcb403-9ea6-4651-abaf-1cfef8f01d43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59b1f25-82b2-43c8-9f70-996dfeb15b36", "sighting_of_ref": "indicator--8bae092c-a6f9-4453-9ca1-25d745ef66c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f703741-1642-4e3e-a989-1b4a38cb1235", "sighting_of_ref": "indicator--928f57b2-aca1-44ef-8a2d-ffc6ea761f40", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688abff4-0a29-4cb8-8518-921fca90ae7a", "sighting_of_ref": "indicator--f33d9a07-9a31-4ddb-8980-c8a24dd45a37", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0320c812-7300-46be-b7c3-a4763a4d7a11", "sighting_of_ref": "indicator--d887a8ac-473c-466f-8106-f683f3c87dfb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7393a51-2a69-40ce-90f7-76f038d8142c", "sighting_of_ref": "indicator--35d30aa0-dc46-4093-aef3-028840209fb4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf307e8f-3555-428a-8f10-3a56df0ea979", "sighting_of_ref": "indicator--a0812579-6ebc-4cc5-9e36-aff4d184f5f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b5dbed-8487-4c0e-9b62-a3ece18e15b4", "sighting_of_ref": "indicator--318092b7-97aa-46c6-8a14-c612b58bac52", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70c1260-5ade-4361-89c2-35e5b980ae1b", "sighting_of_ref": "indicator--cc4ef022-2105-44b4-9244-8fbcbc21e0f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314a4e09-5179-4b24-8801-41400c0e8982", "sighting_of_ref": "indicator--1145abec-bbed-4de1-ad38-463fa6fb11ea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb63ae2-7bbf-400b-87e9-4cc5d4a851b8", "sighting_of_ref": "indicator--71c609cd-8a8d-48be-82ef-0e119e02893e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e766ba31-e2ef-4945-be1d-3d9a6a0b2327", "sighting_of_ref": "indicator--2dec96c1-c4fd-4532-9b3a-d13a0316a79c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648ce591-d624-4e1d-8932-c25ead3ec473", "sighting_of_ref": "indicator--a14f979c-893c-44cf-8517-63938e230f78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedefaa0-8bc7-4554-a993-040d8b22414f", "sighting_of_ref": "indicator--da735f8e-a910-4caa-8270-8958867036b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948b6a9a-6107-4669-b308-1047bbd03a37", "sighting_of_ref": "indicator--4cfd5670-2d42-4504-a4fc-47168e035281", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63e6fc1-8aab-4937-9845-a9d8f77033e1", "sighting_of_ref": "indicator--bc92179a-8285-4100-8246-fff760ebcc95", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36aec868-f7b0-400b-bf8f-e1112b756738", "sighting_of_ref": "indicator--87734e08-f43f-48cb-97bf-57e347c1d146", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6afe46-8368-4b53-aaa8-55b5e151a83d", "sighting_of_ref": "indicator--73c25108-8292-445b-96d6-bfc82a8b4f86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a619999-798e-43c5-86c6-1fa858283f85", "sighting_of_ref": "indicator--de659d67-3dd8-40b8-a468-97c94600758c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4339221c-3d39-41e9-b1c7-7bee6e35260e", "sighting_of_ref": "indicator--8d205781-0b2c-413e-9a50-5110ba9f9660", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b56e72d-d236-4315-b104-fefb4e082897", "sighting_of_ref": "indicator--5aa2d3e1-ed0c-4ff6-822c-f4af8281dac8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40967fd-2212-4425-b7bc-c8a6e1956b4c", "sighting_of_ref": "indicator--0e8a4142-f4fa-4294-ade7-4268741dc2c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55f3192-1fc6-41cf-9e11-f203fda3121e", "sighting_of_ref": "indicator--93554501-0999-455d-a48e-6ccae48d5ed8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadac969-dc97-4e23-b033-f1425d0928ea", "sighting_of_ref": "indicator--af4e3efa-bf03-439d-9b99-2c11adc7d0c3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a13c21-e3b8-417c-b2a6-556703c586b3", "sighting_of_ref": "indicator--af4e3efa-bf03-439d-9b99-2c11adc7d0c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26efd829-d776-4b12-8bd1-c8ec78684875", "sighting_of_ref": "indicator--10acbada-987f-4477-ab85-a0b1b2bdb9b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8fb558-46ab-4ae5-9823-e85ecdc1bf3c", "sighting_of_ref": "indicator--c79b4b3e-2a59-4f1f-b92f-cb206e5b5108", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e97d25-9040-422e-9306-1e93d8835da9", "sighting_of_ref": "indicator--0d48f76b-2d9b-4d1d-b6cf-8803c5f9685d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946b5a35-0db4-4d58-9803-a613258b0dc4", "sighting_of_ref": "indicator--36986ad4-ce52-4b08-a485-42a00d60262a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab96c015-667b-4b46-8247-efc193a458b4", "sighting_of_ref": "indicator--578be165-4e49-49e7-bc45-d8aae9f6d8ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e2e1f8-8ff4-4636-a25e-635c1e12995a", "sighting_of_ref": "indicator--578be165-4e49-49e7-bc45-d8aae9f6d8ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317499b3-ec7d-422f-9bfe-df819548105a", "sighting_of_ref": "indicator--e92b1aa4-f417-48ae-9637-f2fe044214f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a1062b-de95-4f26-a4c3-841bf9dab5b5", "sighting_of_ref": "indicator--e92b1aa4-f417-48ae-9637-f2fe044214f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9d7310-44f0-42cf-97f9-21cb86116188", "sighting_of_ref": "indicator--b28a8ba7-ef16-4d81-803a-097d154a2624", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b658489-0d99-4fc6-91f9-0861d5e29a6f", "sighting_of_ref": "indicator--b28a8ba7-ef16-4d81-803a-097d154a2624", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c69cc6-6bcd-40ce-9f75-624315b44a5f", "sighting_of_ref": "indicator--0d0a1f3a-8909-4e58-a5b3-610246488260", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4d1c31-db28-4b3e-80bd-492f995c0634", "sighting_of_ref": "indicator--0d0a1f3a-8909-4e58-a5b3-610246488260", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9334d9-6a4e-4559-9fb1-1f71089b1fc8", "sighting_of_ref": "indicator--10c34bdb-3de9-4c84-9af0-653f93c45295", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b108223f-9970-4de3-a705-591d262b63ab", "sighting_of_ref": "indicator--009c2134-6c3c-4d48-a9b0-77fb67dbf457", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7310ac-52f4-4606-9152-2326afbb739c", "sighting_of_ref": "indicator--009c2134-6c3c-4d48-a9b0-77fb67dbf457", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ab2416-2149-447d-86f2-c404ce10c863", "sighting_of_ref": "indicator--2d07eef3-bd45-491a-b50e-403dd7bf5539", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbacd86-a738-49a1-b4e2-23cfbe129b25", "sighting_of_ref": "indicator--2d07eef3-bd45-491a-b50e-403dd7bf5539", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88637d4d-baf1-4212-9f70-b2195564038e", "sighting_of_ref": "indicator--ced7c041-211b-444c-9c72-1b72fcb47df0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba85330f-049d-4175-aa61-bff9331c718a", "sighting_of_ref": "indicator--ced7c041-211b-444c-9c72-1b72fcb47df0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b4c493-6193-42d2-85b1-0f28c0ab22c1", "sighting_of_ref": "indicator--8e099eda-8605-4d98-8718-14798a7bb10e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10268799-4074-41ff-8de1-e617b707fb21", "sighting_of_ref": "indicator--d0c54f54-7e63-47d6-b5a6-c3eba674fcce", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6b24a9-2b46-415c-9ad9-8fdad0304cf2", "sighting_of_ref": "indicator--d0c54f54-7e63-47d6-b5a6-c3eba674fcce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a14b4d-e93c-4aed-afe8-92478487231e", "sighting_of_ref": "indicator--c7d60aab-b356-45fe-bd8a-fa8bcc80512b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb473be-63ef-4549-9b89-70efd4298f1c", "sighting_of_ref": "indicator--c7d60aab-b356-45fe-bd8a-fa8bcc80512b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11b4eff-768b-4b8d-a66b-acab694df553", "sighting_of_ref": "indicator--2b6a5657-e4db-47df-b266-47953662179b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb530de-597c-478c-8a4c-e399a993c7c8", "sighting_of_ref": "indicator--c3b51629-bc36-470b-8e6f-6549099240d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc5736c-db1b-4942-b074-ad584cc26d5c", "sighting_of_ref": "indicator--c3b51629-bc36-470b-8e6f-6549099240d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcee259b-f777-4f2b-bb17-f99c7acdd42a", "sighting_of_ref": "indicator--dd303265-8879-4afc-ba98-a4007dbf8a7f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ff46d1-0aca-4ffc-a4eb-46ff2310fd79", "sighting_of_ref": "indicator--dd303265-8879-4afc-ba98-a4007dbf8a7f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912947b1-aed3-4684-83c4-2df61df519a4", "sighting_of_ref": "indicator--043bc762-bdab-477a-95da-c695d68700cb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af26cfdb-a40a-4a9f-94f9-ed2b40bf9717", "sighting_of_ref": "indicator--df5ab7ae-ecee-48b4-91aa-a8677ace5f30", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcf457a-0a7b-4eae-8be1-e7e69bd522aa", "sighting_of_ref": "indicator--a942a9dc-2601-4977-bafc-e8fe46fd3066", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12944fd2-df08-4862-aaeb-f442fcf7d37d", "sighting_of_ref": "indicator--a942a9dc-2601-4977-bafc-e8fe46fd3066", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dee01e0-6e06-46d5-9bf1-960709a144b9", "sighting_of_ref": "indicator--7fae803e-398f-4ab9-8555-b345521a4329", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4bb9f5-ffcf-4810-8785-91a3945914bd", "sighting_of_ref": "indicator--ca545a5b-4669-4cfa-ba54-0149c6a432f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153900d1-3f12-4d6a-91a3-917b71dfccf2", "sighting_of_ref": "indicator--293a1ea7-aefd-4c4e-b527-5fa71595803b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b267d652-7370-42c3-b69d-63dab708fac7", "sighting_of_ref": "indicator--2ef5863a-9fb1-4fa0-bb57-4241cc6829d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9fa6b4-9077-48c2-9b59-f9375024645a", "sighting_of_ref": "indicator--2ef5863a-9fb1-4fa0-bb57-4241cc6829d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2be71ac-e5dd-4145-a25e-83ae77d98427", "sighting_of_ref": "indicator--fc161d62-1bf6-4971-bad0-c221a77266cf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27349614-c373-4de5-a9e2-8e1cad6e363b", "sighting_of_ref": "indicator--a9728dc0-bc09-4a4c-94b4-bab30737cd2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0923b8-579d-42d2-804c-85d94c4a25d4", "sighting_of_ref": "indicator--93bce96b-8e6f-4f29-86d6-f16674110aea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0db14e-5373-4781-bdaa-d10f8981b0a1", "sighting_of_ref": "indicator--eca531ba-f7f3-4c33-a1b1-1f1259809ed6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade6eaae-623c-48e3-a7b1-d69d1817c3a9", "sighting_of_ref": "indicator--7cbf75b5-31a5-49b8-9bf9-ab6bae64551c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903e20cb-2dbf-403c-a495-96d5c41bf281", "sighting_of_ref": "indicator--2d6a5a9c-6e4c-491e-bd1b-abb31942fbf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6a02a2-5c86-43b8-9b40-ddd3439f4f5e", "sighting_of_ref": "indicator--2de38f95-27ff-4f20-a16c-776a78b8bdc2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242530aa-96ca-4455-b711-f7a10c4c8426", "sighting_of_ref": "indicator--b8ca90f8-5a6a-4464-9b07-06359b45e063", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c9f952-64cc-4fb8-b530-05b9cb8dea5c", "sighting_of_ref": "indicator--f399a6f0-cd66-4c69-b00c-0cfe14a536b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7a8a9e-5a29-4157-8644-ae9cd6e13388", "sighting_of_ref": "indicator--501ce717-c178-4ea9-b9b8-695152488ae6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0054974-9b23-4c44-abc2-8d16de06df51", "sighting_of_ref": "indicator--f1ac5b95-ca02-4353-bdbe-fbbf021ac347", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f70f20-00f6-43f9-a4b8-c9f3759eaa8e", "sighting_of_ref": "indicator--7d3305b5-6ab1-431c-a71c-9d7ef922c273", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210beb54-3853-47e6-8dc6-e191c79a3cfc", "sighting_of_ref": "indicator--7ed03648-6886-4422-8d1d-79d4b560b9aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4575c6f1-458e-463d-bba8-d1f2a7936f4b", "sighting_of_ref": "indicator--1613d9a7-4a3d-4fad-8f5b-3b0eb1e82a05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8a843a-e68b-4583-aeb4-bff8d26e21a5", "sighting_of_ref": "indicator--9f9f69c9-c0d7-4697-9b59-e0f897e6916b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7229c5-a064-498f-b631-dcf82459690d", "sighting_of_ref": "indicator--c29509b4-a413-4622-8bd0-96620779601e", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70ac045-a4d0-470e-9093-45c966d7841d", "sighting_of_ref": "indicator--84ac937d-0cd3-47f7-ad58-431c64b3c7e4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3139b72a-5c9a-4818-9535-9b30af96838c", "sighting_of_ref": "indicator--af64abdc-23a3-4147-8a3e-820912f4ab4f", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88532690-ac9a-4435-9b8d-1a37a0680477", "sighting_of_ref": "indicator--933b07a9-0356-4927-afb7-7893dacc54be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983299b5-4f5a-4630-8c35-575bb2f7be85", "sighting_of_ref": "indicator--6e1d30da-8678-438e-9a75-f211532e1891", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0daa410-4661-4202-8426-e2bef3a08acc", "sighting_of_ref": "indicator--e3780365-e281-4841-8353-0c835ad7d50d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95f2c9d-5992-4d03-bb66-691861348cf0", "sighting_of_ref": "indicator--3f85976e-0b4d-40bc-bb65-3ec640110068", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc59e71d-5a39-488b-bd5a-e62ad78602ae", "sighting_of_ref": "indicator--189e776e-c692-493c-aa38-8f9ca2797711", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613dbbac-8853-4c9c-8918-fc3974d0a99a", "sighting_of_ref": "indicator--e47e9b93-0ccd-4cdb-8a44-9c74abb70369", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18830da-2f81-42f8-b35d-b6d3efe48c64", "sighting_of_ref": "indicator--7b7c8c1c-1583-44dc-89be-7772b255e409", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e371bf8a-1e3d-4992-910d-9f56b17b5abf", "sighting_of_ref": "indicator--916f0aee-ecd9-4b10-ac3d-9db10f854707", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf44e1b2-a9b0-45b5-925f-8bd02f682b21", "sighting_of_ref": "indicator--08edd67e-335a-4499-8223-59e654d316e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4edcae3-29e1-47c3-a1b0-ebc7f61df433", "sighting_of_ref": "indicator--1d695d43-eda6-48eb-a6f6-06f02cc4c571", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7affb8e0-5dd4-4132-b46d-d73c4aa56f95", "sighting_of_ref": "indicator--9c79e97b-6ce1-467f-884f-b80cfbf49123", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af4a2f3-3a06-4155-a122-89226c82e4cc", "sighting_of_ref": "indicator--52b83f58-6864-458a-8478-47cf285fa57a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f441f61d-51a4-438c-8a85-a49a62ca1bf4", "sighting_of_ref": "indicator--c3c1592f-156d-4c2a-8d25-c20ccf3dd4c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1ec7cd-2b91-4652-9493-b01b2683c51f", "sighting_of_ref": "indicator--36e22a84-7a4d-4032-a6c0-539b4867aafa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93740197-a496-473a-86c2-827c588a26b6", "sighting_of_ref": "indicator--d4b9060e-fcb5-4c9c-a2ae-d4cdf3df249e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9f0e91-94f1-48d2-bd78-b37523fc8482", "sighting_of_ref": "indicator--dafd59cb-532c-4d4a-8cb2-2419ddf3f6d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04361a3a-e6c6-494f-9f1d-2920895a7b1f", "sighting_of_ref": "indicator--51221df7-4447-4bcf-b0a8-de27384dd599", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facb77c3-5840-41f6-8428-c264cbefd938", "sighting_of_ref": "indicator--d83d6b79-230c-4f0a-a414-30831aa4645d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee057133-7ff1-44ed-874c-47b27f27798f", "sighting_of_ref": "indicator--cfdc31cc-a319-4879-9f36-d0225437c633", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fd6af0-a54b-40fd-9e2e-a52e1c353027", "sighting_of_ref": "indicator--23077e4c-c10e-4c21-b222-4ca3cf1c54bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbcb469-1e91-4d6e-905b-669c207e6824", "sighting_of_ref": "indicator--9569e5c8-ae40-48e2-8321-5fa08aae9463", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da3d73a-2d7e-48b6-bfd0-989b314534f5", "sighting_of_ref": "indicator--98a4821a-4dc7-46c9-be11-5cf81cb93c32", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a82a1e8-ecda-48ed-afea-03ddbca69d9c", "sighting_of_ref": "indicator--98a4821a-4dc7-46c9-be11-5cf81cb93c32", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfc510f-0bdc-4eff-8269-98c503cc3294", "sighting_of_ref": "indicator--0c5380c9-305b-4ef0-8789-3c8f139e79ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4851ccfb-0df4-4306-b507-c4e520a84607", "sighting_of_ref": "indicator--b55de5e3-5623-45da-8025-ddcead4a3cd7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bf1f35-161c-4e64-91fa-d2046f915194", "sighting_of_ref": "indicator--ada92f38-17b1-45e5-a51e-67b1d7dca4c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f528600-1ff6-4be0-8867-86c911a8ed85", "sighting_of_ref": "indicator--7c501fce-eb82-4c96-8503-16d32713dc28", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6988e83-a8c5-4ff1-8d07-0af19d9a209c", "sighting_of_ref": "indicator--c4643bbe-2c69-4241-8fb9-b5b21d54d86d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0b0c81-8b3f-4367-9b52-4cce0f484769", "sighting_of_ref": "indicator--e400dc7a-69c5-4c0c-923d-ee154cc7767a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156b69e8-fef9-4f80-a7ef-79157564fdd0", "sighting_of_ref": "indicator--f8f7a152-863b-46bc-9876-307c7a2ef388", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3af116d-a9ff-4b82-9f98-8dad9b666d4f", "sighting_of_ref": "indicator--f8f7a152-863b-46bc-9876-307c7a2ef388", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5134a1-ef57-42fd-a5e4-94047deb550c", "sighting_of_ref": "indicator--25c507dd-2f62-461b-8fc0-805170ca1488", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37061fd-851f-4458-aa98-26ed4e849e53", "sighting_of_ref": "indicator--6870a73a-741a-4f7c-9b68-2dcb491b610c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850b23f7-3b20-4929-aa04-628b4e7cef92", "sighting_of_ref": "indicator--6d924bf6-ef07-4d44-b3f3-a3e5b5f8d88e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15462705-c397-4c2f-ba41-bc1e0fdc3090", "sighting_of_ref": "indicator--fc6b63d8-6739-4f41-96b3-5588e8b94d74", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47192de6-bdde-49ab-814f-ca50aa4ba44b", "sighting_of_ref": "indicator--e17bccf7-2697-46ca-8568-35ee4e49807a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba3f794-136b-46bd-a53d-0f61620b87cb", "sighting_of_ref": "indicator--d1b6f3ec-c7fc-4658-8710-bfc0816cc8b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de0e996-9719-45ef-9211-0112abd9c989", "sighting_of_ref": "indicator--e4b968f2-1ca6-49f9-9778-f5202aa428d9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42b67c6-791d-46c1-b04b-71ebe5ec2275", "sighting_of_ref": "indicator--e4b968f2-1ca6-49f9-9778-f5202aa428d9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeedd465-2da6-4c39-a06b-c8e8a42d5ef7", "sighting_of_ref": "indicator--bd30ab3b-274e-4428-aae6-59145c826e51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6bf7e6-5f37-4f5b-a3a5-4037982a62a4", "sighting_of_ref": "indicator--054c9fb6-cdeb-47f1-a94e-ee817d5c1db0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193b7395-90eb-4b4e-aae4-f9b2ccb0a8fb", "sighting_of_ref": "indicator--41ab67f7-ab88-4ee1-82f1-27ee040995cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af4697e-bb59-40b7-bed8-6269730b7377", "sighting_of_ref": "indicator--abe77600-cc41-4a8e-a8c7-fd962c6d9295", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11092559-b093-404d-a644-71a2b57eb068", "sighting_of_ref": "indicator--7c0512e6-5643-4c60-8cdb-6d2d34c3e656", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e324b96f-5eef-4d4a-b356-1244bf25cbf1", "sighting_of_ref": "indicator--ef1269e4-0601-4edf-8db1-6ff34388b7bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dbfb75-6eab-4e7e-866d-0d9df781781d", "sighting_of_ref": "indicator--3608b6aa-c03a-402f-a911-61f39bc04e62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069b3bec-690c-4c07-9e35-1a6f19611f45", "sighting_of_ref": "indicator--ba1933f5-2495-4cda-8ddf-e6ace37fd309", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2bdcd3-7c4d-47eb-985a-7f610d9fab69", "sighting_of_ref": "indicator--bfe3dd71-5a5e-43a4-9476-37a5e732ffb0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ccc660-c72c-444d-843a-505610358c11", "sighting_of_ref": "indicator--bfe3dd71-5a5e-43a4-9476-37a5e732ffb0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb6d1c3-7fa7-4d36-a16c-2115bb89a8d6", "sighting_of_ref": "indicator--6bd1dd95-1748-4b88-87ee-88851a5af4d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb51888f-0bfc-4387-91fa-aa78fecce7b8", "sighting_of_ref": "indicator--4a1c6304-bdf7-4f4e-bf14-7cabeac69386", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c920418-04b7-4006-9d8f-2a2f20095a2f", "sighting_of_ref": "indicator--4a1c6304-bdf7-4f4e-bf14-7cabeac69386", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55260e5-b58e-4778-b2cc-7bfd87ea5236", "sighting_of_ref": "indicator--499739e8-3e0b-4289-9624-ebe8cb726dae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385db926-8df4-4359-87d1-5bff934dde9d", "sighting_of_ref": "indicator--0fc93ea2-0531-4e7c-8e9b-84a7c83ae0ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c452ce-0dcb-497c-8979-c66f97050ebc", "sighting_of_ref": "indicator--0fc93ea2-0531-4e7c-8e9b-84a7c83ae0ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f79256-30dd-48ec-8e51-09b4cf4bdfc9", "sighting_of_ref": "indicator--fceac635-511d-4278-b5f3-2741f34be614", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bcece0-483a-4318-ae68-1f524f80ee92", "sighting_of_ref": "indicator--99326b3f-ad02-4f7e-a7e1-11861926174d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cd2834-3e91-4180-bac2-54e82ada5862", "sighting_of_ref": "indicator--99326b3f-ad02-4f7e-a7e1-11861926174d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8da5c49-f0d6-401d-84c0-c7896b82f12d", "sighting_of_ref": "indicator--72c404f9-282e-4d22-ae2d-bd5006b61066", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e319d8-f0bc-46f5-bae9-cff22707757b", "sighting_of_ref": "indicator--72c404f9-282e-4d22-ae2d-bd5006b61066", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d391e7-35ce-44a7-ad6e-0b506d24c266", "sighting_of_ref": "indicator--2bed4065-b2c3-4c5b-8349-f6f6f6594223", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14cbe74-77f7-4154-82fb-ecfc0bad944b", "sighting_of_ref": "indicator--2cb491ef-ef30-48ea-ae55-9d7d4facf160", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7fddc6-f9ec-49b5-b8fd-fe9a2a5cc6c1", "sighting_of_ref": "indicator--c283994a-6c14-4b2e-a65d-fac8cb351b90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadc530b-db90-431d-b1f8-28b4a26089bf", "sighting_of_ref": "indicator--13a51d5e-466a-4d57-a32d-2fb1a2f0ffe5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09a1337-3239-464d-aeb2-89bbe96cbdde", "sighting_of_ref": "indicator--73fe783b-d681-4533-bb3b-e45dd336a0c1", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483c34d9-725f-4816-8e70-079a0cb709d9", "sighting_of_ref": "indicator--6a29beee-3b12-46f0-98e5-8a12a38a8d2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1087b5-b73b-4f1e-ac82-a90333965d93", "sighting_of_ref": "indicator--2e315204-e9bd-47f9-9905-36ba6825111f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18544a2-2f87-495b-9c04-04c8eef6cc54", "sighting_of_ref": "indicator--2b42c946-5aa9-4f2d-bf31-5f829d4b9036", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62bbc4a-7aa5-4ece-8fe0-d2ec6da40f03", "sighting_of_ref": "indicator--8187858e-48e0-45fa-92c0-092b7843ca06", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924f741e-7257-4d9f-8879-620512000be9", "sighting_of_ref": "indicator--43055fc1-1095-4b9f-b7a8-700753ae80b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521dbe0f-0f31-4554-b745-52b1a97af85c", "sighting_of_ref": "indicator--43055fc1-1095-4b9f-b7a8-700753ae80b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890ede75-ce22-4fe9-aa52-21db6a3bb379", "sighting_of_ref": "indicator--f1c6644f-5cf2-4219-9c9a-66d29cf1a080", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9c7c72-122e-480c-a395-350a1818a947", "sighting_of_ref": "indicator--6e8c7f89-7b4b-476b-851f-679b47d43951", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acf67e4-284d-4d6b-a286-7c8a6d1d567c", "sighting_of_ref": "indicator--6e8c7f89-7b4b-476b-851f-679b47d43951", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de70b454-d0da-4315-a216-e1cea9c27d87", "sighting_of_ref": "indicator--1ae07744-00f4-4ff2-b377-216c1ac10fa6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6835c561-b663-4290-ad6b-050dd34ff3cf", "sighting_of_ref": "indicator--1ae07744-00f4-4ff2-b377-216c1ac10fa6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883c70aa-3c48-40e9-b540-750629859afb", "sighting_of_ref": "indicator--452f2b12-9385-4e42-affe-43748d37c0f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75e7512-f03d-4b1f-8945-f8b861564f73", "sighting_of_ref": "indicator--6fa4f66a-da13-4c92-9294-668a5fc21a77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2205a2-a503-4285-b134-4a2df976a8df", "sighting_of_ref": "indicator--ebb5a432-ba7b-4104-b190-b8899d8eae30", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038d3497-96aa-482a-bdb2-5025b876a45f", "sighting_of_ref": "indicator--12408ede-8881-4955-98d6-852b18755d83", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3952364d-c63b-4c12-8e98-668cfd57fe9e", "sighting_of_ref": "indicator--12408ede-8881-4955-98d6-852b18755d83", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c92746-f110-4b87-a9d6-925ce85edffc", "sighting_of_ref": "indicator--4c424298-10af-40c5-82dc-b6604158dbe4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7855100-243a-451f-94cf-1a245b1d8677", "sighting_of_ref": "indicator--4933dcee-2663-4377-ba9b-50dde7c25b35", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d29295-ec54-43f7-a15b-d8e48adb7e8b", "sighting_of_ref": "indicator--3b34dc92-38cf-4f5a-ab52-048f5de551d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb7dbc9-cea8-4ef4-9384-def4f250f8dc", "sighting_of_ref": "indicator--40a3b088-ab7c-40fb-8229-b56f17a29181", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b92a419-8632-43c4-a0a7-9c67b4026699", "sighting_of_ref": "indicator--b8de4fa0-a083-46c2-99a4-ef2d76ddd7e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcf23e4-1d91-4772-83de-a8af3a02974f", "sighting_of_ref": "indicator--ede3f08c-b003-4aa4-bab5-53c34fa2d083", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050c046a-cff9-4eba-8cf0-cfcca7ae2bd5", "sighting_of_ref": "indicator--1af277ea-1d3c-4c64-897e-ac83588dabcc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de1ae7f-0946-4573-9462-d91c009ff6c0", "sighting_of_ref": "indicator--49b51068-04c7-4d8f-8d76-6ab90972b098", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18102110-be42-472c-8a12-67513408f25b", "sighting_of_ref": "indicator--159ba460-1fc9-4b1d-b871-ab198eb501c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2591cb-3b10-4fbe-95c2-ca6c768edf6a", "sighting_of_ref": "indicator--77ae235f-4669-4815-b3c6-27f0df9feab0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c71ad1-7387-479a-8616-8455f3aa7b2f", "sighting_of_ref": "indicator--ae97a140-1f8d-4d42-bae1-9e4f7003e577", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741778ef-85eb-4fef-a5c4-25f34a3cf5f6", "sighting_of_ref": "indicator--ae97a140-1f8d-4d42-bae1-9e4f7003e577", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3546393e-6fcd-4ddb-b72c-0cae1b0252da", "sighting_of_ref": "indicator--30cab6db-1795-4abf-a948-27459f4a628b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cfbb48-c976-48f5-8aeb-bbe381c3c891", "sighting_of_ref": "indicator--baeb671e-d9b1-4ef1-80e0-40935a8ce3cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba02d9e-e004-49c7-8adf-08e6eeedf926", "sighting_of_ref": "indicator--5a9b52ec-f8f5-48b1-88bf-f14d595c58c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cca4d3-dbfa-48be-a6f0-13e66b777c1c", "sighting_of_ref": "indicator--5b91ffb9-3021-4efe-b752-a6ca03f8dccb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b4f0ca-2c52-45e2-9bf4-f846689635a5", "sighting_of_ref": "indicator--4fdd4cc8-40cc-401c-82d5-59b948bc7a67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e0a234-c287-48de-ba91-39fde71f72f4", "sighting_of_ref": "indicator--ca5dfea0-a969-4d3e-a29d-be2ef53baeff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4bbae49-8c2b-4dbb-8aca-5b10c97a8aab", "sighting_of_ref": "indicator--769b99ba-0447-401b-bd30-6556ff65eb4d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1014a8e2-11d4-415f-b526-c0a3eaf93555", "sighting_of_ref": "indicator--7cdc9021-1a1f-48c8-9487-4e3bc10ab1f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002f4c2a-adbc-4957-bfe0-40e7ad469fb4", "sighting_of_ref": "indicator--593327f9-7951-40e3-bca8-bddb227c36bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c47566c-bbbb-4e00-80ad-27c343f88fc4", "sighting_of_ref": "indicator--ee7829c8-aacc-4857-bfeb-d16b826f6d10", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db6645b-ee9c-439c-9b6e-592338280c62", "sighting_of_ref": "indicator--ee7829c8-aacc-4857-bfeb-d16b826f6d10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04007cad-de2a-4062-aae6-ebcbcb20509e", "sighting_of_ref": "indicator--7fb434fc-0218-4e79-9df2-d62e9c2c3707", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245023ca-6782-43ec-986b-717d6c76e38d", "sighting_of_ref": "indicator--7fb434fc-0218-4e79-9df2-d62e9c2c3707", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548d858a-7616-4cf2-816b-0d37d891c62b", "sighting_of_ref": "indicator--e40e2619-79e7-47f8-bd2b-3974d9ec055f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bfc6cb-3c7c-4ed7-82a2-d5e7f21de492", "sighting_of_ref": "indicator--c3e8207c-c92a-443a-b735-68214b74c9a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd2aa96-14e5-4170-b1b7-b50416813d29", "sighting_of_ref": "indicator--ea73bf92-a249-4283-811d-77ecb21f45d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a836274-cc11-47e9-844d-1ce68e5383de", "sighting_of_ref": "indicator--a28b0877-dcd0-420d-a585-ff72e7465b5f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5586d3ac-95fc-473a-a0b9-6d734879b127", "sighting_of_ref": "indicator--a28b0877-dcd0-420d-a585-ff72e7465b5f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20141b7c-2c2f-46ed-abdf-9f993a2e29ea", "sighting_of_ref": "indicator--0a8475eb-ba8f-4425-9845-ad8869f087be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a06605b-ddf7-45cc-b1a9-4359d9dc9db9", "sighting_of_ref": "indicator--cfa19197-dbcd-4ba7-8915-8e2ac0b0bf9e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b092273a-4fe4-4730-a7c4-6daf2d10d53f", "sighting_of_ref": "indicator--96ff8263-7128-4d65-b257-79309cbb8277", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a93304-d389-4c88-8e9b-3c7d0422a9f4", "sighting_of_ref": "indicator--22489ae3-a55b-4585-9ff1-c7e489b889ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c2f775-735a-4b8b-87ee-c8bdf8c18ea4", "sighting_of_ref": "indicator--2e77e65d-2f67-4596-b491-eb5764b21a2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1d67f6-3d9e-4a08-96c5-460059793fc9", "sighting_of_ref": "indicator--54520ff2-f198-4ff1-b98e-8c1f0449ca74", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be29c171-4d51-4d1f-9541-fe00e5880653", "sighting_of_ref": "indicator--78e1449d-f7f5-450e-9df1-236d7a383565", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bc0e82-ca04-4555-852f-1ce3ebc3c840", "sighting_of_ref": "indicator--062511f3-6e7f-4e36-8742-884fc098cecf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31433a85-f848-4b53-8976-de08bc65cd99", "sighting_of_ref": "indicator--a1f35a4c-accc-484e-8715-7f5a7a72321c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1ce47a-b37f-44a0-bdda-ef46e6c702a8", "sighting_of_ref": "indicator--55b83334-6170-495a-95a0-a53eb11fd1f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14995e6-7ed6-41c7-8563-59580f4f86fa", "sighting_of_ref": "indicator--a1e3a318-d00c-400f-b3f5-3fe86a4cf711", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2484975d-5a61-4571-b322-f3f933f8617a", "sighting_of_ref": "indicator--0117f08c-e7e7-4202-a200-d76da91f6d9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84976ee2-40a6-45d9-8e24-6ae262b8c3da", "sighting_of_ref": "indicator--0117f08c-e7e7-4202-a200-d76da91f6d9c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2f710d-34bc-468e-b472-eaf3d3b22044", "sighting_of_ref": "indicator--1a114a17-01ee-48bb-ac8c-f0eef374c637", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f29a21-f217-4c42-971e-e7cc24e7ce76", "sighting_of_ref": "indicator--a96dfd3f-d45f-4de4-834b-c2ff2bb7aef7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27965c27-b422-4531-af01-2e44837bff2e", "sighting_of_ref": "indicator--a96dfd3f-d45f-4de4-834b-c2ff2bb7aef7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834b275e-024b-4901-8f32-11705fa2115e", "sighting_of_ref": "indicator--9eec7b79-c9f6-4d4e-b2ad-fb09f43ba3fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48288064-a672-4f15-8021-38a4433153be", "sighting_of_ref": "indicator--30230d35-4233-412e-908c-1e1126a413b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83a5d62-4a4b-4bdf-85da-ef04f9d25694", "sighting_of_ref": "indicator--ec4f54fa-9fc4-4c0e-af3d-2a80deea507a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694a56be-0448-475a-9e3d-1c04bbe60dec", "sighting_of_ref": "indicator--1adb140d-34f8-45c5-906a-1790fede7644", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ea4a0d-5373-4468-84b2-0d8cb2efd8be", "sighting_of_ref": "indicator--95eca2f2-b8ff-427c-be6b-e360b28f7f9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc520b8-498a-49e1-9c03-f75d31ddd472", "sighting_of_ref": "indicator--de2725a3-323b-4b78-873f-595408a42979", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81553e09-616e-44ac-95d0-18f18948ab10", "sighting_of_ref": "indicator--198181c4-798a-4ca6-a207-a1fc8efba1c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f38a78-a1a3-4cc2-97d0-cdb4cd3db868", "sighting_of_ref": "indicator--198181c4-798a-4ca6-a207-a1fc8efba1c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c02984-d3db-4f98-b189-fb21ec54d245", "sighting_of_ref": "indicator--deefa144-e216-4ef6-964b-dccaf0397deb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fada69de-bc20-43d1-b787-9bf60efbc968", "sighting_of_ref": "indicator--1b9e9d2d-27e6-4aaf-9f88-2743d282371f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff20e770-2417-422c-8f9f-af743ce89f35", "sighting_of_ref": "indicator--1b9e9d2d-27e6-4aaf-9f88-2743d282371f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e2f06f-0888-4212-8d18-6116a5c2ff05", "sighting_of_ref": "indicator--8130449a-c9f6-41ae-afb1-5947b4e35f3e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be597ad8-e16e-4efc-8e83-1e5debe78479", "sighting_of_ref": "indicator--fe8a93b8-fb9e-458b-bd6a-3fac8939adad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5133c855-7a84-438b-ba70-2f4d896cb90b", "sighting_of_ref": "indicator--6f592647-1b9f-4a5f-aa50-13e77f6d0dbc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42c8da5-296d-448b-bb64-0b6c23a6f86e", "sighting_of_ref": "indicator--90a35e19-f302-478f-8abb-72230048fc43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7101b8-8437-431e-a6a8-90355b380faa", "sighting_of_ref": "indicator--143a1537-26e7-4bda-adad-765772f1c0db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a944b6d6-0ff9-451d-ab2a-8ac0f4a03d01", "sighting_of_ref": "indicator--1f044d39-a07c-4b43-9036-9c6ee7acf7c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990fde97-32c8-4a47-9715-f93e28a0cb61", "sighting_of_ref": "indicator--c204262a-d20c-400f-aa7a-6d1a1004639e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54484ab3-6633-4b53-9da4-8223f801b6de", "sighting_of_ref": "indicator--86ed7274-163e-4c7a-ab5b-9450ac26cd76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc3bd8a-e8a0-4e0d-9878-ff081517da29", "sighting_of_ref": "indicator--ab4621e1-d1f7-4271-9c8f-c913c6ce1076", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb98b91f-b49c-427d-89ac-4e2266d793a8", "sighting_of_ref": "indicator--7a50eaae-44c7-4136-bd0e-b24a54a5b3e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd34e02a-cbd7-4d5a-8334-13db094b6e7d", "sighting_of_ref": "indicator--83c5ff08-c3e2-4345-8c78-4c4f248399a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f650c68a-84c5-4442-a5f6-22ef1e81e18c", "sighting_of_ref": "indicator--3307036a-1369-4d83-9577-de8d74089774", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a337945-e09e-415f-b7ee-5f279df68621", "sighting_of_ref": "indicator--e900dba5-0579-4154-8647-387725508847", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43675dec-f8c6-446c-b358-cfaaf65cbe49", "sighting_of_ref": "indicator--e900dba5-0579-4154-8647-387725508847", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c2ba31-bb49-4823-8e34-8835fc9c105d", "sighting_of_ref": "indicator--12849905-5693-49f9-83a9-12b7cbabe5b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4363554-a1f8-4896-829b-54d636d27ea8", "sighting_of_ref": "indicator--e776951e-58b1-491c-8145-3e192077507b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd5c530-4cb2-42fb-afc2-c8261fe09ddc", "sighting_of_ref": "indicator--e776951e-58b1-491c-8145-3e192077507b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c535117-fed0-496f-bf47-22e8107a63a6", "sighting_of_ref": "indicator--fc9a6c91-3df9-452e-a7b4-b7eda9c554d9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898d4b07-9d1f-482e-9dbb-742207d85228", "sighting_of_ref": "indicator--dd3d70e6-98ac-40ce-b00a-a4b056ab57c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85636ce0-12b3-4e3c-99bc-9628d0383d05", "sighting_of_ref": "indicator--6580377a-2a35-4aad-8c79-edad61146500", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076fdaa3-d676-4621-a0ab-03d24a96a0f4", "sighting_of_ref": "indicator--eb50f28f-deb2-48cb-8b92-c643d16632eb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b272a1-954b-46ca-bb26-2d68b4cc76ff", "sighting_of_ref": "indicator--f3758198-51d8-4067-b467-18e267a0921a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da17bd5d-1a93-4e49-8bcc-78d9c4c22636", "sighting_of_ref": "indicator--1a0fc4c9-0278-4378-9883-a189a130e589", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061dbd75-c07a-4d46-a84c-5fca98bcf4b7", "sighting_of_ref": "indicator--ca8a6fe0-fff5-4c2a-b2bd-edab8e68b778", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4c19f3-03c8-42e1-9878-9d331f3e9bd3", "sighting_of_ref": "indicator--891cc0ca-2e80-4683-b5f1-06381aca49bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0463de24-668d-4515-a3b2-ebe010a57693", "sighting_of_ref": "indicator--62acfa3a-b2a1-4ab9-aeb0-73c358d87db1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b9eaaf-e0e5-4961-a0f4-c82298839971", "sighting_of_ref": "indicator--be282601-2b69-4712-b4ee-59ca3e9355c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0d345d-e98e-4a1a-911e-1ef54a26a095", "sighting_of_ref": "indicator--2b0d3e2d-e5c4-4c00-9d48-e8724ca09e77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70a0d8f-05c2-4d69-929b-30c6bb63fe7f", "sighting_of_ref": "indicator--da9205b5-6505-48d5-b2c3-5ab43f42ee29", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1886480f-0c54-471f-b3a6-8a3fcec3f732", "sighting_of_ref": "indicator--5cea9594-15db-4949-9075-b9b8a4f02176", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39177318-2ae3-4d4c-9ad4-4cc821e29aeb", "sighting_of_ref": "indicator--8f5f0f0f-dd53-4c2d-abb4-680de175a6da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53a6d73-622d-436b-8f7b-030973f45e11", "sighting_of_ref": "indicator--0fc387b8-c18c-434e-82be-3e5f1e1c677b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1060c3-bc2a-4a9d-9cc1-e41a5d026b60", "sighting_of_ref": "indicator--a48740e5-bf71-4a14-87fe-437d8bdfe613", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b10c8c9-e152-49f3-982e-f0e35412bffd", "sighting_of_ref": "indicator--5679da14-87b0-45b2-804b-6226584d9a86", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced35968-69ee-48aa-add8-54cdd3001fec", "sighting_of_ref": "indicator--3a72897b-66ec-4391-ac82-1db2120d5fde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9513517c-9251-4b70-9141-4afdccf77d62", "sighting_of_ref": "indicator--77c291a1-2126-4455-b385-db9fd2798e12", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771ac656-3d49-44d0-895c-b7b123858b44", "sighting_of_ref": "indicator--77c291a1-2126-4455-b385-db9fd2798e12", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f03a16f-be58-4fa4-8ee3-832890e4b534", "sighting_of_ref": "indicator--01bef39e-0f48-4a6a-b244-bd6fcb04871e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a10c6d-2bcc-45ed-a899-beaad6164adb", "sighting_of_ref": "indicator--01bef39e-0f48-4a6a-b244-bd6fcb04871e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4eec964-b90c-4725-b001-3267a447e647", "sighting_of_ref": "indicator--4bd8ff31-3a6f-4df1-be9e-ab5f0024cc05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9ae813-3ea7-4213-8c4a-311e5f48eb86", "sighting_of_ref": "indicator--7b62da73-84ac-4659-8df1-5c715a228257", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c56b2f-465c-4f50-b394-0168c3dbac5a", "sighting_of_ref": "indicator--21862968-74be-4c42-b5da-f8dfb47293b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08247201-c1a3-4842-a856-05bc4ac43a2b", "sighting_of_ref": "indicator--0dff1574-2f0c-4a70-ac51-e3b356afc902", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b25c25d-7766-4d4c-a82f-820a7e6fde71", "sighting_of_ref": "indicator--8b932f27-0878-4a08-b181-d2c6f9453327", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39502cc1-58e4-40bd-ae37-d586dcb07ea5", "sighting_of_ref": "indicator--98dde17d-15d2-4d65-8e2d-26fc3d8964e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe480e0-e420-4391-8823-a439a0cbad68", "sighting_of_ref": "indicator--98dde17d-15d2-4d65-8e2d-26fc3d8964e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1493aa-9b12-4e9c-acc0-4841d4de9a2d", "sighting_of_ref": "indicator--a805435d-2689-47f6-afcd-388d3f6645ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355073ea-aeda-4f73-9c48-4cd3b0ac921d", "sighting_of_ref": "indicator--ea68ebec-8033-4a13-90bb-051f4c873a87", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a23faa9-c0d5-4c89-b785-10a9d138bce2", "sighting_of_ref": "indicator--d6eff3d5-35fc-4414-9858-497a20e2c43c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05354ad5-e790-46b0-b2bf-07f90909d8bf", "sighting_of_ref": "indicator--d6eff3d5-35fc-4414-9858-497a20e2c43c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b57cb5-494f-4bc9-bbf4-e6091d089ed1", "sighting_of_ref": "indicator--348c4600-495f-4fe4-a2e6-8c12a894d7af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed070cf3-7b98-4c4f-a753-4c4892d0e357", "sighting_of_ref": "indicator--ef6ad876-08fe-498c-91ea-c824df5871d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34eccc48-858e-4fc0-a08e-e9d02be3ff50", "sighting_of_ref": "indicator--7f538436-64af-41d0-82e1-f0c96edde753", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e60928-413a-4a50-a581-6b1083e24c18", "sighting_of_ref": "indicator--7f538436-64af-41d0-82e1-f0c96edde753", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dcd8c2-4b91-4ae4-8d73-58e5b3df4258", "sighting_of_ref": "indicator--cb45c974-5f0d-48fc-a7fa-384725e86fd1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84da778e-e180-4253-9e21-01cb7ecc6689", "sighting_of_ref": "indicator--e5e208ed-5ea6-457f-8932-a436a6700b99", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4f072b-ac47-4105-951d-7f18cdc975be", "sighting_of_ref": "indicator--c1d0af29-aeab-49f4-9035-d29b6b2ca306", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7fe8f3-6710-46c9-a24a-78069e110ce7", "sighting_of_ref": "indicator--83b88519-a384-4c3c-a056-55f3aabaaee2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64502e36-5b7d-42b2-8dd4-ffe223967cf7", "sighting_of_ref": "indicator--f279a179-d0a8-4579-aee5-2d955d86be9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9298fdba-dee0-4129-9da8-d84a4e48ef73", "sighting_of_ref": "indicator--67961165-addf-4040-b7e7-b010e0f8f9ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a14e392-96e9-45a2-be1f-d0d8962b2ca4", "sighting_of_ref": "indicator--67961165-addf-4040-b7e7-b010e0f8f9ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d7fc15-bd6b-4a9d-8258-dfca06f13ece", "sighting_of_ref": "indicator--67961165-addf-4040-b7e7-b010e0f8f9ff", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4b7d65-3aea-4f99-9db1-dd05d545a648", "sighting_of_ref": "indicator--d00c2266-e199-419b-8443-46d750331dd1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0b0bcc-16a1-43e6-a011-6bdf44f2566e", "sighting_of_ref": "indicator--d00c2266-e199-419b-8443-46d750331dd1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659b6761-bac3-44d8-9180-32bf5422b858", "sighting_of_ref": "indicator--d67990f4-c5b6-4ff5-ba6d-b96db3dcfd43", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10efe619-e4ba-45fc-bc8a-a4eaf7ae591e", "sighting_of_ref": "indicator--d67990f4-c5b6-4ff5-ba6d-b96db3dcfd43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fc4831-9a45-413a-9917-82ad2f1c6ce5", "sighting_of_ref": "indicator--2af48937-036a-4df7-9691-410fea009766", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2335e442-3224-4bdb-9c9a-697e30465b76", "sighting_of_ref": "indicator--2af48937-036a-4df7-9691-410fea009766", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc7dd45-cefb-413c-b2a1-d7ea21943a77", "sighting_of_ref": "indicator--774973e8-b895-4526-8848-f1e5b1f94844", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05be61bf-903d-45f4-bbdc-f75900364464", "sighting_of_ref": "indicator--e3c94a07-7ef1-47c7-bfd3-8ca1e40f12f8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222895a2-515f-4777-b1d9-406c691b0887", "sighting_of_ref": "indicator--e3c94a07-7ef1-47c7-bfd3-8ca1e40f12f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9345249-0cae-4ef7-b8af-571118e1d9cb", "sighting_of_ref": "indicator--fd4b1370-6f43-4155-9680-e1f4753add13", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d56ee4e-e2db-4ef6-ae51-522eac79b46a", "sighting_of_ref": "indicator--fd4b1370-6f43-4155-9680-e1f4753add13", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f581f36a-4c72-4bcf-b966-5581c059065a", "sighting_of_ref": "indicator--6fa3787d-ab1e-4dab-8173-55731a04a922", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441c75e9-0255-4a87-86dd-9ce3db20b71a", "sighting_of_ref": "indicator--6fa3787d-ab1e-4dab-8173-55731a04a922", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1e459d-f574-4655-860d-669c6b21585a", "sighting_of_ref": "indicator--1c974931-09c7-475e-8f94-0ea2eecb3914", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91cd6995-3f5b-4311-af0a-9925979a55c8", "sighting_of_ref": "indicator--1c974931-09c7-475e-8f94-0ea2eecb3914", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526058b2-cd84-427c-89b2-5402d3fc5eb9", "sighting_of_ref": "indicator--1f273be6-45e4-4f0b-a0e8-5f328fa79181", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a97b37-8b37-4c80-a3ff-c99266ee6d00", "sighting_of_ref": "indicator--1f273be6-45e4-4f0b-a0e8-5f328fa79181", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c62de8-97ca-42e9-90e2-43d695c5d513", "sighting_of_ref": "indicator--0332484a-0f50-4c37-bba6-ce7463087a19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8fcd89-27e4-4952-be7c-75c637dd6f9c", "sighting_of_ref": "indicator--d36f9769-e7f7-48d4-87d5-94448c0754f0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9e3648-356a-4938-8ca5-ba0d76a60ad8", "sighting_of_ref": "indicator--d36f9769-e7f7-48d4-87d5-94448c0754f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314f0ccb-bb14-4e01-b9d7-2097ef8469e0", "sighting_of_ref": "indicator--bd329b68-46bc-474a-b052-cac90fc36612", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7697e8a-d142-40aa-956d-851f7c16433b", "sighting_of_ref": "indicator--bd329b68-46bc-474a-b052-cac90fc36612", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1948093-4ea7-4d01-bd82-27682e0084fc", "sighting_of_ref": "indicator--99dd796b-f019-4478-aed2-c912720d8880", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20443d4-1425-46a0-9b5a-1a5edc4a0c3d", "sighting_of_ref": "indicator--99dd796b-f019-4478-aed2-c912720d8880", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e7b083-ead8-41ab-a1a1-e40e7aba4d98", "sighting_of_ref": "indicator--8b308ca2-b010-49d0-8622-5c92bf365bf0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb576d6-72aa-4d84-be3b-28f68492b3ca", "sighting_of_ref": "indicator--8b308ca2-b010-49d0-8622-5c92bf365bf0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2950cc92-6066-41e1-b1ad-39b8030a17cb", "sighting_of_ref": "indicator--43c58f32-7073-45de-a8be-17a0a22929b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd4b2a0-06f3-46a6-9abd-b8ff2fddc508", "sighting_of_ref": "indicator--43c58f32-7073-45de-a8be-17a0a22929b3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8b5b4b-b83f-4f79-bbf0-87da07f4ed82", "sighting_of_ref": "indicator--978f2eec-1acc-4fa5-ac53-59a885a70ea8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25c6d73-de03-48b7-9695-4163b62ca472", "sighting_of_ref": "indicator--53b93b58-5623-4017-b140-6b0a1a7d2aaf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09243e54-8a72-4f46-8d84-d85be184c51a", "sighting_of_ref": "indicator--4aea0711-5548-4a0e-9c1d-61325ea62e09", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de73387-04fa-4732-9fbd-7773960ba9c1", "sighting_of_ref": "indicator--58bf7a21-00f3-4bb1-bcf8-ddff9a68bd12", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b162aa1e-7624-4b4f-a6b9-b1f0f6f58b50", "sighting_of_ref": "indicator--ba375cb3-038e-4215-85a1-4f9bd6111703", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4877def-5c3e-4fee-b19c-92ec769c5c60", "sighting_of_ref": "indicator--f05057ce-6d9f-4c8d-851c-9c87bce59f52", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5115232f-aba7-4057-ba91-c38a1fa90d29", "sighting_of_ref": "indicator--3a467d5f-730c-4d92-accb-79ea9dabb67e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939a6b09-30ef-482d-b589-adf208b6a745", "sighting_of_ref": "indicator--561b6276-d374-4a04-b855-a3ba0531e26d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69fe3f4-d19d-44a8-b6cc-4b434333c9d6", "sighting_of_ref": "indicator--b4286ed7-238b-4df1-b41f-02e0244a20c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82a0a21-71da-4aee-ad62-fcf61ac49f88", "sighting_of_ref": "indicator--b01af186-a01f-4297-8988-3cba857bb86c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cebde0-f493-47e1-b1d4-9b04124af115", "sighting_of_ref": "indicator--27a820d2-8d8a-4a51-925f-8e949d304f71", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d89a46-237f-4669-bac7-3139c212567f", "sighting_of_ref": "indicator--72197854-f727-4527-9b29-ed11e266bf51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191df4e1-3129-492e-82fe-533287571b37", "sighting_of_ref": "indicator--61059915-29b4-416f-a72e-2ed0279eb61c", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0378c56e-bd21-4d7c-8039-871200a5abfe", "sighting_of_ref": "indicator--f6de00f7-96c1-4d78-8d02-1272334fde9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7147f4a2-baa8-4aa8-b4a2-909311add0ab", "sighting_of_ref": "indicator--d7f96ebb-4172-450a-a613-8627cc7630f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903f4d3f-fef0-4d0c-9c54-ee8b4f3a1ce4", "sighting_of_ref": "indicator--cdc2869f-673f-436a-b616-f7f54b58195d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1e49d2-aa54-4528-869e-2dc347e6993c", "sighting_of_ref": "indicator--c04b54d8-8b18-47e3-9c5f-3df0cc3a0452", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716a95fc-5e3f-47ff-af92-7c52c58f51b8", "sighting_of_ref": "indicator--b7c29c1e-8134-4777-af07-7b5140bd3f20", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0232d1f-2fb2-4ee8-a5a3-c9ac45fd7726", "sighting_of_ref": "indicator--b7f0c67b-3a4c-4400-a29f-84b668fb5f61", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc5a158-6dd3-4b0a-838f-4a0cf404b6ef", "sighting_of_ref": "indicator--b7f0c67b-3a4c-4400-a29f-84b668fb5f61", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f63ff0-6d29-4f86-9544-2db487af3a8e", "sighting_of_ref": "indicator--3d60fb50-3b9a-43a5-9983-3b5d15940f33", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6521564e-e980-40c7-8cc2-7f6799a55696", "sighting_of_ref": "indicator--2b072d44-4c3e-4fe6-bbe6-a0de2bb21723", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dbdb92-39d7-4f84-b634-e322fc481eb4", "sighting_of_ref": "indicator--2b072d44-4c3e-4fe6-bbe6-a0de2bb21723", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d33acbb-5af9-4c13-b5e6-4dfe13a17b9d", "sighting_of_ref": "indicator--9481c72c-0c30-49c6-8912-22a3b98e3a81", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb6a7e9-85c8-41c2-8e09-c7a6da910d2b", "sighting_of_ref": "indicator--da3c9697-ee80-4ec4-b254-7fb5596b51db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19315c87-5e27-4e8d-90db-6a5596fdf9f0", "sighting_of_ref": "indicator--b43c6c03-3b13-4b6f-bd39-83790bbe58d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019e7545-edc3-49ce-85ac-4d5a60704860", "sighting_of_ref": "indicator--4f86733f-2840-4c7f-a132-36500973e8e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bd7d5e-c032-4f02-b87f-cf5a9d369b7c", "sighting_of_ref": "indicator--41906b29-0b6f-45ba-a780-a72fa10b73ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8df403e-d163-4c85-97e6-a62be658d00f", "sighting_of_ref": "indicator--22b31f59-af26-4d00-b467-3d5594942081", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485319b5-e2fd-4061-9cb4-cdf2ac08f0d5", "sighting_of_ref": "indicator--dcdb31dc-1d01-4351-b359-16681a3fe709", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caec8ff-5b6d-4bfb-95f6-d5b1ee8173c2", "sighting_of_ref": "indicator--e61918da-63ad-4d4e-ae71-998e4a339ea2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27caf627-43e7-42b8-b46a-12f237764baa", "sighting_of_ref": "indicator--ce87c10f-4cb1-4e7d-9974-09f434f6a14d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301f96b1-200e-43ed-a8d1-ad05a4711271", "sighting_of_ref": "indicator--65a5b3d5-5e96-49c3-a524-c984b3bce65c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a58fb7e-78cf-4f1c-9d39-d1024df57edb", "sighting_of_ref": "indicator--20aebb8a-cb77-46e5-8045-761e2b7af690", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010159b8-8f61-4e6d-a8e0-caac26d1c1f0", "sighting_of_ref": "indicator--4b19c800-8963-4ad8-a9b2-af319fabb078", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feacab62-1896-4c65-a757-5f6ca40f3eb8", "sighting_of_ref": "indicator--e8f3a8a2-0afd-4ebc-9672-f5a9c088d706", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96767314-e17a-47e4-a7b9-bafa6256d41d", "sighting_of_ref": "indicator--9ab04fb2-d3e9-4d77-9250-da7269cd1720", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd398946-a42a-4746-ae46-8968254e2c7b", "sighting_of_ref": "indicator--cf43a28b-2e41-47b0-a8f0-83d0c751c671", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64699c7e-4737-491e-bb3b-6f9aefc65940", "sighting_of_ref": "indicator--45c91d55-8572-419e-be84-689c235f47e4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e26b3e5-6d82-4cb7-977c-aa46fa6a75c5", "sighting_of_ref": "indicator--e7d7db5d-c609-47e3-8f60-4c4c2fd45070", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8240ab34-4da1-4371-8cab-7b6d1d705bb1", "sighting_of_ref": "indicator--bfbb3ca5-a5aa-44bc-a9cd-0ed7d1bb1f34", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46064f0-29c1-4e6a-aa92-94d0afaeb33f", "sighting_of_ref": "indicator--b466dd72-4a7b-4b9f-99cc-3c1f430af9e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a930de9-6a9c-4a5f-ad4e-678f5a3f12cd", "sighting_of_ref": "indicator--b54432d0-b488-43a9-973c-ae68fedb4b8e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07afa60-be14-4897-95bd-75a8f6a0f982", "sighting_of_ref": "indicator--41b711ef-0a95-48db-9910-0daf90aa9ffa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ee4808-408c-481b-8ed7-b12f446e373f", "sighting_of_ref": "indicator--200fce83-0a47-4a7b-9a97-6a13341ef040", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4882d2-9923-48af-9587-7df0273d2068", "sighting_of_ref": "indicator--8ad81a2e-4c3c-4c32-855e-0dd6ff31cd3c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79dfacc-175c-46cc-b46a-05be4be98b9b", "sighting_of_ref": "indicator--31ccbae2-d2f4-408a-899d-f62bd7cf8072", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbe0861-f427-4e27-9b30-eb19a580cfb4", "sighting_of_ref": "indicator--c19e609c-fcee-44eb-8f00-6c83ab05015f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afa6ec6-eaef-41c6-ac8a-31441a4101e4", "sighting_of_ref": "indicator--4dc5b5fd-1f31-4be4-9e44-dbd4f3f22b1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de309a38-ee9d-42f9-b931-5d9cb1de19bb", "sighting_of_ref": "indicator--d575546f-6bca-4d24-bf0f-c7bad71aa5c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f48bcfe-9b2c-4b8a-b9e4-9a50b9aa7c17", "sighting_of_ref": "indicator--ef2d642c-bef1-4ae3-8ba3-7aff10498d57", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bc57f1-79c0-4b59-aeb0-27a56865d682", "sighting_of_ref": "indicator--47a7534e-6245-44be-bde1-b6fc0af5466e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8888aa7-6cdc-4294-b6a9-eaf63c257b91", "sighting_of_ref": "indicator--3c15b779-e8c5-443a-b194-7b2ddbff4a4d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fa5a54-d09a-4b90-ad3a-8ff306040537", "sighting_of_ref": "indicator--ea827f8d-0307-4dd0-bf4d-cf20f0416a6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec45d6be-452a-404a-b23d-934f575405d3", "sighting_of_ref": "indicator--62cbecda-7e6e-40f9-8ddb-2b99d6200155", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928da89b-8a5d-414b-b31d-3885c76c444f", "sighting_of_ref": "indicator--439755c3-65db-42a3-8940-f62e7c5b4d8e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742f27e9-bc38-4766-8908-21dd9e09c137", "sighting_of_ref": "indicator--b5cbf290-c4bf-4694-9103-854d70e23b7c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9744abf-4954-4bd0-9019-d47c2caa78bb", "sighting_of_ref": "indicator--af99a13e-5670-4c14-a2b5-92797b715d14", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965b9a49-2825-4868-a9f3-b8eaf10b3644", "sighting_of_ref": "indicator--23ab8e88-990b-4b93-9263-dcbdd07bfc81", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc05c58-b2ac-42b9-9db7-093f3e2d5231", "sighting_of_ref": "indicator--8935e7df-3fef-403e-b234-840ba5f8c686", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed953250-4997-49f0-8946-72e33b0e51de", "sighting_of_ref": "indicator--e23614d8-722b-4987-9b54-c9a672bf9ce7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d425f795-24b9-43be-aad9-f3ebb21724a3", "sighting_of_ref": "indicator--235306bf-7da3-484f-a7f3-42a49dce4a5d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29466f70-5b02-476f-aa17-7ce64f677449", "sighting_of_ref": "indicator--0864c784-03fb-4fc8-9d2c-8ebb0abb3aa0", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0079a6f-2469-4cbf-8b37-b4f83faede3e", "sighting_of_ref": "indicator--abfc9f6f-fb43-4092-8c1f-3d122f6c8ada", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfdf97c-0de9-40d8-a76c-84ca9e131e06", "sighting_of_ref": "indicator--ddc8d4a4-ef99-40a1-97d0-69083123ce37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4baa9e5-7450-4d3c-9012-a2803b949100", "sighting_of_ref": "indicator--ae50b50a-dd8e-48cf-aada-3e78a162f663", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7817f3b9-a74b-47be-818d-1e5dd6332662", "sighting_of_ref": "indicator--5e94bdd6-a19d-4106-8c01-d40a376abbe7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442b3af3-4d50-491c-8324-ea49dcafc57c", "sighting_of_ref": "indicator--5e94bdd6-a19d-4106-8c01-d40a376abbe7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80828ea-a992-4cb3-97af-9380245bc6df", "sighting_of_ref": "indicator--9f29076b-f46d-4c0c-9531-74685bd19b56", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca65771-cae7-422b-b7b2-c461baf3512a", "sighting_of_ref": "indicator--74607362-7cf5-440d-9ede-3d026efe680b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d766abe8-1a50-4782-a26d-301039036801", "sighting_of_ref": "indicator--10609493-454b-49d4-a40f-a5f05d7e7e30", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc0ab21-abf0-4c38-8113-8bc2bdb20ed3", "sighting_of_ref": "indicator--bf27fd3e-8690-4113-b186-d807050e4c29", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f71eb5-ae26-4502-bdf5-543ec5b3d8f1", "sighting_of_ref": "indicator--281df242-a40d-439a-bf19-d151e07b1726", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c62f47-534d-4978-9c76-987ddf06d111", "sighting_of_ref": "indicator--24490d59-0d19-4bdf-90a1-555493798af3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610d742e-3a39-4551-9fc1-a861c80afd8f", "sighting_of_ref": "indicator--24490d59-0d19-4bdf-90a1-555493798af3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a441451-05a8-4077-a6f9-28a991f20f4f", "sighting_of_ref": "indicator--d92bc121-1b23-42b4-9071-471bb729a87e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede18778-092a-4bb1-8269-d85f5127422c", "sighting_of_ref": "indicator--2d62af96-e81a-4af4-8634-05ed8ff7a4d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9085b9c3-d0c2-4fab-b7a9-96d16fcf599e", "sighting_of_ref": "indicator--edb64c1b-d8b3-4358-9c2e-6cc757a3a9c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8b4954-b88c-4a70-aa22-16e320abab7d", "sighting_of_ref": "indicator--8f48608c-747d-4606-9b4c-21b047ee0345", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26acf74-aed1-4690-b2c9-bf5f9f7f9d18", "sighting_of_ref": "indicator--fd598cd1-1ce6-42f3-8597-3c058924d0f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ed2ea2-7ba8-4213-9185-9112f086c572", "sighting_of_ref": "indicator--f110abbd-95a9-4f7e-8c0a-971ec5472be9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb3a988-8d2c-4a7a-8ada-fe43c5c7677d", "sighting_of_ref": "indicator--db19acb0-cab4-4fbc-8394-efedb8fba554", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6ba741-e08a-4dc0-a501-634b56e13894", "sighting_of_ref": "indicator--3a3f293c-f06d-4b10-ae66-d736baf78b6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f800f733-3943-46ca-84d6-ee08c8d97a0c", "sighting_of_ref": "indicator--278a9a7e-7f80-4cd4-8aa4-e88446bccea2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610ef2bc-7355-4e21-92a9-dc73b9de6b8b", "sighting_of_ref": "indicator--cf00c04a-0d96-4a36-8928-03de54b96e04", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985177c1-9b8c-4a3f-93d0-527db9c8f4c4", "sighting_of_ref": "indicator--755a6633-c5fa-45dc-8846-9370a0812dbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5451b8fd-3db7-4a43-89f1-731ef8bf23b5", "sighting_of_ref": "indicator--8ebac0a9-2708-48f9-b77c-b6a6980c9be3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d125d97d-1ed8-4612-b418-23da51be9d80", "sighting_of_ref": "indicator--46a0fc68-5c45-4264-b0f8-f35424e1a9b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9806c8-c33a-48ab-84e2-1d508718787f", "sighting_of_ref": "indicator--ab72b28c-f5cf-4e42-b7d7-66cc7b067786", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b35324f-94c5-4021-a19c-4af74e6c44c5", "sighting_of_ref": "indicator--9a3cac8d-b390-4697-8d83-cdd6e79155de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb58183f-d427-440d-85d5-2f124dd4903d", "sighting_of_ref": "indicator--bb6524df-90b9-499c-9bd9-5a1ff9a92514", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5168f638-a174-425e-a6d2-2338afeac5cc", "sighting_of_ref": "indicator--d89a1cd4-e232-4c03-9455-5da496467c0c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b778da26-2aa9-4bf5-8c4a-0149321c384b", "sighting_of_ref": "indicator--7d353670-4524-4966-8dc7-1a98ac74c3db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922e1b6a-0e50-4716-aefa-3a8e7c7b368c", "sighting_of_ref": "indicator--db8d8b25-ca2a-44ef-a433-3fe0b7ec7c43", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05654649-729d-4cad-a07c-d859e20b694c", "sighting_of_ref": "indicator--bf38a78e-0263-4d7e-a03d-304d9ba94570", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cfe2fe-1d2f-4dca-96bf-3fda97412766", "sighting_of_ref": "indicator--43735ef6-7a59-4752-bcb8-bd0649c3aa56", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9423247-2648-4ee3-b04e-3e43e3c33613", "sighting_of_ref": "indicator--68fda84b-84a2-4ba7-96d9-0b78791b2eb0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227551f7-901d-47e1-895c-a6b77bcd6f05", "sighting_of_ref": "indicator--461fc041-0508-4ff5-9cdd-800235d7d002", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e6eff2-1ed5-42c7-a42e-f478000303ac", "sighting_of_ref": "indicator--461fc041-0508-4ff5-9cdd-800235d7d002", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcd4603-21e6-45bd-94f8-4e1bc7ef0aad", "sighting_of_ref": "indicator--0ab7ba97-dd0d-4ecc-91d8-a4ddcbc58703", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3dd425-118a-41ea-9a73-4a490b477292", "sighting_of_ref": "indicator--efc14b27-b550-4434-b075-65b7d9bede88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7893f2-0e17-4dfd-aeff-c76ace7c1290", "sighting_of_ref": "indicator--8873aaaf-6028-4a34-b3df-a871be0b8d3f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0859fd-59f1-422c-9a15-eb73da0fb4a3", "sighting_of_ref": "indicator--945f76c2-0b12-4f0b-b6d1-749c24b59a3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb1a107-fda4-4f67-9870-f5f4c9cd76e3", "sighting_of_ref": "indicator--b801711e-0fe3-4873-9976-fb6ca70a1b25", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafcc0e9-e57d-4ef9-ae91-45cc29011497", "sighting_of_ref": "indicator--b801711e-0fe3-4873-9976-fb6ca70a1b25", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ac37db-5857-41cc-9767-af91553ab247", "sighting_of_ref": "indicator--66919ed9-11d1-4ba3-b365-6cda5be32164", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1181f43-ac63-423f-a67a-b71f4784699d", "sighting_of_ref": "indicator--8691e955-e326-468e-906b-2a6bc8db0fdb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052b2b41-a835-437c-ac39-2ca0950cb53d", "sighting_of_ref": "indicator--b659588a-91c3-4666-95dd-5d8f6ba0c279", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3488ae-2dc0-427c-a03f-4b06a38de819", "sighting_of_ref": "indicator--4ff84bcd-aae3-4fed-af76-519951b6b8bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e064d75-6b69-462d-af53-4b1edd10a33b", "sighting_of_ref": "indicator--7dcead04-3cd5-4a90-aff1-2bdf18bac66c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a5bd78-c5ad-4231-b3ea-9b15ae1147b1", "sighting_of_ref": "indicator--97478dba-ef67-4150-a35d-a9508f5d3e2b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad6ff28-0bc7-418b-b83c-5513009aed90", "sighting_of_ref": "indicator--0a9cf8c1-1fb3-46e5-b745-140c3b7942ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376bd9ea-85d6-4745-9f0e-52bbe1678609", "sighting_of_ref": "indicator--aa63c46f-5a28-4cd5-b65b-be02338e5204", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaebe76-45bf-4b02-bf80-ed52683f0210", "sighting_of_ref": "indicator--aa63c46f-5a28-4cd5-b65b-be02338e5204", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8870061-f969-46f1-ae97-fa9b074fd8ab", "sighting_of_ref": "indicator--d81d9dd0-4bff-4b91-9865-75b7ce2597a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855dcd89-b6e9-4cd0-aefe-7427501e01f1", "sighting_of_ref": "indicator--738deb6f-d5d7-4a5e-8ed3-8be6e3e453e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26b84d4-6b70-4367-85be-bec684af4f74", "sighting_of_ref": "indicator--b67dbd73-d968-4fc4-aed7-a941d708627b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5012b3-d41d-4ad4-8af8-fcd04af2e57c", "sighting_of_ref": "indicator--0dee9657-b09e-4a24-8328-7aae7a484ffc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35df2aba-490c-402b-a542-fa7936212bbe", "sighting_of_ref": "indicator--2432a3f9-f32e-4a38-b30d-66db5899b2b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec9b072-bb17-46cd-89a9-a792f31c50c6", "sighting_of_ref": "indicator--2432a3f9-f32e-4a38-b30d-66db5899b2b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82833ea-38d1-4b69-bcad-f5774eccd8a7", "sighting_of_ref": "indicator--7dff106d-6f72-4084-bd0a-644e4b958a2f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92ba54d-563e-4914-8e6a-8745376f494a", "sighting_of_ref": "indicator--10134fce-4e32-4326-8bc7-cccafe847d64", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbdc09a-1541-4129-8a53-91cddd13fafa", "sighting_of_ref": "indicator--b8290a59-4da3-4ae3-8364-133f89e135bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f555aa2d-1693-4f4a-94bf-b96f7331ca4e", "sighting_of_ref": "indicator--77aab1a0-2a7d-4373-9fae-f913ef401918", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56e998f-f4ec-4012-a636-bab7078154e8", "sighting_of_ref": "indicator--79f0c4b8-367e-44f0-8a11-de34ec5a998f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe86d4d5-836b-4b80-afa2-961a657f1268", "sighting_of_ref": "indicator--61f5e88e-5c48-45ea-8720-b794bf87bf99", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c65453-7814-43b8-8d3d-0208fd39b168", "sighting_of_ref": "indicator--7fdbca96-8f7e-4d7a-83e3-d83bb9d1ecd6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4829414-4b18-4595-9479-d63b25a839ad", "sighting_of_ref": "indicator--f71a61fc-0454-4bc4-a322-37ea01c57d51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d62ff32-8f2e-4751-94e8-65cb5a5dffe8", "sighting_of_ref": "indicator--58873101-0f6a-4e5a-a01f-fab289c25081", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db82272d-6fd1-40f2-ba2d-3a222244e162", "sighting_of_ref": "indicator--4c0b8082-3146-4a19-9387-bcda4d317099", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0d8c21-3c4f-4ade-b949-f61479fbd828", "sighting_of_ref": "indicator--916a9b00-6d58-4d8c-932d-938b0c96eecd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5012c93-9974-43a1-9931-524e95011f25", "sighting_of_ref": "indicator--56001c9a-a2f2-4e83-b8f8-cabf44fad62f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8245a7fc-cc8b-46cb-a52f-b1f8d43e3fb4", "sighting_of_ref": "indicator--9c1675a0-d9dd-4d3a-8695-11da305b511d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801a134d-401f-4b85-af6b-76f52e4209fa", "sighting_of_ref": "indicator--93659afa-fe23-4d94-a47f-bae83318b6f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da88906-9e83-4b3f-aff8-71e350fddc26", "sighting_of_ref": "indicator--51e491dc-c485-4bc8-b256-bd13b7c189ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3eef0b-0712-4894-8760-c406214aae61", "sighting_of_ref": "indicator--1d133518-4b7c-422a-8aa6-a99841a16b1c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7b185b-669a-420f-9e83-aaa831253d7d", "sighting_of_ref": "indicator--879d4730-8834-4b42-8f1f-275524ca071b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8350bc4-84f6-4125-9dc3-7b335723eaa4", "sighting_of_ref": "indicator--17441344-902f-4fb8-bdb2-d38fe4c9d913", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f86224-78de-4f98-ae6b-87d18bdc6f47", "sighting_of_ref": "indicator--8b11256a-91b0-4b58-8bc5-64e10c177955", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769fb708-9449-46b7-ab9c-956f76143cf6", "sighting_of_ref": "indicator--8fb5e165-cb09-4dd3-b823-c5e9cfb2e053", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca182e8-96c2-40e5-88bc-04c519721acb", "sighting_of_ref": "indicator--8e0fe938-6e91-4436-ac5c-d4e35c03d29d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b3b295-729b-401f-a12f-5751b0ec9a3c", "sighting_of_ref": "indicator--da1cde71-2e3d-4cce-b6bd-0f64012c4582", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5be996b-54c7-4897-9d5a-52c10a509d8e", "sighting_of_ref": "indicator--74d7dc2b-d5f4-4435-8285-250473f2cfb0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116818a0-c364-438c-806f-b362b0f3c05e", "sighting_of_ref": "indicator--5e89ad34-002b-4516-924a-abdb8308e36d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1f5a0a-81f6-4b07-b4a0-dad608b90a3e", "sighting_of_ref": "indicator--233fa79e-80f2-4bf9-ab99-784773125f0b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f5d63c-27a2-4fd0-8546-c50aa0b0ab02", "sighting_of_ref": "indicator--e4058865-3430-4b2f-ad2a-61dc48b4871f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72375752-65ec-4094-9d3e-969430eb9428", "sighting_of_ref": "indicator--9afdc0eb-ab06-47f4-8a54-cd1a8a3153fa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7cafc0-c11a-40e2-9b50-c9257d5c1990", "sighting_of_ref": "indicator--05ee46e6-636f-4d4b-85d0-9c979a765433", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887c0058-5c24-4633-b288-34b6df5875d8", "sighting_of_ref": "indicator--0ebe516c-60f0-48a0-ab49-717ffbf47f2f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56209f55-65dc-46a7-810b-c1a8089d8daf", "sighting_of_ref": "indicator--77d557d6-aa71-434f-aa53-b7e1b7a069e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0b13d3-1b0f-4e3b-a21f-de8e4af1bbe5", "sighting_of_ref": "indicator--02300dcc-31f1-4228-9191-e4226fd2b4e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7f49fa-f9d9-49c2-a0dd-23c9423ab8fb", "sighting_of_ref": "indicator--75442d7d-0005-4911-9bb4-6598b040ff4a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9103258c-95fb-48cb-8d3d-f6a8b8a89f71", "sighting_of_ref": "indicator--fbbd47a4-df3a-43f5-b7cb-887db0db0640", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c070ab6f-7b0b-4140-83fc-3f0146638003", "sighting_of_ref": "indicator--46bb8771-ba26-4d38-aeab-b4078756f31a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b962778-4453-4413-b077-28d46c116f8f", "sighting_of_ref": "indicator--a1acfb1a-cef1-4394-a9ba-d555269e535b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad04137-7663-4199-8e70-9d66d0406ca3", "sighting_of_ref": "indicator--429bc5fe-2658-499f-ba76-a8d987ff8bde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba015f6-e52c-47dd-bfa4-46ebe27ce9cf", "sighting_of_ref": "indicator--b9df7d2c-584b-4f69-b375-db199ee91d50", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4e45c5-1f53-4239-ade6-a081fc2070ea", "sighting_of_ref": "indicator--8adc88c8-ddbc-4abd-b256-a22e8aa8e9aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11947801-065f-4ecb-afd5-9c5126685012", "sighting_of_ref": "indicator--39939cb4-28bf-4335-80de-3f96fa7d8534", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c5cc00-5bbe-4e47-a6fd-d69be2219e07", "sighting_of_ref": "indicator--f6689155-e990-464f-a18e-820d738a7596", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d18b0d-2818-4b5f-8128-fc593b2fad50", "sighting_of_ref": "indicator--c94c9448-0a0d-4a8f-8868-9f7cac0854c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809c5a7d-c356-4f49-a17e-7e5d3f6e6add", "sighting_of_ref": "indicator--c012efd6-2590-4b15-8984-b3f3a212b31e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a2c4a3-f2cb-47d0-ad69-f9c002188815", "sighting_of_ref": "indicator--2f6efa41-0d85-4c8f-a3c1-c9f634b45f43", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759c6ef5-5cf4-4c99-8050-c15ec8ed5a77", "sighting_of_ref": "indicator--30f8adde-1ace-47d7-b661-768eb7ddc6de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff342825-7c41-4233-9c3a-5ed2c57aa052", "sighting_of_ref": "indicator--68729097-cb80-42fa-ab45-4a29d9fddd80", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3bbf0c-e130-406e-a227-81e3070afb51", "sighting_of_ref": "indicator--c3bc763f-317b-4a33-b200-ad6a87850e05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bdae6b-43eb-4b87-a7b3-34b12772a6d0", "sighting_of_ref": "indicator--61438241-8c98-4ab3-8e3c-f5acf3208ad0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f5e9d5-5256-4df2-b2ba-612bd79ef1dc", "sighting_of_ref": "indicator--50f6a2dd-9420-4e15-ac19-f82600ecf9f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeff6c5c-120f-44e0-8d40-baeeaae36c10", "sighting_of_ref": "indicator--6a98c8ad-bdf9-4b2f-b621-ebd428336f3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a32ef93-29ac-457d-8b7f-e0095ebb40d3", "sighting_of_ref": "indicator--e80add18-c3cc-4521-8b37-5c1889808e48", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987eb265-ec4a-4035-9eb7-4e88ddbbf284", "sighting_of_ref": "indicator--db77b751-880b-49c6-afd0-ca32d7e4e6ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269fc001-a7ac-451a-8244-26322cec0926", "sighting_of_ref": "indicator--76d558fd-7535-45fa-8618-c8a0a34e535f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a395b1-37dd-4d6c-8c78-6dada7ab6c74", "sighting_of_ref": "indicator--f35d3909-3eb7-4422-81d2-337367f6000a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921405f9-1e75-4617-8727-17771967b365", "sighting_of_ref": "indicator--6bcc60bb-7342-45c4-b69e-7b24b72a521e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f0e318-eeb3-433b-9c24-481152dac123", "sighting_of_ref": "indicator--9998dabf-dddd-4b47-9a04-dc3d34ca3634", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a3a4fe-7ff0-4355-afe1-fc8ee32bf5b2", "sighting_of_ref": "indicator--f5f9c114-d915-4f96-93aa-3dcbad81a377", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e548ad-be30-453e-a608-df20aa6273ec", "sighting_of_ref": "indicator--b27482da-8de5-4c1e-a792-1dd8ed4f6e22", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de0f16d-701a-4db8-b8ff-8e044691f4b2", "sighting_of_ref": "indicator--b27482da-8de5-4c1e-a792-1dd8ed4f6e22", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f236a22-efb5-4a97-8981-d4152c53e61c", "sighting_of_ref": "indicator--93e0521b-2190-4d5c-8f26-e8d1ff31e111", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbfab3d-1352-4e0b-9289-522cd1aaf17a", "sighting_of_ref": "indicator--93e0521b-2190-4d5c-8f26-e8d1ff31e111", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a309f5-e122-4b3e-a7ec-1fbd485fe278", "sighting_of_ref": "indicator--029bdaf6-8f47-4ab7-9a50-6b048bdbe6fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16eb6b1-2ae9-4660-a004-bb7cc16d3b26", "sighting_of_ref": "indicator--ba4a6df7-21fb-4514-a5ad-b444b87bf1fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52464149-d6f1-4c3f-86af-76a27b78a8dc", "sighting_of_ref": "indicator--fee44fa0-23e4-4b50-afd2-1e9f045641be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28a2322-c397-418e-9ff3-e06a81dd33a6", "sighting_of_ref": "indicator--5572338f-0f0d-4cf4-b9bb-98cdf941f182", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58d0d78-3223-4c8b-83dc-9af4ee70fbe5", "sighting_of_ref": "indicator--02f7cc36-94eb-46e1-8fe5-dc391d8bec66", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991f84ec-3ce5-4abb-abc2-02a98bf3b6d0", "sighting_of_ref": "indicator--e13814a6-a0ce-462e-b60a-aaaf74769535", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8901ab41-6c30-404f-b0cd-ca036b1f646d", "sighting_of_ref": "indicator--e38fe396-704f-4318-9c31-71e7455a00e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2caf9e-bd17-4a3e-b6e9-2146d9cdd1f2", "sighting_of_ref": "indicator--e9361a2c-eb71-4f45-a12d-ff20cdf93d1b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8354b2e-14c1-45ba-bd59-2f2f25fb55bf", "sighting_of_ref": "indicator--4ecac842-5cec-45f6-9f33-4d65c3b996c5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a6c01a-9842-421c-a45e-0a20b1bb987e", "sighting_of_ref": "indicator--9d952f29-878c-4b5f-b32d-ac446a7fd1b3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc14734b-245d-49b6-b76e-b84c360cdeda", "sighting_of_ref": "indicator--5dab2e88-d175-4565-aa1e-1c103b862121", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2139f396-a8ba-4dc8-a905-dc50fa7d8c37", "sighting_of_ref": "indicator--0a707050-f039-4b5c-a442-4f2963eee4fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba8712a-10d7-4c9a-8498-d6aed6d7e26c", "sighting_of_ref": "indicator--1a52d0f0-2541-427b-9ff2-b3a802cd1182", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d38ad9-5a14-48a9-a5a1-f4bb7392c125", "sighting_of_ref": "indicator--c538873a-d77a-4d32-be9d-2dc67d7a506b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd966fa-ffd2-49ac-af1c-19e5225da518", "sighting_of_ref": "indicator--d8ef4dea-2a10-4381-80e5-6a4f24c413d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776b815f-f115-4d0d-8769-9c5df276c0b0", "sighting_of_ref": "indicator--95c1e31b-531b-4a02-9953-2f5e1a6df79b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbb9959-37e8-4e6b-bb77-5ff86a631ffe", "sighting_of_ref": "indicator--97ddf74e-ef8e-427b-a8f7-2d589a8c9c2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cce233-8c51-4bc6-b8aa-4d56fe83e1c7", "sighting_of_ref": "indicator--b62b4f29-fc20-4071-ac50-cf09ab528f90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0571af5b-ee75-4b09-b9dd-8aebc22b6c32", "sighting_of_ref": "indicator--4a5c02b5-d13b-441b-a548-084119211ddd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d9e84b-f4ab-459e-9f82-e90bd989466f", "sighting_of_ref": "indicator--614654d3-2d78-45c9-b5f2-a3d1f9c4bc4a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1255d46-694a-4cb3-aaa2-91b439c4b425", "sighting_of_ref": "indicator--d81da026-9f3d-4719-8dbb-bdffa9b6310e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc61b40-4d44-4db9-9e63-2b92aa0be733", "sighting_of_ref": "indicator--783ba2e1-caa1-4684-afe3-11587594e33f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c1cfef-deef-4bb0-9c52-07b357d4e3d2", "sighting_of_ref": "indicator--c02da07b-dddd-4a5b-af62-42b03d1816b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e206a9-a922-4a56-ba07-cffd28b63b5b", "sighting_of_ref": "indicator--8833a363-c877-439d-8fe7-a34aa3f13d9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ed559f-f8d8-45a7-a787-8d86b1f105e1", "sighting_of_ref": "indicator--eedd8ad3-11e6-40e1-8e8a-b394d127839c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabca8a7-03d3-4503-a088-58fdd6e724bc", "sighting_of_ref": "indicator--68b313d3-dec6-4eaf-9cb6-c54592455cb3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a67384-85c8-4588-881a-5bf3644c782e", "sighting_of_ref": "indicator--e1b18e4c-8ea2-4ede-a7d5-3f0a79bc0edc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1940507f-dbdf-431c-9606-6f8ec05fe300", "sighting_of_ref": "indicator--8a32242f-ce1d-445c-9d4c-d860a6f07a5b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a6719b-3a78-4a58-89b0-dff3b7d3bd7a", "sighting_of_ref": "indicator--c5c32b76-becc-45ca-b5e6-6ca1e7732038", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f2fc97-b1f6-45f0-9d5e-6a4d5f15d709", "sighting_of_ref": "indicator--ea0be21d-517e-4590-99e9-61936c1e31b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e4ee97-e260-44ba-ba13-2d5585cd041a", "sighting_of_ref": "indicator--e84d14ac-d307-44a8-bdfe-553504bbc2bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de19db6e-24d4-45f3-916a-091cd6a5e028", "sighting_of_ref": "indicator--376e0c6c-1aa2-4b11-8d84-957d21eb6ead", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cabaae8-ed27-49c4-90f2-c830f6def75e", "sighting_of_ref": "indicator--790941e6-9860-4cf7-a237-3c01a9f32d31", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05f334c-a79c-4599-8c57-ff7adbf22ee1", "sighting_of_ref": "indicator--8c4ed9bf-d49a-40ca-bec1-40840262c49e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29984ca-c965-4807-a033-81459c096de7", "sighting_of_ref": "indicator--9bc53f68-cf47-4e15-8808-2fe69d932b77", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95c35ae-2237-4619-8273-12b0b99b7daa", "sighting_of_ref": "indicator--a2909b2f-0350-4b80-96d0-ce6ac4f2e94f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391cc90f-3351-46ed-9e62-51ba485e09de", "sighting_of_ref": "indicator--cf44cf69-5a0d-40ee-8f40-2fa484b5272c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b97e90-85a8-4990-8d7c-38a6f1853859", "sighting_of_ref": "indicator--cf44cf69-5a0d-40ee-8f40-2fa484b5272c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7ad9d9-1a27-4800-811e-f1b00ea1280a", "sighting_of_ref": "indicator--c07cd3dd-bb0b-40a7-8c57-3a4de16e27ee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb1c150-1047-45b3-a2af-926588ff576d", "sighting_of_ref": "indicator--1cceef86-5acc-4e57-af85-1368e9809b2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3d3407-c680-47bc-bbdc-d0193720b678", "sighting_of_ref": "indicator--c013c1e2-583c-4c02-99dd-32a418c0455a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a535c8-7fc4-4d37-bdf9-f5b4f9e1299a", "sighting_of_ref": "indicator--d2e7c705-7f03-428a-9780-5a8fb8154b6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2f7828-2088-4fe4-b9d4-b2ff68fb40d3", "sighting_of_ref": "indicator--ed483574-c0a3-4095-aa6b-9cfab06c5c6b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ec8e32-428f-494d-8dbb-3fb80c7b4df2", "sighting_of_ref": "indicator--df382e6d-5693-4f08-ae1c-bcf958ad2393", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf55d1c-345d-4e75-826b-fd2ec5702f4b", "sighting_of_ref": "indicator--cb4b6e7a-d84f-44a0-8250-1845e69cc27d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346b22a8-18b0-47d0-b231-8e9275e7fa89", "sighting_of_ref": "indicator--5cd68464-deee-44c5-a7d0-6afcc18ad883", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4a4ea7-3d23-4b0b-9f15-31d8aea2b45b", "sighting_of_ref": "indicator--25b1686e-6dbb-4d55-ab4f-7e2752aa308b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6cc20d-7c4f-4572-b3f9-25131ab72359", "sighting_of_ref": "indicator--bd412838-c479-431e-bea7-b59fce5f51fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6439fe4d-495d-470d-89af-e5c1f2339bbb", "sighting_of_ref": "indicator--d737bb53-db54-4e54-9ea7-7be069f17bec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83197ce7-caa7-4456-87be-be23c62ac8cc", "sighting_of_ref": "indicator--3aa64df2-fee9-43ce-b14a-46f7a5c6ef73", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e53406-92a1-4546-a691-0f7dce1b282f", "sighting_of_ref": "indicator--bf624625-bda0-4382-a7cf-09e05911693e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73f08b5-ccbc-4cf6-a2c0-5577ac1ef58e", "sighting_of_ref": "indicator--c5daff7e-dd88-4e46-9145-78f325bcc815", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ee4283-4a74-4961-88cf-d3202b86e7eb", "sighting_of_ref": "indicator--b6227796-2d69-477a-9949-9e3eefe6aeb8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afdf58a-98e0-489f-a399-8ef818e9554c", "sighting_of_ref": "indicator--97783b58-4086-4c13-893a-b0687db3f680", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6fb32e-983d-47f3-8062-11a09c41a63a", "sighting_of_ref": "indicator--f0c89b12-669c-4944-a6a4-25d82f078485", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da68ed67-1c66-4c1d-83f5-679fd4b389c1", "sighting_of_ref": "indicator--3b0852af-8c69-4a3b-96ed-70e2071dc361", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd2208d-c388-4ff9-b0d6-474e38ae0866", "sighting_of_ref": "indicator--4234a5ef-c6f3-48cb-a6a2-15a02dbc0eff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43764741-e6d2-47ec-b698-7616f106be05", "sighting_of_ref": "indicator--674f3e46-7b6e-4389-ad09-609214952b5b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884bb064-3000-4b10-a739-d085cb000a11", "sighting_of_ref": "indicator--b4d2f3ea-a982-46fd-bf37-f5e15545da8e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb99c79-f66f-434e-b237-5412f128cb48", "sighting_of_ref": "indicator--7d112b69-93c0-462b-a41a-1b3cda771921", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8430d152-4207-4412-bc9c-12595fed92de", "sighting_of_ref": "indicator--0962523f-28f9-4201-a39b-29dc127bbb07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faef8ee-697b-46fc-9cf5-70a8a340b57a", "sighting_of_ref": "indicator--a4dba304-1476-4c6a-90d0-3859bf02f374", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02970fc-7cbd-45c9-936c-dd91a131917c", "sighting_of_ref": "indicator--650e96ac-941e-4e2c-9a24-baa83cb6ea07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d620d5-dc9e-43bc-9c42-2c27e640bfca", "sighting_of_ref": "indicator--7720a79e-4c6f-4edb-9cc8-59f1e47f66ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856270f7-8c3b-43d8-9011-36080ec81104", "sighting_of_ref": "indicator--973056c4-9e87-46d8-9708-b36bc4146190", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20660a77-9048-4540-b165-e604aa6d4d18", "sighting_of_ref": "indicator--bc304247-93ee-44f6-b200-f44c41ee50a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02317645-c22d-4c46-a904-519f6849919a", "sighting_of_ref": "indicator--cd060379-0549-42d8-965d-536eaff7e3cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327bdcfc-281b-4481-aa03-e638f2e36580", "sighting_of_ref": "indicator--422f644f-16eb-46ec-ba42-f4b2768be9fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b635d-1876-4f0b-91b3-0bfed7c2ea22", "sighting_of_ref": "indicator--feb5fdf7-aaf5-41ea-ae86-be8100ba47d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d9d8c1-791a-4f00-836d-a5038b4f610a", "sighting_of_ref": "indicator--51ddcba8-2dfe-4641-9536-6a34cfbecad3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6e1565-7d0a-477d-9319-142e4ef94945", "sighting_of_ref": "indicator--d0762dcc-1aa2-46d5-9a1a-3be7fa285295", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa2616d-62b5-40c0-a41f-4a5eaf3139f5", "sighting_of_ref": "indicator--e98c09d3-f4df-4071-8b52-b9bfb3fe12cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65a1752-0a6c-400e-89f6-3b01de8cc689", "sighting_of_ref": "indicator--3504af73-25be-45f8-adfc-f9281d72bfae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea24480-3ebb-4597-922c-40c1ce181d56", "sighting_of_ref": "indicator--3504af73-25be-45f8-adfc-f9281d72bfae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364e8c25-a2d3-45d7-97b8-957a271e6e4e", "sighting_of_ref": "indicator--dd6b6d7a-928e-4cd3-bf6d-6740c15d79c2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb3b1d1-04b3-4d04-93ff-893d41acc7cd", "sighting_of_ref": "indicator--9f787d0e-beee-48a1-bebb-f3e86b7488e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d117cd26-02c0-4ce5-b1fa-9fd7addb0ef8", "sighting_of_ref": "indicator--f9c62df8-fa7f-44b3-93e5-543d3a746e91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40ea9b6-f7b8-49f4-910f-75607c6cb981", "sighting_of_ref": "indicator--61401b6d-9df0-44b0-a334-d8e3fd590ef2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118e0fc3-513d-4d11-8134-779c09dc4923", "sighting_of_ref": "indicator--61401b6d-9df0-44b0-a334-d8e3fd590ef2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7218c0d7-b8da-4d47-a146-cb4672e826e1", "sighting_of_ref": "indicator--ace379c5-58fe-412f-ac3d-e83ad207eeb6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914f2681-9e9a-4f26-bd87-b9ea7bf2c031", "sighting_of_ref": "indicator--cb1619a5-5b33-4f5a-8bec-ce39c890fc87", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91b6bba-6dd9-47e3-9f6b-ddfa4f0ef457", "sighting_of_ref": "indicator--c7e39076-a888-4a8c-bce4-8872ef2eb8f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c16521d-68ad-4aa1-84fa-6997bd788efe", "sighting_of_ref": "indicator--41ffb2df-35f3-43ca-9318-9593cc8de291", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88c5be3-9c60-4ade-a5f1-a2b8ff8d30a0", "sighting_of_ref": "indicator--f4d6c247-0911-45fb-8fca-7af101c32df0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef895eeb-40ce-4c74-a94d-e75593333917", "sighting_of_ref": "indicator--fddb9f88-b1ef-4be3-ba03-00cd752450c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a125837-ba3c-45ae-842d-e38080e139f4", "sighting_of_ref": "indicator--ae66dafb-37a5-4aed-8986-b95158087a78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59de8679-e135-4393-b9f8-bbd25078bff1", "sighting_of_ref": "indicator--3c591091-0861-4fd8-af7e-6aafeddf9e22", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6974b022-db09-4a22-be55-baa04b208eb6", "sighting_of_ref": "indicator--9a3c6ed4-ef35-49ee-87a6-0ef129654515", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a10fcd-0b0f-45e0-9485-4a31e6c974ef", "sighting_of_ref": "indicator--15eb512a-1f04-489e-a39f-4169c7aef3db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a79ac88-c9bb-4492-a92a-c39415f8d5dd", "sighting_of_ref": "indicator--348c56ff-f418-4dfe-b71d-3e11b11f0d2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e4e31d-9a62-4e39-a962-574ae751df09", "sighting_of_ref": "indicator--58d3716c-0061-4585-9ac1-dd1d8a24e4f7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a33cb7-6a73-4201-8195-258dd1c8b968", "sighting_of_ref": "indicator--4b6aa025-0a0d-42c2-884c-6cebbabbe745", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801501bc-addf-471f-b555-5467dd96f8c9", "sighting_of_ref": "indicator--323f6b7a-6f8f-4e69-9872-9ad55d1837f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a9d4f1-ecf3-4209-aab8-c4ac71f1394b", "sighting_of_ref": "indicator--94ed6193-fa6a-4cd2-b559-992c1755849b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b918084d-dfa2-4162-8e79-35e226ba5248", "sighting_of_ref": "indicator--4bef8d4f-088b-4e53-bdf9-5601fcb34d0a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b211a670-6dc4-40a5-b0f2-45f95412907d", "sighting_of_ref": "indicator--c29b52da-b2bb-40a2-9723-8ab038f9cd8e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5b7a90-4850-4a59-9d93-f556958203d0", "sighting_of_ref": "indicator--e191e0f0-edc2-4e5d-8b27-6dbd80936ee4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54d253b-ba8f-460d-8e79-1dc8ad993a85", "sighting_of_ref": "indicator--e191e0f0-edc2-4e5d-8b27-6dbd80936ee4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bd9fd2-8a5a-41ae-a55b-b4a3784492b9", "sighting_of_ref": "indicator--ce2502ae-fc71-4d3d-82d5-464edec64453", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df9ab64-891c-4614-8fc3-9086b0e33edf", "sighting_of_ref": "indicator--ff700ac9-29aa-4f32-8524-ba6de07c3c93", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e30710c-1fa3-4a1a-8954-56efce0efad6", "sighting_of_ref": "indicator--7fd4d12c-5f7e-4f7c-84cc-1ce5cde6b688", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f19623-c1bb-4f14-811e-761f84e10c57", "sighting_of_ref": "indicator--8f0ae36a-9a32-43fa-af16-68ab943f9255", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e5bed1-0baa-4aee-b700-bdc4e912a6a2", "sighting_of_ref": "indicator--5fb653ba-1b9c-43dc-bb35-780aa04928bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260f2535-7618-4547-8bbb-384e8f9bda93", "sighting_of_ref": "indicator--5fb653ba-1b9c-43dc-bb35-780aa04928bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e74edd-4708-441c-a792-cacb05978413", "sighting_of_ref": "indicator--59197232-5569-4715-8842-1a28e9679e04", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caa60da-b2e1-49ae-9d4b-d5ecba19de6f", "sighting_of_ref": "indicator--dc71b805-53fc-469b-93c2-d098cf11aad9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9a8ca3-f343-4399-8e79-72f4f8a43353", "sighting_of_ref": "indicator--a6f4df20-0c19-4968-b539-146160fea9fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc20624d-bbdb-4063-a9ba-32f0de3d7361", "sighting_of_ref": "indicator--4fbac544-9498-4504-9a47-d548a7315651", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9672b1-50d3-4cd7-9883-c2e4104f518f", "sighting_of_ref": "indicator--7129d8e8-3a88-46ec-8609-0f6842be4f12", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0991eb5-e43a-4af9-960a-a6587d5a884b", "sighting_of_ref": "indicator--f36c8198-87d6-4b48-8750-bad297d8c4a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620ebfbe-e56f-4ad4-a94c-4d801e98a88e", "sighting_of_ref": "indicator--aa63acec-b979-480b-abf3-bc23403d9ee6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3aa6835-5b58-46c0-9866-d8532ea7bc7e", "sighting_of_ref": "indicator--e28ca4bb-d6df-462e-8ed1-4eb8ccb01c1c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6fa265-0cca-47ad-9ddc-abbf5613d8ba", "sighting_of_ref": "indicator--f3ec1ac8-af2d-4d3b-b174-0f874adeb38c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38ce003-0835-418f-8141-169c47ad8c0d", "sighting_of_ref": "indicator--c8d471e9-5873-4011-b990-a29cf0912f4c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cda80e7-9f11-46b5-aaa2-ac094b14257e", "sighting_of_ref": "indicator--18a1561c-4b69-4ae4-a8f3-af41515d77d9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88afd2a-4f0b-4aa0-b80a-b7ea122fcfa2", "sighting_of_ref": "indicator--e33815b3-38cc-4dff-9d82-30cf5c9de7d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514b12c2-93ef-436c-99ca-ed1ec89f99c5", "sighting_of_ref": "indicator--e33815b3-38cc-4dff-9d82-30cf5c9de7d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378e1279-73d3-49fc-9b5d-58291fa90822", "sighting_of_ref": "indicator--d9684809-424f-4dbe-95b3-4792fc8b22a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8351fbcc-0240-4525-aeca-58268bdd0be5", "sighting_of_ref": "indicator--c5bf2164-4b56-473f-8694-b937c8e234eb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebdb446-c043-4c5f-8b5f-6dec445b24dc", "sighting_of_ref": "indicator--e3a54f37-069d-495c-aae5-275b062c7650", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2856a0-cbc4-4215-a701-98a15646a8a5", "sighting_of_ref": "indicator--5ff1c9ce-7729-44a1-975c-f194b9255825", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4d8478-d750-4af5-8d79-3037b9c2041b", "sighting_of_ref": "indicator--7d78e160-9c65-4b0a-9c2e-6463117d1646", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a0b8aa-1cec-4430-9b64-1c8afbda01f0", "sighting_of_ref": "indicator--4d2ffed1-dd5d-4182-8ffe-291be2557fe3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4232a6f-b37f-43bc-8e63-fca5785a3ee8", "sighting_of_ref": "indicator--2faa7f18-5aca-447b-9267-5029a01a0c0a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c00cd8-5d74-4576-b197-45219f28cd22", "sighting_of_ref": "indicator--7872fd43-c93a-460f-9795-c2360fd385ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8e830a-6ce4-4b9c-b157-62878dd06971", "sighting_of_ref": "indicator--dfa7e37b-3cb1-4369-b30e-372078228dc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409b7c8d-6a44-4050-a99e-550eb0f83b1c", "sighting_of_ref": "indicator--0a70cbed-99da-45c8-b1be-dcaff6f7e139", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60e6cbd-ac28-4771-b02e-d793e355966d", "sighting_of_ref": "indicator--317d9b89-71f5-4fb5-81e2-f4819137f137", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654a896e-d335-4e8c-a0f2-c1e907c008f3", "sighting_of_ref": "indicator--317d9b89-71f5-4fb5-81e2-f4819137f137", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab12c884-2e04-46b1-b2cb-efecc043b554", "sighting_of_ref": "indicator--2d1377c9-34a9-41ad-a004-57ac6bca7bb9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fee5ef4-c561-4711-9d65-94608c5c4109", "sighting_of_ref": "indicator--a91c88f5-18c2-42c4-bdcd-ba337e48467a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db95c5e3-3126-47f9-8394-e5e6e1884323", "sighting_of_ref": "indicator--eef5af3f-be4c-4b09-a784-ef2e06c084af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799e5af8-f0b0-4204-8914-8b3277adf9b5", "sighting_of_ref": "indicator--583a3b6b-a94b-4037-917b-9a0a414278d7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8485dbc-a085-4d87-bbb7-3e94efb696cc", "sighting_of_ref": "indicator--be4eac0b-2193-41cb-a761-8634df2f1b7e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639e974-6101-47fd-b24d-79224131e926", "sighting_of_ref": "indicator--1bf99fe9-7191-400f-a344-30df1031d9a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75272c0-1413-4aad-bc05-127f2cb346e4", "sighting_of_ref": "indicator--608b140f-3ea8-408e-b3a4-f1ca214d1252", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2d7ec3-3d88-41fc-a167-7057d9165721", "sighting_of_ref": "indicator--5f251ebe-c6fc-481d-95ae-79e871a4bb75", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305a3451-cc9d-401f-b121-9c1b0ea0fe80", "sighting_of_ref": "indicator--ccc0a936-b667-414a-b3f7-b086449e8997", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47d5740-f0ed-4ac9-8630-9233c03ae017", "sighting_of_ref": "indicator--945cf5eb-9f19-48af-b59c-d64fceebed90", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c681e17-a8f5-402c-a21d-50d2c83f9919", "sighting_of_ref": "indicator--9aaa9eba-5c8d-4fbc-8311-3736d8644062", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44085f4b-9631-4aab-a03d-7f0bec5c2938", "sighting_of_ref": "indicator--91de4c62-7cf4-49fd-8125-529b6fb853f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb05903a-b47f-4d34-8fad-b00541db968b", "sighting_of_ref": "indicator--7b5f4b79-b7a2-4f92-95ad-e60cddb0d404", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1835670f-e331-4b7b-bfbd-0de9ba820d8e", "sighting_of_ref": "indicator--95bac8e4-69ce-4eb9-9b4c-50f2d3e75740", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb98b6f-9a80-4813-b9c3-4f8b535d4f5f", "sighting_of_ref": "indicator--59d33c54-db10-455d-a0a7-2d9f26ad979a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420b9de5-1576-4769-bb43-9970d50315f7", "sighting_of_ref": "indicator--2353408d-2e95-4b1f-96c2-ce48872a8660", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39c5474-97fa-40b4-b020-a25b64eb492d", "sighting_of_ref": "indicator--d24e4108-9096-47ce-8522-10334fdf0a3e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7df79ce-fb29-4bc8-a81f-76452409550f", "sighting_of_ref": "indicator--3a15f934-0603-41ed-b285-2044c560db51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832dc5e8-5ea8-469b-b4fa-c27df57d311c", "sighting_of_ref": "indicator--8f86b7a5-555f-4ddb-b8bd-447fd36f3c9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda2b27c-beeb-4fac-8201-37b87a8247dc", "sighting_of_ref": "indicator--16f327ea-4f49-4f45-8e07-244acefc1d94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd7a571-5c30-4621-9f06-716478841990", "sighting_of_ref": "indicator--8f3ea38d-83e3-48e9-bc84-e0a5af5abf59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2620f424-7fa6-4f7c-a619-9c66b31fa41b", "sighting_of_ref": "indicator--bd1ee5c7-90dd-46ab-b3c9-333c06328a15", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b37c5f2-1e6a-4c64-8d89-f50b90deb7dd", "sighting_of_ref": "indicator--80a6843f-e820-450e-a466-c63548802df5", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5d8476-f090-46bc-92e4-4cd2b3f6f8db", "sighting_of_ref": "indicator--61f4548e-1adc-473d-b6be-f64636afc16e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8e1fa7-52ff-4b92-9aa8-e18eef1aab24", "sighting_of_ref": "indicator--9bab28c2-bc1d-4994-a61c-907505752e5e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab154074-d38f-4dae-8c36-67a75d5017a0", "sighting_of_ref": "indicator--49132e9a-546f-4b59-b06a-c4e8a9463eb0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530360c4-5927-4233-8a04-ebc20843921f", "sighting_of_ref": "indicator--d9c04d46-d53f-4da8-b51e-c6655747afaa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a037dc-c4a0-4287-aed3-1e57fc8be06c", "sighting_of_ref": "indicator--7da83d47-7f7a-4d0b-bc8f-57c634e88e81", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bd5921-fb4e-4114-9198-110316680aaf", "sighting_of_ref": "indicator--e67f5c35-3cad-449e-9c21-77f6e025873f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48333aa8-8172-490d-9a2c-c950e80c7416", "sighting_of_ref": "indicator--3ac695f1-d6a2-473c-964b-684f3a3fff9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa5eaa7-a3b5-4bf7-b1d9-1314a7e01c49", "sighting_of_ref": "indicator--a3cfba69-3a03-4866-9cff-2c9f34cbcaa4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734f3dd1-1a10-46d4-8e68-df3c8aca4cbb", "sighting_of_ref": "indicator--7e6cb8ee-2ad3-46d4-a192-68eee04f8b6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b41eeb-3cd1-4651-9829-7500789b63db", "sighting_of_ref": "indicator--abfda9ce-183b-406b-98a0-8bf992658bdf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a4fca7-a481-4575-893a-611d3c1ce6f5", "sighting_of_ref": "indicator--7b804dc5-755c-43e0-b85a-3087d700cdb0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06697e16-dab5-4fa0-82ce-8a767e8373e1", "sighting_of_ref": "indicator--043dc574-015b-401b-a3f3-96602210bbc3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ffe326-e72a-450f-8060-94dbb819339f", "sighting_of_ref": "indicator--9aca5942-9069-419f-bf5a-4217eb14db07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b28c281-6b48-4946-b99a-e37cb06941d1", "sighting_of_ref": "indicator--d7fd3499-b59a-4b0f-8308-cd36594747eb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cdd05f-8808-4fb8-afcf-f0ec419e26f0", "sighting_of_ref": "indicator--d7fd3499-b59a-4b0f-8308-cd36594747eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e716129-68d9-47a4-9152-0e06a12b4a94", "sighting_of_ref": "indicator--82226459-c763-433a-9a3b-df87fc5814a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ff5ff9-5390-46bb-86bb-89accfff7a73", "sighting_of_ref": "indicator--b0e4d9cc-97f8-4172-aac0-faa9a375e9d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0ddff2-d886-46ce-90e5-709fde3f3b7f", "sighting_of_ref": "indicator--8335abaf-7165-4d25-90d5-311e89d39f57", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc404ee-54b6-461d-a0fd-3bb2f10c5fac", "sighting_of_ref": "indicator--62dfcff6-8259-4264-8763-f053167cb1d6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f08d206-6e61-4691-b816-88de51a297c8", "sighting_of_ref": "indicator--a38ce50b-0b46-43ee-bffb-3155b4120da1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8daa32e-bac4-4d58-ad77-47b9297602be", "sighting_of_ref": "indicator--9ff68786-4e03-45a3-a219-8ca228aaebdd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a0ed53-2b67-4b2d-9d6a-2070e24da290", "sighting_of_ref": "indicator--9ff68786-4e03-45a3-a219-8ca228aaebdd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b644b6-1151-47a5-b0f4-dcca51371f2f", "sighting_of_ref": "indicator--73e7b945-5d94-4057-8f40-91c0afc57ce8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe962ad0-d8a4-4ac0-8ca7-50188d9c26c4", "sighting_of_ref": "indicator--201cb40f-0c0f-4a59-9420-995e3c8e9d31", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7f041c-fe18-4e85-b05f-2cb0a676cb1b", "sighting_of_ref": "indicator--79b3866d-13c7-490f-b361-28bcf8c80ce0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f5e1cd-cb3f-4744-9449-70bf524ec04f", "sighting_of_ref": "indicator--da2f8f7c-d7e2-4668-9d5f-310e86d1ea52", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2508a8f-07e9-44bc-9093-774f691fcf41", "sighting_of_ref": "indicator--ffe695f6-b09f-4cd4-80cb-82a8badb477e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04251f37-4d0f-42a5-a61e-60b73b65d100", "sighting_of_ref": "indicator--fd2f9a31-0856-45ab-a5aa-8e5fef1fd29b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e91230b-545c-4924-8ad1-2e00947187bc", "sighting_of_ref": "indicator--615a37a5-742b-4b12-8d6f-2b3a62780305", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7aff3b-df2f-44df-bae7-9f3894950b10", "sighting_of_ref": "indicator--cadf724d-ee53-4333-b151-6843943a3aaa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f381c2-c73b-4d55-bfa8-703507bed5df", "sighting_of_ref": "indicator--5ca5f480-c8e0-4d43-8c47-38e94579114e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1ab0b0-d7e1-4429-b486-d2ccf11b7b9e", "sighting_of_ref": "indicator--c566a57f-3c6a-4ed5-907a-5b74a530369d", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0161175d-91e3-42db-ac46-2c17288cfabe", "sighting_of_ref": "indicator--1e61a203-08c9-4cba-8864-fa4bfefd2ea3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b05cdc3-847f-46c1-996a-5b87bd504dff", "sighting_of_ref": "indicator--d0eeaa71-01ba-4bfe-acc5-f1caa471a260", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4577af-5a2e-42d5-b228-b46eb8b95d35", "sighting_of_ref": "indicator--d0eeaa71-01ba-4bfe-acc5-f1caa471a260", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62af0d4-4004-4ce6-a99d-bcbd8bfb34de", "sighting_of_ref": "indicator--6c3a1804-f4af-4266-a482-2cef9c800928", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be0aa94-ca25-4897-8e26-e0d8406c907f", "sighting_of_ref": "indicator--59cf1d4b-48f6-4de4-8830-027f291809e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e072c8-6fb4-4448-a0dc-4132bd0acba6", "sighting_of_ref": "indicator--861e42f5-bedb-496b-a2a9-edaeb158fb7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b9eee9-ee5c-4efc-9f64-7a2125208a30", "sighting_of_ref": "indicator--8661bad1-0a52-46f1-9886-732c8fda2897", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8ef8ef-d523-4779-80d4-6a6188b43aa8", "sighting_of_ref": "indicator--28ffb0cf-8eb6-4fc1-808b-cb613bcd36b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b5791e-75a6-499f-99f3-7a0a4026061f", "sighting_of_ref": "indicator--8ce62a73-65bd-4b6d-a12d-9dc6495a44af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de98cb97-4076-4b1a-8d5e-d2171e0b534b", "sighting_of_ref": "indicator--d8c56e34-1611-4b9f-9df9-7ca0fc756241", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceac9422-d33d-481d-aa52-3cdf7b84d49e", "sighting_of_ref": "indicator--8c9e7d28-572c-40e5-abab-69fee6e7b7da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4087363a-06c5-490a-b1f0-a6bcd92a888f", "sighting_of_ref": "indicator--77966216-6f22-4996-b01d-d5f34c549200", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571d68bf-2967-4781-b36c-6840012576f6", "sighting_of_ref": "indicator--91bee647-56cb-4806-a24a-a536826aa7cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063b8acd-c5ec-4d9d-9e5a-e17b6c2cf9c4", "sighting_of_ref": "indicator--91bee647-56cb-4806-a24a-a536826aa7cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474a9f0a-23d6-42f5-804c-8ce19250fdd0", "sighting_of_ref": "indicator--01215dcd-00e9-4d1e-a6e1-fee77f81bdc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96253699-33d8-4f20-9756-67c85be5ac8b", "sighting_of_ref": "indicator--28c46652-c3d6-4cde-b1c0-bf7c2f2b84ac", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d91f336-ebcf-4de1-a199-02307dd5419c", "sighting_of_ref": "indicator--bdb50752-cc02-48b1-b6f7-e390d7abb1f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db48eec-a651-4403-8b4e-d7124843251b", "sighting_of_ref": "indicator--436e620e-804b-4430-b83b-029ba01eb95e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea84843-d0bb-420f-a2f8-7155596e8fc5", "sighting_of_ref": "indicator--d0233285-a814-40bf-9ac5-8ad36547abd1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8750769c-3c7d-43c8-bafd-a431072436e1", "sighting_of_ref": "indicator--d0233285-a814-40bf-9ac5-8ad36547abd1", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbcfe26-c6cb-4c7a-a8e0-2fd8c825c4fc", "sighting_of_ref": "indicator--a823b4f6-7ff2-4cf9-bdc8-9e3bf96ae321", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9208ae14-3677-4b91-8004-c7cd27818544", "sighting_of_ref": "indicator--0a9610b5-c8d8-41a2-b64c-80e84bae912e", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42800746-e88a-48cf-b5e3-15ee30d8a41b", "sighting_of_ref": "indicator--51518cc7-c5d0-4c27-a46c-ae06961bb9a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cdabaf-7905-46e3-b713-cf8677323119", "sighting_of_ref": "indicator--6304631f-1945-48b2-be13-7b93acac464b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08da527-783a-4cf7-b989-98700288776c", "sighting_of_ref": "indicator--6304631f-1945-48b2-be13-7b93acac464b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9464e2d7-7e20-4d2c-b8a2-3b65f2cf4b23", "sighting_of_ref": "indicator--4035c887-c2c6-48ad-8ce0-c1aa40dc917c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654f4816-852c-4e93-af43-e7bb5a4db7e4", "sighting_of_ref": "indicator--e7d8067e-500d-4ecf-8079-b7f4e3cf8c3d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6804bfdb-a10b-46ed-aab4-3ebb9b783610", "sighting_of_ref": "indicator--2a088d68-6453-4ba6-b9a9-60ca9d4a99f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ee1ad7-8804-499b-ba6a-bf600cc6ecbc", "sighting_of_ref": "indicator--c02da579-5019-4fbc-aa62-12ddef736f9a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf06dd08-4ffd-42f0-add3-760c5b852eff", "sighting_of_ref": "indicator--6316b79c-89b4-4bb3-b7a7-2f6e1437fa61", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dc617e-0a49-4808-9fb3-abf364bcb54e", "sighting_of_ref": "indicator--185fa76e-d1a7-4549-9823-bc1cd9ea7e45", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811b0617-bda3-4abd-a404-4ed3413d88af", "sighting_of_ref": "indicator--c3d5cb3a-3c70-45b3-bdfe-17c14bd0cc87", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4185ca1c-77ff-4cfe-b558-fc87f84c9bf2", "sighting_of_ref": "indicator--cb0bc672-4d51-4f68-b5db-98e72e06f708", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1670bfd-1d10-4894-b7d9-c4a91719c425", "sighting_of_ref": "indicator--609fd57a-0738-4000-935f-95f8a8d4a2fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a993c8-3464-4110-8fd1-e77c0e34612c", "sighting_of_ref": "indicator--4a28499e-a9a6-470f-b7b5-41b070387802", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabf962c-17d0-47f1-9c81-a263e03d54fe", "sighting_of_ref": "indicator--4a28499e-a9a6-470f-b7b5-41b070387802", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b949443-3ac8-4c02-bf29-f460abadc5c7", "sighting_of_ref": "indicator--2e7d53ec-0954-4c40-9441-5db9a2001556", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14a33b7-5fea-40eb-b7c0-f5721a078931", "sighting_of_ref": "indicator--b3b5d385-3f2c-40ee-a1d9-8e10bf566ee1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ea54d8-e67b-4a66-a067-736e40d0a9f4", "sighting_of_ref": "indicator--088813fc-0b58-4e8f-ab3d-87cf64573ef9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9591647-a24b-4e01-97f7-91029c7ac98c", "sighting_of_ref": "indicator--73b8bada-205a-488c-ad12-e0377da91343", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54988b0-b465-4c7d-9baf-6eb359244488", "sighting_of_ref": "indicator--bffc1fbe-ec7d-440f-9b96-d10e5795af69", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266f2df9-4e44-48d7-84f1-0e4d54431b16", "sighting_of_ref": "indicator--bffc1fbe-ec7d-440f-9b96-d10e5795af69", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fd9179-9b2b-4cd8-8942-2058768868bf", "sighting_of_ref": "indicator--75979d36-1821-4318-b132-b910ddd78493", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17a1709-dd0d-48b6-81e5-6009e4cf2eb1", "sighting_of_ref": "indicator--75979d36-1821-4318-b132-b910ddd78493", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c624f29-7e85-4fd9-a883-ce3fa967fb89", "sighting_of_ref": "indicator--0b345361-a01b-4bb4-b9ac-4b43ee85f597", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f721521a-8375-46b0-8ec1-6f2bc94b7147", "sighting_of_ref": "indicator--0b345361-a01b-4bb4-b9ac-4b43ee85f597", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09185eba-7c09-4930-aa65-c37b8c224bff", "sighting_of_ref": "indicator--7c1fdb72-9a84-452f-aaaf-24cebce295ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b46d322-acff-4920-8b65-7bc336af2e07", "sighting_of_ref": "indicator--03b18313-acd6-4b59-be19-849d11420d8b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede2311d-c438-4814-aadb-5a3615dddf05", "sighting_of_ref": "indicator--d84dbc56-027c-47c7-96f5-bf0116dc6e3b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbc5b31-f21d-4f97-a524-e8fcad66f711", "sighting_of_ref": "indicator--69cf7aca-b828-439e-a4d7-3e6aec367c86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d89c449-2a5b-4ff8-b0cc-3809afff5322", "sighting_of_ref": "indicator--818e5595-6527-4059-bc75-ae01d275db72", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca8ab65-9256-4876-b54c-291511aa11fb", "sighting_of_ref": "indicator--ca99aa48-113f-4f6f-a323-9cb29d7a8368", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d20696-c859-4ee4-986f-fe8be50eab74", "sighting_of_ref": "indicator--b4752910-9497-4f1a-8d83-2f850055d65a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b299b8e5-110e-41a6-848a-271c1f382f44", "sighting_of_ref": "indicator--a55c8365-8b5b-4727-895a-83289287bdd6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554225f0-807b-443c-8c9a-928a92f855df", "sighting_of_ref": "indicator--7be638e3-cd6a-445f-89c0-a39e5e8ff19a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79ecacf-7a5e-4496-86dc-cc3caf51a474", "sighting_of_ref": "indicator--ec0e38f6-984d-422e-b13b-829a278ffef0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6891947-8354-4ca3-b740-95fed23d3f42", "sighting_of_ref": "indicator--d2c5d76c-26fe-4157-943d-e6a3a2adff0d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7151832b-691d-42b0-9cfc-684b343f8844", "sighting_of_ref": "indicator--196ddff8-b906-4c0f-8351-eedf9ce07a9f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c29f5e5-d661-4227-ae45-683ed51f954f", "sighting_of_ref": "indicator--40641c4c-53d1-481c-aa02-64e7a74d05b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4cb3db-f375-47b9-a482-e3eb3f93ccdb", "sighting_of_ref": "indicator--0c7aad24-a398-4929-98ff-548d96bcb1a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cedb243-f274-4336-b8b4-dcbc2fb1d108", "sighting_of_ref": "indicator--f104e8f9-ab9f-42a5-88b1-63457c1ff1fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b04fa2-6690-48e2-aecf-593bedd6ceff", "sighting_of_ref": "indicator--b132111e-8846-4d71-a42c-a2abc1c0fc44", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93edee1d-4e55-49d3-94d6-7703f2881b1e", "sighting_of_ref": "indicator--98f0fd62-9d52-45eb-b196-01119b7eeb3c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ad51b5-518b-496e-8e42-fa2541e97410", "sighting_of_ref": "indicator--98f0fd62-9d52-45eb-b196-01119b7eeb3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d898c7-0d16-4a63-a6ef-627358ae899f", "sighting_of_ref": "indicator--85a31817-6291-4d7c-bd41-bf906722f944", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608ce8a0-bbcb-4195-89ce-a0b4d0495484", "sighting_of_ref": "indicator--85a31817-6291-4d7c-bd41-bf906722f944", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32487e0e-9d4a-4710-8b5b-f2580ac8d583", "sighting_of_ref": "indicator--adb398dd-4137-4f5e-bf6d-dbe3296334d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6f1802-a832-428b-9217-30db1a5c4ea4", "sighting_of_ref": "indicator--27e2a5f0-92bd-41ac-a6ce-e92c96a4a845", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cde6eeb-cdac-457a-b679-416fca6a87af", "sighting_of_ref": "indicator--27e2a5f0-92bd-41ac-a6ce-e92c96a4a845", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2ffc63-af48-4529-9403-118fe1f4ca61", "sighting_of_ref": "indicator--f2de261f-5757-488b-b294-98844b192e7a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25940fb2-050f-4bab-8176-3a92cf581c3e", "sighting_of_ref": "indicator--12d1c5d9-30a7-4117-8f47-f8b213b7120c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0c21a2-d33c-45cc-bd50-757c5f80d5c7", "sighting_of_ref": "indicator--f08b9b6d-232b-488b-b947-151ddd479e8b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dbabb6-0274-426e-8b03-b8f3f804ba82", "sighting_of_ref": "indicator--4b964389-d13a-4c1e-b9aa-6430749efd8d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48d0156-0a63-4c7d-859c-b19be1a2b5d2", "sighting_of_ref": "indicator--0a17c9ff-4384-403c-9ff4-fd280244a733", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faaa256e-705a-485c-bb5c-93ea40453b16", "sighting_of_ref": "indicator--830c9a03-5025-462c-964b-1690b1475765", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2519315-54ae-47c6-8623-c9b20faa89d0", "sighting_of_ref": "indicator--b84c2f08-4a14-42e6-97da-7c73b3e12a5a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eaa17b-88b4-48c4-b422-6bba7b8d3659", "sighting_of_ref": "indicator--8df4f5bf-94e0-45e7-8889-22cc24d87532", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2aee50-ebad-4fea-9a6f-f65837195a3a", "sighting_of_ref": "indicator--8df4f5bf-94e0-45e7-8889-22cc24d87532", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab66a5d-fa80-4bea-8bbf-46cdcb8fd999", "sighting_of_ref": "indicator--5fb907aa-e0e1-4ebe-a436-a3c909d999a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94affac7-02df-438c-8325-0c21bdfb2dad", "sighting_of_ref": "indicator--cd6b8cd4-6b48-4849-8ebc-157d9e42ba0e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3196ce20-e659-4e5d-9a3c-d978c0d81689", "sighting_of_ref": "indicator--9be75f1f-c5b2-4def-bbe0-a245a482fadb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3391f431-bb9e-47e9-ae21-67154d465bb2", "sighting_of_ref": "indicator--d5aa74f5-aeb1-4fc8-9394-a52e640a04e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c337f12c-386e-4c28-bc9b-53bc13380c65", "sighting_of_ref": "indicator--f2af3712-05dd-482a-8592-1a310771784c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc35d56c-384d-4367-8707-c3e9b73d6177", "sighting_of_ref": "indicator--95585951-4d69-4640-b7f1-f2a816029150", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f8768b-8794-4efc-842b-a03ade51f7b9", "sighting_of_ref": "indicator--42e39bd3-2dfc-418b-8db1-5ad2dacd4cfc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53191457-02d0-43b7-8674-33b8169b1ecb", "sighting_of_ref": "indicator--42e39bd3-2dfc-418b-8db1-5ad2dacd4cfc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61827410-8b21-46b4-a6eb-b4187d815cf8", "sighting_of_ref": "indicator--13c83ab6-58f6-4f1e-83fb-244139bf178f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbd30bd-0aec-4de5-b250-0509d4a67af2", "sighting_of_ref": "indicator--659db234-709e-48e8-9a3e-961caf092a82", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6e8bc2-d33d-4eeb-9251-584acd4c8d3e", "sighting_of_ref": "indicator--6279ea67-1b94-4a13-98c7-4a79f9a3f405", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01816f93-db9a-4585-9e24-14913d4c433e", "sighting_of_ref": "indicator--5087624f-ec0e-4ff1-ad9f-9021be3b00a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6956432f-fc5d-4065-b6cb-6842870fd95d", "sighting_of_ref": "indicator--0a0b6fc7-991b-4cfa-8f3e-6f1efa2d2e46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a3d411-ceec-4b3c-a8cb-4f4e2f1e7b28", "sighting_of_ref": "indicator--0a0b6fc7-991b-4cfa-8f3e-6f1efa2d2e46", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c877645d-328e-4641-bbee-ffa2fb750b9a", "sighting_of_ref": "indicator--5799b14e-ec19-4d46-9f3b-bb66a6204a12", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d4b6d7-7c99-4801-8cf2-3f22945c008c", "sighting_of_ref": "indicator--5799b14e-ec19-4d46-9f3b-bb66a6204a12", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47732c5-80bc-446d-b9c0-0327d61960b0", "sighting_of_ref": "indicator--81a11409-e004-4d40-bd50-6e223841fdbf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cceae3-32d5-4880-952b-49465b4c0433", "sighting_of_ref": "indicator--84b8e493-31b8-4c12-b5ef-441bce6300b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65197262-c9fc-446a-9369-c0218d94a328", "sighting_of_ref": "indicator--84b8e493-31b8-4c12-b5ef-441bce6300b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3b34dd-c682-4aaa-b9a7-dbf0718aee6f", "sighting_of_ref": "indicator--dc5db0a6-44f0-4423-8c30-322868291414", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b6dcaf-5450-44f3-994b-2dd3dbe8e895", "sighting_of_ref": "indicator--dc5db0a6-44f0-4423-8c30-322868291414", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071dff48-992c-4fc6-9830-5f953b69e7ee", "sighting_of_ref": "indicator--1644a9b2-4742-4930-9643-383b5d9208d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542f2b5a-9323-4190-a633-1a337b06c640", "sighting_of_ref": "indicator--1644a9b2-4742-4930-9643-383b5d9208d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddb97ba-84f9-4feb-b9ae-e91bb48d7a04", "sighting_of_ref": "indicator--811e5ab3-02bc-43fe-aa0e-8ffedc136a46", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3411d3-316f-4d2a-a3fd-6e0bd5e6daa8", "sighting_of_ref": "indicator--2bb7cff5-a486-4573-b989-628470924db6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0910cf8c-1ec4-4a80-b8a5-84935f95d37a", "sighting_of_ref": "indicator--a604640b-775d-45a9-aaa5-8a3b379c9644", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb00031-fd9f-4cf8-933e-0de5ec0177e6", "sighting_of_ref": "indicator--173f8764-481b-4581-9c0c-32d0268356b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a469aebf-b2a1-4655-aef2-18d2a0dac856", "sighting_of_ref": "indicator--10c77316-3ba2-4739-8277-a90c411aa4bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d26c82-4b25-4508-8a54-7385b3906602", "sighting_of_ref": "indicator--3f949ee1-0ff1-4d4a-a888-739f95968c2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdb1c2d-8683-4eeb-a4c4-ce700064c110", "sighting_of_ref": "indicator--3f949ee1-0ff1-4d4a-a888-739f95968c2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89c0e43-a563-41ce-8110-912cb5a8d6ee", "sighting_of_ref": "indicator--0d7a53df-b6e1-40c3-8c82-e76446d6fc41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01012d47-959e-4a30-b42e-4d463ce19127", "sighting_of_ref": "indicator--144a54af-bfeb-459a-9369-70e19c898030", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3815c6aa-5ec0-477c-962a-4d9047a2c83e", "sighting_of_ref": "indicator--c2f926ad-2f12-45f4-a4a3-ffb97c6fa9de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274b6a00-82e9-4665-9564-274db5ffd6ea", "sighting_of_ref": "indicator--94f22196-6b6c-4ce7-92d9-13eff060fc0f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c13d0d-1c74-4745-bea9-38c9df5a1f03", "sighting_of_ref": "indicator--a005e419-44a8-45e5-8215-eb55976420b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d0b4a4-8ddc-4e73-b60c-cbf5590acec4", "sighting_of_ref": "indicator--a005e419-44a8-45e5-8215-eb55976420b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f8f1b0-1fd0-42b9-b799-32cc4efd9e5e", "sighting_of_ref": "indicator--89b4949e-4815-437f-9b74-f3097eb0ccad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a7f6c0-a1e1-4737-bd24-9cb0d9d354ff", "sighting_of_ref": "indicator--05964516-7f53-446d-b5e8-aa5a2fec8538", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93ceb6d-faa2-496c-9c61-36b23333a186", "sighting_of_ref": "indicator--c8f44c7d-7745-4318-aef8-2a2bf0df1800", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd37264-5a67-47de-9e58-cbae3118b7ec", "sighting_of_ref": "indicator--4e9c0357-2c41-4026-9c55-d0a1e4231969", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bc2960-7973-4bf8-85b2-fe16f756c5cc", "sighting_of_ref": "indicator--662e8dfb-02d1-40d6-9e9c-0d0c7a4a1527", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03eb3820-7cdd-4932-990e-a8d4de9e571c", "sighting_of_ref": "indicator--5051c61f-68fa-43bb-aa57-cf88dff3c095", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01996586-ed0d-4807-8949-cad7283e6e3c", "sighting_of_ref": "indicator--5051c61f-68fa-43bb-aa57-cf88dff3c095", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5e6a80-9b75-4433-ae08-fbddc148fd99", "sighting_of_ref": "indicator--b76bb422-1f26-490a-8cc8-1d2bee3793a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af97fff0-3835-4e62-af11-5bb6bf78199c", "sighting_of_ref": "indicator--34f691c0-4823-4b99-a40e-6eb9e1784d08", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a53a14-634b-432e-9f70-c2ce10487d71", "sighting_of_ref": "indicator--b768fdbe-f777-490c-8656-4ef265e3b44f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7c4316-4314-4a6e-9c68-6a5e5410cc3f", "sighting_of_ref": "indicator--b768fdbe-f777-490c-8656-4ef265e3b44f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da935a9-ff09-48e7-af83-bc4ba0a1ef39", "sighting_of_ref": "indicator--0a771073-0b07-4836-8ef4-f3d21bb9be7a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a517cc3-faba-4967-9a2e-db365adda0aa", "sighting_of_ref": "indicator--31c79aae-6c40-4e2c-9828-76667465da83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f53cd2b-1ed3-414c-a354-dfe19ad2270c", "sighting_of_ref": "indicator--31c79aae-6c40-4e2c-9828-76667465da83", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3098405a-4c7c-4cfd-aafe-88638f7cfe58", "sighting_of_ref": "indicator--6519b359-a8a7-4278-a0cc-7b8360afa17c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205c4688-29c2-4c23-ba9c-000aec5e9f4e", "sighting_of_ref": "indicator--3d555134-c490-4fcb-abec-98a398d6229e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f447d7b-fbd4-4202-891d-0427ed6ff5c6", "sighting_of_ref": "indicator--3d555134-c490-4fcb-abec-98a398d6229e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99cf04c-1704-4b40-88f1-9fc867ded3d2", "sighting_of_ref": "indicator--bc22ae31-da58-46b8-811c-d55ac9acea7f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b840de-60db-45a5-9a17-66e70121d6a2", "sighting_of_ref": "indicator--0419bdec-8351-485c-bc3a-ccd3ab0c6c75", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bd7035-460b-4d6d-aa3a-ad50efc08fa2", "sighting_of_ref": "indicator--0419bdec-8351-485c-bc3a-ccd3ab0c6c75", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc53dda-24f2-474b-8d35-7d175049d3fc", "sighting_of_ref": "indicator--0b7b3067-24f5-4230-8570-e4fccd4437ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba95f7bf-e1b7-4ab1-94e7-c0c5d66e5537", "sighting_of_ref": "indicator--2abc92cc-9e2a-45b5-adb5-8ab028472f1c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee22f961-ceed-4a5d-b697-171036fef88d", "sighting_of_ref": "indicator--ac0574e6-65b7-457c-8952-af594eb72057", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f686a1b9-dc9f-497c-bb4a-39a5b4ac0f6e", "sighting_of_ref": "indicator--ac0574e6-65b7-457c-8952-af594eb72057", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a60099-d9c2-42b6-a92f-8948f5ce2f6f", "sighting_of_ref": "indicator--44cfcc45-5c5b-491e-b4ea-fe0145f5a0d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31978683-ce34-40c6-889a-a6ccf7b56822", "sighting_of_ref": "indicator--32dcf8fd-aa89-486c-a5be-0cbfebfeed41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c9020f-fc03-4aab-9c6f-e8e522a8c0e0", "sighting_of_ref": "indicator--32dcf8fd-aa89-486c-a5be-0cbfebfeed41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdd508d-e96e-4b4c-975c-e1d78344c02b", "sighting_of_ref": "indicator--6035faa3-388d-47d5-bb74-0545265bd489", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ee39c1-8077-419f-898e-700d149d21b3", "sighting_of_ref": "indicator--a94c7c83-f37e-4196-a007-42e5b2e6348e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b81668-124d-4aca-97b6-45dd1274d866", "sighting_of_ref": "indicator--ca3d8385-0d72-473d-9db1-78d3b217e5ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050d7e60-c661-4347-bfbb-fc80901614a6", "sighting_of_ref": "indicator--367b0de9-6992-430a-bc7d-c0ad7fc2fb2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f370f3-5325-46e6-b13d-26a2183228e2", "sighting_of_ref": "indicator--c8797d8a-5443-43b4-b5bc-8f5c5ff679ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abca3103-0a87-4131-996a-143215b59d2c", "sighting_of_ref": "indicator--01184a39-4dae-498f-b05a-c8d2228e88e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb7ebf6-4fec-4132-9d02-a9d5ed8bc640", "sighting_of_ref": "indicator--584b8506-4ab4-4fa1-834d-b73494b345be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ae3243-8487-4211-b21e-7fb8f57ec17b", "sighting_of_ref": "indicator--584b8506-4ab4-4fa1-834d-b73494b345be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b87833f-2c90-40da-946f-c72c96d281e7", "sighting_of_ref": "indicator--a3d5e1c8-536c-45d4-9ac5-7ae90f06f7db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353f68f5-49ac-45f2-b878-08068b214255", "sighting_of_ref": "indicator--a3d5e1c8-536c-45d4-9ac5-7ae90f06f7db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450c8b66-f98d-4098-8c8f-b9097c1f7a02", "sighting_of_ref": "indicator--c8879783-c4bc-439c-87df-b824b82365f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6af7a2-ed42-49d9-970a-92493eafd204", "sighting_of_ref": "indicator--89a34791-b240-42d4-8b90-69a164bc7fa0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58934adf-e3e2-4adb-8f83-c32568ab3931", "sighting_of_ref": "indicator--89a34791-b240-42d4-8b90-69a164bc7fa0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58f8310-1141-4e02-afee-b8619fafa651", "sighting_of_ref": "indicator--1796fc53-f861-452c-bab3-e74fe6ba2bdf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa61453d-d37f-486d-9dbb-8c08452e7be0", "sighting_of_ref": "indicator--27f1f106-0d75-4e14-b04a-9d41d0cd5edb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6f6043-b4af-4704-97f2-8efacdf68aad", "sighting_of_ref": "indicator--211e96bc-ef0b-4f43-bf35-d8b029ae3bad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9811bc4e-3a9b-4943-ba38-336bddfbd3db", "sighting_of_ref": "indicator--b2ed6685-45ec-4f02-b6a5-b7af0e672e0b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22114f77-7485-4791-b322-5bb76659fb5f", "sighting_of_ref": "indicator--199d850d-5c13-4b46-8f13-0a80f69c3fb1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da19e1d-0462-4872-bd40-c9bf84e9c2dc", "sighting_of_ref": "indicator--199d850d-5c13-4b46-8f13-0a80f69c3fb1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bec5af-3b3b-4668-8928-c9ea2a38f00d", "sighting_of_ref": "indicator--e5591a74-8c80-458f-ab00-37838680b816", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f3b05f-c7d0-4535-a0d4-437db68d6e4c", "sighting_of_ref": "indicator--8f38ec69-6b5a-44b8-ba6d-2302f2526d7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc7dfb5-28e6-4af5-9fb7-fb24d1ed744d", "sighting_of_ref": "indicator--2df0e288-095c-4aad-87a8-32f4ba2d6113", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc120ba-de91-47a4-a7b2-f3a3e49fab9b", "sighting_of_ref": "indicator--302f60f7-7a6d-40bd-b93c-030864e6b551", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f86d53-a76c-4f52-81b1-7a665d38100f", "sighting_of_ref": "indicator--158bfdcc-1b46-4e83-89a5-a94e47b459d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fb2480-1875-4298-8558-5b2b906523b4", "sighting_of_ref": "indicator--158bfdcc-1b46-4e83-89a5-a94e47b459d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcd6d2a-7060-41d2-a211-56a0197dc14b", "sighting_of_ref": "indicator--f51b4044-2d33-4240-91b2-ffbd500f12ad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fce94c7-2a47-4d9c-a933-187d1332021b", "sighting_of_ref": "indicator--3ae768dc-66d6-4d39-a5f2-c7ca0ee14265", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0e6e0d-6d61-4bbe-9fa9-4aec00ea25bc", "sighting_of_ref": "indicator--8422f8dd-7e65-446d-ae12-268eb7c6db96", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54854fbd-3cbf-4f97-8ee7-b52ecdb0730f", "sighting_of_ref": "indicator--5a592761-99fc-4449-a3dc-9b3072d58721", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a632b4-91da-4743-bc32-c3722e608d38", "sighting_of_ref": "indicator--0cbf381d-e889-4c84-8d79-40c232f4e7d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57261232-5d29-4d28-af0f-e54288c6249a", "sighting_of_ref": "indicator--92f416f9-2d54-41a0-88a5-7812b9c2f6e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4800c260-533d-4fbc-8b8b-6b7b91adea3c", "sighting_of_ref": "indicator--a07a5d2b-7fe5-4b4b-a351-a385aceb3f48", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53953fdd-b42f-4f86-9aef-ee134192d763", "sighting_of_ref": "indicator--4819c20d-0375-46c3-9567-232822984967", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f793cf0e-d2ce-4698-9c13-ce8c96915e7b", "sighting_of_ref": "indicator--1ba0ff1f-5595-498b-8c41-fd85bd06ce2a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72dcb9d-1d43-4bd4-9af3-90fcf222d230", "sighting_of_ref": "indicator--1ba0ff1f-5595-498b-8c41-fd85bd06ce2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db7df32-c547-41e2-bff6-d5d2c66bf99c", "sighting_of_ref": "indicator--5ae2c26e-aabb-4dc2-8aa0-57f6800ebc9a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483a2911-91ca-472e-ad0a-95312b88a7cd", "sighting_of_ref": "indicator--5ae2c26e-aabb-4dc2-8aa0-57f6800ebc9a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1806fadd-8e41-4032-8853-c238a36a3b87", "sighting_of_ref": "indicator--d371ff17-1422-459e-9074-0953a531dc2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4f6502-92e5-4f55-918e-cd3751acf83f", "sighting_of_ref": "indicator--2c469a0e-7a12-43bb-93a7-d1f224072de2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd4eb26-8bd8-4247-b53d-852306ea3799", "sighting_of_ref": "indicator--21e86f54-6506-4928-8f2c-3c6a4644e7fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49332d90-5fd7-46d1-bc33-ec3b8e8ca99e", "sighting_of_ref": "indicator--c2ff4b2a-0721-46c4-b48f-c3ba8e8ad3b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd82ee1d-ce0b-445d-b5d7-71ee4e6c5542", "sighting_of_ref": "indicator--92dfed49-b69b-4650-9da6-e318fcdda227", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5fc4b7-1cdc-47d8-a4d3-167f34f00d53", "sighting_of_ref": "indicator--b258e5f8-cd32-4708-9095-fab92b4bb9a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc2adc6-9742-4b86-9248-5aab0c45a1ca", "sighting_of_ref": "indicator--be9e32f0-09bc-47dd-85b2-f0b7925362d7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08580d2f-d557-4f48-af3a-9dc4925f0096", "sighting_of_ref": "indicator--24e8770b-7e4c-4479-a123-84c7ca2c2610", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccc86b2-7a94-4d9a-ab68-4d4b896ab81b", "sighting_of_ref": "indicator--e5cc4230-e3b7-48dd-af17-67a27db51775", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c99f82f-89fb-481a-9afa-0bb733c65b2e", "sighting_of_ref": "indicator--e5cc4230-e3b7-48dd-af17-67a27db51775", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5142a00d-3829-4e80-8713-13aed08c84fb", "sighting_of_ref": "indicator--def94e02-8c49-4c80-bbc8-5d5490652564", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a96e6a4-11fc-4e2f-8284-562b682552ac", "sighting_of_ref": "indicator--15149639-47c9-450e-affc-f8955d522f3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23963e91-6451-4236-955c-ba8118f712fa", "sighting_of_ref": "indicator--4cb13643-f0d6-4f76-be1a-b925ac6b52ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529f3b6c-8537-40b5-9fd9-2fac89ed9d7f", "sighting_of_ref": "indicator--4cb13643-f0d6-4f76-be1a-b925ac6b52ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cdd331-4fe6-491c-9a60-12bdb07187e8", "sighting_of_ref": "indicator--5517f701-959f-4a1e-a056-5866e84fd114", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc055cf0-3356-4acf-a9ff-9b7166927903", "sighting_of_ref": "indicator--99f412f9-c9d5-46bb-b3a9-e199486dd6cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e6f4b5-5efe-46a2-aa4b-3db0ae8f0f4e", "sighting_of_ref": "indicator--09788485-4084-409a-835a-d770bbc65637", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea4c257-7e04-403d-a337-e3a0fed77945", "sighting_of_ref": "indicator--09788485-4084-409a-835a-d770bbc65637", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acb1a82-022d-455d-a3b6-8da41443d607", "sighting_of_ref": "indicator--4d80a654-138c-499b-b913-8304c579f482", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044d7dbe-c824-45b9-b79b-92e5014114b0", "sighting_of_ref": "indicator--eb45f187-8cdc-4958-b2a5-3ac21d05c246", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a974399-4260-4f5a-ac3b-97c4c137f1f1", "sighting_of_ref": "indicator--eb45f187-8cdc-4958-b2a5-3ac21d05c246", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc61e0b-c0ce-48e5-83c1-e632c3ebedba", "sighting_of_ref": "indicator--0c3bbf68-d6ec-4e01-b94f-8a0e4548389a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af274f7-d91d-4495-b12a-60f4897d850f", "sighting_of_ref": "indicator--f114601a-d598-4474-8e34-659a45f8acc4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ca5df3-5859-4a7d-b814-ae67b07168b9", "sighting_of_ref": "indicator--9acbb87b-c878-4651-96fa-807a37a63a3e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbe0fcf-0654-4214-8dea-5fe28a733035", "sighting_of_ref": "indicator--574e8a65-cff6-4f42-b88a-20ca07ad3eea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76943f19-43fa-41ef-8f49-357744cde4f0", "sighting_of_ref": "indicator--cd018a26-cc55-430e-9421-c22f02f0fc90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62659638-808e-440f-a6b4-7cd0c3ec44be", "sighting_of_ref": "indicator--5be9817b-45f9-4e8a-a489-9d5a45d28721", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f700ff36-5910-4907-b779-8e31adc88581", "sighting_of_ref": "indicator--a7193d2c-a46d-45c6-9c0b-9f7b25a3f1b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584248ce-e5c7-423f-8c6f-296239c75396", "sighting_of_ref": "indicator--a7193d2c-a46d-45c6-9c0b-9f7b25a3f1b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9c8378-b799-43f1-9139-b4f5fc08afe1", "sighting_of_ref": "indicator--5c9ce340-70df-4b49-a195-6dfed058c95e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d9954b-d2a8-49db-ab99-49d599b8b11e", "sighting_of_ref": "indicator--1752963a-ae31-4477-a7cd-c32b6b629b29", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e3c41b-ee9b-4c59-ace8-c33d3d1a5967", "sighting_of_ref": "indicator--fc6d9b23-b7be-4173-9e41-f7c0d04c8d96", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54a186f-38a0-4251-b1cd-737164b56a0c", "sighting_of_ref": "indicator--1b75abfa-d830-495a-9ac1-99770d5f961c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a173646a-6f8c-40c0-85f6-f9adbaa2b6f1", "sighting_of_ref": "indicator--e290f8eb-ff7c-488f-9b84-602eed07c9f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648cfd0b-138e-4586-8c4f-dbab58c07cbf", "sighting_of_ref": "indicator--b4ef9eee-31d0-45dc-a69f-dee69dd7c18f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd134528-1027-4b21-b146-668977ac85f4", "sighting_of_ref": "indicator--06d7933d-c025-43aa-b726-abbd7962b87d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a49af6f-02e5-44f7-b882-92892ca172ed", "sighting_of_ref": "indicator--09b6cd13-dc13-4280-83a0-1dfcb644cfab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a45b26-5836-49f7-bda9-24c6efc1b2d2", "sighting_of_ref": "indicator--8dca79d5-96d6-4d44-90f3-6ac3a5a2edc1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77eb6149-3f8c-4e1b-9d5c-390b22eaa4f5", "sighting_of_ref": "indicator--c0e3c9a5-d932-4941-97d1-7d57f4a3bbb7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c91f34-db5a-4fb9-ad78-edcd4b329df7", "sighting_of_ref": "indicator--c0e3c9a5-d932-4941-97d1-7d57f4a3bbb7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1187dd0b-c9cc-4a41-9486-0c0377df0c5f", "sighting_of_ref": "indicator--9d336fe9-fc00-456d-a46a-fe16a2673e23", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08aa0290-233b-44a6-bb7f-f067e6bd1529", "sighting_of_ref": "indicator--9d336fe9-fc00-456d-a46a-fe16a2673e23", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfa6859-fcb6-42e5-a9dd-1622a811c110", "sighting_of_ref": "indicator--c30b8013-e966-4144-b42d-768066b2466e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a2e06b-9fbe-498b-b507-b423ba94d58f", "sighting_of_ref": "indicator--c30b8013-e966-4144-b42d-768066b2466e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1888c41-5734-4280-a930-e3a557eb47b4", "sighting_of_ref": "indicator--9d1b3d11-c060-4217-bff8-bc3b5e405f65", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bc3a5f-5c5e-4592-8bd5-10c447bb0d13", "sighting_of_ref": "indicator--e57563ee-5602-4a12-badf-b293f8d8ce24", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6a6332-6813-4b46-b438-429f4105ff3d", "sighting_of_ref": "indicator--50a3b65e-c955-4668-b2d3-8448eb5252cf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75f198b-b6c5-4630-b55b-fc6b1a16c01f", "sighting_of_ref": "indicator--50a3b65e-c955-4668-b2d3-8448eb5252cf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fe8965-90eb-446d-8318-aeec310d67fd", "sighting_of_ref": "indicator--90daa2ef-40f4-4a96-a7c8-950bbe192256", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d663819-1d11-477f-b1b1-3d62ef71591f", "sighting_of_ref": "indicator--90daa2ef-40f4-4a96-a7c8-950bbe192256", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6539badd-81ac-471c-9a6e-71f703d7dde7", "sighting_of_ref": "indicator--95a216b2-0011-48d8-a164-f603c58baf4b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f739fc3d-ae8c-49a1-a78f-c2040788736d", "sighting_of_ref": "indicator--95a216b2-0011-48d8-a164-f603c58baf4b", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ee55fc-3b3f-4fe0-8751-5c97e812ad94", "sighting_of_ref": "indicator--b491b3c0-be3c-49d2-bdc3-5fa1e541b70e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d58e705-a182-47fd-923c-27774c936de9", "sighting_of_ref": "indicator--7197bd19-6c6b-4c7e-bde1-ff7b6ace4a8a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160c7051-e934-4790-afde-6f9092d7257b", "sighting_of_ref": "indicator--59e55d21-f87a-4c93-a6f7-fa726cb65c1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c3a73e-d1c0-4b48-afbf-cad3e960c6a4", "sighting_of_ref": "indicator--cb154fad-0d28-4c00-a1dc-42c5b0959afb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b08de0-ca63-46c7-9cc6-6ef86d6be27b", "sighting_of_ref": "indicator--6feb0f10-3664-4bbe-a3d9-be3a09336e19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e7d128-16e1-4f05-a8b4-de11de3a77e3", "sighting_of_ref": "indicator--dc29a4da-7f9a-471e-8d6a-857a606e5a8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12fcbb0-c8f9-4b98-bb09-9ad97cf2fa58", "sighting_of_ref": "indicator--3f5a5807-53fc-4fc5-a317-81ff439cd366", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d7983a-4ff4-4fe2-a33b-da2c340601cc", "sighting_of_ref": "indicator--0510db1d-6004-4524-8060-90cddb0fa02e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4fba1b-3fb4-4990-bdd9-a22714335435", "sighting_of_ref": "indicator--f9ea94a6-e06e-4e30-9adf-05e70eeed423", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc60dd9-7bf7-46ee-bcab-63e2b34a0fda", "sighting_of_ref": "indicator--609e721a-6847-465b-ad64-846e09c8a85d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d8ced8-b0be-4ab0-a4e1-75e5210d95b8", "sighting_of_ref": "indicator--0ba64040-e81f-4f78-9a65-c71b6aaa29fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8f436d-416d-41af-933c-4b150fe4d5c4", "sighting_of_ref": "indicator--6e53ebda-bbe4-41aa-866e-1ca76065ff74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bfc194-a583-4683-8056-26ffb4c57d75", "sighting_of_ref": "indicator--cad88b59-eb60-4065-a3a6-9d7094e07757", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e1f013-10ef-400d-b1b0-cf15fd91939f", "sighting_of_ref": "indicator--7bd588d0-ba2e-4c4f-b909-fc298cb90ae0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43a980e-4e5f-4cc9-9087-5d6de70ed663", "sighting_of_ref": "indicator--e4852ccd-d427-4e45-a8f7-6fff9231e0b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288d8663-dacf-43f4-8367-5dcd84c74209", "sighting_of_ref": "indicator--46d0bdf5-b149-4fba-b92f-d34d684b6234", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b9155b-02a1-4900-ae95-d7e4f207126d", "sighting_of_ref": "indicator--a59ea815-d741-45b7-b2d8-958c8f0175d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619fd031-ce4c-4026-9ef8-bcd59a2a8742", "sighting_of_ref": "indicator--5db62de2-eff8-442c-8203-7b61489c1f19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34598e5d-e17c-4579-9fa4-b6ffc0839a60", "sighting_of_ref": "indicator--7399e6ee-3584-4c71-89f5-d6c92c4d11b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8025b80-a9e5-423c-a5bc-f9334393f5ba", "sighting_of_ref": "indicator--7f7548e2-df2a-4cc7-b6e3-a5b502ce156d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a863e3aa-e499-45c8-b166-6f42befe2d34", "sighting_of_ref": "indicator--5cc452b8-c261-4012-bc8e-6d7c9be4defc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136456be-9e82-4d06-86b6-63c538cfc30e", "sighting_of_ref": "indicator--3697c74f-ee27-41fa-b8fc-c3084bb4e5c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3fb24a-f8ef-4a26-aa62-abb2d00ca492", "sighting_of_ref": "indicator--c38022f3-28c2-4c94-a929-21869542fb60", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ceb339c-495b-46d7-b831-5b94f6863a1b", "sighting_of_ref": "indicator--28e580f0-d319-42b2-9b3e-60aee60cc6fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce927d8-d0de-46c3-be47-310543a7414d", "sighting_of_ref": "indicator--221c5c43-488f-4cef-b50e-a700c9ef51ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90aa951a-c135-4d5a-b093-22793d54942e", "sighting_of_ref": "indicator--7bd407ba-207f-4cab-a7dd-1ec01dc92319", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4866424-de5b-4a18-a0ca-3d2f34300cf1", "sighting_of_ref": "indicator--7bd407ba-207f-4cab-a7dd-1ec01dc92319", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b8bab9-c47a-4eca-a41d-5f2503d3da7c", "sighting_of_ref": "indicator--61142aa1-7397-4bb6-aaa0-6ad2cf718095", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62037c57-3493-4450-924e-d003f65ea89a", "sighting_of_ref": "indicator--61142aa1-7397-4bb6-aaa0-6ad2cf718095", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a22f31-b7f3-463c-b364-ac521dc886a0", "sighting_of_ref": "indicator--5c90beee-394d-4e5e-85eb-13de9724baf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086e67bc-1743-4526-adf0-2dedd2387e93", "sighting_of_ref": "indicator--5c90beee-394d-4e5e-85eb-13de9724baf3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffb95e3-1a99-4454-ac28-2ae8cd877818", "sighting_of_ref": "indicator--e75de174-0488-414d-ba40-4b3dacce0ee0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437344c7-7131-47dd-9200-4612aa44b9c7", "sighting_of_ref": "indicator--e75de174-0488-414d-ba40-4b3dacce0ee0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870322b0-b286-486d-b61b-2e2a927c18f6", "sighting_of_ref": "indicator--f2dc9c0c-fcce-4c7d-b48e-54f3c9afea4b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a18b821-fcb2-4b53-9c16-c3b98dec6ac4", "sighting_of_ref": "indicator--de5d48a4-898a-4acf-92fe-7d72a4b7d438", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5482820a-ce94-4186-b448-634959efd3af", "sighting_of_ref": "indicator--88a8eb20-d501-499c-b29f-e9b688157d6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a608ade5-2031-48ae-bb51-39351da2de6a", "sighting_of_ref": "indicator--8a5b11a0-1452-4313-ae62-fb91d1f13468", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3282d9-2708-4d6b-82a4-d8fba2ea85f3", "sighting_of_ref": "indicator--8a5b11a0-1452-4313-ae62-fb91d1f13468", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0598b53d-d405-4cfd-a5df-7874a57d2f86", "sighting_of_ref": "indicator--e2f448e3-4c8f-4517-94a6-619ac0daa8f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4805c2ad-1d4a-4d64-8a85-452b3d178575", "sighting_of_ref": "indicator--5403679c-761e-4d97-a74f-94f7cfbcdd25", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02ac79b-dd43-4ebb-a874-a8b59a29a10b", "sighting_of_ref": "indicator--cd882d38-62a1-4d2d-b325-cb76ef533d07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65b83f9-2c61-487c-81ac-1b43ff528393", "sighting_of_ref": "indicator--1f6dbf3b-ec9c-4726-b76b-0152ef43f229", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3535f420-e5f7-4c2d-ab3a-18648f94ef75", "sighting_of_ref": "indicator--e58c17ac-d59b-403a-a25c-4afd30e5725f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56ef0b3-0ee1-4dbf-9638-7c841cf111fc", "sighting_of_ref": "indicator--7e997c63-43b9-4309-b9a9-dce6f7a7c217", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e97446d-fc9f-43d1-b671-1cdf2e205982", "sighting_of_ref": "indicator--7e997c63-43b9-4309-b9a9-dce6f7a7c217", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed2697a-d119-4ab7-81a1-5e21f21379dd", "sighting_of_ref": "indicator--a5e95ddb-0ded-492d-a112-485a23eef963", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e30002-5842-4bf2-ba1e-3f00afde9316", "sighting_of_ref": "indicator--3931dccf-e515-49d8-a788-fbc847ca03e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7d9e96-84f8-4574-bdd7-944f1c957f6e", "sighting_of_ref": "indicator--3931dccf-e515-49d8-a788-fbc847ca03e5", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe789eb-5fbe-4a1d-bdcd-900a626b7182", "sighting_of_ref": "indicator--fabca47e-0c31-45ac-b069-ee38ad6bbd67", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab87bc5-2847-4086-87f1-e5769e11c9fa", "sighting_of_ref": "indicator--fabca47e-0c31-45ac-b069-ee38ad6bbd67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5c9dad-8d1b-4182-b0c5-92e4afcf2ab7", "sighting_of_ref": "indicator--6ff9aa5e-0cf6-468b-9a93-89dfa0043314", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4b3a66-254b-4579-81af-7f4b2c050580", "sighting_of_ref": "indicator--fad67c8f-ba96-4515-b9d9-f67d5d3e8c90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8e412f-b294-4685-99e2-703c0f45bb67", "sighting_of_ref": "indicator--f8a73fc0-644b-448c-b5c6-19e2fa7f51c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7ac3c8-c4b7-4498-905c-b0d2361cd46b", "sighting_of_ref": "indicator--e0f7924e-8c68-43cc-be86-302812d3c0a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41755db4-e1d8-4845-a63c-278b9df57c32", "sighting_of_ref": "indicator--aabe5f6a-0dc3-4c38-8305-7e7c33d5d530", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b18cdf1-d863-41f6-b2a0-5c52b39cf257", "sighting_of_ref": "indicator--d94eaf2e-3f66-47bc-80ff-c4c6d292e79a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a1cdc8-41b0-431f-8557-0ba1ebd753d1", "sighting_of_ref": "indicator--d94eaf2e-3f66-47bc-80ff-c4c6d292e79a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be6d856-f1d8-4a6f-a582-54bc242ccccd", "sighting_of_ref": "indicator--de5d570d-6d82-4e84-b299-a82b0b651369", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0657292-c8f8-411a-8253-a11d9582f804", "sighting_of_ref": "indicator--7e7fccab-dd08-416f-bae3-9de3e836a84a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb09e307-baad-49cb-b10d-71063a37fa08", "sighting_of_ref": "indicator--7e7fccab-dd08-416f-bae3-9de3e836a84a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61434f2-e9f3-41db-966c-2ddd57e413f0", "sighting_of_ref": "indicator--8adf7585-2d3c-41b7-a5d8-08eddff91546", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a397eb4a-533f-401c-8b55-7bc78413c880", "sighting_of_ref": "indicator--a9f850de-0328-40db-8894-e61bf3db6662", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f505c3-493a-45f3-b988-771dbbf155cf", "sighting_of_ref": "indicator--a9f850de-0328-40db-8894-e61bf3db6662", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89666418-30db-4009-b657-1f252428a058", "sighting_of_ref": "indicator--54aed53e-bae8-46d6-ac99-ad10b8c180e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1275ff-94e4-4f8d-9b32-787087cc8e9b", "sighting_of_ref": "indicator--92059479-a76d-4e52-b73f-cfcbd37afeed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77209e56-56c9-44aa-a90c-d1256050fa74", "sighting_of_ref": "indicator--ccb1f18f-42b0-4915-98a3-0e8df2c04318", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412693ac-cd39-4c4f-9abc-1548c371cc14", "sighting_of_ref": "indicator--9aa645b6-74f8-4473-a1fa-81f6a22c4cfa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6e5cf2-2f5e-4e88-96a6-ffb8a83dbf03", "sighting_of_ref": "indicator--50db23a3-1f5d-46e0-8387-cd87a2dfa1fb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72e2d4e-bdb8-4e49-be13-975fca04817d", "sighting_of_ref": "indicator--50db23a3-1f5d-46e0-8387-cd87a2dfa1fb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6ec593-15cb-42d2-9dd7-d3c799768abb", "sighting_of_ref": "indicator--7d52be23-1ba0-4811-9be2-c6379bae6294", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69f7fdd-a203-473e-832a-0e4ae988e315", "sighting_of_ref": "indicator--4567417f-5b98-41a4-bec2-696cba567dbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf333ce8-7e71-4d0b-86b3-3e131857739e", "sighting_of_ref": "indicator--18b70d6c-1f6d-4f6b-9817-a0c9abab5be8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d80f86-849a-483f-b26c-84f12be307a2", "sighting_of_ref": "indicator--375e83b1-7315-4698-b59e-d39ac53e0420", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a343ce3-8fd0-435f-9e68-83dc5ea130e1", "sighting_of_ref": "indicator--375e83b1-7315-4698-b59e-d39ac53e0420", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bd376a-fc2a-4f4c-a5a5-2e670ece8818", "sighting_of_ref": "indicator--cea19a90-22ec-43bd-af4f-0cca7e0f429a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3cce9d-bc23-4789-b809-0b1b485205e0", "sighting_of_ref": "indicator--5181b567-0e79-4206-9bd9-63ffb16617fa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbaf40b-a96e-43f0-886b-010216d9257a", "sighting_of_ref": "indicator--157d7483-80c6-48dd-8976-16e754053917", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc82bb3a-81c4-4493-963e-91b469843403", "sighting_of_ref": "indicator--b2d79d2a-877e-4dec-b626-b57f76c0dd03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464885b0-39d2-46b9-824d-76ad97f38c07", "sighting_of_ref": "indicator--b2d79d2a-877e-4dec-b626-b57f76c0dd03", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5320320f-8348-4c1f-95f9-812f77748d36", "sighting_of_ref": "indicator--38c39e3e-0fa0-416f-8602-b09c55017199", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b275545d-6fbd-4883-8704-221da767a4ef", "sighting_of_ref": "indicator--61f0ee93-d6d9-4083-a5e2-685c82b918a7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5374cbef-448e-455b-a997-82e9c3496943", "sighting_of_ref": "indicator--890d91f2-6513-47f1-b1e4-6dfbaceeabd7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2e631e-43f8-460c-b1c4-ab5e72e19fcc", "sighting_of_ref": "indicator--5ff4ddf5-6a1c-4f56-833e-704c7b1046f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aac8573-8ab0-4b87-b61c-ea55bf131e2c", "sighting_of_ref": "indicator--5ff4ddf5-6a1c-4f56-833e-704c7b1046f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a432c22-de8c-44cf-b5e0-3f68a16703f4", "sighting_of_ref": "indicator--9edc7951-562f-4abc-8125-594e7996c86e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523e2bb4-a2c2-4623-803a-7f5b1315f70a", "sighting_of_ref": "indicator--fb55e9ea-1c69-4e37-87de-42689a1c0fb0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0587f381-42e0-406a-b0d9-984bf53229cc", "sighting_of_ref": "indicator--14659970-eaa8-4269-838c-d51412ad7405", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa4ab7f-7c79-4cb4-9fd3-b81dd357bc9c", "sighting_of_ref": "indicator--d52842da-d47b-425a-97d9-866ec54e6dcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4df4a04-20a4-4475-9212-932b797e4845", "sighting_of_ref": "indicator--8aedf509-4559-425b-be9b-c2202bcf87a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f2166d-176e-4422-8f15-2b9ab7e2661e", "sighting_of_ref": "indicator--05eb6970-68ab-4f4a-8801-3880f5fca902", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1169ef4f-2fd8-402b-9264-a141b653598d", "sighting_of_ref": "indicator--a4fb0084-e2e6-4595-9778-455efc993fe8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff02f40-ebdc-4284-ac6f-8e2658a88334", "sighting_of_ref": "indicator--2e4e9823-64d3-4b75-a556-c0403c383b1d", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c7f88f-944a-489f-ac85-49efaf840cc2", "sighting_of_ref": "indicator--4e0196d1-b5ed-4d6b-b743-c3e4ef69475a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0602618d-7c4f-4ab4-b183-8a947e5bc0ca", "sighting_of_ref": "indicator--7a13c059-7855-47ce-828d-2375de0d1d57", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04858f1-c40d-4962-8337-06047b924d8b", "sighting_of_ref": "indicator--9ce5d4b9-8d4e-4353-b480-a4368bc37146", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f008d7c-ff0f-4dc3-b16b-07ab3fc5679c", "sighting_of_ref": "indicator--036e8ba5-1753-4ce9-8296-ad6b9261ee7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b771544b-b06e-43b0-b8f6-2ef32e62dd26", "sighting_of_ref": "indicator--8e4a6a7d-2e2c-4e94-853b-f5f429c6bac7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447dc358-fa9b-444b-9acf-bdfcfb2ae81f", "sighting_of_ref": "indicator--107257c4-3215-4468-bf05-0b693eac086f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ad0290-30f7-428e-b63a-9105d9723cca", "sighting_of_ref": "indicator--45d3e6f7-e950-4381-a448-748e0b6e003c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec15b962-0cc7-4b49-aa24-4a822ddd2f58", "sighting_of_ref": "indicator--53e4afd0-bbb4-4619-bd24-a3767243dab4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069a8d82-06f7-4ce3-afaf-76bc5b5b448a", "sighting_of_ref": "indicator--08dfcbbf-5ef4-4152-a4bf-8bacff9bd894", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc7a96e-56d2-4a06-9c7f-0c99eb355af9", "sighting_of_ref": "indicator--1e031b1b-e0bc-469f-959b-b64b457b5653", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c880e9b-c3b2-4e71-a277-8c771537ff6d", "sighting_of_ref": "indicator--1e031b1b-e0bc-469f-959b-b64b457b5653", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23254a93-da7a-45ed-97a9-442afd17f4d8", "sighting_of_ref": "indicator--a38cf86d-091b-49e0-a5f8-034b457a5632", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4314990b-6851-41b9-810a-187fec8ae27c", "sighting_of_ref": "indicator--a38cf86d-091b-49e0-a5f8-034b457a5632", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fa0496-c214-4991-8c92-25eea70a36b4", "sighting_of_ref": "indicator--21cb03ea-948d-4b1e-82ac-ed6712847f37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ff4ab1-3747-4a02-b839-77ea419a97e9", "sighting_of_ref": "indicator--21cb03ea-948d-4b1e-82ac-ed6712847f37", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc25c5d-26dc-4ab6-ac0a-86709ff00bad", "sighting_of_ref": "indicator--d8265a35-b8ec-4e9e-9159-b41227c886e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64be89d6-7c42-4df6-831d-b469cd0a958d", "sighting_of_ref": "indicator--d8265a35-b8ec-4e9e-9159-b41227c886e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b864b0d7-2f08-4857-a49d-0762d4e91bea", "sighting_of_ref": "indicator--9b747cdd-afc4-4f64-abd9-d66ed912ef4a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349965d3-0b3c-49ed-a409-9c6b64af816c", "sighting_of_ref": "indicator--9b747cdd-afc4-4f64-abd9-d66ed912ef4a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a614a4-f10d-4d24-af1d-b1e3ae9114ae", "sighting_of_ref": "indicator--ae661f90-4232-4b16-a595-3e37b24c9c6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2564906-6d31-4a88-a639-abd2bb124e96", "sighting_of_ref": "indicator--f21f71cd-308e-4dfa-be73-0ca446af6bae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41640234-a329-4093-be72-1e2679e1ef87", "sighting_of_ref": "indicator--f21f71cd-308e-4dfa-be73-0ca446af6bae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ef0708-0d00-4c76-b47b-3a6ea4a72820", "sighting_of_ref": "indicator--6d41a756-fe72-43cd-b66d-fe1e1f03b910", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb11019-6d44-4e17-af6d-9a1c2dc1a2a7", "sighting_of_ref": "indicator--838b5cab-3fd9-460a-878d-37d68ececdea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d30abc1-bf42-4f44-ba6b-1d34086986c2", "sighting_of_ref": "indicator--838b5cab-3fd9-460a-878d-37d68ececdea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63849d4-c4ff-447d-b657-876448fb3730", "sighting_of_ref": "indicator--73e7ded9-33f5-4fab-a822-7775f6197de8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266733bf-8bbb-4b26-bbc1-4ae2f6db24c1", "sighting_of_ref": "indicator--73e7ded9-33f5-4fab-a822-7775f6197de8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84aab455-755d-47a6-9529-243f08944cc9", "sighting_of_ref": "indicator--9cee976a-8616-48b5-a920-00b1242237d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67a45a5-3f72-4b49-8165-9907084ee46a", "sighting_of_ref": "indicator--9cee976a-8616-48b5-a920-00b1242237d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a77a72-7d51-4130-ad93-a39371718f35", "sighting_of_ref": "indicator--1c777c57-6a62-47ef-85d7-cd48d6d82bc5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fb9270-6dbe-41dd-a10d-03754b1259da", "sighting_of_ref": "indicator--1c777c57-6a62-47ef-85d7-cd48d6d82bc5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605bcb66-45c8-468c-98dd-8271fee20fcf", "sighting_of_ref": "indicator--051a5efe-2778-456d-8324-5d13b24a7182", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c87d34-d19d-4f3b-adf3-421278b337d7", "sighting_of_ref": "indicator--2ed2e2c3-b65d-4a15-9664-2240834a43be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d3367b-3976-4ffb-b27f-0cacb16776f1", "sighting_of_ref": "indicator--8792aa17-6103-4ea1-8cef-507b59f00e1e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cded772-6355-4ab8-b784-60afacc6a15e", "sighting_of_ref": "indicator--37f649ee-fcc2-49fd-b5d6-f365530f9d5d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2d30bd-c4e6-400d-b19d-261755f38a25", "sighting_of_ref": "indicator--37f649ee-fcc2-49fd-b5d6-f365530f9d5d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfe59f5-6a88-490c-b740-dcea0f696217", "sighting_of_ref": "indicator--747de5e2-ba21-4ff5-8f1c-c99d9ae192f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b069eec5-6997-43ac-a5e8-91ae56948cf8", "sighting_of_ref": "indicator--0b54785c-9250-4642-ab36-a9f1c7c1fe06", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459d2110-cdce-4752-bcc1-85925c4f8c4a", "sighting_of_ref": "indicator--0b54785c-9250-4642-ab36-a9f1c7c1fe06", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26356885-fe58-45f8-8376-f5acca53d699", "sighting_of_ref": "indicator--65bd358f-6b4b-4e11-b63f-dbb6253f9186", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f19a155-600f-4f03-bd37-01cbfb0db511", "sighting_of_ref": "indicator--91ac162b-43ff-4634-9578-ce854ee97445", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e9b18b-b176-4721-81f0-e74d819362f3", "sighting_of_ref": "indicator--84225d6b-ddc8-4cf3-bcfe-2068a1914759", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ee19a6-8481-4333-a3af-a54cf8f3adeb", "sighting_of_ref": "indicator--09b7cdcd-1621-400d-a3e0-93bf2b5bc1ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ba3144-f591-4e13-8b3c-061a59ed4503", "sighting_of_ref": "indicator--30af7986-b179-4453-a762-82aa1bb8949d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc17810-a57e-4fb3-b085-2e61813d1f1d", "sighting_of_ref": "indicator--ad75b978-214f-4ebb-9e6b-ed313c486282", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87e2472-3423-4f8c-80c3-320422dc1b49", "sighting_of_ref": "indicator--019aa41c-1b31-4b99-96e5-39f2b811ce46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a64086-f834-4c0b-a681-22a0f5434af8", "sighting_of_ref": "indicator--d2ddd81c-b7bd-4191-a44a-2740aafd717a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f02291-26b9-42c8-a60a-8a76166c340e", "sighting_of_ref": "indicator--0528135e-48d8-4c42-848b-aaf2bb2ddbe9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328969be-aad5-4f6b-b8d3-fac79d77086a", "sighting_of_ref": "indicator--173f43e5-93ed-4444-8d54-f717e9b13ac5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7f79f9-a95a-4550-9eab-48ace5aae398", "sighting_of_ref": "indicator--2d9eaab5-2d5e-4490-be5f-8dcaaa84e64a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0d351e-2327-41f6-8641-f3bfe089d920", "sighting_of_ref": "indicator--2d9eaab5-2d5e-4490-be5f-8dcaaa84e64a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d863d086-b456-453b-9030-533722463847", "sighting_of_ref": "indicator--ea06018b-9dba-449a-bef4-ba81b352af6b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1f3bf7-785f-44af-8db3-33eec906f047", "sighting_of_ref": "indicator--e717dcf5-8e21-4b68-b03c-ddd085031a5d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31d678e-d6bf-4be7-9ced-e75647ec3300", "sighting_of_ref": "indicator--c8422d64-2bdd-4da5-b195-7a5c470074db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af98298-e6b9-408b-afe7-30a06acc05a4", "sighting_of_ref": "indicator--7ef0c394-64b8-40bb-acba-70fbf798d4b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea29ac6-6715-4473-92e9-f3af866c54f2", "sighting_of_ref": "indicator--778483c8-24fa-4323-aa29-58efb24fc552", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622b0890-811a-4801-93b8-3cf1300321f0", "sighting_of_ref": "indicator--778483c8-24fa-4323-aa29-58efb24fc552", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f565ad65-ff0b-4b16-b715-3885132c57d1", "sighting_of_ref": "indicator--778483c8-24fa-4323-aa29-58efb24fc552", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d48d73-557a-484f-a342-7a73d2adc610", "sighting_of_ref": "indicator--0391f3a0-77f7-4058-9dd9-05dc401dc194", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e994f346-0c90-4742-b010-30f6250b023d", "sighting_of_ref": "indicator--0391f3a0-77f7-4058-9dd9-05dc401dc194", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b56428f-f204-47a4-8505-d35e2cd64d9e", "sighting_of_ref": "indicator--3ec39aab-ba0a-4029-9945-9b9a7380fd47", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83671c75-bc25-434e-a16d-7ccc099eca86", "sighting_of_ref": "indicator--894e9dca-b5bc-485e-baed-bb3bcc76c220", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db5343f-e734-41a4-a10b-848318346f76", "sighting_of_ref": "indicator--894e9dca-b5bc-485e-baed-bb3bcc76c220", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdbc712-7e25-412b-a78a-11e433443b91", "sighting_of_ref": "indicator--4b6ec52d-cc55-4aac-8fa8-a2436cb9ce24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6a08cf-c933-46ce-87e8-4562589bab2f", "sighting_of_ref": "indicator--c5bfdfa2-e681-4722-9e27-ab3d7e031769", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b374712-0746-4c46-a1c0-bc9af9c68c89", "sighting_of_ref": "indicator--1cdc9553-8346-4e8d-b244-4051c0ba59b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdca374-3328-47fa-9718-e09b05315b22", "sighting_of_ref": "indicator--1cdc9553-8346-4e8d-b244-4051c0ba59b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a40ef7e-7b59-432e-9771-4742b29a6b6b", "sighting_of_ref": "indicator--4f4aba93-32cd-4da1-9d96-3ac8a717d70a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3227f433-1b96-4658-b549-a8a78b198656", "sighting_of_ref": "indicator--7f920a98-e802-4cb5-874c-2ef111b34c6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27c2e86-0c41-49a8-8597-89c90938ab80", "sighting_of_ref": "indicator--9f3adf23-d54a-4462-9701-e2d1126f9722", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e63cbaa-4a10-4a69-8ea6-30d92083c3d0", "sighting_of_ref": "indicator--39ff5424-2760-45e5-b511-aeb8a40210ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fc3730-6671-4b5d-b601-facde4ed4ae7", "sighting_of_ref": "indicator--91ca6b1f-f6c9-40dc-9130-93360d0ab23c", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833d9917-2896-4288-bf0b-3953530cf042", "sighting_of_ref": "indicator--4cf0ff48-9771-4a17-9738-510c7b8e21f4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c115a57-9608-47cb-8eac-57616fb47be6", "sighting_of_ref": "indicator--4cf0ff48-9771-4a17-9738-510c7b8e21f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e45b3d-fc98-40de-a056-5aa57b6591e0", "sighting_of_ref": "indicator--79290fab-176d-48ea-9cf8-1fc063a3abe1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a13c02a-31a1-49fd-8baf-d65ff02ff0d7", "sighting_of_ref": "indicator--5b3cf845-ef17-4438-b0a0-95f35855cb53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ebefc7-a8f5-4042-a315-45db3cbc7a97", "sighting_of_ref": "indicator--1f1e02b5-abbb-4a25-99bb-5b070ef4b93a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265e30d0-0431-4ec3-bca2-ef00966debaf", "sighting_of_ref": "indicator--7282a9c0-9775-4ef2-88b0-99431e0f3373", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44847d46-95bf-4919-8f66-f8242407924e", "sighting_of_ref": "indicator--c03bebf8-31c8-471f-969d-403f02a8be08", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c87df0-c803-4d6e-8eb7-0274fb346eb2", "sighting_of_ref": "indicator--bec9b94f-6a0b-4b46-aa88-813adbf87d1d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a676c8b1-2d8f-4523-b023-4bc157e53336", "sighting_of_ref": "indicator--335da592-2509-4353-99d4-65bf9599feb1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecedd87-b365-4f53-85bb-28a7bc2da779", "sighting_of_ref": "indicator--0d24e351-ec07-47dc-b3d2-292f2d7f5b1b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d5f18b-b695-4aec-bbd6-25694a8ac101", "sighting_of_ref": "indicator--26270d71-7bab-42a7-ab66-7e4ccf3ff11b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1261627d-ed21-4292-8bad-b6e64404527f", "sighting_of_ref": "indicator--91652dbf-f942-4fe2-b96c-22cc37a1f9e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9b6e3b-083d-493a-8b04-8f39b483a4c4", "sighting_of_ref": "indicator--0ca3efe9-63da-44ee-8e28-240f1ae3cdad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9210c6c2-408d-459d-8d19-674cb141eef5", "sighting_of_ref": "indicator--8bc5156a-d99e-468c-9253-5a7579181a34", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7225a353-4a1b-461d-94aa-aafb2d3ebe16", "sighting_of_ref": "indicator--34930765-1b7a-4569-a92b-239dbc3708c7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967e4ba2-e697-46d2-99c0-d9ca0f6394b6", "sighting_of_ref": "indicator--8d5a6034-5be6-476f-98a3-9bca0bc6b1f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d9b60a-9789-4a5b-b24f-150ae1b3fc2e", "sighting_of_ref": "indicator--d89bffe7-53d6-4dd5-9b4c-6f521c21efab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337518be-75bd-4798-ac5d-1a7e9b9f4097", "sighting_of_ref": "indicator--237eb1c9-677e-4c7d-9264-130b105ce1e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17f43fe-a181-4e71-90be-fe0844ab62d7", "sighting_of_ref": "indicator--5f0aef18-2f41-4919-a2d8-ecad745057b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a75b0a3-5d31-4b6a-819f-b519b51d981e", "sighting_of_ref": "indicator--5f0aef18-2f41-4919-a2d8-ecad745057b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e1c17d-a1f3-4bef-8026-5dbf76a69842", "sighting_of_ref": "indicator--7da35657-ec2b-453d-99cf-43c62785dbd3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6df0b2e-0e29-4765-b026-a4419683c974", "sighting_of_ref": "indicator--4ea53eb2-f9aa-45f2-a7d9-418dd6d48da0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27406e0a-c12d-4efb-8c1e-1679ac335eba", "sighting_of_ref": "indicator--1913cde5-f298-4af8-ba90-18843b979fc2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf3c46f-8705-48a1-bcc7-390279f40344", "sighting_of_ref": "indicator--1e0c00d3-3f7e-4e4c-a795-34f521354f55", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32ad796-0263-4469-90f2-cf102b6c11a0", "sighting_of_ref": "indicator--1a7a44f6-19d1-418e-ae3e-b70b69d71a2f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882d321d-54b5-4a78-8623-0553bc44f7a0", "sighting_of_ref": "indicator--e0a2c1cb-db17-417e-952a-8ef31fbc9e75", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1b8577-2ea6-4f29-ba42-7ea56336a482", "sighting_of_ref": "indicator--db9186f1-6f39-4e8b-bd38-15210d08ddc5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f877882f-aeff-4460-b629-1536d8cc920c", "sighting_of_ref": "indicator--f1dfc9ca-9aec-4b93-8e04-06f3e00f233d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2632f1ab-6b31-4554-9596-d1c81383d3f8", "sighting_of_ref": "indicator--67d95c90-6712-49d6-b9a9-c6f9e7ca71b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd914e5-9afd-451d-83f6-1470ed8bd745", "sighting_of_ref": "indicator--67d95c90-6712-49d6-b9a9-c6f9e7ca71b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a74bce-21d5-4cd3-bdfb-aabb19c46b22", "sighting_of_ref": "indicator--4157ab46-c3cb-45df-ab6a-10f896ef5da1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15126b03-3e77-4a5b-9dd3-1eec05f716df", "sighting_of_ref": "indicator--4157ab46-c3cb-45df-ab6a-10f896ef5da1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec2a264-c809-490b-b559-7fd6f461c8fe", "sighting_of_ref": "indicator--21748158-550d-440e-96ef-c955c49684ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a05996-8848-4e58-ab87-3438bbccd565", "sighting_of_ref": "indicator--ec962048-f2e3-4301-995f-15b63f4f6c74", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26decf7f-74d9-4398-a746-1f51499eeb4a", "sighting_of_ref": "indicator--ec54caf9-953e-4657-8348-920e70346e04", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c2db6a-4899-4e07-98a8-78800044a15b", "sighting_of_ref": "indicator--ec54caf9-953e-4657-8348-920e70346e04", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41c1676-72d9-4aca-932f-fedb22e4fd0a", "sighting_of_ref": "indicator--03f58f85-09ea-4cf8-8b39-a2471b13f54b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e173a8-4c7d-4bad-91cb-d0b61131d250", "sighting_of_ref": "indicator--03f58f85-09ea-4cf8-8b39-a2471b13f54b", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc9056f-aa02-4ee8-9728-a604a78f3030", "sighting_of_ref": "indicator--37ce608e-1212-42ad-aec6-84a26e00750f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854291c8-8fea-4732-b8ad-1cbe425a34e7", "sighting_of_ref": "indicator--37ce608e-1212-42ad-aec6-84a26e00750f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afc936f-c2ed-4156-a037-53ee0e41ab21", "sighting_of_ref": "indicator--11973d1b-efe2-4d53-9692-80003219af25", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d5cee8-e45b-4b6c-b407-35cca05f2ce4", "sighting_of_ref": "indicator--2027a89a-6202-45a3-8114-88ed66f5230f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc17ed7-eb76-4c4a-8e55-f18fdd55c58b", "sighting_of_ref": "indicator--2027a89a-6202-45a3-8114-88ed66f5230f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d613a48-d278-46af-b5d8-6c2ae788c7c8", "sighting_of_ref": "indicator--c96e607f-3d3e-4ba4-85be-676146b77bef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042f41ca-767a-4cc9-821f-01656a0d0da5", "sighting_of_ref": "indicator--fa301178-76ba-4a48-83d1-819aa5df6696", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366bee4a-ce5b-4178-9d4c-8fc9615edd71", "sighting_of_ref": "indicator--5a93525e-b21e-472d-bcdb-90cbdf316faf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50213cc-fb64-49c0-a05d-3b24eb00969b", "sighting_of_ref": "indicator--57c1b8ba-a1eb-4a89-8c4c-728955ae57ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2f9958-44fc-4745-afe4-83fad3a0d263", "sighting_of_ref": "indicator--f64600e8-3afb-4332-b4e0-9de3ca6398a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e50868-e9d1-4cde-9854-6a4d6692788b", "sighting_of_ref": "indicator--f653d702-176b-4bb2-8a7c-2e519b6692a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3521a874-a9f7-4fa6-91ab-2de4359d56c2", "sighting_of_ref": "indicator--9d1f8eb2-25f6-4a91-ab6a-2e6d914dda59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf7bc66-221d-458e-89f8-63f8fa5a2da0", "sighting_of_ref": "indicator--9d1f8eb2-25f6-4a91-ab6a-2e6d914dda59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047a4d15-ebd5-4155-8541-1a17fea8875d", "sighting_of_ref": "indicator--a60ef118-7bf7-44ae-bdfe-8a6f89feebd4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00411428-df43-4c4d-a928-860b3b3e1d2d", "sighting_of_ref": "indicator--b4152323-a1e4-440d-9c21-174e299ed95e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36890ace-5c16-4a16-bde2-4c7b18baaf17", "sighting_of_ref": "indicator--0eae7338-e727-478a-b994-7f804493c7ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465c32f9-88cc-4e5a-80f9-93526d4077a4", "sighting_of_ref": "indicator--0eae7338-e727-478a-b994-7f804493c7ad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05729aa-e87e-4298-a050-4657a6a99266", "sighting_of_ref": "indicator--8846cf18-7c4d-4fc3-bc35-e0dbcc095ea4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fdb909-739a-4e08-9103-369283cec326", "sighting_of_ref": "indicator--919ed7d8-2149-41b4-b3d0-4cdad1e1b21f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ed9ae9-5d52-438f-9e1e-28e699452717", "sighting_of_ref": "indicator--a33d8926-872c-422d-9b2b-3427c883829e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9931434d-c048-4893-b1a3-eb75f4282efc", "sighting_of_ref": "indicator--c5289e07-2da9-49ac-9738-cbd8cd019e10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ee61be-5cb9-43fd-8a31-daac985e5901", "sighting_of_ref": "indicator--62a38969-deaf-48dd-a5d0-731596def889", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcfb0aa-923c-46d7-a29c-f9e7893db650", "sighting_of_ref": "indicator--cc37957c-494f-47c8-aa3f-d646597b408f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d87f481-c4de-4260-9a74-c5f239cab09e", "sighting_of_ref": "indicator--582302bc-b2ae-4b32-a047-aa3f913e95cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93464371-ef85-4b58-8205-b0f647df6822", "sighting_of_ref": "indicator--582302bc-b2ae-4b32-a047-aa3f913e95cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa99e7e-ec78-4a78-8b62-0ac8d5d12410", "sighting_of_ref": "indicator--aa30d079-1751-4e25-80d8-54bccd48ce59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae13674-2a1c-40e8-a348-ccc78d760d9f", "sighting_of_ref": "indicator--b63e742c-ed10-461f-9e62-42d975d4e885", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96975f86-f7d0-43db-9dc4-c3be1963ddc5", "sighting_of_ref": "indicator--b63e742c-ed10-461f-9e62-42d975d4e885", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8830eb8-13c1-4d26-ba0c-c6eddda113d9", "sighting_of_ref": "indicator--345efc88-07d8-4e15-9978-a12cfda278ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f45bb9-9785-4f37-864d-d2cd06aa8aa7", "sighting_of_ref": "indicator--6a2d4a42-0b04-42ac-b17c-08d1b5618cd3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9880077-de59-4778-9b30-cd4f1a80d7fc", "sighting_of_ref": "indicator--edaef72e-cdbc-4157-91c6-1b9a53cefeeb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574c1928-7d41-454d-a542-7638d0117b8f", "sighting_of_ref": "indicator--709b8161-4ad7-4f49-b387-faa18d354a6b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79da808e-b211-4849-af56-58103df5f893", "sighting_of_ref": "indicator--4b95138d-035e-43a8-a268-6d8d0a0556f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5415377f-bf62-4f8a-9647-ebfcfc917744", "sighting_of_ref": "indicator--c61a96d1-5943-47ec-aac8-1e061750c526", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc373e0-d017-48e8-85ba-5c955d38002d", "sighting_of_ref": "indicator--f094e639-15fa-4bc2-8232-672498f9f530", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af41846a-b28d-4ebe-b06b-14b1ae737617", "sighting_of_ref": "indicator--f094e639-15fa-4bc2-8232-672498f9f530", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babfe6be-1af8-4df5-810e-d39fd62e33fd", "sighting_of_ref": "indicator--bdf9ce22-1ee7-40db-b16b-af0f55956fc3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a0df27-c255-4d04-b93c-51da50a6a10a", "sighting_of_ref": "indicator--bdf9ce22-1ee7-40db-b16b-af0f55956fc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fa7392-868b-4008-9d78-05df4f1923a0", "sighting_of_ref": "indicator--0db710b9-a0c3-4b84-b13d-eb00799463be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c51720-20dc-490b-903f-8fe71c959e8c", "sighting_of_ref": "indicator--0db710b9-a0c3-4b84-b13d-eb00799463be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6459c1cb-f37b-40f9-a991-6f812ef31d65", "sighting_of_ref": "indicator--f2050105-7504-42d8-8617-66c81f1313d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cbeac1-24de-43c2-8a69-e4c7669133de", "sighting_of_ref": "indicator--de58c336-8dbb-4414-a98d-2572c54b5592", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa60926-53a8-4443-9756-53c8e32f0f5f", "sighting_of_ref": "indicator--4fc2aabb-f352-4fb6-a395-53feb42c525d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba2fc81-ed5b-4d78-835c-0c726f43d71c", "sighting_of_ref": "indicator--d0c81ff2-6113-4184-87f3-5afe237ebaa4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582772a1-bcd3-4165-9778-cae506266991", "sighting_of_ref": "indicator--df357a8e-9150-4bf2-9050-a7a69f3fe1f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637349d6-c0a2-4053-b214-d811cfd92c58", "sighting_of_ref": "indicator--3c4342af-3dc6-4a5e-896a-88631f7a725a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbbbef1-fb1b-4491-bd1e-bc3752e584b9", "sighting_of_ref": "indicator--05a959a9-91bf-4137-90aa-70ce638013f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bcb0e7-b1ea-4c4a-a8a0-647b79269303", "sighting_of_ref": "indicator--5ab2c270-96c0-4ac1-a517-e2627e1e661e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5296d0-3c99-4a76-8afd-0a4b65b51a06", "sighting_of_ref": "indicator--58830b1a-f7d1-44c2-8f83-fe7153605356", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72e5032-2edc-40d4-a272-e63b6f53af8f", "sighting_of_ref": "indicator--78d779e9-eb78-47d0-870e-e48887490911", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84d79be-8537-4193-b3af-6d05aa1dd6a3", "sighting_of_ref": "indicator--f3c80d5c-4fe0-4abc-9b29-697bfdec4d62", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a08ddc-eccc-40ac-8716-77d6938bb19c", "sighting_of_ref": "indicator--9a72b95b-172c-484e-90ca-713b7347887b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4674c3-735b-455f-8c5d-21377b35656e", "sighting_of_ref": "indicator--40c0f115-d1bf-4748-ac0e-39558f9e978f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad05e494-72c1-49eb-9c44-703808dc3c0a", "sighting_of_ref": "indicator--b93d055c-72e2-41db-a969-b49e40d12b61", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db189b7a-6e4d-4f61-af0d-d8d0734d7d83", "sighting_of_ref": "indicator--b93d055c-72e2-41db-a969-b49e40d12b61", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990e5c89-af75-4fd3-a494-aba3385f7f4f", "sighting_of_ref": "indicator--82a9a012-86bc-46b4-9b25-7f86e0019533", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab27687a-219f-445c-a840-afb39895b7b2", "sighting_of_ref": "indicator--82a9a012-86bc-46b4-9b25-7f86e0019533", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2639476f-2c18-48c0-bbed-91f744fc3b50", "sighting_of_ref": "indicator--c4c5f0b0-040c-466a-8447-11c309d2ef0e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ae7270-f878-417d-a64f-4760cc614172", "sighting_of_ref": "indicator--c4c5f0b0-040c-466a-8447-11c309d2ef0e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adcdd66-09ef-4d79-bedf-7d35eb581999", "sighting_of_ref": "indicator--e3b670f8-bbf6-450e-aeac-e6fa13f8f909", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39168950-cd21-437e-9773-3abbf249420b", "sighting_of_ref": "indicator--e3b670f8-bbf6-450e-aeac-e6fa13f8f909", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b68e6c-53c1-4138-96ae-612799cc8782", "sighting_of_ref": "indicator--3cf50755-2f28-4789-83bc-b8798e9f7ab2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb5afe0-72a0-48ce-8ebb-660b5aeb4c5b", "sighting_of_ref": "indicator--653efc85-0103-4adf-bb97-72622356fdb1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992d96b6-dfb7-4eb8-b79a-4a32acc3faa0", "sighting_of_ref": "indicator--653efc85-0103-4adf-bb97-72622356fdb1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3be3704-c2ed-40ea-bf9c-0f26a73f1122", "sighting_of_ref": "indicator--22c7dd26-ebcb-4e54-9c05-cbdf3738d67a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a813759-eb17-4eaf-917c-afda8e77f77c", "sighting_of_ref": "indicator--22c7dd26-ebcb-4e54-9c05-cbdf3738d67a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e6d34a-80e1-444c-b59e-8d170bcd9e56", "sighting_of_ref": "indicator--c58510bc-7046-4269-af7f-6bcbc2e6fd65", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e1fe0a-c861-4e74-92f2-3f805850c184", "sighting_of_ref": "indicator--6919e3d4-5d87-4b99-85b9-c950633de38d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e50545c-96d3-47eb-bc89-e499b6fb8ca1", "sighting_of_ref": "indicator--6919e3d4-5d87-4b99-85b9-c950633de38d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65ab619-f51f-4a4f-9482-44b5caf02864", "sighting_of_ref": "indicator--a3b9be5c-40b1-47b4-9ae6-59d19366700a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b74195b-e884-409e-96b7-6d0dcafa8569", "sighting_of_ref": "indicator--a3b9be5c-40b1-47b4-9ae6-59d19366700a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234ab66b-6c5c-4cfe-9812-b018cb82a78d", "sighting_of_ref": "indicator--8ace2edf-eab8-4d6c-90e8-8ba5b52dc308", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b179e0-6847-4f15-9d87-92bc04453b2c", "sighting_of_ref": "indicator--8ace2edf-eab8-4d6c-90e8-8ba5b52dc308", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e3ce0f-b239-4f5a-a8f0-754153a9c319", "sighting_of_ref": "indicator--a3b84263-b65b-41b1-ac6a-e3212d06faf6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5af435-bb21-448b-9b40-60d3b73ae90d", "sighting_of_ref": "indicator--a3b84263-b65b-41b1-ac6a-e3212d06faf6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c486df2-9198-4308-ae93-dbed6548514a", "sighting_of_ref": "indicator--0515056a-7066-4543-a545-da7d8381d5e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57957dae-f4cb-4151-8d7d-acbb6fe6fe35", "sighting_of_ref": "indicator--e3666b44-c4e7-4f12-a591-447aae71d47e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb91b385-0a86-482e-ac2d-e863e7b26841", "sighting_of_ref": "indicator--f631333c-f9a8-4d9e-bad4-685eae828866", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d3459b-a630-4b30-80d5-d5936807ebea", "sighting_of_ref": "indicator--fcf2ebbd-75b6-4b0a-b243-f72ec7b799c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b08fc2-0049-46a4-8c61-2620023c5f09", "sighting_of_ref": "indicator--1b7fecab-3e81-4e95-9317-59def3811f46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a472907-50e0-4298-9e9f-5dc0e0a15e03", "sighting_of_ref": "indicator--b1747aa4-1091-4c08-b9a8-4d398b4dcb81", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56b2c75-07fd-4c0c-8e1d-5f03270f18b7", "sighting_of_ref": "indicator--b2ee1de3-e27d-45f3-bf37-e5dc8faa31a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63f15bb-d673-4a2e-8845-8ee65f7f6974", "sighting_of_ref": "indicator--b2ee1de3-e27d-45f3-bf37-e5dc8faa31a5", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cb0d08-687b-4497-a31a-d0def7374136", "sighting_of_ref": "indicator--9f530b16-2e8c-40a6-8188-1b0ded131a08", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cf584f-53fc-4518-9cb2-84467fd3f0be", "sighting_of_ref": "indicator--223e4aff-8527-44e9-bd1a-b18bbe62ac3b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3520a337-7717-4f3a-98a2-d9d6d8359876", "sighting_of_ref": "indicator--5a2b057e-1445-497f-b1e1-3b2eb052b098", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1961c3f-e9a4-47b9-8045-d5094f69abeb", "sighting_of_ref": "indicator--2891b42a-aac5-40e1-b510-fd52b0bf2924", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c0aa7f-8eb2-4df5-bc9d-9c2f32c1f415", "sighting_of_ref": "indicator--090a2eca-9da9-4894-b6a1-dbc9e34be4f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4835818e-7e11-4fc5-b57e-eda4e79a4099", "sighting_of_ref": "indicator--71d3fd63-0128-423d-85d5-dc30bad66ef7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f318ae6-06dd-435a-8a6b-b924ba22fc42", "sighting_of_ref": "indicator--a2461a95-e32f-4bcb-9bb6-82342155018c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004ebc7d-f876-4995-801e-ab6f78fab175", "sighting_of_ref": "indicator--b90aceae-56d4-44c1-b57a-0632eb0eee7e", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d68a07-d19e-4d64-b5f0-bb42fdf3a79f", "sighting_of_ref": "indicator--98314267-1671-45d6-8a1b-1668d177671e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf99ac9a-bb6a-4c31-862f-6d379e282920", "sighting_of_ref": "indicator--bec36903-d65a-47d0-810b-f38fa84afb27", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e21f5b-9613-4a6a-8602-99da4586951f", "sighting_of_ref": "indicator--8eb6e7e0-9e6b-410d-b636-109b48ef28df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97aaadc-403a-4273-928a-a4073fb2325b", "sighting_of_ref": "indicator--61844322-bbb5-4268-b487-564a7e92d9c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945d52b1-c9df-4acc-ba25-aa9c750e9b01", "sighting_of_ref": "indicator--61844322-bbb5-4268-b487-564a7e92d9c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053ea48d-5ddb-4670-98fc-38282c8abffe", "sighting_of_ref": "indicator--ab0d3ce6-da4a-4f35-adcd-e348daa89464", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc786fd-8c86-4c86-9ec7-41546befd6cf", "sighting_of_ref": "indicator--c567c0e3-f397-40ef-8103-37a95b6d89dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82bfa03-9a7a-48da-83c7-9eeb626bd756", "sighting_of_ref": "indicator--ddca39d6-8465-4cb9-875b-4d8a16229585", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9fd383-cece-4593-84f9-ebec15b610be", "sighting_of_ref": "indicator--6123678c-1359-4dad-bffa-978f8fc02aae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f02bec9-1d5f-47b9-9dec-28f52879a7b3", "sighting_of_ref": "indicator--90541d02-412b-4774-b6eb-490f52cc701b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd83b9e-7db7-4ce6-84ff-4d771d6b4aeb", "sighting_of_ref": "indicator--40607e52-ec5c-405d-9f89-b6b17af9b4ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb11b4d-9179-47f3-87de-8b52c3a23980", "sighting_of_ref": "indicator--e3faf7bc-dfc9-4bda-87da-9b72bc6e34aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfcfa35-97e7-4fcc-ab5a-99584f82660e", "sighting_of_ref": "indicator--f03565a5-e969-44e3-a584-a3034a95b353", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dbc8cd-4c89-4bb5-92f6-b11a4bdc4777", "sighting_of_ref": "indicator--ebe207bd-6603-486e-86e9-85414d3ef0c3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6639c0-ca3d-47b5-a1e0-25a1541e8f29", "sighting_of_ref": "indicator--48eb49c1-7476-47bb-8669-9f6348f3cf11", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5431f7d-60f6-4d5d-8e78-85d184b2e32a", "sighting_of_ref": "indicator--143f7446-247f-4886-9050-15bdb6f79d03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ca675c-b704-4a4d-b863-a554bc69522b", "sighting_of_ref": "indicator--143f7446-247f-4886-9050-15bdb6f79d03", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde1a050-70f3-4f83-b02c-20b9764dd6ca", "sighting_of_ref": "indicator--7f2b248b-f53b-4b7d-a4e5-b3a4b585a3ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d51d81-f762-4ff7-8f5b-54c18060a6a0", "sighting_of_ref": "indicator--7f2b248b-f53b-4b7d-a4e5-b3a4b585a3ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0941dde3-a4a3-41cc-96d8-0fb409a1a979", "sighting_of_ref": "indicator--6cafb9ca-03cd-412e-8727-ade888dd729f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a5820f-3f2c-4525-9bcd-ab0f7ef1e30e", "sighting_of_ref": "indicator--6cafb9ca-03cd-412e-8727-ade888dd729f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7e498d-4c3e-48a1-a30c-fec3b06d30e2", "sighting_of_ref": "indicator--b42ad231-6e53-4a8b-b097-abaf1182fe3b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29631682-f86b-4313-a055-4e65051031a9", "sighting_of_ref": "indicator--b42ad231-6e53-4a8b-b097-abaf1182fe3b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9f0544-c3e2-4a2b-b255-99216e60ecd6", "sighting_of_ref": "indicator--053dcdb8-e9ce-4fa8-a6cf-5c09096c8e9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6640eab7-c66f-418b-aa63-210116b757a7", "sighting_of_ref": "indicator--a152ef43-dbb3-4212-b4e4-85ce67b9ff76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348feba3-5940-41b5-bd3e-125729855529", "sighting_of_ref": "indicator--a152ef43-dbb3-4212-b4e4-85ce67b9ff76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef6a79f-c8ab-4883-9217-2e875819932e", "sighting_of_ref": "indicator--8b983fc7-5b0f-4b42-9350-06244a69f163", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bd431a-c0fe-4bea-afb2-a7b87bdca787", "sighting_of_ref": "indicator--4b862816-0e84-473f-a246-d79d1a13c3fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0455338-3b89-4b52-bb47-9e8fd5247445", "sighting_of_ref": "indicator--8e0c006b-9fbf-41db-a9d5-3ea203574008", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355f416d-f27f-43e3-bc24-f201b505fd98", "sighting_of_ref": "indicator--24d23a10-d66f-49b4-8393-8db1633d18e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b56ebb-990e-40d4-bad9-5ffd79feaeee", "sighting_of_ref": "indicator--bdff04fd-2317-4772-8963-faed936606eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d911c6-d93f-44ca-a1a0-9c90cbd67021", "sighting_of_ref": "indicator--d201bdb4-eb40-4904-8765-3bb886e51caf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d3dcfa-f653-452a-8421-f4efee92e4ed", "sighting_of_ref": "indicator--bd3dd1bb-2ab6-4d32-bac6-6f530be6dea8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b63984c-0c63-4632-9222-140197afcd98", "sighting_of_ref": "indicator--47b6332d-3101-459d-a87c-d81cbc748473", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc772991-ec3c-4d89-b7db-b4c902aae7f2", "sighting_of_ref": "indicator--232a8900-509c-4eb2-8eb7-7df7416b2289", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c2ef17-b6b8-4cd9-8a86-b1bc3cbaec73", "sighting_of_ref": "indicator--b4f9778d-4eea-416f-8556-686aa1260500", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806d259a-d3e1-4db3-b34c-9249e5980124", "sighting_of_ref": "indicator--31d2a309-f5dc-4499-a35c-9af702081949", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9723af7-18f6-4b72-8bb3-c32dfa90aac7", "sighting_of_ref": "indicator--8b87fc2d-4fcb-4241-8127-25936bdfb0e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290eb2ab-745f-410c-948a-9dcd55acb163", "sighting_of_ref": "indicator--11074df6-7966-4572-ae34-ffb48cb6a370", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbb3556-c79d-4d8e-a3eb-cbed9c28849c", "sighting_of_ref": "indicator--38a302ac-af06-4346-a3fd-6157e4f836be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f87f5ff-68ee-4f2b-93b6-d4f2f99e9d36", "sighting_of_ref": "indicator--c8b3002f-8e75-4337-8fae-a290b4866ecb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baca855-5433-42ad-a5a3-36145f8df380", "sighting_of_ref": "indicator--abcd742d-96c2-41d1-9286-db46165a6a88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b4cdd0-7d16-45ae-adea-bdb21ebad818", "sighting_of_ref": "indicator--aec6fe11-ca4e-45fc-88fa-5d80be4a3a6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e610c35-00ea-421a-b810-0aea0d980862", "sighting_of_ref": "indicator--21ff1592-c19b-4c6a-bd5b-b1c431099170", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558eecd4-a146-4703-b33a-b4918a46836a", "sighting_of_ref": "indicator--0ae5d0c8-9d38-464e-9cec-7afa81b4f424", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b05073-d626-4960-876f-5c15f8fcd46b", "sighting_of_ref": "indicator--43a08624-8b03-4f09-8f1a-ddade7d1366b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574ccfd5-dda9-460b-b4d8-2fef325baa18", "sighting_of_ref": "indicator--b308b71d-79ea-404e-888c-8af97c4ec1e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65aa380-fb52-41ca-9667-cf1668febec0", "sighting_of_ref": "indicator--f9056e8f-2c9c-4ecb-afeb-d4deacb6bb62", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c72241-ed67-42eb-b1e3-c183d420f577", "sighting_of_ref": "indicator--5aa62b36-f78a-423f-8c03-ca8050c9ae23", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c779d4-6195-448d-a80e-b4295d4fbe05", "sighting_of_ref": "indicator--5aa62b36-f78a-423f-8c03-ca8050c9ae23", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fae4a1-008a-4003-99e3-e9f47073c243", "sighting_of_ref": "indicator--5c7c1f55-62f1-4142-94ea-9491733cf495", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0f99c1-ab2c-4687-9665-cb88d699e65e", "sighting_of_ref": "indicator--bc0ad954-8da1-45b0-8257-6b9e763ae920", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9cec67-e797-4eef-8a68-6d7e94b44878", "sighting_of_ref": "indicator--c5087ee8-c37f-4e09-8044-80c84d58225c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb19be84-d900-4b98-8278-c84e9764e698", "sighting_of_ref": "indicator--db4742d3-b5e7-482e-aaa7-775e519854da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04927ade-3baa-4d8a-80c8-2e913403c1fa", "sighting_of_ref": "indicator--add5071e-0d92-4d56-b762-156f2fbb8a21", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5620f1c-ec31-4e93-9418-0946c3c07f08", "sighting_of_ref": "indicator--ef082c01-4209-45ce-9712-1b14d1c20aae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f20053-32b5-48ae-abc4-8c588245ffd6", "sighting_of_ref": "indicator--e0cd3f45-336d-4a09-b983-2cbd810881af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d0631b-44a3-4b84-8722-ef76eeea86b8", "sighting_of_ref": "indicator--063a9cf7-ac02-44d5-863b-27b41442a744", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25331371-120d-42d6-b4b7-26bd3f59cfe0", "sighting_of_ref": "indicator--15e5d882-081d-40ae-a19c-abbdc7810953", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebee44c3-c793-4de7-8c6a-3c77c74f41bf", "sighting_of_ref": "indicator--15e5d882-081d-40ae-a19c-abbdc7810953", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4089ecd9-db90-4a8d-ab8e-439c38ce028f", "sighting_of_ref": "indicator--82dbd718-5253-4f2c-95cc-1d9b377311f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a88638-7568-4afe-b25d-4ef65adb5ecb", "sighting_of_ref": "indicator--8a6a8dc0-58c7-467b-9839-7d61130f06eb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a1c308-e9c5-4e4b-8099-ccff0b406666", "sighting_of_ref": "indicator--5d53b24e-78e1-4778-a33d-305b0dc6b1d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b891e0-5b03-4570-8ea9-559bd7d12891", "sighting_of_ref": "indicator--d22db5f1-733c-42ac-a9eb-58b229b4bd6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db52c37e-e0bb-4097-bc04-89b8895b87bc", "sighting_of_ref": "indicator--cc5404be-e436-444d-a944-aada5e558e54", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eda5c05-eb29-413c-8c42-9087b5dc32f2", "sighting_of_ref": "indicator--c57adb7f-0b3f-47ae-9e53-2e7a47faa13c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95830c31-86c9-422b-9fd4-1b1c87d8823d", "sighting_of_ref": "indicator--d41cc838-416d-47ed-8e82-3c77c70ac944", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e490c09b-cfd6-42e9-b7fa-66e0ffbe61ed", "sighting_of_ref": "indicator--6c3599c0-3fa8-4afe-a340-be09afd6ed1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d768da-2290-465c-ba2b-abb225f35b7a", "sighting_of_ref": "indicator--6c3599c0-3fa8-4afe-a340-be09afd6ed1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5231a8a2-125a-4966-ba9d-0ff3bcffa88d", "sighting_of_ref": "indicator--1e95e13b-e4c8-40e8-ac65-a0a706ea9a92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe37522-a218-4677-8b9d-c6635ec63f8f", "sighting_of_ref": "indicator--1e95e13b-e4c8-40e8-ac65-a0a706ea9a92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61145de2-da90-4a42-b82f-f73efc9c28e3", "sighting_of_ref": "indicator--05be0a64-2788-4e62-a111-69c4292c99d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeb7355-c350-4c94-a38f-ad4984ff67c8", "sighting_of_ref": "indicator--4b3f6fdd-03de-414b-92c1-2f11fb996f46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29851303-975e-439f-aeac-d1814d9b50bb", "sighting_of_ref": "indicator--698bdf17-81a2-4ed0-9774-164cb3de5926", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8338fa2-64dd-45e0-a74d-c0217903beaf", "sighting_of_ref": "indicator--9c1c3ff1-f49c-410b-bb6f-0126e01a9127", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d979378-ce05-4514-8c8e-c204bbf3fda5", "sighting_of_ref": "indicator--9c1c3ff1-f49c-410b-bb6f-0126e01a9127", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63950f85-b6e5-4b3f-8111-ae570fcf3fc1", "sighting_of_ref": "indicator--f96293a5-edf9-4a86-8017-eb8779d03baf", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36b892f-4537-499c-bf5f-a5bd48859881", "sighting_of_ref": "indicator--1f185314-6c2c-42df-a6d8-d789a405151a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796cfd5e-06c4-443f-b046-b75a82e10f9f", "sighting_of_ref": "indicator--1acb646f-ee20-42a6-970b-7782ff9d8196", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79daf825-08e7-44a0-aff0-1b788ead098e", "sighting_of_ref": "indicator--52847645-edd8-4ae3-873d-61fb7f13a6a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8db67a-ebe9-473d-a5fa-dbeccde8ed72", "sighting_of_ref": "indicator--96ac087e-7143-480e-b8c5-eab5ce88dc23", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ab4bb3-0012-4ede-9c76-4a75e62f31fc", "sighting_of_ref": "indicator--3e8330e8-959b-4cbd-ada8-0bfbe6792a1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3451184b-7d1c-4974-8a37-c6ee434708bd", "sighting_of_ref": "indicator--0bb2e240-fafc-4351-a210-27e8b8ec6a79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d81f742-7089-405d-9b7f-d1451d880968", "sighting_of_ref": "indicator--47e3f467-4a8e-477f-8325-448fac0210bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e154fb-64d8-4dc2-b93d-71e501cdefd3", "sighting_of_ref": "indicator--73bb2e1f-8220-4f71-b3b9-131b057d2e6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33d85e8-3579-46fb-93e5-d5dd658acc99", "sighting_of_ref": "indicator--647b168d-b95a-449d-ba51-3fda99dc7824", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3a0f8f-3e1b-493a-b470-755d55d17f08", "sighting_of_ref": "indicator--ec96a227-c605-4b58-b655-baa1ae779e17", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90ade9d-6ec2-469c-ad83-7dff80520ddc", "sighting_of_ref": "indicator--ec96a227-c605-4b58-b655-baa1ae779e17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3c2359-f1a3-4116-bc77-fdf8fc95a4a2", "sighting_of_ref": "indicator--f0831fed-92d5-4219-8ed0-c1f144fca8c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a0d95d-ecf5-49ae-81fd-080e5339b754", "sighting_of_ref": "indicator--0753eb15-a500-4c06-9de4-8edf848aaf95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e08b1a9-c142-4c30-b202-2978b68fa938", "sighting_of_ref": "indicator--1756151b-d306-4d56-be70-0856464c974b", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c339b3f-444d-4230-9a8d-2e9f1d1d1752", "sighting_of_ref": "indicator--a0a590ed-8519-4338-a5d5-69e0a40e6055", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30e1679-cd45-415a-8e75-d275f4b9d605", "sighting_of_ref": "indicator--a0a590ed-8519-4338-a5d5-69e0a40e6055", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cab4468-b98e-484e-926e-fce6371501fa", "sighting_of_ref": "indicator--f2199d4e-ee55-4aad-b014-80bd275690bc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81454fc3-a183-4ed0-a1c4-b8d4eab1a798", "sighting_of_ref": "indicator--f2199d4e-ee55-4aad-b014-80bd275690bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e07fefe-5cd2-4925-87c5-82c568259f74", "sighting_of_ref": "indicator--e3f1411b-9c93-4322-96e1-2f6911655333", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ff51cc-0342-4280-8ffb-884fe536abdc", "sighting_of_ref": "indicator--e3f1411b-9c93-4322-96e1-2f6911655333", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75d5a89-00aa-4dca-a2d6-82b7fe8d9a97", "sighting_of_ref": "indicator--6f407e9c-52c5-4f8e-8751-b9b5272057b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8413cc95-35d8-488c-a24f-3d976bc3cae6", "sighting_of_ref": "indicator--6f407e9c-52c5-4f8e-8751-b9b5272057b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875da7c3-1a5f-4f60-b50f-c3042c29bdd0", "sighting_of_ref": "indicator--246b916b-7b9d-4db0-8f09-79a7612d6535", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9194ff1-8f1e-470b-854d-69e80a79cb83", "sighting_of_ref": "indicator--246b916b-7b9d-4db0-8f09-79a7612d6535", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5238df0-e86e-456b-bc45-90dc80e0b6cc", "sighting_of_ref": "indicator--2ca36dac-837d-46c6-a932-764476ed72d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b365e27-eb72-4135-a3c1-2a3acad30047", "sighting_of_ref": "indicator--8efd5d21-4464-43a7-b0f4-a40dfb752a2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7e0165-4f36-4a00-805a-bc8add694ad5", "sighting_of_ref": "indicator--8efd5d21-4464-43a7-b0f4-a40dfb752a2c", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2aafd9-77b9-416b-b2a4-d89c9069cb52", "sighting_of_ref": "indicator--7f5e2ddf-2648-45fd-9019-443276d5d83f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69098769-c840-46b0-950d-969fcccf8b52", "sighting_of_ref": "indicator--41945058-2028-48a5-bee1-620ee2815a98", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cd735a-e841-499d-959c-9777d9ba7acf", "sighting_of_ref": "indicator--e9347579-d3ed-4023-b510-e408d7af7487", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e503a9-5029-46a5-a6c0-4b3a6240f2d5", "sighting_of_ref": "indicator--a0afb7b1-14a6-4d22-8500-70fad1aed16e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd574f66-679c-42ca-a120-9f592fbaf548", "sighting_of_ref": "indicator--02818711-a795-4338-a4b1-38e6b4d59cd4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b608bcf-2b96-4503-9559-f77b39c51e75", "sighting_of_ref": "indicator--b324cb76-20ad-484f-b204-af8d3b8e3b4c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d6d537-edff-4501-8039-bd01d4eff8c9", "sighting_of_ref": "indicator--416fab02-2ef6-4022-842f-e76e1cbe4b9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6da50d-61ce-4a5f-862f-a69631e5e5cf", "sighting_of_ref": "indicator--53352b9d-741f-4211-bc91-f786b7791b56", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7b8768-9c8d-41ff-b572-d660a9204a4d", "sighting_of_ref": "indicator--e6e6573a-23d7-47ae-9055-601931eeede2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1ac721-fef4-4837-af64-abfe9736efa5", "sighting_of_ref": "indicator--4b93c110-3a5c-4635-88bf-48f73d60d52a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e205f7d-b127-4d7b-a865-9a4b4bdea073", "sighting_of_ref": "indicator--ebe8c834-7783-4700-b10a-76a2d157c3f0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd73e75-3a31-4c82-8844-b9adae5ebaa3", "sighting_of_ref": "indicator--ebe8c834-7783-4700-b10a-76a2d157c3f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20022d10-19b9-40b9-a62c-a81dc017bca3", "sighting_of_ref": "indicator--4b3c5be1-f26e-491f-b8a3-88a24f6fc8ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb3177e-f1a1-4901-a914-01aa41b017f7", "sighting_of_ref": "indicator--ea05d723-25fa-4603-ae4c-c150772791cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6730c41-0e00-460c-9e0e-474c9a9983df", "sighting_of_ref": "indicator--4ad4d502-7a88-4a44-9df3-d920ed1448de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5972aaa-d69e-426b-b2b9-0b7d52c728c7", "sighting_of_ref": "indicator--6b286caa-d3b3-4eed-baf2-d86244d0feec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a892b686-d150-4f07-8b79-78754f44e480", "sighting_of_ref": "indicator--6b286caa-d3b3-4eed-baf2-d86244d0feec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0982e041-c778-4ea5-a729-3c4cc45b4d75", "sighting_of_ref": "indicator--3bbf9056-8ec4-47e2-8dab-20eb45ab214a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ed2bfd-8679-4b09-82d7-6658c0656fec", "sighting_of_ref": "indicator--9ddf90de-977b-45ab-a078-be28f3faeff5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42652cf5-50c6-42e0-b73a-6773a0b68600", "sighting_of_ref": "indicator--9ddf90de-977b-45ab-a078-be28f3faeff5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e182206-3fe8-41e4-80c0-26591d367c41", "sighting_of_ref": "indicator--f19f2726-df02-4de8-8793-7cb62748896c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6edebd7-9ebc-4be8-9057-5f2445899623", "sighting_of_ref": "indicator--f19f2726-df02-4de8-8793-7cb62748896c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdc0933-739a-4fd4-9bb8-d68a73c68413", "sighting_of_ref": "indicator--f19f2726-df02-4de8-8793-7cb62748896c", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16237085-eca7-40ef-819b-bce65e52d033", "sighting_of_ref": "indicator--e8195743-068e-477e-8df9-44b22b5c15c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db098bd-1b3a-437b-9a2f-5693b1059380", "sighting_of_ref": "indicator--e8195743-068e-477e-8df9-44b22b5c15c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c8c11e-b216-4246-a550-18b1c54fcc5d", "sighting_of_ref": "indicator--fd8eedfc-5bb9-4e62-a40a-61f5eea70f38", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7258ca-993d-4849-9a00-1ddb72f2c21d", "sighting_of_ref": "indicator--fd8eedfc-5bb9-4e62-a40a-61f5eea70f38", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91244a8e-6b1f-48dd-9be1-22f94de30249", "sighting_of_ref": "indicator--da3e4a66-6d9a-4a35-a585-1b4b90340268", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52f572f-7287-47db-a632-f15f69baef6f", "sighting_of_ref": "indicator--da3e4a66-6d9a-4a35-a585-1b4b90340268", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f03211-39b2-4d85-a62f-d80b97a513f4", "sighting_of_ref": "indicator--09c1664b-dc91-46f1-a25c-6d498779fba8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bea46b-b1ee-4b56-b746-0e5e2ac7e29b", "sighting_of_ref": "indicator--09c1664b-dc91-46f1-a25c-6d498779fba8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798a2460-9f4e-457b-b6cc-f95788e6c472", "sighting_of_ref": "indicator--d8dc7b4c-c6f8-42a7-adf0-34344f845c94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa58832-235d-48df-999a-26749d7c80aa", "sighting_of_ref": "indicator--1b487773-c1df-41d1-80f6-4ccbbf87904e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004b8065-0048-4827-89cf-09173284458a", "sighting_of_ref": "indicator--1b487773-c1df-41d1-80f6-4ccbbf87904e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bc1cfa-6642-4b41-a76d-aa36829dba79", "sighting_of_ref": "indicator--954ee49c-3639-4a46-93eb-67af29d1332f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961656d6-64a8-487b-89a6-e859ffe9e756", "sighting_of_ref": "indicator--cc692abb-b530-4ca0-afc6-2d94ab15a77a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d43735e-47f1-4651-8d78-f95c6ec2859b", "sighting_of_ref": "indicator--cc692abb-b530-4ca0-afc6-2d94ab15a77a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1430a62c-4a1b-4020-b6b3-3bf6a6438f2e", "sighting_of_ref": "indicator--75234df9-90e2-4286-986d-39525194f959", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc32c41-5788-43be-9ee7-c51e0ca1f523", "sighting_of_ref": "indicator--ea6ce505-15ce-4f74-928c-4825d2f0b0e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47054f6-4dad-4971-883c-237f854f6758", "sighting_of_ref": "indicator--ea6ce505-15ce-4f74-928c-4825d2f0b0e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac01ff66-323b-4381-a826-3d79bed30742", "sighting_of_ref": "indicator--7e0a6c6a-7af2-417b-bbe5-873141e53c2e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2f98ef-59c2-40d4-acb5-d8aa7fa0e9d7", "sighting_of_ref": "indicator--4e3f177c-0b26-4766-872a-0d49418592ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b447c4d-40a8-40bc-aaf9-b5dbf80793dd", "sighting_of_ref": "indicator--6705173a-9c88-4c55-ad6b-21e3dc31ca51", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362b98a3-ecd4-4463-84d5-d0ac3e7640df", "sighting_of_ref": "indicator--60c07051-e425-4bf7-88b7-6553eb1ab18a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6e0b71-d962-4780-bdd8-c5d05c1c6e04", "sighting_of_ref": "indicator--ea91eb4a-046e-40c7-9a18-dc4342f420e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8487e712-3f68-47c4-ab21-01b815e3cf1b", "sighting_of_ref": "indicator--ea91eb4a-046e-40c7-9a18-dc4342f420e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d569504-2eb7-42c5-947d-512ea1947748", "sighting_of_ref": "indicator--23679f8b-8d67-459b-81fc-7d12c56cbb9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc739fe0-e6ea-4b6f-8649-80e08b9be5c3", "sighting_of_ref": "indicator--23679f8b-8d67-459b-81fc-7d12c56cbb9c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b743bc94-fd03-47a7-88ff-85562d7903b1", "sighting_of_ref": "indicator--994707d6-a262-48bc-a8ad-d07bf77e035e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf91ccc-90a9-4765-bc20-c73c787e25ea", "sighting_of_ref": "indicator--994707d6-a262-48bc-a8ad-d07bf77e035e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f466ccfc-f204-4e62-8e3f-63e5397d7e95", "sighting_of_ref": "indicator--5ac41fc4-fbe0-4a45-aecd-aea804c3e021", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce9b163-f489-4a09-96f0-e39856111b08", "sighting_of_ref": "indicator--adece47c-9f66-404c-8e42-e3e0217458af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d1d8ff-14f8-4ce5-bb64-7adf84f33a2e", "sighting_of_ref": "indicator--3af0cf5a-b823-4f2a-863e-9c2de3e2beb8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696fa561-5abf-43e3-abf6-143a3748a12f", "sighting_of_ref": "indicator--e62f0e29-d2f4-4a06-81bf-29e9f6677dfa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fb0824-e353-448c-9333-fbc7ba2613db", "sighting_of_ref": "indicator--560ef02b-a386-44af-a72e-5ed1a5e38445", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8af17f6-5ef3-4452-b445-1280dfc53329", "sighting_of_ref": "indicator--e0901d04-1688-49f1-9289-e4941258879c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f05d6a-1541-4604-8a64-2a5b25c302e7", "sighting_of_ref": "indicator--a9947f22-f611-41ad-b7e6-5e95f42625f7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd186dcc-f9bc-4da2-8fd8-6645f0abf02a", "sighting_of_ref": "indicator--a9947f22-f611-41ad-b7e6-5e95f42625f7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d9ffed-bfe2-423a-8411-e214e86b76d0", "sighting_of_ref": "indicator--0d0f6f00-4b80-4d5a-b532-81869a620a3f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5b145b-6e59-43f2-ab9b-6cfcb735bb7a", "sighting_of_ref": "indicator--c773e60b-bcf8-4bec-be0f-f8fa46c80851", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9462e723-ed7a-4cb7-88aa-b0aff389c30d", "sighting_of_ref": "indicator--5e803094-a956-4de0-bfd2-ed72902095ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83063fae-0dff-4659-b82a-8886207ef221", "sighting_of_ref": "indicator--5e803094-a956-4de0-bfd2-ed72902095ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad5fa58-e45b-4aa9-8c2c-d8df96af153d", "sighting_of_ref": "indicator--c70dd62f-3f0a-4bcd-8a8a-9ab320c1a873", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dd565a-bd66-493a-8bec-5a22c88822a1", "sighting_of_ref": "indicator--c70dd62f-3f0a-4bcd-8a8a-9ab320c1a873", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb4e6ef-f78c-44cb-be48-a649615e1d76", "sighting_of_ref": "indicator--57a4f569-4476-435d-a143-bdadcfc2addc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6274aca0-2511-46db-9a30-70722fa787bb", "sighting_of_ref": "indicator--57a4f569-4476-435d-a143-bdadcfc2addc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837ddc18-5272-4eff-ac7c-64d2909e5a65", "sighting_of_ref": "indicator--61f9a4c7-b3ae-4f6a-9316-6cf9e21eda1d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e0faf4-1c72-4e70-ae84-d587cfe90b85", "sighting_of_ref": "indicator--1990f2ce-837a-4f59-ab65-1bf08e808444", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d09d37-68ae-4528-a901-f2c497fc92d6", "sighting_of_ref": "indicator--404abdd9-b275-44b1-afbd-fbe324105879", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7d0682-f4aa-4170-8053-cc218d8d9acf", "sighting_of_ref": "indicator--8badf68d-11e0-4e99-b77e-b3a82414b557", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3959d7fb-d99c-460e-a4b2-8f9894d6739d", "sighting_of_ref": "indicator--ac7fbe41-7f33-4ce4-a041-2b2ba8f68451", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a016de2d-d724-4e25-8206-897c1baad5e3", "sighting_of_ref": "indicator--eb9bab7c-49a5-49eb-820a-9274631f5514", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a791ed8c-b3bd-4497-9d78-87414d45565b", "sighting_of_ref": "indicator--6644259f-f68e-4538-afb7-0dff7ec03cc4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ff4808-a258-4e68-92fe-b9b1ca427006", "sighting_of_ref": "indicator--ecf39c81-f5b4-470f-a779-65236c8fd76e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2226bd64-e563-492b-8e9a-e5efeda20cdc", "sighting_of_ref": "indicator--2646f05b-d8f4-4585-ac87-a1a790964f86", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d27c07-b87e-4f27-9700-015fd512c3c5", "sighting_of_ref": "indicator--2646f05b-d8f4-4585-ac87-a1a790964f86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3127fc20-065a-4e1d-bc70-12c175b5a6ea", "sighting_of_ref": "indicator--64442b6a-9f39-4bc2-9ab5-5387539dff2a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e9419c-509b-4869-ad07-a6fcfde80849", "sighting_of_ref": "indicator--fe916ea3-5b36-43fb-bd5f-4f2669cbfedd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580c4b82-3678-4966-b834-d3ec957ed540", "sighting_of_ref": "indicator--affacbe6-e1e9-4e3f-a076-bd3d6d8cae6b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9828a4-50c9-476f-a55d-b9a98c730cd7", "sighting_of_ref": "indicator--affacbe6-e1e9-4e3f-a076-bd3d6d8cae6b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c350f7-1071-419a-a9a3-62c4e705b723", "sighting_of_ref": "indicator--49703804-de11-4c19-a1b3-b45b7f368370", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90858963-068b-4782-836b-7ee095b9d5fb", "sighting_of_ref": "indicator--c6be281f-6b66-4668-8ce7-dab5f7dd0ae2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3656aa4e-c017-44e1-9183-e2d43c193028", "sighting_of_ref": "indicator--0160a1ed-85b6-485d-99ab-183fb41cdd4f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bb8909-6739-47fe-a099-3b401479de89", "sighting_of_ref": "indicator--d9fb4bc5-b6a2-4f94-a64a-bdfd69974d67", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d27988c-af01-4ad3-bb95-f1603d339828", "sighting_of_ref": "indicator--d9fb4bc5-b6a2-4f94-a64a-bdfd69974d67", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3afbc0e-e8a3-46e4-882d-659de6b87fb6", "sighting_of_ref": "indicator--4bf59fb8-1c8d-4c5c-aa3b-c6cdbc1bad8b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8b654e-1cc5-420f-8839-8fbc068d956b", "sighting_of_ref": "indicator--dbfbf927-40ac-4d9b-a8bf-42ca259173db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdf667e-4d7b-461d-b391-359fa7c3ab92", "sighting_of_ref": "indicator--38e1e0c3-e116-4183-a3ce-173f14941f2b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7b9d01-4492-49be-bfe9-dbb22758ee82", "sighting_of_ref": "indicator--38e1e0c3-e116-4183-a3ce-173f14941f2b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9e75d2-8e6a-4e36-a5e7-a05435481bed", "sighting_of_ref": "indicator--62fb9267-1cf2-4ac7-8718-3d826d28620d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2492b351-345f-4017-b6a0-51160e0b3455", "sighting_of_ref": "indicator--62fb9267-1cf2-4ac7-8718-3d826d28620d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedeab4f-4ffc-421f-8685-28591f3fb295", "sighting_of_ref": "indicator--ad612534-2905-47a8-96f8-484e9517b62a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3100828-9631-4c2e-b1eb-a9a7bd493649", "sighting_of_ref": "indicator--b77427b2-6a2f-4e11-af8e-8f15b988c27f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fef38f-5cf3-4717-a0f0-bbbfb2943219", "sighting_of_ref": "indicator--9ac74b5d-da0f-4094-8d28-d19dbd6f9625", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7019b8-347d-4683-80d6-bf63e2fcd7af", "sighting_of_ref": "indicator--505fcdd5-3366-4325-aaf8-36e14c5a55da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c8b2b1-07a9-4498-ace4-e3967c4e6725", "sighting_of_ref": "indicator--505fcdd5-3366-4325-aaf8-36e14c5a55da", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501c12d9-932a-4b9e-967a-308fea9af98f", "sighting_of_ref": "indicator--43985d64-be86-473f-9ab4-5795388ecf07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f9dcd6-0b72-42f7-8222-707ff1d6cc76", "sighting_of_ref": "indicator--b36bcaff-47b5-4e1a-8945-8a5557cba903", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cad387-e79a-4e83-a1d9-71a5bc17c3e9", "sighting_of_ref": "indicator--656a84a0-cadd-4ab4-a654-503501ecab74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85aaced3-04d7-4870-90d8-b3696056b16f", "sighting_of_ref": "indicator--06dfce13-d11e-4833-93b0-73f8f62ff4b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14edaade-9d36-4b30-b90d-37caad04a7d6", "sighting_of_ref": "indicator--df04f3ad-ee3e-45b3-9498-aa921e1abed3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1444c1b3-b2f6-47c8-ad18-930f60f80520", "sighting_of_ref": "indicator--5da4b251-6686-4717-9bb8-0c73b71c75b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0a399d-f2ab-4c8d-8c23-25e6426aa711", "sighting_of_ref": "indicator--5da4b251-6686-4717-9bb8-0c73b71c75b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d4eec4-3a53-4e20-a7ae-d3657619aab9", "sighting_of_ref": "indicator--35dfc8a2-dda1-4f0b-84c6-a925bede6698", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfac71f-4bda-477d-952f-e5dfd9e061b3", "sighting_of_ref": "indicator--35dfc8a2-dda1-4f0b-84c6-a925bede6698", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295c45b7-69bc-49e1-85da-85c8d731799c", "sighting_of_ref": "indicator--8e19224e-78f8-45a1-85f3-9c484059d7b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f615fb6a-30b9-47f2-a83f-34670840181e", "sighting_of_ref": "indicator--8e19224e-78f8-45a1-85f3-9c484059d7b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c677248-3550-4e3b-900a-bb4eef919dd9", "sighting_of_ref": "indicator--5ba05232-d1d9-4734-94c3-6cf4efcbd677", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582a71bc-f610-4916-ad33-6cbbf25ecf01", "sighting_of_ref": "indicator--2132cbf9-58a4-427a-aaeb-b0b9161f467a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b861c2d-4904-49bb-be8f-87911dd15df3", "sighting_of_ref": "indicator--8c64a625-5413-47e0-a00e-f775eae535fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942040b6-790a-4603-8526-fb5a2f2cb5fc", "sighting_of_ref": "indicator--94173b61-de23-494f-9f18-cdc9316df8f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e4e8c3-6ad7-4769-aea3-eda6ab0700bb", "sighting_of_ref": "indicator--c23477eb-1ef1-4656-877f-9fbd559980da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdd152a-b368-4740-9521-f0fbaf5b91d1", "sighting_of_ref": "indicator--c3199319-9ca2-4610-bc95-09b03bba2ef9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202c4a8c-e5ac-4c4f-ac32-c2f6e03ddba8", "sighting_of_ref": "indicator--0d53ad9f-c8a3-4d87-9b4d-62dae965ca46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66ec30f-d887-4392-b266-4b97fae2b47a", "sighting_of_ref": "indicator--0d53ad9f-c8a3-4d87-9b4d-62dae965ca46", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503ca305-e36a-4c78-852e-1505187a73e7", "sighting_of_ref": "indicator--cc4de637-4469-45fc-bdfc-becf5997b430", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c58ab1-5794-42b7-bee4-73061962c11f", "sighting_of_ref": "indicator--a2e9ecf3-5548-41a5-b38e-0ab6ed5e694e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd2bd40-3ede-4061-817e-20beb287cc15", "sighting_of_ref": "indicator--a2e9ecf3-5548-41a5-b38e-0ab6ed5e694e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e1f9da-ffbf-4ad7-a914-d517e3219dd7", "sighting_of_ref": "indicator--6abce5ed-c9e1-49b0-be45-2b3f5175d9e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be3c34b-b58e-4adb-9e80-c604cbe3f6e8", "sighting_of_ref": "indicator--983a3aa7-616b-4fe7-b884-4cc93ef2f9e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3444dd-b158-4162-b1c6-d4b24f2125ff", "sighting_of_ref": "indicator--983a3aa7-616b-4fe7-b884-4cc93ef2f9e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824f6dbe-27ff-4dca-9349-2b82cc252024", "sighting_of_ref": "indicator--cc451f93-d9c3-4182-aceb-587c3b5266c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebd1c31-2911-4361-adb5-b1a3e4b5d43a", "sighting_of_ref": "indicator--f415cb0f-e5b8-4e4d-99a4-0741c974583f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbc48b5-b775-4c0c-8d85-9cc64ebf7524", "sighting_of_ref": "indicator--f415cb0f-e5b8-4e4d-99a4-0741c974583f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542637ad-f04d-4792-b3f6-bd76abe3dccc", "sighting_of_ref": "indicator--2e5d0598-25fe-4fe3-9d0b-93524f5c1659", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68e61ad-49b0-4db6-bbe7-2a69d819d6e7", "sighting_of_ref": "indicator--1dcb3501-3842-4860-8bb3-e86e2aa93a94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2afa62-ba5d-4ec7-b174-81b3f93f033d", "sighting_of_ref": "indicator--f036bee6-ea69-42e3-883b-c5bcef01327d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830579d0-3f63-42cc-9395-f7cbc492b3aa", "sighting_of_ref": "indicator--17ce766f-2650-4214-8e0c-8e19cd46f7f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0f54cf-24a7-42a8-bd05-74cde401c6d7", "sighting_of_ref": "indicator--577d91d7-e19a-472b-810a-01df5de943d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e35618c-db64-4521-a193-7be85382be08", "sighting_of_ref": "indicator--458bc7f5-d50f-44db-9110-4b932d074d92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bce9a7-76f8-4cec-8d29-a386b124850b", "sighting_of_ref": "indicator--458bc7f5-d50f-44db-9110-4b932d074d92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a39ee7-98a5-44a7-a19f-be13f96c2c42", "sighting_of_ref": "indicator--d229b7b2-e597-4bd7-986d-6fc6c40dd7af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebc431e-29cc-40a3-81b9-c0487e0aa0a1", "sighting_of_ref": "indicator--d8e38676-4c21-4bb0-9771-37be2ab2030f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44e4bba-951b-4f0c-b989-ab28392ecee8", "sighting_of_ref": "indicator--d8e38676-4c21-4bb0-9771-37be2ab2030f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1670e6-bbd7-4bf0-a3fe-a68ed90002ef", "sighting_of_ref": "indicator--1da310ee-1deb-4a0d-a3e3-46870b8c4904", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d72bd54-6903-41ed-9959-d3e86acd830d", "sighting_of_ref": "indicator--ce7b111c-78f4-4d91-a96c-b27ffa114b3c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe26254e-ed27-4f36-a68d-970d5dd4ba73", "sighting_of_ref": "indicator--ce7b111c-78f4-4d91-a96c-b27ffa114b3c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4cf588-2c26-49cc-b77b-54521e85cade", "sighting_of_ref": "indicator--d7e0d426-5f8d-4993-8886-e59f4d4fd337", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3162223-b24f-4136-a701-b547144e7443", "sighting_of_ref": "indicator--d7e0d426-5f8d-4993-8886-e59f4d4fd337", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130e48eb-14a0-44df-95e7-d31c1c25598a", "sighting_of_ref": "indicator--7baefb2d-5c07-420e-bdd9-0810792ae2cf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987a9d22-4087-41f6-a763-085d1f7a7a51", "sighting_of_ref": "indicator--7baefb2d-5c07-420e-bdd9-0810792ae2cf", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e587810-efde-4b2c-b640-39092db42369", "sighting_of_ref": "indicator--6e2b4182-bf74-4719-9d87-3cef54aa9593", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d4a6cb-8b41-41c3-8e04-eeb29d69f011", "sighting_of_ref": "indicator--6e2b4182-bf74-4719-9d87-3cef54aa9593", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c6f38a-1f79-4b0f-be3b-924540127a8d", "sighting_of_ref": "indicator--72839150-cc2e-4150-9c55-51b24260b751", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386d6935-c337-4c8c-83e0-0e5ce5122a76", "sighting_of_ref": "indicator--6605bf4f-a1d6-4d51-94aa-0d53d8a52ae9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e151d4ba-9318-4ce1-b8bb-c72a8658db62", "sighting_of_ref": "indicator--b9afff64-0096-4dfa-a3c9-1d2e29bb79d5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08968fa1-0556-45d6-867b-8c263877909b", "sighting_of_ref": "indicator--b9afff64-0096-4dfa-a3c9-1d2e29bb79d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd784c2-5617-437e-a960-96a07478ce31", "sighting_of_ref": "indicator--22edc413-3dd7-401b-9335-a89b607b704c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad5a7e4-e9ff-4f36-be2e-16db9703b152", "sighting_of_ref": "indicator--6dd1d3b5-8847-454a-877e-a3d094486d1c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8e9f72-0504-4ed1-b2d7-96268c32095a", "sighting_of_ref": "indicator--6abf2546-6d11-4698-a930-515550ac2371", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8330017-da9f-4ad8-94a6-2b40ad793a9a", "sighting_of_ref": "indicator--afc09b27-8fc5-4ff5-8ab5-9242ab45b47e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3398c14f-957b-4d48-9ec8-2551b42be333", "sighting_of_ref": "indicator--afc09b27-8fc5-4ff5-8ab5-9242ab45b47e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74988754-24e8-47bc-9579-dca391d74c7a", "sighting_of_ref": "indicator--5ced69ab-3f53-406f-9643-86e1f1596797", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae0816e-3df6-4f84-99fd-17e4c72fd088", "sighting_of_ref": "indicator--02fc7c08-c406-4a59-9ed2-c213c1157583", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72d0f86-d0c0-4d23-af13-fba088828de4", "sighting_of_ref": "indicator--3dd176e6-ef2b-4d41-bbe6-449c40660582", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f484c16-ad73-43d9-a66d-537fbf1fe9c2", "sighting_of_ref": "indicator--3dd176e6-ef2b-4d41-bbe6-449c40660582", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcc199e-6b46-4661-b97f-2f1c59ff9596", "sighting_of_ref": "indicator--c2b111a3-181c-4764-b954-26a50cd52275", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5681710c-fc55-42c5-ab79-a3c7d9f0bb24", "sighting_of_ref": "indicator--9b9491ad-7fad-4b75-9df4-33422459ba3a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8460a8eb-d5ef-4063-b9c4-81ebed22ff79", "sighting_of_ref": "indicator--a9df9b41-bace-4129-b458-5b3dce6bdf25", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ce965-ad04-462c-bdf7-cc74834d3cdf", "sighting_of_ref": "indicator--670bc077-20e3-4fe4-b015-a577c268c212", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14045e3-566d-4767-a94c-10e2fd66dcec", "sighting_of_ref": "indicator--80186833-519c-4a17-88c1-81c8b9acd640", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7d4e84-67df-4a9d-95ab-558ee3fc5816", "sighting_of_ref": "indicator--01c220a8-bd9d-4527-adb2-4fffde71d922", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6599c09-47bc-4ac0-b39e-45b21fb71b85", "sighting_of_ref": "indicator--7172aad1-953a-499a-9fec-c3895927fa59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcef4a58-4e8a-40ec-9795-44da82bb1ce4", "sighting_of_ref": "indicator--7172aad1-953a-499a-9fec-c3895927fa59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b6288d-52aa-4c9b-aa0e-ecff2de6ee02", "sighting_of_ref": "indicator--1ea672c2-7ce0-42fc-aa24-6c92274e17fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2519fc02-6aa4-4f3d-a1e0-8ab0000ac192", "sighting_of_ref": "indicator--55dc8f0d-82a7-4828-821a-8edac8439988", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779650d7-8551-42d4-b32b-5f302c5fae49", "sighting_of_ref": "indicator--55dc8f0d-82a7-4828-821a-8edac8439988", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31878c07-1135-4780-88d8-4f59115db1ff", "sighting_of_ref": "indicator--6c176a18-48bd-4003-9fea-14c32ef37879", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c0ecab-03fb-4f82-b7b0-8085fe12806f", "sighting_of_ref": "indicator--64bb77cd-b8fe-46d1-86c7-35fbfb605ed7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315d24d9-933e-4cf5-9577-ee7ad766b048", "sighting_of_ref": "indicator--d1e6661b-147f-4906-a386-70910ecbd41f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2d3e30-2362-4652-bd49-c5d60cfa980a", "sighting_of_ref": "indicator--76c66c9a-97ce-45a5-8c84-8de17f7ab51d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9ef1d9-f022-4350-9573-a85a86e4ed6e", "sighting_of_ref": "indicator--76c66c9a-97ce-45a5-8c84-8de17f7ab51d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e9ad54-eb47-404c-b048-385284d47076", "sighting_of_ref": "indicator--20325168-bead-4f2c-8c7e-e1a809ef0448", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aff35bc-23f6-41a7-838f-9ddbf781f81b", "sighting_of_ref": "indicator--cbf0ba50-4a3b-449b-b8f6-35011801ab7f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f3808e-dee5-4297-9e4d-2743ead3c6df", "sighting_of_ref": "indicator--a52b6c73-f2fd-4815-adfd-6dbe7c141a1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd0ba08-7c6e-4f7d-b47f-390c5cb7f150", "sighting_of_ref": "indicator--a52b6c73-f2fd-4815-adfd-6dbe7c141a1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28d5890-e7b9-456c-8317-ba253680ad7e", "sighting_of_ref": "indicator--4053cb6c-dc58-4542-9dcc-474644bec230", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a8ec62-c4a5-4c3b-88ec-f0f9d83b180a", "sighting_of_ref": "indicator--4adb9865-20b2-44e7-b49a-baf2da19fcf4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab51df5-5946-45da-8eb0-91aaafe5226a", "sighting_of_ref": "indicator--7d9b46c0-f507-49dc-9790-374ded6916d2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf4608b-cb01-4019-a1d4-01dd75d1a4bb", "sighting_of_ref": "indicator--b286fe1a-44ce-488d-b362-5ed7e820f0e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bfcec7-2e55-470d-a136-b69ae90f57fe", "sighting_of_ref": "indicator--fe4da9be-d244-459c-8cb0-7d6e70a5d832", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f5663e-f810-45e0-9ce1-3c463874a26a", "sighting_of_ref": "indicator--bafc641a-d1a5-4a70-aa4c-689ea00dd3b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96b4b18-687a-497d-9f3a-2f05f12235bf", "sighting_of_ref": "indicator--30bf0b26-c2f4-4f42-a5e8-42228f9b6e8b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cb3097-3b29-4682-a73d-159d2d43217f", "sighting_of_ref": "indicator--c198c8fd-1222-402e-a21f-cd09f26e98c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0251f796-8b57-4f99-85f4-39a817521a71", "sighting_of_ref": "indicator--fce9ad29-1f0b-4253-b83b-8154cde4f913", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf29827-4103-456e-ae73-6d86a0aaf399", "sighting_of_ref": "indicator--8eeae56e-7655-4d16-93e2-e35f0bce1fcb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8614f10c-93f3-4f77-9f15-6b6d5b331144", "sighting_of_ref": "indicator--58b46018-257d-431a-a0ed-76976375cc01", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0f8b36-3ea3-4565-ba90-865e4632d192", "sighting_of_ref": "indicator--217fb757-746f-45c6-a6d3-37180ed31c43", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9c5255-f415-4563-8a35-3efd18ed1f62", "sighting_of_ref": "indicator--4f91ffc1-8c48-4a43-a4de-e06d2a2effdf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cd3da1-d27f-4838-b691-6bea20c4bf7a", "sighting_of_ref": "indicator--a5753b17-46ab-4036-a511-1a8ae4f62540", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbea182a-1400-4b12-b23c-7dcd47aed3f7", "sighting_of_ref": "indicator--a5753b17-46ab-4036-a511-1a8ae4f62540", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b0b1a2-adda-4135-83fe-55556a568994", "sighting_of_ref": "indicator--716ce487-a120-4132-b088-f5f31967c34e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0ec495-b819-4571-87b2-7d6f53cb8dde", "sighting_of_ref": "indicator--77b968e2-02ab-484e-a0f8-1a0139a43eac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ededc7d1-2efb-4eab-a4ca-d329df40580a", "sighting_of_ref": "indicator--9f1b611d-87bb-4d0b-8ac9-df69183e0a29", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ccf92-db50-473e-99bd-b675c250fd0d", "sighting_of_ref": "indicator--334c33bf-8448-41d2-a1ac-790d7f710bc9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57701960-805c-45bb-b22b-5e0fa0fda92b", "sighting_of_ref": "indicator--8584fd79-2593-4c5d-b1b3-6b2573e4c731", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc77f9b-6602-4bdd-9a87-f65711b7a793", "sighting_of_ref": "indicator--c5d84d49-5411-4fe4-98f8-d73af60d1439", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa0c7d5-b3e2-40a3-a038-19a4f123e811", "sighting_of_ref": "indicator--d7b127c8-1b9e-46be-9471-886234633c21", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d3c407-0b7b-4d16-bb03-3e943d445353", "sighting_of_ref": "indicator--586fefcf-fd74-402f-9422-6bf117440167", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337d3266-e788-469f-9c7d-a223e67afced", "sighting_of_ref": "indicator--586fefcf-fd74-402f-9422-6bf117440167", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9279989d-5527-4edd-86ee-7682bce0bc5f", "sighting_of_ref": "indicator--d01d3ec5-c7ee-44fc-909d-2eabb89516a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a174a1e4-124b-4085-9d60-92fc329cc068", "sighting_of_ref": "indicator--31c0eef1-d908-44c5-b3e8-aff577bdd1f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07528296-a796-4419-9c35-a23d0daec463", "sighting_of_ref": "indicator--ba6e8c44-1f56-435b-b26f-1d90a6ebc167", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338c01b1-af70-4daa-840c-4bbe14bfb8ba", "sighting_of_ref": "indicator--d8b57389-c33a-42a5-a9b5-c142d77c6722", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf722fce-3285-48c4-9b44-09689ea9bb86", "sighting_of_ref": "indicator--48d1ae33-5f8c-4099-8c14-a0f0f384b2bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6aa7b5b-ee04-4819-b265-6991e30c6d2f", "sighting_of_ref": "indicator--89244c62-805e-4314-97fc-785cd4765b98", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b96c78c-115a-4994-ac15-9a94f1f3ed73", "sighting_of_ref": "indicator--b9680626-36a8-4182-b6c7-f538bbf28c8c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06541d98-f6f7-407d-9007-8567473fd3ac", "sighting_of_ref": "indicator--b0fd1e8c-ad93-4f84-a7e3-7921c6632c1c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740ce8fe-de10-49a4-a372-c0ecf83babba", "sighting_of_ref": "indicator--230b58c7-4e93-460d-b4be-f7ac1a8ab2a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431257b7-e82f-4cba-91e1-bf8d92f7fe95", "sighting_of_ref": "indicator--f5532b2f-72cb-486d-a6b9-f31a451c1619", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ffffae-7a51-42c2-94c6-cfb39cb2b3a9", "sighting_of_ref": "indicator--26602b02-e4cd-40df-8e0f-e10af550de30", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bd62cc-14c2-4e94-820d-25d5d84f1d99", "sighting_of_ref": "indicator--72d06f99-a640-437e-b51a-8259421bc2c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2323ccf8-763c-4117-b7c9-3de0f8ad104b", "sighting_of_ref": "indicator--47a1d42d-44d2-4779-a9e5-85aa53c12d8b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0f80f3-2732-473d-8443-b4880cf5cc9a", "sighting_of_ref": "indicator--7f468900-691b-476b-b465-74c222ae37df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fec63df-d11d-4b05-8b30-0966ecf99b5d", "sighting_of_ref": "indicator--dfed75af-02b7-422c-94ea-5082fb8ea7d9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77981bd6-ab95-4c43-9b48-87f7bb2d1a47", "sighting_of_ref": "indicator--bdcaea8e-f533-4164-a512-6a6dcd6f1e47", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f87f80-f671-4fb4-af4f-e84029ceed95", "sighting_of_ref": "indicator--d2185687-66ec-4496-b4db-612e696a4a44", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b36683-e225-4cf0-a1d1-4e7fb634b24d", "sighting_of_ref": "indicator--7e43357d-6ce4-4aea-a618-6e92dd589e82", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b741478-3415-4c8e-8cd4-f6ed13c52e32", "sighting_of_ref": "indicator--7e43357d-6ce4-4aea-a618-6e92dd589e82", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794dc6db-c700-4670-ac99-2272b3d084ca", "sighting_of_ref": "indicator--541aae2c-a7e1-4591-a1c0-b4876ec33cc9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921faef9-12a1-45f8-b5da-9ca9bf042ba2", "sighting_of_ref": "indicator--aa807f6d-7c9b-40a1-85d1-b332e6ecb728", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9670872-254b-41e7-8d16-640c9f3d315d", "sighting_of_ref": "indicator--031696fb-146e-4256-92cb-9d4c13c363cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3d1c80-0804-4832-9f6b-64f5a8b0a72e", "sighting_of_ref": "indicator--1dff314a-da2c-4c56-b902-d192ca7d8add", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa169695-d02f-4c1b-938b-f6477edb74ee", "sighting_of_ref": "indicator--f2fad5ab-e2cd-4d73-b0e1-72f1cf4d9402", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799ace4c-e961-4e7d-9818-b4a04ce525ea", "sighting_of_ref": "indicator--9b772ec4-92ca-422c-83ce-b3738ba2d76c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d866c81-1de1-4177-989d-b81c11e9ee95", "sighting_of_ref": "indicator--232dcbb1-5fa6-4997-b568-489ca11fe535", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7318e5-cfb5-4ff0-a2c2-31f60fba1e12", "sighting_of_ref": "indicator--8ae9f726-da2b-48d2-8c75-eb9cf61c1da8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7580e565-b871-4bc6-95a4-1905b3880628", "sighting_of_ref": "indicator--11a42e48-3f7e-430e-8ae0-f772c86f48ac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f84b98f-4e7b-47eb-8866-fdef60214297", "sighting_of_ref": "indicator--baa0a549-9086-4b36-8d0d-651bbf2f802a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacbf1f7-ea5f-4b30-975c-17377d62ffd9", "sighting_of_ref": "indicator--17bc8845-bf78-4fd1-9e31-5c07c28c33c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e79927a-9ae0-450a-afc0-4055523efbfa", "sighting_of_ref": "indicator--a1ffe28c-0525-44e4-9e05-19ad1921e3ac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60b40d4-9b94-45dc-9125-123f44a7e64e", "sighting_of_ref": "indicator--d7309c14-5084-4861-95a4-e94c4c01441f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a8ddda-72ea-4bac-8d04-c50dd2d92931", "sighting_of_ref": "indicator--fea5a989-8607-4a51-a705-f77e74710655", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632878b0-2de6-4ea8-bcbd-4302750a121d", "sighting_of_ref": "indicator--a345ad0c-024f-4c19-8241-9f20bd6ccbb1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c38fc2-36f3-4247-b072-265e14233a9d", "sighting_of_ref": "indicator--386363aa-2e2f-4c95-aeab-f89a225a596f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b904a311-30c5-404e-80a3-284d61aa8828", "sighting_of_ref": "indicator--adac84aa-4bc7-4b54-abdf-43f220b08141", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fae5d2e-ac87-4059-9f30-ae60a7a61264", "sighting_of_ref": "indicator--66293339-bd06-4402-be41-0b0e62ffd93c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b184cf22-b98b-435b-9d47-ea443a5c5920", "sighting_of_ref": "indicator--77b43092-fcf4-40df-83d7-419c78b0b189", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cf9410-2eee-4346-995f-1047c30efacb", "sighting_of_ref": "indicator--a1e1394a-2cec-452e-9a81-5f9d609d419d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4210e-c8ae-4c90-87ba-e87bb2baceba", "sighting_of_ref": "indicator--9d26ffb9-b41a-4e24-bfad-916b40e5bbdf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a825f704-4851-4c6a-8b7b-2217e43520b2", "sighting_of_ref": "indicator--3a01b5fb-7a5a-434f-8209-2d8630a41dbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4d631c-e25a-48fe-ab0d-622bfd02f33c", "sighting_of_ref": "indicator--13d846ec-21a3-4ecf-a3fc-1fa2e6e09001", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f76a9b-0433-44d8-9789-0e77c25d2d1e", "sighting_of_ref": "indicator--e67a23a2-241a-4ce1-bd46-6f8735beb463", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6632553b-53b6-4a18-9185-d9a8dcd39919", "sighting_of_ref": "indicator--4cecaff1-ef6c-4a07-a8f2-119ffbd7373f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8d93b5-fd83-45f1-baac-82678ea2d174", "sighting_of_ref": "indicator--78b979fe-9884-4266-be51-48d240d679e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108db143-0506-4880-9d2b-9855861d9d9f", "sighting_of_ref": "indicator--78b979fe-9884-4266-be51-48d240d679e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74ad469-41cf-4511-a020-480ee16c68a4", "sighting_of_ref": "indicator--9f6a57b4-d0c1-4aa4-9ba3-e5a97e381931", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dae6ce-af89-435b-ba54-16f56081c83a", "sighting_of_ref": "indicator--6db90077-74bd-4265-aaec-7ef076678b4f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613358c1-4fb4-4ebf-b290-5431e43620ff", "sighting_of_ref": "indicator--bba281e5-d098-490f-a091-cf1be0abbbbf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76aa925b-db00-436a-b890-aec6db451c13", "sighting_of_ref": "indicator--3b5f4807-4d57-4473-8ddd-8ec3860d51eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7e94da-bfcc-4b76-8b71-ad3df86cbb4b", "sighting_of_ref": "indicator--cb6a7f9a-3b05-406b-ac8c-3b08e09b05b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e8faa3-40ae-408c-96f3-0cf2a71f8b9c", "sighting_of_ref": "indicator--db62508a-1968-466a-aeef-1d79e8edde23", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acc38f5-f9c3-4439-888b-ed3a9db286c3", "sighting_of_ref": "indicator--e66e93b3-4dd0-4715-a391-4a9687708b52", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c703e154-a86f-4522-8e5c-f3cb0ff4dc5b", "sighting_of_ref": "indicator--dae729f8-39d3-46f1-9f0d-fde133dc084b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba920082-54f0-4292-a6b3-2fdc706e8881", "sighting_of_ref": "indicator--bacf5cac-f968-45c2-bc4d-61f0c7ed50f7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fc7dbc-98ba-4005-9326-4c94a27620df", "sighting_of_ref": "indicator--87995d77-bc24-42a3-9e78-4cfb5085db86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b91fbe4-dbf6-479e-8cce-a04469bc3556", "sighting_of_ref": "indicator--40b7ced7-8a9a-4881-a817-dccaf898ae18", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef481f2-1fd6-40cd-a8ee-3d9040f612e1", "sighting_of_ref": "indicator--42bb3507-ef96-42b6-9c3f-86febaacdc3d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7c1e9c-2af9-4087-baed-8dfb63a9ce44", "sighting_of_ref": "indicator--751684b4-5828-4b7a-9ec4-3ee18dbdc33b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e980ca4c-cccf-459a-93c1-a43c76b052ef", "sighting_of_ref": "indicator--cf9941af-713d-4677-a28f-78a095a21a98", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2528c9f5-aef6-4ee2-b9be-5993f2f20514", "sighting_of_ref": "indicator--71d5353d-0046-43f4-b42a-b9590cd09287", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3012c062-3a54-4cf2-a21c-bf6f89d9c377", "sighting_of_ref": "indicator--4a6353a2-c1c7-4c5e-9449-a2af5ea0d4bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc60cd97-52d1-4cb6-9696-bebc62a5e9ee", "sighting_of_ref": "indicator--f05a939f-d13e-428b-a5b8-eda94d433a30", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a58c889-17af-482b-8f51-f50838bd1a21", "sighting_of_ref": "indicator--391769dd-4412-4109-ba8f-b0a9ef2b3189", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf8ac65-62aa-4899-906d-91543ce2ff26", "sighting_of_ref": "indicator--1b64a015-f263-46f0-a0cf-ca25d42ab98e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3e55c6-b791-4e17-aba1-c5c8b73c45f9", "sighting_of_ref": "indicator--91323bc3-b9c4-4f9b-b4de-c5fb47b5e268", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c713fb93-c492-4043-84d2-b97287796677", "sighting_of_ref": "indicator--01141838-94cd-4cc3-af5b-9a7ce9372160", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b33326d-fa38-4624-8c66-89326696c35b", "sighting_of_ref": "indicator--488cb7b3-5932-4dbc-9d8a-e3a3b881725c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e3dd88-8ab8-4d4f-b921-057806662241", "sighting_of_ref": "indicator--e8145016-b9c5-4b29-b577-e192f8d5f6ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e028c87a-8047-41a6-8529-d3cdde8507be", "sighting_of_ref": "indicator--b74e35a3-8644-46ab-b9a9-f59a5e86d646", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3717a81-b7f9-41c0-9d5f-1599acf35d69", "sighting_of_ref": "indicator--634bbc92-35cc-4f7a-a2ea-0fb672c506f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb68cb8-c6b0-4e12-bf05-2b71bb9b79cf", "sighting_of_ref": "indicator--ae9cfb96-2033-4041-9e77-98c32e570bff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f161835-b872-4bd3-b4a0-a96ca1fb03cf", "sighting_of_ref": "indicator--ecd53779-02aa-44b3-a6be-d8db74540dc1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333d4bc9-57f2-4da2-9832-90a1da2947d9", "sighting_of_ref": "indicator--7d87918b-f5e8-4dcf-b856-e24d7b31902c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20489a26-5072-4daa-9f8c-32fe771e6565", "sighting_of_ref": "indicator--5db062aa-da20-45c4-b49f-b286e9fbd79e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96338ed6-cbd2-4831-adfc-3eafb64c18cd", "sighting_of_ref": "indicator--1d8c8d38-6b10-49c0-8cd3-e3cd43343ddd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24563f2b-c648-448d-997d-372b637b36c4", "sighting_of_ref": "indicator--c8723322-192e-40ba-bdd5-e70e1a41cd30", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e0ba77-398b-4929-92d1-c4fabe3e47e2", "sighting_of_ref": "indicator--99703c73-d746-4303-9f7d-19a4ca70e298", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69eae79d-e8a1-452d-b0cc-b5e29c5158ac", "sighting_of_ref": "indicator--68c3e560-ba0d-4cd0-b211-e3d894dd1987", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2220e250-77c9-40cc-a464-b88ce90cd6ca", "sighting_of_ref": "indicator--bd80722c-d6a2-4377-80cf-474be19a56dc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f10bdc-1fc0-4e9f-b518-cd71427e2eb3", "sighting_of_ref": "indicator--d3cf5c68-4060-4427-a76e-5191bdfa03e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ce854a-b00b-4624-896c-a813679a34bd", "sighting_of_ref": "indicator--b57a7974-3cd6-446f-b9e2-e055e69bd188", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544db80e-0261-4bd3-840d-13c2efe889ff", "sighting_of_ref": "indicator--1b8475fc-40fd-4f0f-a502-2a0c58e9a2b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9380d369-90bc-4f76-b002-2b02a1960eef", "sighting_of_ref": "indicator--c0ca349a-0196-486d-9bd9-3c3b60a8101e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c85acb5-d158-4645-ad82-4ea6a1a4e93a", "sighting_of_ref": "indicator--ce938236-0942-48a6-ad4d-e51738c658c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433053da-581c-4adc-b3f6-24e49ccf70d8", "sighting_of_ref": "indicator--cafe886b-da57-428a-93d8-18909b9b05f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c5aa86-3f17-4f19-8e77-43c7c4f53b9b", "sighting_of_ref": "indicator--9d65ab37-2ed6-4735-96dc-8c042a3549c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6471d71d-ba93-4b6c-bd06-426ef5ae506b", "sighting_of_ref": "indicator--0e206397-9706-4d0f-804b-236c7809b4a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b48afcd-be10-4816-93fb-0683efcfe961", "sighting_of_ref": "indicator--de7cea8d-542f-4d41-bbbf-5c0f4356339d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a672f5a-d337-4a7e-8541-f52b33dc75a6", "sighting_of_ref": "indicator--20cb0a43-a0a8-4d0b-8ef9-2fbafe0fcd6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832cd374-5ace-4719-b432-60d71b51aabb", "sighting_of_ref": "indicator--6a2dc44e-ae42-4fc1-969e-4f74fea8ebb5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436eba1d-ce22-4439-8180-e3c8b08c8fbf", "sighting_of_ref": "indicator--6a2dc44e-ae42-4fc1-969e-4f74fea8ebb5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9922e3d5-68ce-41bd-884c-9208dcfa961a", "sighting_of_ref": "indicator--eb9ad00a-3750-40e2-8f91-a339e25f313f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba39c570-a556-4f08-9b47-08dc30db61bb", "sighting_of_ref": "indicator--e2d54c05-b275-4dae-a643-344dae9e0ae1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282eb678-c1c9-43af-be7c-ff60faf354f5", "sighting_of_ref": "indicator--89c8b15d-6562-4ff0-9344-20375adacb77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb436e72-9658-4eea-b494-28e6d2f68f9a", "sighting_of_ref": "indicator--c0907151-da57-4892-a134-39135469f7f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcffafa3-1a0f-4ba3-b221-c78d2e35101a", "sighting_of_ref": "indicator--f966a705-9dc4-4760-85f8-6d6dae7b9da2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2858d1bd-ceeb-4d3d-9ef1-14dd71b19307", "sighting_of_ref": "indicator--40d593b7-6d1e-4773-bc29-e6b84405473c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e38d01d-d701-4f13-a2d9-2c0bfc99286c", "sighting_of_ref": "indicator--77bdb1c7-2070-4d54-bc5b-1923a491a26b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11bce3b-308b-496a-a6cf-ad46497a086e", "sighting_of_ref": "indicator--fe488807-27bd-471e-99c8-92cc1465220f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c39628-e409-49a7-b925-8798153828bb", "sighting_of_ref": "indicator--1da3a5ce-20d1-4938-ab28-90225c840279", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d5f95f-76fb-4147-a3bb-9d6f1b39603b", "sighting_of_ref": "indicator--1c2dee9d-552f-493a-95fc-a145e2a9e5a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f444e52-d43c-459d-9216-3394344041f3", "sighting_of_ref": "indicator--e1dd0703-20ce-46fc-af17-887a8677671f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2022e7c2-af01-42a9-b580-5a3a8e05fcb5", "sighting_of_ref": "indicator--34e4eded-41b4-4ae2-b8cc-35eda44ed53e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bf5311-0552-4aca-9c79-8de145fdfbc7", "sighting_of_ref": "indicator--34e4eded-41b4-4ae2-b8cc-35eda44ed53e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cc91d3-6d97-41dc-b471-5e91e2964a45", "sighting_of_ref": "indicator--190366d4-a644-43c4-933b-f202642678c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d683661e-ec26-4afa-a03a-f2d2a7d15e60", "sighting_of_ref": "indicator--ebb7eb51-63a6-4d70-a589-6e60f6f7b981", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a8863e-8bc8-40d4-9a31-45e245946ebe", "sighting_of_ref": "indicator--ebb7eb51-63a6-4d70-a589-6e60f6f7b981", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb65f74-198a-4afe-b250-2b803c0dde84", "sighting_of_ref": "indicator--b23ce699-2901-41ab-9135-32d8e812c828", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e515fcc3-1d4b-4839-a5d5-be6dc5cd2c39", "sighting_of_ref": "indicator--2988316f-6add-43b7-8122-19e84b5b0ff8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7d7548-0e72-48a2-b2d9-ff3ea09c5f16", "sighting_of_ref": "indicator--2988316f-6add-43b7-8122-19e84b5b0ff8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d077f8-a7ae-4929-8e00-2df9fe2605d7", "sighting_of_ref": "indicator--86d11c7d-6e62-4ce8-b6e7-033ec6b7384b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e153a48-1ef8-4138-ae92-6791de174ba3", "sighting_of_ref": "indicator--538cc916-3fa4-4d33-809d-1312c12da3b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950df125-2bb9-4c7c-a70a-4db6644ce762", "sighting_of_ref": "indicator--40a8d696-0421-4f40-94c1-71405685e8b2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986fda74-5353-4e84-845b-22cec9d5a77a", "sighting_of_ref": "indicator--93b18e3a-57a5-41ee-892f-01cd4a423e6f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7645274-dd9b-4c00-853c-7c2c0a88e4a3", "sighting_of_ref": "indicator--ac490fdb-9867-4d53-90c1-1532baaf4849", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f630821f-de3d-479a-ad68-cbe3d5e1a194", "sighting_of_ref": "indicator--72f30aae-94af-4140-a1d2-3241bb39b8af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fed3c5-1b6d-4783-8032-254f6e4247ca", "sighting_of_ref": "indicator--a8debbaf-6bf7-48a8-b487-2b3f14c46f09", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7731c9-74fa-4c72-9776-311d528681de", "sighting_of_ref": "indicator--f285029b-debf-407f-b42a-e631423077d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb00093-9628-4eb7-8c4b-ad45b8966b53", "sighting_of_ref": "indicator--f949273e-a61e-4837-921e-a988ca04fe1d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7050e42-3481-4bce-9d2e-16a92076d45f", "sighting_of_ref": "indicator--60dac1fa-90fa-4b29-a2db-a9ab6cc38682", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c532034f-dd01-4f90-808a-6adf820e3363", "sighting_of_ref": "indicator--f5ea2912-15b3-4ce4-a213-190825e27200", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9648499-cf0e-4b51-b522-c2de9803921c", "sighting_of_ref": "indicator--9307982b-fede-41f7-a07c-ddb4f69f15a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ebe0b7-21c8-47a5-b7f6-d88462e046e0", "sighting_of_ref": "indicator--1df1f93e-32e7-4af2-831a-f47b585e9732", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01a900a-b92c-47ac-8fe9-eb126580f74a", "sighting_of_ref": "indicator--4930511d-bac2-43d1-bdf3-6ff85f3c9511", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99773dac-b655-475b-894d-2af3fba879b9", "sighting_of_ref": "indicator--39930efd-af83-49c6-aec2-2a9394af4424", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b956a19-5cab-4cd5-af54-c431330de4a2", "sighting_of_ref": "indicator--5014b1ec-557d-4870-b0a6-f90742e84461", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a731182f-0376-483b-b537-22506d12b968", "sighting_of_ref": "indicator--5f80c411-c4a9-4dd2-8083-6bb09a4167aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad85aab-1233-4a49-9680-c1309ab36678", "sighting_of_ref": "indicator--f31c9798-08ea-484f-9027-3c4cb3b5acf1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4da125-957f-4d23-92b1-68f4c910d4d1", "sighting_of_ref": "indicator--b3ad2c3d-aff1-4c7b-be09-587e6013eb50", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4348980-ac70-4e05-9677-261b857d989e", "sighting_of_ref": "indicator--2a2ef913-b0d0-4812-a940-e52ba9fed38c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4bd861-1ac9-4c2f-8002-5216f35ddf6e", "sighting_of_ref": "indicator--8c65d5df-d43c-4f52-b8e0-85bb26590e89", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ebe77c-131e-424b-b419-2310e6c06f95", "sighting_of_ref": "indicator--4aa09943-8c08-4972-9a0a-8e5a0e9d0362", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e3be1b-53f2-4e44-a4b7-ffde4eb22b33", "sighting_of_ref": "indicator--1089ee70-3028-4a14-9471-e6ff28e227b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c1fbf3-9e1a-4c89-99c5-ca35d1007664", "sighting_of_ref": "indicator--0c813b4e-f83d-4df9-a57d-7c3442728d94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8036ec0e-e6bc-4e30-bd32-2bed7c04fdd9", "sighting_of_ref": "indicator--4d9cd731-eef9-4058-abd8-9dd982a8acd4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d233cad3-0034-44aa-8aa5-2907e3c85bcf", "sighting_of_ref": "indicator--4d9cd731-eef9-4058-abd8-9dd982a8acd4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70ef967-7f46-4a46-848d-2056b963eb86", "sighting_of_ref": "indicator--a4f375ed-8812-472a-a1ad-2bda60dfa90f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806c09a8-f60c-4674-a980-249ea1e65587", "sighting_of_ref": "indicator--4b161b31-de18-4c91-ad72-e6f4e119f29b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b37f9c7-74b9-4f30-8c12-8bb8e8312297", "sighting_of_ref": "indicator--e2ba39d8-cf37-4c09-8728-d09f15f3d874", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de001ec3-3442-4faf-91a6-bbf91697a0f2", "sighting_of_ref": "indicator--e2ba39d8-cf37-4c09-8728-d09f15f3d874", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1348799-1518-47d4-a186-c02ffd296c2d", "sighting_of_ref": "indicator--03e040d7-c4b6-4734-878d-fa9280943909", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bdd94a-ca93-4cce-91bd-cf0119b5f0ad", "sighting_of_ref": "indicator--b1cdb172-11ef-464d-90fb-d218105611fa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a80d85-4c3e-4ce0-8cc0-676d06e328a7", "sighting_of_ref": "indicator--b1cdb172-11ef-464d-90fb-d218105611fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64eba42f-445c-4645-8e08-80a46b10dd49", "sighting_of_ref": "indicator--f5807cf8-3f8b-4ed0-9ded-708372bf4fb9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349664d1-7729-4b94-99aa-b1418cb322ab", "sighting_of_ref": "indicator--f5807cf8-3f8b-4ed0-9ded-708372bf4fb9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6473d71e-e791-4326-b204-17768ab703bf", "sighting_of_ref": "indicator--a2fcddf2-375e-40d8-96f1-ebf5b8c97fde", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453ccb98-d2ed-448d-8275-92de1b5f4bb6", "sighting_of_ref": "indicator--a2fcddf2-375e-40d8-96f1-ebf5b8c97fde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99536ab8-29ac-49a5-9b26-47f1c16c6a74", "sighting_of_ref": "indicator--b69597b0-4fc1-405b-b9fb-ae53f8b29943", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db96a01f-f1de-4298-aa0a-e78fadd87305", "sighting_of_ref": "indicator--ba56caea-423b-47e5-90a0-033240d99e4e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c23445-e276-4721-b031-21c88876eb0a", "sighting_of_ref": "indicator--ba56caea-423b-47e5-90a0-033240d99e4e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b307a3-de9a-4b74-9bb4-b3636d98c805", "sighting_of_ref": "indicator--5a5747ff-30b1-4ee3-a1ab-fb69e41d772c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4145df-3211-4748-8da4-71d004c1b2c5", "sighting_of_ref": "indicator--5a5747ff-30b1-4ee3-a1ab-fb69e41d772c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e26492-07af-41ee-8821-c74d344ee139", "sighting_of_ref": "indicator--5e1e3be0-1191-4146-bb1f-c1e5ca2b6994", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407e1086-587b-4a2d-b8b3-9257675f9deb", "sighting_of_ref": "indicator--5c9ad6c9-71f9-4e12-971e-605bc3423f40", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e026d5-201b-47b2-8024-b70c83a5dd8c", "sighting_of_ref": "indicator--42b2c746-84a8-4122-a644-d14fef1bfcca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29258c8-cc6a-4984-b735-af294b0854ad", "sighting_of_ref": "indicator--91824e86-0e17-4a7e-99f4-7572f8df6d43", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf7d5a2-3f71-4c86-8209-f5e306864851", "sighting_of_ref": "indicator--b6598ff9-91e1-4121-a02e-eb34d72c30ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d800e881-6584-4300-888c-bfaa542ff8d8", "sighting_of_ref": "indicator--135f45ee-3052-4499-9809-5ef5c92541f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535033d7-1e5c-4310-833f-874cffc264a4", "sighting_of_ref": "indicator--135f45ee-3052-4499-9809-5ef5c92541f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bacfe4-d4c8-440e-9401-64e3d6c6ce99", "sighting_of_ref": "indicator--179a3488-2446-4491-bab3-308a5e0609ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3174a6-8e39-4c5c-aae2-6382799e2391", "sighting_of_ref": "indicator--179a3488-2446-4491-bab3-308a5e0609ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85bc8e5-5367-4247-8700-4683c86aa2eb", "sighting_of_ref": "indicator--3875398f-5b55-44ab-86ce-91e3f2ad7e6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed5a8ba-e630-4252-a729-7fc3b7830248", "sighting_of_ref": "indicator--674b51a5-a767-4da1-a2e0-db6889ac9ed7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea0f487-488e-47cc-b0a4-d82a03c13da5", "sighting_of_ref": "indicator--f579532c-439f-4112-9eea-e1cd1e5d5548", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b329b70-ef39-442c-87d7-55fccfd0d38e", "sighting_of_ref": "indicator--7a03656f-2361-4cb1-9291-e4af8c70e4ad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8a75ac-6ee3-43f0-8449-406a283384a6", "sighting_of_ref": "indicator--5564caa1-1a0b-46bc-88dd-4a1f6e37d3af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda10987-e1c1-457d-83bd-28eac9e99e6d", "sighting_of_ref": "indicator--90f2ae3e-cee1-40c1-b77d-9d1c658fae4c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641625e7-9542-44da-b259-62c6f304248d", "sighting_of_ref": "indicator--e312034f-8876-4091-9635-da1c2fd85cfc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497f37de-3654-4884-a1b7-87e7e05b6a5e", "sighting_of_ref": "indicator--e5c53faf-fdce-4759-81da-a60b978486f5", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8488c1bf-103d-427c-adf6-15def07b8389", "sighting_of_ref": "indicator--76f64ccf-1b59-49a5-8613-b8bbade14b20", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7098b42-0548-4706-9342-a0cff67ad94e", "sighting_of_ref": "indicator--9b120a41-3302-4e4c-9119-712ce8157ff7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1354ccbe-b5a8-4356-af98-2e518fffe4ce", "sighting_of_ref": "indicator--933c9242-c676-483a-ab4f-85765ae9864f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2147aca5-cad3-4597-a78d-c8b3644943fb", "sighting_of_ref": "indicator--6238fa75-22d1-4746-ad08-ccd3a4677120", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939ee549-00e4-45d2-b1ec-b52ecd1ff4a4", "sighting_of_ref": "indicator--116ad9c5-7161-40f5-aba5-258e9e24b5d7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635400b5-ce78-451f-8b10-3ca730adff20", "sighting_of_ref": "indicator--06dbf132-feb0-4a48-a359-bed06c6f07ce", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c21cd02-d93d-48a4-9b3f-42b12b91e46a", "sighting_of_ref": "indicator--64b08050-8d49-4b6c-8db7-258ae76a0181", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845297cc-f9b3-4104-84a0-e72c69c57118", "sighting_of_ref": "indicator--d2e90fe7-b597-409e-aa89-9d7af7e6512a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb107ca4-0b34-4909-aa71-eb7892652dbe", "sighting_of_ref": "indicator--d2e90fe7-b597-409e-aa89-9d7af7e6512a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab877cb-5780-4ae3-8d23-85ce881e1fd4", "sighting_of_ref": "indicator--278f0224-c494-4892-bf12-819bbd8c2879", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7645905-d732-4ce8-ada7-e0e1e55785d8", "sighting_of_ref": "indicator--278f0224-c494-4892-bf12-819bbd8c2879", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3b433a-85fe-4e6f-bbe5-0f267ff07ff1", "sighting_of_ref": "indicator--f7e69307-0c0e-4584-8ba7-4154a72c2969", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aa9a79-be39-453b-b3da-cc57dceefb5b", "sighting_of_ref": "indicator--f7e69307-0c0e-4584-8ba7-4154a72c2969", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbad491a-d5d9-435a-bb87-ae30e481f9bf", "sighting_of_ref": "indicator--c29dc309-7f83-4c63-af3f-1e56f8c8aab9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3492870a-f853-4858-bd35-ad4db8c797e5", "sighting_of_ref": "indicator--1c29b845-7e9d-4bb9-b377-938f48f65777", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5deb8f87-894b-4912-956d-2ce46e2ce803", "sighting_of_ref": "indicator--1c29b845-7e9d-4bb9-b377-938f48f65777", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bf962c-e770-4722-ad26-bfe4ad50da56", "sighting_of_ref": "indicator--a9dfee61-07c5-41c4-9e2d-f91fb7c5e209", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f8b9eb-a29a-4a08-8945-d1a4c06553c5", "sighting_of_ref": "indicator--5be91fe9-fa9e-49af-8058-5a0211f2ec50", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cd2135-b250-416c-8383-6317582f2c60", "sighting_of_ref": "indicator--bc6e0dd8-0141-4f4a-b980-b03ed5cf402f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494eedff-5ea3-4fc0-a732-6a0fe5f16696", "sighting_of_ref": "indicator--02482fb3-8f77-498f-bf10-55ec93c18846", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bf6a0c-db2f-47d8-a0b2-50b9bfb83da9", "sighting_of_ref": "indicator--abb2f8f7-d7a0-4354-bdb8-d6dd5514ce03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9295a699-f9b3-40aa-9812-dd2bb241fa17", "sighting_of_ref": "indicator--766664c0-5061-441f-9385-d17167e120cf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124590dc-0e87-4f28-9281-5f8569e43949", "sighting_of_ref": "indicator--c0d55f33-174f-487d-96ff-5edf0e0d8667", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24a0419-e8c4-4ab5-bd42-3cf30adf10ae", "sighting_of_ref": "indicator--35b8f628-b79f-408d-9e2d-0e1ec98bd146", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee5e3cd-0ce7-444c-a9df-cf672e58ee18", "sighting_of_ref": "indicator--a4bb4b00-181a-478e-8a30-e6d148214257", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d19967-3b6f-4745-ba0f-6cca72ee7856", "sighting_of_ref": "indicator--ef693e2e-2c33-488e-b5b8-89ef0d628346", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8fc321-e337-44f7-b1df-9b7d7b2a8e61", "sighting_of_ref": "indicator--ef693e2e-2c33-488e-b5b8-89ef0d628346", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b72953-df0d-4dc8-87e7-d6bc84efc999", "sighting_of_ref": "indicator--74a1f40d-095e-4eec-9237-e4ed069f50e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28eca70d-9a10-4c78-b58d-e99751efe674", "sighting_of_ref": "indicator--b86b2526-b9d0-4bb8-b829-8076151dffba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fe925f-b35c-4bdc-b0f5-722e57be293e", "sighting_of_ref": "indicator--dde78fc6-b8a2-4933-bb8a-af311db9cc34", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27686796-668d-4b31-bcf8-4a02ecb2f6d4", "sighting_of_ref": "indicator--7c203b79-aeb0-4704-8d5d-f5ac7f6f1989", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560179df-4893-47cc-aa0a-c533ae0c0ae5", "sighting_of_ref": "indicator--add92407-df95-4d0d-bafe-68bb9b76e0f7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3741ee7e-5a97-4cb1-a446-89c14d525e6b", "sighting_of_ref": "indicator--cd770c05-8c95-4af9-8e06-2be30c010aef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f09ade9-4b88-4d58-9030-fe4be7469fd7", "sighting_of_ref": "indicator--88734931-6ef3-4db5-81b7-ff2c51111ae4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7341aa0-c060-4f80-bdef-1d98a3750400", "sighting_of_ref": "indicator--69835e4a-cc2c-48d3-b85c-94099be2db9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1719e338-83ff-4825-b7cc-4dbaf0becd62", "sighting_of_ref": "indicator--5c82dad8-1296-4894-b486-bf8cf540acae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4735039-8a7d-4e90-9e99-ff5ddfeec04d", "sighting_of_ref": "indicator--542431f7-e96f-488d-b334-0f73946214cf", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6b9178-2e83-4eb6-ba77-f387fecca8d1", "sighting_of_ref": "indicator--b260dbae-40ac-44e2-8b30-9916b47189b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa84feb-9187-4b94-9262-9c3bc2a441be", "sighting_of_ref": "indicator--a459ec68-adbd-4921-b32b-8a86252a03b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818a5b3f-0146-4de2-9d3d-30138379a850", "sighting_of_ref": "indicator--a459ec68-adbd-4921-b32b-8a86252a03b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434942da-60c0-4aef-a86f-4c0762334789", "sighting_of_ref": "indicator--fc50d121-ee9a-443d-8d82-05db4546e66f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69963847-8b64-4c96-b9aa-589ef0436868", "sighting_of_ref": "indicator--102fd1b5-0b6d-4be5-9cbd-6117fded92e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d541313-9920-4cb3-bc85-506ea06cd220", "sighting_of_ref": "indicator--102fd1b5-0b6d-4be5-9cbd-6117fded92e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea83660b-5575-4bc8-ab04-4974afab1972", "sighting_of_ref": "indicator--6809bce8-527c-4ac7-b925-75f01bf46f92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f5ce56-e96b-4b80-9db5-4a9f61aebff7", "sighting_of_ref": "indicator--6809bce8-527c-4ac7-b925-75f01bf46f92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22e4944-c613-4fee-ba09-2665c9338b5d", "sighting_of_ref": "indicator--6f9c010a-16ff-478b-b8e8-556b1221f51b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f178050-3573-45b9-95ef-c41109331864", "sighting_of_ref": "indicator--d03a751b-d9ce-4126-90a5-36dcfe3dcfb6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17747da-47cd-4616-a441-93d082eee0d9", "sighting_of_ref": "indicator--d03a751b-d9ce-4126-90a5-36dcfe3dcfb6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d420e8d9-75ef-48d8-bb09-6b9e5241156b", "sighting_of_ref": "indicator--1d0ca0be-3023-4c97-aac7-127e06baee1b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a2808c-51fb-49dc-ba9d-d094b3fddfe4", "sighting_of_ref": "indicator--1d0ca0be-3023-4c97-aac7-127e06baee1b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad6b443-32ff-4cf4-88cf-6d5266e2cffd", "sighting_of_ref": "indicator--7643f5c6-901b-45e4-897b-352c3b969854", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8e8a7b-c3b4-4b46-b8c5-6a5b15e58929", "sighting_of_ref": "indicator--cefa5f08-a47c-43aa-bdd4-caa1060043b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb461716-711d-4433-a5b5-a0b28aeeeebd", "sighting_of_ref": "indicator--2500d4e2-6be9-4a51-b309-f7602a6ae42f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1147d4-1c03-44f6-aef9-8c11d7b5709a", "sighting_of_ref": "indicator--024c81ff-7271-4eb5-bdbf-22341a1107c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d12db30-1c3a-4f01-a8ed-ab147e098853", "sighting_of_ref": "indicator--124b0a9c-82a7-48fa-993b-3ef88699ec9d", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85c3782-c1f6-459b-b6b7-04f4ef511133", "sighting_of_ref": "indicator--21673897-03b0-4e67-abee-c1d9439f8030", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acef263d-e6b6-425f-85b3-bb7ea3cd3750", "sighting_of_ref": "indicator--0cfaecf6-6952-4aed-a115-8f927ff17ccc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ccd779-52c8-4230-92ca-57066fe679b6", "sighting_of_ref": "indicator--933cc0fb-27b2-4fb8-b6aa-72c98cc0576e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c295ac5-926d-425c-9d77-8b6213529c93", "sighting_of_ref": "indicator--9a219fa1-f5e7-4404-aca4-cdac8c36391d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df658e4c-135b-4c17-b9b6-56ab1bb813c0", "sighting_of_ref": "indicator--ff598f76-86a5-4dc2-b22d-21465db6c76c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9c9248-7ab6-40b6-a600-a53683b816e3", "sighting_of_ref": "indicator--1543e9f7-e878-4593-bde3-250972716e0e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af010505-2be5-48ae-830e-985e0c5cdc73", "sighting_of_ref": "indicator--b0ed98ef-fdd7-4fb7-bb27-5536e5eb9300", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb5b2c1-5d04-446a-89de-55498fddca83", "sighting_of_ref": "indicator--40b75967-a48e-4366-9f39-8c6cabf2d002", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdc998a-b982-4f9d-b6b8-12f64ffe5413", "sighting_of_ref": "indicator--40b75967-a48e-4366-9f39-8c6cabf2d002", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d95710-6e75-4dae-8746-11f42ccaa020", "sighting_of_ref": "indicator--5c2245a6-ea2a-4d53-8d3d-1a5bb281c73b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad7adfb-e28d-4ecc-bc6b-f5d06be3a81c", "sighting_of_ref": "indicator--44f5f2d2-d67e-409a-a268-b51ab80b810f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a827e49-39b2-4640-9603-4e6eb1814895", "sighting_of_ref": "indicator--44f5f2d2-d67e-409a-a268-b51ab80b810f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f29904-f296-41f2-aa41-15b188a3934f", "sighting_of_ref": "indicator--44f5f2d2-d67e-409a-a268-b51ab80b810f", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf41982d-f92d-4aae-b0b9-6eb39ce32bb7", "sighting_of_ref": "indicator--f822a207-afd3-495a-8545-1ee987d8f304", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d4b0c9-dd2f-48e7-a66f-e96be919ca8d", "sighting_of_ref": "indicator--ca7558ce-5ca1-4466-b5e3-c500ee21b4e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6948222-d89a-4c16-8b2e-48efddf1ad54", "sighting_of_ref": "indicator--9576aa8c-d914-4599-89ab-8bb1a1dcfa7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edddba1-8121-4b1e-b5fe-7f89e112038a", "sighting_of_ref": "indicator--9576aa8c-d914-4599-89ab-8bb1a1dcfa7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f426e20a-e1a3-4d9e-ba1f-8b808d7f374c", "sighting_of_ref": "indicator--5b56be93-159c-44fe-b722-db4a2cd80117", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0ce16a-cb63-4a98-bac4-77b1a95229e7", "sighting_of_ref": "indicator--2ac2074d-ba8f-4f3f-baf9-0440ae941590", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfadd8c-2c7f-469c-8e3a-4cad202d87e6", "sighting_of_ref": "indicator--7f5957b1-d25a-4278-89d8-c4729accb48e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79290858-5c09-46f2-849b-e85d0f56a6c6", "sighting_of_ref": "indicator--a7f8132b-beb7-43c7-a7b5-33367426fd64", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ba5da8-9707-4f40-a873-d7b49434fb49", "sighting_of_ref": "indicator--ca35ae5f-c83d-4440-be65-b33602e9df5b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec254c28-938d-437d-b55b-2e09db787fa9", "sighting_of_ref": "indicator--f3facf68-244d-4a69-842c-96433e53162e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0095cfed-cb45-4e0c-8c38-658b1f33b995", "sighting_of_ref": "indicator--81188b8c-2485-4f6e-8638-97c8ab10d70c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f816bfe-9c93-4260-b682-36151260ee6d", "sighting_of_ref": "indicator--38fc8c98-dec6-45a1-b1f8-97f879ddfef2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bade2a-47aa-4fdf-8448-6bfdef7ecafc", "sighting_of_ref": "indicator--ddf68029-0e61-4e55-bb91-b8dae9c61427", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f285a3e1-3ca2-48f7-91d8-5f99eaf7c3a8", "sighting_of_ref": "indicator--34883b1d-3952-4b03-8501-43872335cfb2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e837f3a8-5170-4c6b-a099-a4ca6fa13fd6", "sighting_of_ref": "indicator--26c42da1-ef95-4415-ada7-c8b7cf75edf2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8811d86-d6b7-4ec0-9fbe-772c7b507d65", "sighting_of_ref": "indicator--26f32825-1aa1-4103-91fa-9ef2872b6bbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6003250-346d-4976-bb1b-c63e70304e08", "sighting_of_ref": "indicator--3a3ce22a-69fd-453a-823f-b9c46aaabec4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e664b3c4-24e1-4227-953c-a765663e08f0", "sighting_of_ref": "indicator--541cbc75-d5d0-4dfc-a2d6-36cc12488ef1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e23099b-32ad-4f49-abe0-cf9d166198bf", "sighting_of_ref": "indicator--9087673d-2d40-44d0-a642-3ff63f3af7ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4365d2-33fe-40ab-ae22-aa64c72ed39e", "sighting_of_ref": "indicator--5e6041ae-a814-49c5-a9c2-976b578238f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dac4b04-4bfa-4e5a-b321-83dd57150bb5", "sighting_of_ref": "indicator--76d0bcb5-5af7-42de-af92-01e74a81a4e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d943e075-70df-4825-b719-b1d9a5a50c60", "sighting_of_ref": "indicator--9bfefff7-a1b2-42a4-b6c6-37ddf5ea8c8d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2e6d74-d814-4573-9dca-44681fce4ccf", "sighting_of_ref": "indicator--58bd8475-c7c5-4d60-b13e-18bb3b0d2084", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c91118-6bfc-4278-992f-27d7f74bef10", "sighting_of_ref": "indicator--95f9112f-1b05-43e4-9fc6-ea03a40fb1a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96995c07-784d-4329-9d32-6e318488ffee", "sighting_of_ref": "indicator--26a0b3ef-c791-4489-9713-1f5cf7f6c108", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98412e81-5d8a-4721-95a3-7311f2355cde", "sighting_of_ref": "indicator--b5ab15e9-b8f3-413c-974a-d1e07896ac20", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a0fecd-6652-4d40-9aeb-648339e7ba56", "sighting_of_ref": "indicator--66391f76-3bef-40fd-b272-f8e8e51d66c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11243be9-6da1-449b-af8a-2f5c0f033d9b", "sighting_of_ref": "indicator--d1d4856c-a195-40b8-a8f0-b37d5c093129", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69f0962-c3c9-4e05-aeca-78809745753e", "sighting_of_ref": "indicator--39852971-a4c6-443c-973c-c8538d159b6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b0d6d5-6553-4dbc-9345-63094007e7f9", "sighting_of_ref": "indicator--5f7574c4-7dc1-471c-9637-44473792ce3b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0e1227-fa10-413c-83cd-5aaebc55e61a", "sighting_of_ref": "indicator--276d7420-e9ff-4bb9-90a5-50ed8e7fb1cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d9e1da-d621-44eb-a823-3662a4011d07", "sighting_of_ref": "indicator--1c205aa9-d0a2-4e63-9551-47433e895779", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b27c186-535d-4c2e-84c4-ce8f55fe12ac", "sighting_of_ref": "indicator--f9dbd81e-26ab-4fc2-b37f-a4f014be1e7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82345c0f-cd18-4ee0-8b46-2d60c32ec980", "sighting_of_ref": "indicator--a09fe1c7-7dbf-429c-8568-7d0a6517333e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7740774-4d08-4b10-b784-dde5fd1f41b6", "sighting_of_ref": "indicator--2869f751-f909-4a72-a7f3-8ba72281ebc8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f014279b-54f1-4bbe-91a1-2c0a552ce285", "sighting_of_ref": "indicator--844f78c0-c84a-47b2-a752-0ae59de94e1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a35a5e-0731-459c-9067-ba76418c8ea7", "sighting_of_ref": "indicator--844f78c0-c84a-47b2-a752-0ae59de94e1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45937d90-3edc-4357-b36d-4d3fa5c142e7", "sighting_of_ref": "indicator--05f3847d-2097-4810-8492-d95380fddcfe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ddb92e-b48c-4985-b17b-7dd7f0554ba2", "sighting_of_ref": "indicator--f0d7eaeb-7bba-4b2d-b085-3fbae2d5490f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb80e429-ef44-4d65-b792-0af3da5192f1", "sighting_of_ref": "indicator--d54895ff-4fbf-4247-80c5-8c2a507eaecd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74e6fb1-013a-410c-9037-0c74adf8c39e", "sighting_of_ref": "indicator--351f450c-4c09-49cb-a3cd-bda037088864", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c4bd5c-887d-4a2b-b0e7-9f0a0df06f40", "sighting_of_ref": "indicator--ee87c704-7323-474c-8c81-77bd43d6aeb8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca012597-ce36-4bd3-9b85-7ee7d7fb0955", "sighting_of_ref": "indicator--c3f6f7e2-75c1-418e-ae92-a8c823f0f03b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79a3296-b38f-4c32-b13b-272f4a9bcb95", "sighting_of_ref": "indicator--8e889f3e-a947-43a3-9aea-6d2dc60a41cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf07d6b-7f14-40bc-92df-0b070b3febfd", "sighting_of_ref": "indicator--1316f709-3ba3-4e8d-818b-c0ebdaf586ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a68002a-19cb-471a-aacb-cc996c8fea1f", "sighting_of_ref": "indicator--a35dd92b-eddc-418c-84ef-7943a26c8eb4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdee0ce-dcad-4b7b-b3e4-16d1bf39bd07", "sighting_of_ref": "indicator--e2dfca7a-5192-47f2-a054-87db5036986f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb379c30-14af-4bbb-ab93-71af661c4575", "sighting_of_ref": "indicator--52deeab6-03fb-4a47-bfae-5fcc71c56365", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589ca7fa-3190-4fe1-9a68-798011b0ecff", "sighting_of_ref": "indicator--0df1d4f0-e47b-4f1f-a07c-9eeefd96bc95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975fb24c-3195-4eb4-9ec9-957e37ce2b92", "sighting_of_ref": "indicator--fe483d2d-82a2-4d69-a38d-4a22ddafcc62", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bb4f36-ba7b-4771-8681-4f885e331834", "sighting_of_ref": "indicator--1669ef00-2b6b-4f34-a8f9-14e9bb3d13df", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850e4f16-2716-43ee-911e-07ba7fc09c17", "sighting_of_ref": "indicator--757cb709-71fa-4f88-a189-450a5cf27bd1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a4510f-8306-406c-87a9-ef2ab100c784", "sighting_of_ref": "indicator--1715120e-6853-4c72-9ba3-486d1ff0d09a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e83b8f-2f52-4980-a5f2-b085a8684d91", "sighting_of_ref": "indicator--1715120e-6853-4c72-9ba3-486d1ff0d09a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e3bf13-0f18-43df-83b1-f2a6bae791e6", "sighting_of_ref": "indicator--c151bee7-885c-4f0d-98b7-e283974b686d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7ebff4-626f-4565-8b51-15b810863438", "sighting_of_ref": "indicator--b62fae93-2546-417b-8b22-d007c4dc422f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b933cc85-b7de-43ba-aca7-ad48e29fe9a3", "sighting_of_ref": "indicator--8f373b87-223f-4902-88db-140a88d13237", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5d538e-470d-4b68-8cd2-c179b2b46234", "sighting_of_ref": "indicator--fcbe12d6-d5a9-42b4-b03c-926bd56f613e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3350481-aba5-444f-a5e8-3af406b34842", "sighting_of_ref": "indicator--22f76e64-e153-493b-b874-2d90d8d53989", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0992925d-257e-4efb-a357-302477e52a26", "sighting_of_ref": "indicator--b5b306b2-162d-4300-b79d-4490dd53701f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7804e53f-5c81-4f54-a04f-1d9e67c0cb8e", "sighting_of_ref": "indicator--61e87f41-8c32-4acf-8850-0f9aeddef6eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6bbdde-8acd-4a0c-bb47-f9a13667e114", "sighting_of_ref": "indicator--4661a3fb-f078-4490-8639-b2afbbc993db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd13c49-4b73-43c1-b567-baf35aeab3cd", "sighting_of_ref": "indicator--4ef88c65-a437-4f13-891c-8d6ef14f2bcd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c511ca8-442a-497d-9995-7450de47d716", "sighting_of_ref": "indicator--8dae8d5b-a11f-4651-87ed-c4c5f9415a1b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711d0fe8-1dfb-4ec0-af5e-37672167198c", "sighting_of_ref": "indicator--b950bc76-d33d-49ed-bee4-94dab4010716", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9817653-48cd-455d-b53c-63e9c4f7f48b", "sighting_of_ref": "indicator--1ca0c58f-fc55-43e1-a45a-6a0fa0e9c356", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d35d76c-1cbc-44ca-9413-dc3502660d28", "sighting_of_ref": "indicator--6ef5a313-cbbf-460a-a8a8-1333c4d8966c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a22bfb-b08c-4bd6-9490-c5e49ecee5c2", "sighting_of_ref": "indicator--2c30f0f7-5672-434e-b309-75e8549ddcee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a867b1e7-a839-470f-9b04-ed7039b2c097", "sighting_of_ref": "indicator--0c313f65-62ac-40f3-bf02-3e10311a7fc7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c7efb0-2114-4f8c-8ce2-61503b70ad5a", "sighting_of_ref": "indicator--65b4d7c9-edd3-492c-a104-f69d6122f652", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553af235-fcca-408a-a790-5089a89a6f82", "sighting_of_ref": "indicator--79f187c1-f46e-4528-ae9b-b611d7e413ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc42478-20d6-45f3-96c9-b05293f02ab6", "sighting_of_ref": "indicator--3f21684d-b48d-42c1-a3b6-136ddb776eb4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1e0509-208a-4c0d-b6d7-67e33c9dd9f1", "sighting_of_ref": "indicator--658c705d-00b8-489c-bbc7-c88f53c43f48", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc716874-c24f-403c-8a61-393deca383e6", "sighting_of_ref": "indicator--e42b7257-1b6b-43e4-957d-2273f755ba42", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c33ca1-7ecf-4d61-a4df-89afd78cad04", "sighting_of_ref": "indicator--c6f0794b-fe2a-402e-aeb7-2c6d0234f16d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad9d906-67f8-459e-b075-142daeca12a8", "sighting_of_ref": "indicator--a802ca62-f362-461d-b2cf-d5053d102922", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96cfc4a-3882-4915-bfa0-81ee167d3090", "sighting_of_ref": "indicator--d5cfd161-5e2e-4be9-8bdd-0ceb97f19e01", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1e1f1d-7e3f-4943-8b86-5791fa830f3f", "sighting_of_ref": "indicator--8ec6f41d-6add-4e86-9435-ed3897e85967", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb39d6cc-670f-4aa4-801c-da11f7509752", "sighting_of_ref": "indicator--2cb865e1-a16c-4834-93d6-6e330abcb0d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2b41ac-2f91-436e-8593-cdecf45e54fe", "sighting_of_ref": "indicator--f928aaf7-73e7-4218-af76-c7d0b77ce33c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99782b1-274d-4101-868e-c7b376f45ebd", "sighting_of_ref": "indicator--21c7e231-9a16-47b1-a9f1-31f79adede79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c07aae-0a38-4158-844a-3b1a11109e8a", "sighting_of_ref": "indicator--4503c5f8-8c3f-4088-bdeb-93c78d551378", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4eacde-fcef-4996-85fa-639967c3dd31", "sighting_of_ref": "indicator--34a55e9b-3691-4194-8261-ac1b4b947775", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a768f46c-43e2-42b1-8e34-6ecef183a68c", "sighting_of_ref": "indicator--ddd916a0-ea89-4b26-a31c-6b1b72910513", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3f169b-9462-430c-95f1-8aaeb7177f9a", "sighting_of_ref": "indicator--b8778e4b-2a2b-4dde-abf1-0019dab018c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d598e5c2-04ac-4ee8-8fff-fd52048f9b2f", "sighting_of_ref": "indicator--7152425a-c56d-4032-ad98-107051c0996b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a2f659-35ef-4183-9b71-9a6917c5c3a5", "sighting_of_ref": "indicator--828c8e30-f161-40f2-9fec-080eab5cd34e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4d745f-9768-4099-b823-b067095a10a7", "sighting_of_ref": "indicator--e1223947-1730-4f05-8f8c-ba397bfa7623", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9702fd60-234b-441b-a79c-08290ecd5d9b", "sighting_of_ref": "indicator--08e6944f-5e8b-4170-aecb-674d6e0b4c61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632e5eec-6b38-4615-8c35-0343ef15e581", "sighting_of_ref": "indicator--c076283f-3cc2-415d-b3c6-ef9844f8700e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbff6acc-963b-4d7e-8486-2d6696fbb448", "sighting_of_ref": "indicator--68b2bb86-9084-47db-a3ad-ad693f6be9eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2401756-f8c1-4a6f-8429-5c986ab585d5", "sighting_of_ref": "indicator--63c7c893-afd9-4c57-8316-62cb59fcac43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c31de6-b151-434c-992b-71725e8590a7", "sighting_of_ref": "indicator--69560675-2c48-4a8d-8ddd-23f871ce132a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1199c25-092a-4756-956f-74712c97a41d", "sighting_of_ref": "indicator--fd9fba48-2dca-413e-b9cf-9545ea3fd80c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098499ab-c2d2-4ca6-a251-1e295edc8548", "sighting_of_ref": "indicator--33592366-8ff0-4949-acef-677fee65c990", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd71d663-0c95-4420-85c9-3af943424a79", "sighting_of_ref": "indicator--3644eb0f-a33a-4b18-9f9a-0b3449d8f402", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1536936-b555-4445-9b8d-ceb80d1a6fd9", "sighting_of_ref": "indicator--7f70ad34-8673-455a-8f07-445597337fe8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74657d13-de96-4ceb-9ee5-a6c93a274278", "sighting_of_ref": "indicator--1c13f106-5a37-4223-9127-2550dba81f68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a5b168-1aee-44d3-b69f-1e321a1f17ac", "sighting_of_ref": "indicator--b9155fac-01ec-430b-ab98-85491d121c38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720c5c2b-d596-44c2-ab1b-9974a4aea7db", "sighting_of_ref": "indicator--d72197b2-f8d8-4eb8-9c1c-834dea8b9b03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a82313-bfc6-4ea6-a87d-44887c8cd3ed", "sighting_of_ref": "indicator--13c7e7fc-642f-4ed2-87bc-4739b075681e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62542fdd-3b22-4c0a-b32f-55fe507ab4f7", "sighting_of_ref": "indicator--d2160a9b-8f24-4f5e-902c-da6c551a880b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645adb8a-390b-4e65-be10-f580c33bbb2d", "sighting_of_ref": "indicator--e1bb4e36-fab8-4d46-bc23-f2d137381675", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7431a0-faa0-4058-aca6-40145b414edb", "sighting_of_ref": "indicator--2908199c-f871-426d-9286-081bc45cacb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14b56d2-ab74-41d4-a4c5-5265b698ba8d", "sighting_of_ref": "indicator--c56b1f57-811c-464e-b597-0bcf052e8955", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5014d6-2f11-46c8-a055-ea05d4887929", "sighting_of_ref": "indicator--36dc903f-582c-4fa0-9936-c94ea20f2845", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14b0fcb-3a3a-4f01-be47-fddb5953df4d", "sighting_of_ref": "indicator--67044120-6a51-4135-b72a-b8b1913e2be7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20016b31-9e5e-44da-8973-e10270df930d", "sighting_of_ref": "indicator--2438b35a-c17c-41c4-9363-1ad3bd62fa89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfabcaa9-4252-49f9-a43b-5dbc471af94c", "sighting_of_ref": "indicator--fa497268-cfae-4208-bda6-bb73c84a8e0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986e3b19-188f-441f-941c-96eb5f5a6b4f", "sighting_of_ref": "indicator--ecc13f2c-d79c-4ff7-a836-a09afb95a29c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06631bcb-4aae-43dc-9853-cb1bbc444514", "sighting_of_ref": "indicator--85f734f9-5870-4604-97fb-b543b592e710", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17db7dc-aaf5-45e9-8ba6-ff85fc7bce81", "sighting_of_ref": "indicator--b47d0078-db34-48f8-80a4-969ac4ca01fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8690c3b6-9573-4c26-b944-fb4f6c5f9ddd", "sighting_of_ref": "indicator--6b30b4ce-83fc-44f3-a770-32bbff2fc402", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34904fd-9e70-42f8-ad1e-41eb283ecce3", "sighting_of_ref": "indicator--058ba301-e4ad-43ab-b619-e61b4d1aaa61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdae0b64-b3a0-423b-b393-fdba17aa8e75", "sighting_of_ref": "indicator--7de330cc-8e7c-4dc2-8ad4-5382074958a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be838d8-f5be-49ce-ad66-d2e9595f505c", "sighting_of_ref": "indicator--2b97132b-db0b-4131-9bd4-c7fdc82fd94b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e638c4f-abe0-479a-8e9a-8884733d3d17", "sighting_of_ref": "indicator--ded58156-7724-4c4f-82f7-9919a1fa33da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4a4093-4616-40bc-a75f-5ef20ba274e2", "sighting_of_ref": "indicator--3b9af41f-5255-4495-8bbd-588ce33e93f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3954acf-a8b6-4564-bf24-59457bfd835c", "sighting_of_ref": "indicator--08367a42-0181-4543-a094-ba54aa259be7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a07fac0-5797-403a-ad72-5fc475f4cc91", "sighting_of_ref": "indicator--f0dfe8bd-a230-4510-a54e-59d2b6a4465c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387a4651-60fc-459a-b942-d4425af2e59d", "sighting_of_ref": "indicator--dcc30b90-ca3b-4acb-89df-700ab65f5fd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c474ff1b-ed61-4944-9361-001711d2792d", "sighting_of_ref": "indicator--d7cedd3d-48a7-410e-8b23-bc30b304006e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8987e0e-ca3f-4bc7-956d-a0654abda1c5", "sighting_of_ref": "indicator--bbac9a2d-6811-43d7-b8b8-d741c7510f9a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e51c9ec-4a3c-4d2c-b3a6-73234894625c", "sighting_of_ref": "indicator--d8f4a01b-686b-4586-9d20-30870f4fa84d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd90787-5749-4393-a97a-cb140e276d81", "sighting_of_ref": "indicator--5538e249-3644-4036-8e7e-d2af77bb3c6f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2840cc81-a347-4eac-a370-fedeb15fe1d5", "sighting_of_ref": "indicator--d98c4f0c-8dc2-4ad3-ac1a-0da8655fe198", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb1ccb0-bf23-42b7-86ef-de7f3710b14f", "sighting_of_ref": "indicator--ee85c168-fb08-4b37-8a2f-c062a4d73cae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdeb809-d59d-4c26-a37a-9904088f8239", "sighting_of_ref": "indicator--11e5dc36-3bb5-4946-8c7d-7ead1c529993", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee450920-1575-4b77-9fa9-b40c0f7e1023", "sighting_of_ref": "indicator--941033aa-64d9-4939-bafa-6a304f78cb75", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8b1c9b-92ca-4704-8196-320ecef321d7", "sighting_of_ref": "indicator--48b361f0-395c-4728-863f-cc2d854d1975", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a2cf2d-3f00-4d35-9dd8-1534499d018b", "sighting_of_ref": "indicator--43e5215b-9079-4ff5-b3bd-abf8f241bdde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cd9bce-1cea-4298-bd42-0b45b27e0e24", "sighting_of_ref": "indicator--d450d979-c5fe-4f61-a9b3-838163bb03be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f89490-08c9-46f4-b3d8-69ea7c3dd37a", "sighting_of_ref": "indicator--3b841074-41fd-4949-aa1e-52202d2370f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f67c95-941c-40f0-aaad-e1a973ac1931", "sighting_of_ref": "indicator--09620da3-f99a-49fc-bbab-c0c7bdf02366", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fd0d95-483b-449a-b8d6-b20334a301e8", "sighting_of_ref": "indicator--7161c031-2819-4c09-b1ad-54c90e60c9fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc009a65-95bd-4e85-9b22-386adbfa7868", "sighting_of_ref": "indicator--9d61b941-1658-4258-b2e5-f91e7e675e53", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9306e71-6a2f-47e0-a493-bda98409bd19", "sighting_of_ref": "indicator--b5633af5-fb3f-4d10-b10b-3167018f0e0d", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3850c7f2-064e-4f61-b692-7374716f39bf", "sighting_of_ref": "indicator--e3513bce-6959-44f7-8ee6-4a0034e0f1ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff8300d-f86d-4010-b266-7624788d1719", "sighting_of_ref": "indicator--2102c8b7-eeab-4204-bbb9-36a8daf48e72", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743d9aa8-65ec-4ae5-8e57-c3b88352cc67", "sighting_of_ref": "indicator--32615199-3928-4f2b-8da3-0c9b22d7fa82", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c70625-b92d-4487-9b7b-0d61ee5ff2b2", "sighting_of_ref": "indicator--b823cc61-312b-41a8-80f2-4a635d486dae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f5fcb1-7349-40d7-9304-0f396ea331ef", "sighting_of_ref": "indicator--9a90a080-bac2-4a5d-9b53-8bfb4493beb1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63b66d8-b074-4184-b023-5a84ff47644d", "sighting_of_ref": "indicator--4912bcf8-d7f7-407d-bf50-e1952b5fe0ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d4df67-f215-4ace-b161-ff125d5bd0e9", "sighting_of_ref": "indicator--bf251f3c-bbf3-4f29-9b37-942881e4ccf1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e969cae-6a94-4b28-a835-fb637f29f6bb", "sighting_of_ref": "indicator--e782a782-bfcc-472d-8460-984212ad4501", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6def45-2e06-4597-a780-c1153eb0efb9", "sighting_of_ref": "indicator--8d6c4721-0d63-4a90-8953-3de070452e3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4af43bc-c672-49f8-9a00-2b0cbfddd0a5", "sighting_of_ref": "indicator--9e74d815-eaa7-4904-adbd-3d9b61b02e00", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12bc764-ead4-422e-acd6-e9e591989778", "sighting_of_ref": "indicator--e7103753-d1ad-4855-9ca5-90fe95bf7ec9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f64ce2-a6ea-4075-80a8-16949db3e115", "sighting_of_ref": "indicator--2fdce478-f437-4a97-8937-f8822bf8cb2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25c531b-b35c-4821-930e-2df91bd71e41", "sighting_of_ref": "indicator--f4d8550d-6edf-4298-85a7-c71c1256c653", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f007fc17-a1ca-4f99-90b0-caf35588119b", "sighting_of_ref": "indicator--67fe0e50-8a75-4c10-8d5f-eb9654b4f7bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eff08b6-c633-4d83-9ca0-e6ff6980e741", "sighting_of_ref": "indicator--7fccfd68-d55f-4ca0-9819-4b247a9c315f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caebe25f-8810-433d-81c9-8ac39df31fcd", "sighting_of_ref": "indicator--f66003a4-2e1c-4788-a32f-0b67d4ea8ab2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140b1ec3-c5ab-4479-9610-4ff2e6c81154", "sighting_of_ref": "indicator--e7ae41bf-f92c-43a9-8c9d-a00dabb2c85b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467c29cc-ae7d-4883-a157-206bde1fd961", "sighting_of_ref": "indicator--570a0e08-4669-4ca1-bf8c-3147fe0c3f76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70fa6f4-87ae-46a4-914d-02b5e1d6d937", "sighting_of_ref": "indicator--6a181d8c-b523-43da-ab47-43ecb98295e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a49d60f-ca40-4dc7-ac94-8dde040d362e", "sighting_of_ref": "indicator--5208521f-6a1a-43c9-89a5-9c18e1352b10", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b01447-2c87-4095-8a1d-2231e568e697", "sighting_of_ref": "indicator--5208521f-6a1a-43c9-89a5-9c18e1352b10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c53476c-151b-4a66-a17a-a6541f4a9ef7", "sighting_of_ref": "indicator--cf2a0ed8-cec8-47e7-8f11-6c810e2b1e35", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9573c7d0-4d63-4590-ba06-5553f578f8e2", "sighting_of_ref": "indicator--7fdfbed5-d004-4a5c-98d4-7a31b9f9c56b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8020b1-8a4c-4811-ba42-d7bb05cb9ee1", "sighting_of_ref": "indicator--a0de760f-5fe7-4608-a076-620b861d12e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9d6c41-744e-479a-bcf5-c6984b5fdd50", "sighting_of_ref": "indicator--ca029683-973a-4dbd-a9b9-7bd4a7b739bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378cf0e9-c3c8-478a-a9d1-7927ecb8f492", "sighting_of_ref": "indicator--2c3b2f06-e4b9-4210-807c-a2a298812013", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3440f44c-2f87-4aa5-ab15-525342b07955", "sighting_of_ref": "indicator--4c886416-0384-46f2-8080-1b7e53b47681", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ab61f3-4c3b-438d-9c05-aa14c915e1da", "sighting_of_ref": "indicator--1f00095d-6097-44ba-b01a-f4d10a2741cf", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc4ecb8-1a7d-4453-a3d2-8842941e5c32", "sighting_of_ref": "indicator--940c0a85-cb5a-4e5d-9bd0-dc53df9c0397", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9ec4ff-1ab6-4e72-9806-bbc1a7328f10", "sighting_of_ref": "indicator--a401d485-d4f4-42c2-aaa0-f3a055ae6165", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a16cfba-a883-46e5-b83c-c1623c282918", "sighting_of_ref": "indicator--8c3ef623-c6fb-4f89-b4c1-dcffc9fe04d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d47e35-a35a-4013-8c0f-b2f67ec08878", "sighting_of_ref": "indicator--8b1df2d8-2c9b-4add-89d0-9857fd0aac15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b689bd07-21da-4721-b388-e144875bf9b1", "sighting_of_ref": "indicator--a90a1ade-a235-4b2d-95b5-f259ac9e7252", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6089e344-117f-4ab5-b96a-85397029513e", "sighting_of_ref": "indicator--ec069d7f-052f-46b7-9d20-29ff70f8dfb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9c873b-031f-4c37-a318-2eb7923c21a3", "sighting_of_ref": "indicator--b94bdf47-de21-4f1e-b2f0-d871e0e904fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77ba568-a2ee-4d13-a32c-a3ead07e9df6", "sighting_of_ref": "indicator--fa3610b2-c71c-401f-ba22-3880afab414c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac928ea-24e8-4cb0-926c-ef88ec7d723f", "sighting_of_ref": "indicator--f8b6a8e6-e7d2-4cc6-96b1-1e6f323a7129", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad284b6e-a792-4774-9cdd-06381c5aa037", "sighting_of_ref": "indicator--e29d616c-dd1b-4d97-9d72-62da8da4f05d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d686fc2-4aac-4c69-a59a-1b9e4c231323", "sighting_of_ref": "indicator--a05c09c0-a8fd-4f36-b231-75a724322752", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56367419-9f08-401b-9bcf-4531cd40eea8", "sighting_of_ref": "indicator--28bf69e5-06dd-4c4c-bc87-4393a7c5afcc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8c36a1-ff36-45a8-a488-30b4a0a43355", "sighting_of_ref": "indicator--de318a25-3567-4342-a254-dda034483032", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0adb27-c86b-41ae-b621-44b54a5c31a7", "sighting_of_ref": "indicator--be108bd1-31a3-4545-b530-813bdffa8965", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb16fca7-7219-48f6-8e58-dbb222642f5c", "sighting_of_ref": "indicator--df1635b5-d170-445c-878c-24babe8cc26f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac14622-0671-4bc0-a2f2-b98c36b7590f", "sighting_of_ref": "indicator--0c658ee3-6379-4235-a1f0-a5bc1fbdbaf2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146bb6cf-f0ac-480e-b332-f1588a0abd40", "sighting_of_ref": "indicator--16685bfb-efc3-4ccf-98eb-d4dbfa453def", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d16af1-9edf-4fc9-8838-3802acf41542", "sighting_of_ref": "indicator--52f51204-71e9-479e-b625-c8bcdb1cae92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb33b3f-ef95-42f3-9143-a9881ecb6d2a", "sighting_of_ref": "indicator--1beb23de-31d2-489d-940d-698403155862", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd9eba7-627a-431b-a5bc-266bae959c1c", "sighting_of_ref": "indicator--6b19a247-15fe-47c7-9741-b6401a48002e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abb8bbd-c285-415c-a23e-bea9df492d13", "sighting_of_ref": "indicator--6b19a247-15fe-47c7-9741-b6401a48002e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b381eb23-d9a1-4c21-acfc-91a8c0b6697f", "sighting_of_ref": "indicator--b1a0eb6b-9872-4cdb-95cc-a38fdabc2132", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7c02c9-c5c3-43eb-8f69-a5e220f93fb6", "sighting_of_ref": "indicator--a7dbf987-8827-4124-978d-2bd2ae2e49a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9cc3f42-cabb-4e73-b43b-89f8c581534c", "sighting_of_ref": "indicator--da2c5258-ceec-4cd3-bf38-cfbe4e2bc528", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e790d826-021e-4e13-bec9-ce363f94793b", "sighting_of_ref": "indicator--da2c5258-ceec-4cd3-bf38-cfbe4e2bc528", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dd1bea-8cbe-4ec1-aa47-f3fb74d1edf5", "sighting_of_ref": "indicator--2984c62d-6b0c-45f5-ae57-b7429e0dec23", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc20ae63-fc57-40a4-be8f-f029e85873b1", "sighting_of_ref": "indicator--9ce84d9f-1140-4580-9d02-833584280e48", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd20f23-7174-46be-887f-eb8b54cb671f", "sighting_of_ref": "indicator--4a8e02c4-7915-43ff-bb0a-4238a54e7bee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89eb468-3bab-41c1-92d4-c98f70254a9a", "sighting_of_ref": "indicator--4a8e02c4-7915-43ff-bb0a-4238a54e7bee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320551af-611c-4510-bc78-7cb78929019c", "sighting_of_ref": "indicator--b7369220-9516-4602-a08a-bb2e9066c26a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86daf287-cad7-4f62-a8fc-e51e7f7b6490", "sighting_of_ref": "indicator--b7369220-9516-4602-a08a-bb2e9066c26a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811e6cca-5e4a-4d37-ad92-d3f64c0e8a12", "sighting_of_ref": "indicator--3d5e407e-c24c-487b-8ebe-1dff8ea1694a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f25b615-0f60-4d8b-8f32-684e1df4e471", "sighting_of_ref": "indicator--3d5e407e-c24c-487b-8ebe-1dff8ea1694a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a461829-8b19-43bc-a4f4-98234b1742d1", "sighting_of_ref": "indicator--0cc1f547-893d-4926-a01a-a5dc593afc24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e36b467-0f62-4d2a-991c-14887e15cbc6", "sighting_of_ref": "indicator--87faec33-8614-4878-a449-6b1148f5f6ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ff8e33-c9c2-479d-87a1-e7796a4aef04", "sighting_of_ref": "indicator--1c4776d6-55a9-4e45-8a9e-33bf8837ebad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c031129f-51db-4e20-b625-a79925019e28", "sighting_of_ref": "indicator--7adb942a-43cd-4cf5-bfef-c57c84fc2ea8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f210c11f-d592-4636-8a4a-5693cef8db2e", "sighting_of_ref": "indicator--17cdb090-1769-4f29-bdac-141568a7b663", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddc209d-28a8-49e1-a102-e3a9f59c3a7c", "sighting_of_ref": "indicator--a06c4f92-2494-416b-b7dc-f4e516abda32", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d21dc63-0e52-483e-ad54-41b6f1ebb9eb", "sighting_of_ref": "indicator--3393f76c-aa91-463b-a17a-2b80661c9095", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09366b19-facd-4299-8f72-e9f5e8ed4f5d", "sighting_of_ref": "indicator--50681a44-1fc8-4be0-9ea5-4c9dbd7cb862", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a421c2-4572-4642-a221-88e287533d2c", "sighting_of_ref": "indicator--3ab347d7-f006-48bc-bdf8-31a4661d12b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5954cecc-4d7b-42e5-84a0-67ac4381b48e", "sighting_of_ref": "indicator--3ab347d7-f006-48bc-bdf8-31a4661d12b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58e1d12-2815-4092-b24f-ab61209ced73", "sighting_of_ref": "indicator--85391e1d-06cb-441b-8255-5cd3523f8418", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271db2f6-7c54-4023-ba85-9c903b05ec53", "sighting_of_ref": "indicator--c39d1bc3-828d-4937-9802-0b2ab59a3ea2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d6fb24-765a-4f70-a04f-d5c30ba0a188", "sighting_of_ref": "indicator--c39d1bc3-828d-4937-9802-0b2ab59a3ea2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046f57b5-5faa-4498-980a-5278f911e4cf", "sighting_of_ref": "indicator--9f4b010c-76c9-4aae-bc2d-68b01edb0441", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a9c17f-f49c-42d5-837d-b1b80f613e6f", "sighting_of_ref": "indicator--af3e0643-b250-4bec-9e7d-5f800048b67f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0223316-5cb1-4846-b0a3-bd99969cc442", "sighting_of_ref": "indicator--99077513-ba19-42e7-8ab3-7bd83faf6e90", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec87459b-8580-431e-a286-ebc5c561571c", "sighting_of_ref": "indicator--6f8bbc55-2705-423c-9dba-28a9555cd712", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a7ece5-2cbc-472c-8402-e16aaf0e470b", "sighting_of_ref": "indicator--8b3e8ef6-9f7e-44e2-9e89-0343b96d1c89", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a321c9d2-846e-4b51-90b9-7174f790395e", "sighting_of_ref": "indicator--7901564f-a722-4ca1-9a19-a08b2c1a0c6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9bfc04-e949-4655-a702-e5b8587feee5", "sighting_of_ref": "indicator--673abaea-9d14-4333-b660-4d4b4ca44238", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e58984e-db5a-4176-97dc-d0b6c61ab2fc", "sighting_of_ref": "indicator--b9882692-7398-41b7-95a3-b5ae3a9de84d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738b788c-57ec-4442-8c4c-a8543fe8e45e", "sighting_of_ref": "indicator--b9882692-7398-41b7-95a3-b5ae3a9de84d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6401ad4c-e80a-402c-b817-c145b4670fdb", "sighting_of_ref": "indicator--33ca3757-d9f9-4a75-91f5-53c1083d3cad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fda359-521c-4fbb-8c67-c81ab5a10540", "sighting_of_ref": "indicator--017c163d-57ed-4c1c-bf35-d9a896c590a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2aa140a-4fd0-48cb-b799-09d9f4f97038", "sighting_of_ref": "indicator--017c163d-57ed-4c1c-bf35-d9a896c590a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440da0d1-2b7e-424b-a312-2f12e235ead3", "sighting_of_ref": "indicator--8ea50f02-6566-4084-be4c-9deefd217be0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cc9830-aa85-4bd8-b01f-42612d17898a", "sighting_of_ref": "indicator--2d285731-2104-4718-9e7c-14c22af82836", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05423e37-83da-4c9c-8247-5e3fed29af32", "sighting_of_ref": "indicator--2d285731-2104-4718-9e7c-14c22af82836", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84d5053-03a8-4207-94ff-9bc55e5c1bfc", "sighting_of_ref": "indicator--11ef5765-18b5-46a1-9813-58c9748b2976", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dc59fc-0f8f-44f7-a9c3-7de813f3cd7c", "sighting_of_ref": "indicator--11ef5765-18b5-46a1-9813-58c9748b2976", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d2ab65-5ce9-4c89-84a7-33e4845c952e", "sighting_of_ref": "indicator--d0f646a7-b3d4-44ac-bb0d-43e73292598d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7eb7aa2-7724-4184-83b0-9f068e86f089", "sighting_of_ref": "indicator--9796328b-6b03-4a96-81bb-0864a890c47b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874b565a-1af6-42f1-9bed-dd65a8abfff6", "sighting_of_ref": "indicator--6bca27b7-abed-4b8d-9c7e-f366a4e58ee7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547c4d93-ef9d-4266-a478-884ca7a45f74", "sighting_of_ref": "indicator--83411dde-32e4-424a-bef7-44d425935763", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650130ef-c865-4f79-ab87-4dbee3ba69c0", "sighting_of_ref": "indicator--83411dde-32e4-424a-bef7-44d425935763", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d4ae98-f3f7-4bfe-af93-ca9feffc32b2", "sighting_of_ref": "indicator--109b5ec7-2f48-450f-8b79-5ec2c50ab788", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e6e03a-5262-4286-ae88-35ca9b2e4ea7", "sighting_of_ref": "indicator--109b5ec7-2f48-450f-8b79-5ec2c50ab788", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31f7f18-766e-42b6-807a-2fd139919849", "sighting_of_ref": "indicator--cb568bbf-af22-47ff-8017-7aab0674503e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456c3762-3447-439d-b3f2-54436b0f1a29", "sighting_of_ref": "indicator--cb568bbf-af22-47ff-8017-7aab0674503e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dada11cd-10a9-495b-8191-5ace33620096", "sighting_of_ref": "indicator--efd9a3c5-e857-477a-b6df-dedaa3d795e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bfb73d-062e-4349-8075-8c462a6b42dc", "sighting_of_ref": "indicator--efd9a3c5-e857-477a-b6df-dedaa3d795e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97412a19-cb92-4a74-b487-53405d82fd65", "sighting_of_ref": "indicator--aedc5a90-6db1-413e-844c-6ad40fc0c402", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cfdb77-b0d0-4c5a-8613-de03a30043a2", "sighting_of_ref": "indicator--d82aac72-f688-443a-8c1e-cd80eea56639", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42db542-6d9b-4e9e-94aa-baa2a63f4a7e", "sighting_of_ref": "indicator--5c29f4dc-d4c3-4f0c-a95f-4fa17e3ef45e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb06d326-32c9-420c-a889-97cf10d45528", "sighting_of_ref": "indicator--5c29f4dc-d4c3-4f0c-a95f-4fa17e3ef45e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1567bcbc-c18e-4bce-8bfd-7c648ddad398", "sighting_of_ref": "indicator--101de45c-3ca8-48a6-a3ab-fa2548c0f3fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c5e73b-cc78-445b-b5d2-6e472b0fef29", "sighting_of_ref": "indicator--391cba39-46cd-4035-9b61-55870b7333fd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a09566e-878e-4161-ae2f-5e5db498342c", "sighting_of_ref": "indicator--391cba39-46cd-4035-9b61-55870b7333fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700fa848-8bb7-45a9-9045-78234d61ba06", "sighting_of_ref": "indicator--a547397e-9f59-4615-9ee2-d3051880f8d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f8dd8f-61bb-4dba-bb52-06ee5ab5af05", "sighting_of_ref": "indicator--878dba39-4f7d-4cbc-b534-f2c9853ada18", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5230f6-5d09-4cab-80d2-a8bbf87ccb57", "sighting_of_ref": "indicator--14f4c4b9-4a4e-42ac-99f7-d95a737d22e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56487b8-666f-42f6-8260-dd98e4971017", "sighting_of_ref": "indicator--9089e711-5361-43d0-b50e-4b2a96deef5f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa90bf89-4081-45e0-9afa-ad886326e5af", "sighting_of_ref": "indicator--66917d97-123c-4aad-8bb4-80d2ab1e40e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f30b08-0f09-47c6-9858-8b8375ca7b14", "sighting_of_ref": "indicator--66917d97-123c-4aad-8bb4-80d2ab1e40e7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a0b027-3bd8-4927-8c1d-6ad718cc4042", "sighting_of_ref": "indicator--ebea8da8-a71d-435e-ac5d-8bf95fd7dbef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7bf5c3-019c-4be1-af5f-c98aef365557", "sighting_of_ref": "indicator--a90a115b-3c5f-48ee-8d15-ed90e4888d20", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344fa8a8-a728-4ec1-961d-3e9cc077faae", "sighting_of_ref": "indicator--84dd97a6-c4cf-4daf-93ff-d6657fc12f95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b0a1ba-7eaa-4528-b607-8d00f72cee00", "sighting_of_ref": "indicator--2534140c-0c8a-4bc3-8207-24f53e5384d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e59be85-b853-48c0-bc4a-93e929d8f208", "sighting_of_ref": "indicator--5ccc64bf-e94d-43d7-81bc-19b02e5b90a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d636247-e420-4434-ac27-ff2bd544886e", "sighting_of_ref": "indicator--5ccc64bf-e94d-43d7-81bc-19b02e5b90a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3c278d-8d74-4fbd-8888-f67766091cff", "sighting_of_ref": "indicator--cd4ca12a-da34-4b5d-b369-f6f67a9c2ddd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1064bc43-e942-4719-ba39-febf8676da6d", "sighting_of_ref": "indicator--799163fa-2cf4-42ee-96a6-8f93f577de7f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb40ab99-d55b-4d18-8ef7-ffdc406becaf", "sighting_of_ref": "indicator--5cfd5b0e-3ca1-41b9-a7c2-9b55675c28b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd5977d-62df-4a98-b377-fad74a872474", "sighting_of_ref": "indicator--128a851d-a3c0-4480-ad08-869b98fecfaf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb672f74-f8c7-471e-838a-0d98d5970500", "sighting_of_ref": "indicator--341fcebc-e66d-4810-973a-828585444fae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77d0594-6918-4cd0-8859-f3d851335944", "sighting_of_ref": "indicator--2b37c2e6-720a-48d9-8831-935286d48122", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e11afeb-efaf-418c-965a-9a32fe661550", "sighting_of_ref": "indicator--48de0abc-4f09-4231-8d3d-76320734c4a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a76ebdf-5fdd-4143-bcaf-886e71b79fdd", "sighting_of_ref": "indicator--589c86e0-463e-4bea-926d-9ac88aaa95e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdb03e7-bce6-457f-8c85-f5855165f987", "sighting_of_ref": "indicator--589c86e0-463e-4bea-926d-9ac88aaa95e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb8b20f-2732-4887-8132-52e32fa8a910", "sighting_of_ref": "indicator--63874561-9b10-47d6-9774-aad140188c0c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00580ed-6ad5-4c73-b47a-914130b15990", "sighting_of_ref": "indicator--73110e83-8b1e-4df0-a9c5-9d61467ba16e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc369bc-fc05-4864-b3f2-6542133f8f52", "sighting_of_ref": "indicator--1b251232-9ca7-476e-9a27-4753b7b27089", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37864061-54fd-4ec3-9872-01c9dc4eefbc", "sighting_of_ref": "indicator--4db83d01-c9d5-45bf-9e72-5c84b051258e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3617fa5b-0955-4074-97d9-4ffbee764520", "sighting_of_ref": "indicator--2d005e53-bea4-4c25-a472-a63b9af6d3e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f71e182-7baf-4286-b600-3ce34a55ab1a", "sighting_of_ref": "indicator--273f32e8-05a7-490f-8ceb-46ceae6090c3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e14469-3282-49ad-82cc-80bca4a0f3ba", "sighting_of_ref": "indicator--b48cc4fd-41d9-4d51-906c-4ac3d809afc8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dc4ea7-40ad-4bd7-8cc3-a82c273897ff", "sighting_of_ref": "indicator--8909aae6-32db-4949-a141-ea013b7b8bd8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4be336-3037-44a0-843d-d10bd157ef0f", "sighting_of_ref": "indicator--d638a6cd-f7f5-417e-b833-382fd2ff1d50", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffcd252-9e27-4186-9ac9-95b21f0c9a2f", "sighting_of_ref": "indicator--d638a6cd-f7f5-417e-b833-382fd2ff1d50", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d167af40-540f-4ba9-b9ee-930eed558046", "sighting_of_ref": "indicator--d4e8546c-2383-4475-a496-b026d4c033b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2934912-f8c0-470f-9041-9c1d1357842e", "sighting_of_ref": "indicator--deadd5a4-25b4-460a-9fd6-5b3534724839", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac11b23-1f97-4a4b-8873-b6284cbb9c0a", "sighting_of_ref": "indicator--deadd5a4-25b4-460a-9fd6-5b3534724839", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfecc22-b2b9-46c8-8fb3-fb48592d044e", "sighting_of_ref": "indicator--42a7e53e-3228-405e-beff-d823ba5bc9ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1edb099-3cbf-490a-9494-384178f8c61e", "sighting_of_ref": "indicator--d83f6bef-b4aa-4660-b5b1-154b5db1a3a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f86a03-456f-4d8b-868a-74346f03b6fc", "sighting_of_ref": "indicator--c37ba455-1580-4265-aa7b-c28f4227ba30", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c0e5c0-ae61-4cb8-b883-faac8ac08b10", "sighting_of_ref": "indicator--454019e7-7865-4704-ad8c-b018f356101a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabbc2a2-c87d-4381-b329-44d0eb12234c", "sighting_of_ref": "indicator--b7fa8fda-acfb-4184-bd17-d0d8fc36aab3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcf73df-738f-4f75-8f8d-5c1c7bddf7e9", "sighting_of_ref": "indicator--86b4bdd3-f5e1-41c5-85db-3225974ec113", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee67dacc-a12b-475d-bec0-feb6a76358cf", "sighting_of_ref": "indicator--a211b79c-874a-426d-bc80-7dbf610e78e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fce463-1e2f-4665-af92-893cb8800775", "sighting_of_ref": "indicator--6b7ab680-90b5-4ac9-8157-b5bb070a4ef4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cf1ab3-b610-4c88-9eea-a05822249f79", "sighting_of_ref": "indicator--4bd9365d-95cf-4ec2-994d-8264e035e6be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a45a705-836a-436f-a4c0-d9648d11fa70", "sighting_of_ref": "indicator--3bc7e1d7-4503-40d2-bd3a-c7a4d2c71159", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cafc70-cd34-45ac-ba48-458573c370e3", "sighting_of_ref": "indicator--e31a8717-fa93-4c4c-82e1-1a4a85419a3c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9eebd3-f5fb-4e7e-a8b4-d44f14cf508d", "sighting_of_ref": "indicator--fa9108cd-c113-48d0-9f19-38012ccd9d11", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3c7778-dcfd-4f81-a31a-001095920408", "sighting_of_ref": "indicator--5816e9ee-26d7-467a-b332-4a9d90c66765", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e874f878-5011-463b-aec8-c7c42b55a4ff", "sighting_of_ref": "indicator--5816e9ee-26d7-467a-b332-4a9d90c66765", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21555fd4-082c-4c16-b9b9-3c6712b4e532", "sighting_of_ref": "indicator--98df4169-ca20-4bad-8178-c413d805c67f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa46e028-2c10-4b33-8443-547280ce09ef", "sighting_of_ref": "indicator--9aaf1e4c-f41a-4aee-9ced-15b00d6ddba1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252bb715-9975-42ea-8927-b62e7b2ffcfb", "sighting_of_ref": "indicator--ca3e1e9c-c29b-456a-801c-111d702022bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ff447c-a05b-4cad-87cb-4b898663effe", "sighting_of_ref": "indicator--d4f2086e-b8c5-43bc-957a-c948e89b410f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16812c42-c017-4600-bdbc-ea0bee675026", "sighting_of_ref": "indicator--fa50dbc8-8993-4ca5-9299-72b35caecf43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72df7081-26fc-42e4-a822-3f0ab177d4de", "sighting_of_ref": "indicator--b31c5138-78ef-4b55-904b-1396642d8c07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b61dfd-379f-42b0-baf8-d66c721e1fb5", "sighting_of_ref": "indicator--4abe13ef-5edf-4348-b934-a5bdf9959c9a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821f6c08-9801-4445-a9b8-1f408a79f5a3", "sighting_of_ref": "indicator--4abe13ef-5edf-4348-b934-a5bdf9959c9a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086dc514-4515-4a83-bcc0-fb8732972620", "sighting_of_ref": "indicator--e23c978a-1a23-416e-9e59-0baaf99b42aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12878f24-f849-4c3b-ac69-096976096656", "sighting_of_ref": "indicator--c9f40467-4ae0-41d4-9b2f-4bcd74a6c36e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f09c59-72fb-472a-ba83-8dd8867d45dd", "sighting_of_ref": "indicator--1afc1449-3f5e-4e05-94ca-6a185f6058ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17abdb9b-e7ed-40c5-b4fc-484990ee5faf", "sighting_of_ref": "indicator--cc66c837-2a94-41e3-a659-9122411b94ea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c76c7e0-ed14-453d-aabc-a6ca822110d5", "sighting_of_ref": "indicator--70a3dd23-4329-4dd4-9e28-a4b369025a42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6a37a0-b5ef-430b-9ffe-f71ac24dc730", "sighting_of_ref": "indicator--066dc392-5125-4c77-99ba-dc38791b53b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3964529f-8fb9-4803-80c5-20dcb034f8ac", "sighting_of_ref": "indicator--d6e18947-7bb0-4666-add6-95a5990a09c3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4f4b91-818c-41c8-9571-fcbe190b00e1", "sighting_of_ref": "indicator--d6e18947-7bb0-4666-add6-95a5990a09c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cd521f-9840-43bb-b2e8-bdd33b116767", "sighting_of_ref": "indicator--46ecf42e-9f96-4b89-94e0-bcf19a6d080f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b264362-0dcb-47c9-bf9d-ff21a4f7a797", "sighting_of_ref": "indicator--46ecf42e-9f96-4b89-94e0-bcf19a6d080f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d967c534-54cc-45b7-9bb3-7fb9e77e7778", "sighting_of_ref": "indicator--35ffd53f-e8e8-4e5a-8f89-56ee8f6259f4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1312ffa2-d472-49a3-9a8a-14f04a7859f7", "sighting_of_ref": "indicator--35ffd53f-e8e8-4e5a-8f89-56ee8f6259f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2e9400-07fc-494a-a189-56d484ce3985", "sighting_of_ref": "indicator--8c74e2a5-5e26-4a68-a619-65efc5414861", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b045f5f-1a99-4dda-ae6d-854859d99fa2", "sighting_of_ref": "indicator--8c74e2a5-5e26-4a68-a619-65efc5414861", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e17a16-a1ec-4f86-8597-162db1a9a42d", "sighting_of_ref": "indicator--ddbb745b-bd29-42dd-b2d1-22b57cbfcf4a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67aa824-bb8a-4f94-a4f1-77c44325c632", "sighting_of_ref": "indicator--ddbb745b-bd29-42dd-b2d1-22b57cbfcf4a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee950383-c5ef-4d33-94f7-83efea3a854b", "sighting_of_ref": "indicator--ddbb745b-bd29-42dd-b2d1-22b57cbfcf4a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e0ed6f-e1a6-42be-8304-e84aeab1646d", "sighting_of_ref": "indicator--0488dc76-d9db-404b-a0cd-fd8cb9406954", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcd9c40-b1fd-4444-9605-db633954a1ce", "sighting_of_ref": "indicator--0488dc76-d9db-404b-a0cd-fd8cb9406954", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f6845-8151-42e7-9162-1ff2c0988b4d", "sighting_of_ref": "indicator--f7bb6d6b-b27e-43e4-8644-05c0cd856334", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327c30f4-fa49-4bd3-94f7-a79404c3d223", "sighting_of_ref": "indicator--f7bb6d6b-b27e-43e4-8644-05c0cd856334", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a1819e-d414-4c3b-b978-dc78f4458137", "sighting_of_ref": "indicator--497d5002-0e19-40d3-bb55-e33416baaf0c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f061cea4-48c5-4d74-868c-8596e0a21d2d", "sighting_of_ref": "indicator--497d5002-0e19-40d3-bb55-e33416baaf0c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f68411-4a6b-48d7-82a2-d5a79748c572", "sighting_of_ref": "indicator--23596100-9cb5-4815-a32b-e9677ebf6c94", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb21052b-13af-471b-b727-20e602e675a2", "sighting_of_ref": "indicator--23596100-9cb5-4815-a32b-e9677ebf6c94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdd7dd9-00e1-445e-a75f-c7490a17e2fd", "sighting_of_ref": "indicator--24d5ec77-f195-432e-9a15-ed53adbf79b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32508531-e416-4dfc-9422-c35aea20bb9c", "sighting_of_ref": "indicator--24d5ec77-f195-432e-9a15-ed53adbf79b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68e9313-b7f1-4f36-8a9e-3a95bb7ed45b", "sighting_of_ref": "indicator--bc8d6e95-9dd8-4363-9f2a-c0e0e1065f83", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33744abc-1bff-4e66-89cb-55fc8146a50a", "sighting_of_ref": "indicator--bc8d6e95-9dd8-4363-9f2a-c0e0e1065f83", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a055193-ee53-4527-8d2e-e4f3224d9e96", "sighting_of_ref": "indicator--8e273f07-73cb-4b09-8d6e-257949dcb60a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e63440-f501-44e2-be71-e92d95ace487", "sighting_of_ref": "indicator--8e273f07-73cb-4b09-8d6e-257949dcb60a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194569c1-7894-4638-99a8-75c75c864f4d", "sighting_of_ref": "indicator--8e273f07-73cb-4b09-8d6e-257949dcb60a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0ab9f6-c7ae-43d8-b283-fe582ac7737c", "sighting_of_ref": "indicator--9742b0bd-1bac-4df6-b5ed-75cbe1b1f107", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa6a8b0-b660-4516-b041-3a9ada68f7da", "sighting_of_ref": "indicator--9742b0bd-1bac-4df6-b5ed-75cbe1b1f107", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676fec62-8dfc-4a3a-964e-b11ca644aa23", "sighting_of_ref": "indicator--15c89f3c-b19a-4e02-a99f-c27fa8369804", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b75a856-5714-403b-8a92-7dd8b6fc2ba2", "sighting_of_ref": "indicator--15c89f3c-b19a-4e02-a99f-c27fa8369804", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b815d25-5e47-4a1b-916b-d6d8d91ff7b9", "sighting_of_ref": "indicator--4921bb29-7f99-4d91-a1cc-e9aef1ce872e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dcd437-e6d3-45db-9479-70c716d0f6c7", "sighting_of_ref": "indicator--4921bb29-7f99-4d91-a1cc-e9aef1ce872e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ef1dd9-68a5-4844-9006-99494f10cf54", "sighting_of_ref": "indicator--a78f6493-df22-4834-9f22-4b00b6f7099f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4d9ae6-f2a4-449f-a4fc-55c257315bb4", "sighting_of_ref": "indicator--a78f6493-df22-4834-9f22-4b00b6f7099f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fa8dbc-10bd-48fe-94d1-1e1a39163dce", "sighting_of_ref": "indicator--25b03ff8-5454-4b88-9a77-d456da3bcf84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463be90f-b948-4e1e-b1f9-a9c6f3e98030", "sighting_of_ref": "indicator--25b03ff8-5454-4b88-9a77-d456da3bcf84", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da708c38-6bcd-4e3e-8681-6500f56a766c", "sighting_of_ref": "indicator--ff77b31a-dfc3-4c5a-9a03-625d738f9776", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7627781-7b47-4b36-9c61-247ee5c13a0a", "sighting_of_ref": "indicator--ff77b31a-dfc3-4c5a-9a03-625d738f9776", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d389b4-3dea-4c74-b218-33cd067c0ee5", "sighting_of_ref": "indicator--585a235f-bc36-4403-ab30-78ff7f2fe81c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b825cea-93ff-4f12-88ac-08eef09a94f1", "sighting_of_ref": "indicator--585a235f-bc36-4403-ab30-78ff7f2fe81c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221352fc-1e2a-4f13-9d59-c1caa5051a90", "sighting_of_ref": "indicator--48aa96f9-c608-4f4f-85c7-407d9dce7f6f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935cb02e-06de-473c-a843-6d5f2195f383", "sighting_of_ref": "indicator--48aa96f9-c608-4f4f-85c7-407d9dce7f6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67af864-26f9-486b-beae-d012e008366c", "sighting_of_ref": "indicator--c4edd723-5593-4d45-9133-1cdd99e379a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4b2425-9e79-441f-83f6-841221e14a28", "sighting_of_ref": "indicator--c4edd723-5593-4d45-9133-1cdd99e379a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017fafae-37c1-4586-a01e-44d4df788d9e", "sighting_of_ref": "indicator--53472a5a-52e9-49f1-9c0a-ef5be0329b25", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996af630-d213-4588-b948-cde548d5151c", "sighting_of_ref": "indicator--53472a5a-52e9-49f1-9c0a-ef5be0329b25", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72692ca8-6324-4336-a7e1-f65133120721", "sighting_of_ref": "indicator--92c8f84f-9af1-4585-89d2-6e34d66c2274", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca798930-2798-4e0e-a59e-d18272958361", "sighting_of_ref": "indicator--92c8f84f-9af1-4585-89d2-6e34d66c2274", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e905e236-b237-4d3a-a832-f4007f172dc9", "sighting_of_ref": "indicator--849c7743-138b-4b27-bb2c-6e595828f393", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aea1ed7-2811-469d-8c1a-cec8491e170b", "sighting_of_ref": "indicator--f3a3a87c-0aa2-469a-a670-bcb4c22fa78a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ec2e35-c7d9-4ddc-9b59-77ea85c7bb2a", "sighting_of_ref": "indicator--9545b2ff-5de0-4813-b22d-b17beea7c201", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b70f244-66f0-43be-9ed5-b3fd471d0cca", "sighting_of_ref": "indicator--b2cc95db-07ad-408a-8e71-918355c83e2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1cb043-d5d3-4842-8865-dc70a7b06a2b", "sighting_of_ref": "indicator--b2cc95db-07ad-408a-8e71-918355c83e2d", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff60c7e6-c6c0-4364-924a-31a53ff9701a", "sighting_of_ref": "indicator--b2cc95db-07ad-408a-8e71-918355c83e2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90d1bd8-920a-4ae4-a040-86b76f0d2785", "sighting_of_ref": "indicator--b2cc95db-07ad-408a-8e71-918355c83e2d", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f2ec03-10f1-4677-a54a-79fcde1d0377", "sighting_of_ref": "indicator--931d181a-2fd4-46d5-9777-36407dfdb4ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb40b6c-3a5c-48b8-9c23-029a4959190f", "sighting_of_ref": "indicator--931d181a-2fd4-46d5-9777-36407dfdb4ee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56fd82a-885d-4765-91f0-0e89de30f265", "sighting_of_ref": "indicator--931d181a-2fd4-46d5-9777-36407dfdb4ee", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea23ff2c-a4f8-4f55-a58f-134b58906c6b", "sighting_of_ref": "indicator--e2695ce7-9b23-4605-abe4-799fadcc76b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85655ac2-1d3e-4864-bb66-2e6d30691450", "sighting_of_ref": "indicator--e2695ce7-9b23-4605-abe4-799fadcc76b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1210a8-66d1-4898-ace8-3a917b649236", "sighting_of_ref": "indicator--e2695ce7-9b23-4605-abe4-799fadcc76b8", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387ef00d-da3f-4576-b94a-8b380da3a3d8", "sighting_of_ref": "indicator--e8730c2d-a330-4d54-928b-4c56c6661926", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edc1e73-14a4-41a7-a1a6-128525050b16", "sighting_of_ref": "indicator--e8730c2d-a330-4d54-928b-4c56c6661926", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ccb652-fd43-4a14-97b7-a4672d87cf74", "sighting_of_ref": "indicator--e8730c2d-a330-4d54-928b-4c56c6661926", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b800ea-84b1-4980-bbaf-e9abfac32a8a", "sighting_of_ref": "indicator--7bd18866-170c-4145-86f6-e8776d457b73", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a04cd9-d815-4a98-8511-423efd9abdf9", "sighting_of_ref": "indicator--7bd18866-170c-4145-86f6-e8776d457b73", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ca5602-2643-4332-ba70-9c0d9cf0c375", "sighting_of_ref": "indicator--7bd18866-170c-4145-86f6-e8776d457b73", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ea0c63-3e48-44d7-9e84-a39670210edd", "sighting_of_ref": "indicator--3e385875-dc64-4e5b-9156-cee1ebb2cbfa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3db1d98-6c57-40ec-b77e-03b31e4f1bd9", "sighting_of_ref": "indicator--3e385875-dc64-4e5b-9156-cee1ebb2cbfa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76d1079-27b7-4e38-8c03-f78794fe9df1", "sighting_of_ref": "indicator--3e385875-dc64-4e5b-9156-cee1ebb2cbfa", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4780b5-2429-45b2-8f1b-4b45a116d928", "sighting_of_ref": "indicator--05b1d209-0ea5-4355-8559-54e312007baa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98626862-3cf9-4a6c-b196-22d9952ed72c", "sighting_of_ref": "indicator--05b1d209-0ea5-4355-8559-54e312007baa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53d6575-3018-4b26-bf80-87a8ad50a1fb", "sighting_of_ref": "indicator--629c9e22-f970-4241-ba6c-302711c3145e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b8aca7-8646-4357-99d6-ceb92c44d94a", "sighting_of_ref": "indicator--1a40d4d2-f944-4128-863c-d41465c1a65b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6ceb52-af0f-4181-978c-38e5ca8e2feb", "sighting_of_ref": "indicator--1a40d4d2-f944-4128-863c-d41465c1a65b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20213cb-f759-4bd8-a39e-7c425f0ed75b", "sighting_of_ref": "indicator--3a20bc57-9d4e-47e7-b755-0c3940075913", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154e2639-6a22-4d9e-bb0f-3bc14088cd55", "sighting_of_ref": "indicator--3a20bc57-9d4e-47e7-b755-0c3940075913", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83db56b1-275a-4656-ba4e-712f629f115c", "sighting_of_ref": "indicator--9056df8f-991d-4431-8578-cbaf54624e95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fce07e-1853-4ab8-8151-cc001c63cc9f", "sighting_of_ref": "indicator--9056df8f-991d-4431-8578-cbaf54624e95", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458a2cf6-6069-40d2-9a01-3e62d9a0fd2d", "sighting_of_ref": "indicator--1bdaa503-623d-4ee9-89ee-e58cca091331", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141cfc8c-22a8-4624-a5e0-ef4b0df3d681", "sighting_of_ref": "indicator--1bdaa503-623d-4ee9-89ee-e58cca091331", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5054c22e-8288-48e7-b5ed-01da596f8581", "sighting_of_ref": "indicator--2f7d2b49-d65d-49b1-a09f-37ef05ed0b1f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae80c38-0f18-4b4f-a444-0cca1ea90038", "sighting_of_ref": "indicator--eedbdf55-a18e-4324-9d93-d4ca89fc9a6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fd8b76-f84c-4094-93b7-54d385e19194", "sighting_of_ref": "indicator--eedbdf55-a18e-4324-9d93-d4ca89fc9a6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df75749b-1ed0-4cfe-ba05-2b4814437289", "sighting_of_ref": "indicator--e37827f9-9434-40a9-8c3b-2153de1feba9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ff154e-ec12-4886-af61-a369b5db9554", "sighting_of_ref": "indicator--8bfa1083-702c-4f3d-be19-8e695a50b7d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b77b89-8617-4597-8842-802caf033bfc", "sighting_of_ref": "indicator--8fd40eb0-5e31-4727-8914-17f200550d69", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18161bb9-35d9-467c-b923-58d290bbcb5d", "sighting_of_ref": "indicator--0e3797d7-0389-4eb4-8d24-1a8ba02dcf21", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518878bb-1d1e-48b5-a079-36378ca48231", "sighting_of_ref": "indicator--774dfa45-08a5-4486-8d17-a16541a63dbc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915cf3bd-ebc6-4d1f-8c9a-9b9a86d923ae", "sighting_of_ref": "indicator--1bf83ae4-e6b2-4b33-8d18-f2e088f47112", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5557ded2-9ef8-4211-b3ba-70669d736046", "sighting_of_ref": "indicator--4bd04ecd-0f1c-43b3-99c3-b0bdb960ea72", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc8991e-4729-4311-9563-e0d2e49e5433", "sighting_of_ref": "indicator--ef9a95c4-624c-4278-9c2c-0296247af653", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8171d5-f50b-4376-a19b-ed7c95357018", "sighting_of_ref": "indicator--76dd1a46-1a67-434e-a678-73e3baef0d2f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbb619a-5397-413d-8b54-e6860fada3fd", "sighting_of_ref": "indicator--6d133489-9709-4faa-9abd-6361b6d63328", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a35bd01-4788-4cf6-853e-ea66efc58bc5", "sighting_of_ref": "indicator--6d133489-9709-4faa-9abd-6361b6d63328", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43139c48-9806-40ac-99cd-139a441db255", "sighting_of_ref": "indicator--e9ccb057-4422-4251-9d2d-1f4716995770", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69259e95-710b-4f3f-a671-d745bb551676", "sighting_of_ref": "indicator--e9ccb057-4422-4251-9d2d-1f4716995770", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c4822b-1eec-421f-96fc-fa2afeab08fb", "sighting_of_ref": "indicator--de773d85-9106-4d52-bb54-2f680390c422", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf299cf9-af7e-4d29-9e78-f09d8b7e76f1", "sighting_of_ref": "indicator--f9313c99-560a-41f8-b2c4-2864cffc9f87", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc49852b-b3f1-454b-bc96-5633412a8b16", "sighting_of_ref": "indicator--89a65b7b-3aa4-43bb-9fa3-e3daa3a97b2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddd355e-8265-478a-978d-a3146b102fb9", "sighting_of_ref": "indicator--ae14feaf-5801-45e0-8ca6-b9239c0e87cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703c547b-b4ae-43a5-a73e-5035677d079e", "sighting_of_ref": "indicator--57b65be7-4c49-4510-83a6-64720055dce3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6545c7-5ee6-4cc6-acfc-c35794ec6c08", "sighting_of_ref": "indicator--97fccca9-5d08-4a8b-ad12-7c5a942e3b65", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034b7bc8-becd-4d2c-a440-d6e74cbb47b4", "sighting_of_ref": "indicator--0e5a0d9d-3ebc-45ec-8d65-5bf8e8e73164", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c7edb5-66d9-4992-ac8a-c9215495edce", "sighting_of_ref": "indicator--e1cea642-001f-47d0-b108-c06e8709910b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7709d0e-0ea0-45f9-ac10-0647377d5b26", "sighting_of_ref": "indicator--244f26d5-b55c-4a9d-8d27-1f6e1d40c0e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38385b3-2a58-430e-bf6f-1ee3bf07955d", "sighting_of_ref": "indicator--a54a10c2-dddf-42bc-b584-5c45c64abdba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeabb4d8-26ed-4e46-9c52-14e1aa97674b", "sighting_of_ref": "indicator--b945a957-ecfe-4a8b-b10c-8455942d511c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ccce09-c6cb-4e3f-b918-ada24d5577c5", "sighting_of_ref": "indicator--c60a586c-0b09-4d36-9c93-3b5e3d9f36c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6538a2e8-37b0-45dd-8c07-5084265c500f", "sighting_of_ref": "indicator--c60a586c-0b09-4d36-9c93-3b5e3d9f36c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c911e3-3543-4c22-9f15-351722425f39", "sighting_of_ref": "indicator--dc5873d7-775a-451c-96cf-1f03e1665912", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6c43c2-fbb8-4d65-870b-acf8f04f06e3", "sighting_of_ref": "indicator--93feb618-c64e-418d-9da3-91926840ef91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e248e3-eadc-4856-ab75-70cda24b609b", "sighting_of_ref": "indicator--6c4877f7-8c4d-4999-91cd-07876fb8c10b", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cef384e-1363-4653-9c74-9863d5346b93", "sighting_of_ref": "indicator--c651cef2-f05c-414c-9ae9-1a899ec79130", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569d6f5a-3457-4d68-8b85-645c8398f458", "sighting_of_ref": "indicator--d42da70f-06c8-4f40-bba9-b976aa994e76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e79cae-0e7c-413d-b5d4-74e1eb6247b3", "sighting_of_ref": "indicator--101d3318-a06b-4944-a8e7-f78db1aeedad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a97227d-8e15-49e7-b40c-19439e05a027", "sighting_of_ref": "indicator--13f46003-24a6-4350-94ec-4e833b779cf7", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f795073-ba73-40e1-8220-d53cb9913093", "sighting_of_ref": "indicator--2b332a5b-b97f-4c42-b5be-4fc69c6cbbbf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60313a6f-7c40-4b1e-af32-a5ee93c8b058", "sighting_of_ref": "indicator--1b7cb411-0b15-4fb3-beb9-362421f58a6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0564db5-3768-4c2a-ac6d-2fa75f81d6af", "sighting_of_ref": "indicator--6e7a40c9-9f4f-4c0c-b4db-057106ed6af4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975359b7-b010-4a12-8f36-af98a54f336d", "sighting_of_ref": "indicator--0b42347e-ae2d-402f-ad1a-3484b8417a9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be69a42-196d-4a49-8fa8-69d6dfe4c008", "sighting_of_ref": "indicator--0b42347e-ae2d-402f-ad1a-3484b8417a9c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6c9f0a-40ec-4348-a584-109841340cb4", "sighting_of_ref": "indicator--4e3a9a0b-1667-47b3-8a96-ac7c6051bf9a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d4751b-ff3a-4574-b525-d77bd53547ee", "sighting_of_ref": "indicator--72ff1ece-e5d2-49b4-95d8-cbe5519a38d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e84a17-77e5-4f81-b22e-d8b5096b08d5", "sighting_of_ref": "indicator--ca65405c-5901-43b3-8a04-1e50ebffc7eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b654b00-74a4-4c67-a411-94a868e2262f", "sighting_of_ref": "indicator--849d453d-2a5f-4b04-bac4-29b2030bbc63", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc00c614-a829-4123-b24f-9cc99520c88e", "sighting_of_ref": "indicator--f68f4de7-55ff-4254-a134-e88f99174f30", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8c64cd-d768-4346-b1de-48d17eb28335", "sighting_of_ref": "indicator--b8b91af4-9c9e-499b-8361-d3b49c1a797f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba8be72-0102-42ce-b919-3d68c40119a9", "sighting_of_ref": "indicator--176aa52a-d93e-42a3-8c3c-8ca753b2dae6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49876b6-06b1-4c47-b9d0-ab4302190d51", "sighting_of_ref": "indicator--f7b9a99f-c9b4-4bf1-8b7e-1ce31ee4b289", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9fc409-a53e-4a86-b839-c1b4638df41f", "sighting_of_ref": "indicator--6223d749-10c0-4d5c-95a1-33e616985345", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a98253c-cf2d-4fc4-977a-077d8f333a65", "sighting_of_ref": "indicator--6223d749-10c0-4d5c-95a1-33e616985345", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05319dcf-a8f0-498d-b46e-76e25280f658", "sighting_of_ref": "indicator--1da6f1e6-fe31-48c8-8ba4-7104b8492742", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309a6739-0967-46f9-9630-1f920ca0bc42", "sighting_of_ref": "indicator--594c7dab-ac0a-4992-bf24-58193e5b649b", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfa74e9-2b75-425e-b2fb-9fcd6d339523", "sighting_of_ref": "indicator--f88bb383-45a8-4b1d-a3e0-55a8a2af72a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca0c020-60f7-4cf6-93e2-60eb0881cb47", "sighting_of_ref": "indicator--f88bb383-45a8-4b1d-a3e0-55a8a2af72a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00919b2-749f-4186-998c-39f7d33d8c68", "sighting_of_ref": "indicator--aa8b7337-a921-443b-bd41-2b02e32d7f1f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f6e2ca-51f4-49a8-b32a-e7899b09e3cd", "sighting_of_ref": "indicator--aa8b7337-a921-443b-bd41-2b02e32d7f1f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cc9e2e-7aa8-4be0-b85b-8113507dee88", "sighting_of_ref": "indicator--311b2b33-8a9f-4ad2-b100-f126e004ca69", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c556f790-185a-4abf-8887-d43d3358984b", "sighting_of_ref": "indicator--311b2b33-8a9f-4ad2-b100-f126e004ca69", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054fbd4e-888a-4c4c-b247-2b3c37ccc8f1", "sighting_of_ref": "indicator--24f7e2cd-d1ce-4e4a-885e-2c3ad0e89538", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cedcf1-bda9-4674-97b0-53fffe6b09b5", "sighting_of_ref": "indicator--24f7e2cd-d1ce-4e4a-885e-2c3ad0e89538", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b744e857-7e72-4517-9219-e0770f260f56", "sighting_of_ref": "indicator--ad94e504-7843-4077-8d84-bb7ba9106724", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e934338f-121c-4354-aac9-ad464252aba1", "sighting_of_ref": "indicator--ad94e504-7843-4077-8d84-bb7ba9106724", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c83fb9-174e-4b07-a1cb-b8dac0ef2a20", "sighting_of_ref": "indicator--ad94e504-7843-4077-8d84-bb7ba9106724", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f204e8-ba65-4502-8840-d91ebf656eb9", "sighting_of_ref": "indicator--476f0a27-b8a0-46c9-9c02-2f50c034aa32", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045d4551-5b94-4021-a5c2-6534249e9741", "sighting_of_ref": "indicator--476f0a27-b8a0-46c9-9c02-2f50c034aa32", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef40df8-8974-41ab-bb37-b51f22dbbadc", "sighting_of_ref": "indicator--64ba6c85-2dea-4e99-b650-10fba5a85789", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c90eec5-67ef-4ce3-94d9-448e2ab0ccb2", "sighting_of_ref": "indicator--64ba6c85-2dea-4e99-b650-10fba5a85789", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e4839e-3284-473d-86d9-ba5303982e37", "sighting_of_ref": "indicator--0bfca68c-e6cd-4316-a802-e9722775815b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7fd741-aa0f-4f2b-81af-cb12131a396c", "sighting_of_ref": "indicator--96ab6c2a-4c47-4129-a0fe-422abc2644b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7823c52-19f3-44e9-9b1d-6c3ddc0e3354", "sighting_of_ref": "indicator--b63cd426-d916-410b-9ead-74e956913cb0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6c9ead-2e5c-4279-8430-0382aa768704", "sighting_of_ref": "indicator--f09f31da-b303-4725-8b41-e456c895b8c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa6332b-4834-4b90-a6ce-6e7b1794443e", "sighting_of_ref": "indicator--e7b8a97b-362f-490c-ac12-c4292fff184f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f2612a-2c28-4e74-8816-63471ac51f22", "sighting_of_ref": "indicator--c00160b1-957c-4a7f-834e-b737eb643156", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0668f8-37c9-44f9-a0ee-ab0376b7ace3", "sighting_of_ref": "indicator--b2edf002-014d-4e2d-80e1-be4e51f894b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166fc270-3518-4762-908d-976818997d7b", "sighting_of_ref": "indicator--b2edf002-014d-4e2d-80e1-be4e51f894b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b461fed1-2a2b-4a84-a936-268ecafd113e", "sighting_of_ref": "indicator--b2edf002-014d-4e2d-80e1-be4e51f894b8", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de699a8-ffbb-48b1-bf08-794636d6a6f8", "sighting_of_ref": "indicator--ba571c52-c45e-4a82-a91d-8f905ce9b376", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56bbb94-e034-45da-be7e-87753ba2170d", "sighting_of_ref": "indicator--44fc88d0-58de-478d-8743-13ec42f8080d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f95f119-9f24-42ba-8da1-d5bb6a37cc56", "sighting_of_ref": "indicator--ff1379dc-6db8-4824-8605-c13ae4dd49a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69fb588-d87f-4ecf-85cf-694b7ca89086", "sighting_of_ref": "indicator--2c04083a-fcea-4411-825d-7f297b4ee872", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736040ab-15b4-4221-9d68-b50b891d2d6b", "sighting_of_ref": "indicator--dab10233-3bf8-4349-992a-86283c7cd9ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d185e01b-2388-41a8-8819-c39adfc0f589", "sighting_of_ref": "indicator--0bf14f59-3482-49f9-ae87-a71984513da2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94401e0d-56f2-4df8-b6aa-d1976420a59c", "sighting_of_ref": "indicator--59244f5b-8246-40b4-8c9f-ab7f3604ee1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74522ce3-2d10-4da4-983e-50a6cd38eb8e", "sighting_of_ref": "indicator--94cc9446-c9e7-4a66-92d8-0f89cf40fec2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917d2239-3eac-47e9-a42d-da575213c2d1", "sighting_of_ref": "indicator--94cc9446-c9e7-4a66-92d8-0f89cf40fec2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fbf855-3b56-4603-ba2d-5e1d261254dc", "sighting_of_ref": "indicator--79921f12-6a77-4ff5-aa08-68130c6ea833", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c592f4e4-2475-4b82-80b2-00aa23baf9f5", "sighting_of_ref": "indicator--79921f12-6a77-4ff5-aa08-68130c6ea833", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f837b92-3781-49d1-bb29-30f8f5e24883", "sighting_of_ref": "indicator--79921f12-6a77-4ff5-aa08-68130c6ea833", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae13b75-e55c-47b6-97e3-11f99b636c21", "sighting_of_ref": "indicator--11b53a34-4994-436e-bd7a-3351112346f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79abe419-1048-4cef-898f-bb3a413fe003", "sighting_of_ref": "indicator--11b53a34-4994-436e-bd7a-3351112346f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a8f805-4ff1-4c08-b96c-d20d6ad97ae1", "sighting_of_ref": "indicator--8ff5b98e-0d35-4d1b-b5e4-01dc8223e82a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510e9cd9-9ca6-46e8-afc0-2170c95ef775", "sighting_of_ref": "indicator--8ff5b98e-0d35-4d1b-b5e4-01dc8223e82a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e18753-7a82-4d03-821f-0c86d9be81ed", "sighting_of_ref": "indicator--ad6ceaf4-1e86-4fc0-9a4c-a8af4357c4a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17810bf6-2673-43c7-acb7-dbd2dd8b6eb2", "sighting_of_ref": "indicator--99d636b9-9d0e-4546-a2bc-7d566f59728f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a24d3b-7f18-4edf-8bae-3ed97d8c083d", "sighting_of_ref": "indicator--ce95898e-02a2-42d4-8f84-004e17166baf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7778d3-9701-4b2e-85d5-9c403e534268", "sighting_of_ref": "indicator--840e4360-6585-4a77-bad9-c24c8f261c57", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d0f601-0ac9-4b62-aac0-92ccabd9b599", "sighting_of_ref": "indicator--840e4360-6585-4a77-bad9-c24c8f261c57", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acb10a0-6be5-4151-b713-26da0dab94b3", "sighting_of_ref": "indicator--3a7a71ea-faef-4d22-8976-ca1454d1e2b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bffc257-57d5-44a8-9b07-52fa431f786e", "sighting_of_ref": "indicator--3a7a71ea-faef-4d22-8976-ca1454d1e2b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c8d599-86c8-49c5-b730-eda6da9bc3ec", "sighting_of_ref": "indicator--971aec2e-1735-4448-88f5-99bd8599d436", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87edd733-f572-4941-8b3d-5ce84857c4be", "sighting_of_ref": "indicator--971aec2e-1735-4448-88f5-99bd8599d436", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aceaaca-6126-42fa-b6d3-fc6f7627f41c", "sighting_of_ref": "indicator--7e1cc131-c373-47f2-a06e-0b530761fa53", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df6ed7b-89cf-4a51-be23-e8183f059d86", "sighting_of_ref": "indicator--7e1cc131-c373-47f2-a06e-0b530761fa53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58190a0d-823a-4a53-bb5a-8d8f933db07f", "sighting_of_ref": "indicator--306c2a6d-909e-4a67-9cd4-409f8a2f393b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361fc215-1d9c-4c63-b801-51fcbef9cfc0", "sighting_of_ref": "indicator--eda5baff-b540-4755-89d2-db33658d3a5b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa65cec5-3f40-4c1e-9d21-ce9207eb7cf9", "sighting_of_ref": "indicator--eda5baff-b540-4755-89d2-db33658d3a5b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e88f3fc-2e1a-4070-88f7-5e47c259e4b3", "sighting_of_ref": "indicator--cb3153f5-59e6-4be0-90c7-e26887efc5a3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82250367-2d60-4a09-ab20-ef4f1b9dc7c3", "sighting_of_ref": "indicator--efd8afe4-c69e-4ab1-a504-36072d5b03b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5a7025-1bf3-4ea7-8043-5864f47f96c0", "sighting_of_ref": "indicator--4a0efdeb-20a7-4d8d-a5a9-c9144a2ebfb5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d556c5-9aa2-421f-a720-47c48d7cb2e9", "sighting_of_ref": "indicator--3798e7ab-be0c-4c83-9d59-231af5eefa0c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72aa2cf3-8af4-4388-ae46-441eb96f214d", "sighting_of_ref": "indicator--3798e7ab-be0c-4c83-9d59-231af5eefa0c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129467ec-80e8-48e0-a5ef-2237299d12a8", "sighting_of_ref": "indicator--28b30423-f1fb-40e1-87be-738f86a57aed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2c1d38-711f-4990-9ddd-a320442ff3c4", "sighting_of_ref": "indicator--28b30423-f1fb-40e1-87be-738f86a57aed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c80f29d-3c66-4e05-8809-99a33ccfc727", "sighting_of_ref": "indicator--5ec31a6a-d68b-4e54-af47-fdf454c413ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437c8837-4816-465b-a645-5ef6ccdf3cc6", "sighting_of_ref": "indicator--5ec31a6a-d68b-4e54-af47-fdf454c413ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb845f3-96a4-4145-9c96-2a235f34b1e8", "sighting_of_ref": "indicator--b240c0ff-769c-43d0-841f-b4f180db5d26", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06f5b23-5d82-4437-8f3f-65954a042797", "sighting_of_ref": "indicator--b2a30df3-73ee-471f-bc7d-9b519e38ef0e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad49aed5-38a9-4922-93df-18590aa3f3f5", "sighting_of_ref": "indicator--b2a30df3-73ee-471f-bc7d-9b519e38ef0e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bf300b-8bb3-447d-ab48-33c0792f78dc", "sighting_of_ref": "indicator--eca7451e-12d4-4fd5-a495-36ada9f293f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c827d11-aebf-4373-a209-97d88bcf3497", "sighting_of_ref": "indicator--79b401c3-8af6-41fe-bac3-c39894f6a6c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17ff843-60e0-48c4-ad26-6efb1423826c", "sighting_of_ref": "indicator--c6adae0b-a2ef-4ce6-83b8-77b68c6b12f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9f441b-fadd-46b7-9cc6-b939f3228c3c", "sighting_of_ref": "indicator--c90b0534-252a-473a-ac6b-e3b713fc4c0c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a92a7a-4188-4310-bfa7-dc70b5f55ea8", "sighting_of_ref": "indicator--2476734d-f35d-4619-9da3-43837c419635", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692ca6f5-85c2-4aa1-9c4d-bfd75e2de348", "sighting_of_ref": "indicator--d39bbbee-510f-4644-a274-1e63999acd81", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450e8271-f52d-4c21-bf7a-1e7878d19667", "sighting_of_ref": "indicator--4b4aaa0b-379a-4a44-8f20-2f6049cc0258", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d09c92-3406-4a0b-823c-500403f5a9e5", "sighting_of_ref": "indicator--14d98d43-ff88-49e5-9852-63b64187b88e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c96313b-d2bf-48e2-991e-1f7db293ee7c", "sighting_of_ref": "indicator--7afcc466-1f60-4b60-8d92-f0c196060089", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16705785-fb65-40aa-a8f1-38bab61a0087", "sighting_of_ref": "indicator--7afcc466-1f60-4b60-8d92-f0c196060089", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a693d56a-2104-4066-9a76-01055e0adf14", "sighting_of_ref": "indicator--4c5818ab-d044-41ce-a8dc-c1726f37998f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a09d4a-83db-4f69-b573-a52d1ef73246", "sighting_of_ref": "indicator--27fc36c2-6dff-46bf-908c-d04d29461f6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e31374-3611-4907-bf6a-187bd3ad27c2", "sighting_of_ref": "indicator--27fc36c2-6dff-46bf-908c-d04d29461f6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a10b0e2-9700-450e-bef3-16d2a94152d6", "sighting_of_ref": "indicator--352a4f3f-0c79-4341-9be1-bd0736da3933", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfd1ce5-999b-4f78-8e00-3e2543d1a4e2", "sighting_of_ref": "indicator--aaedffaa-e878-4e8a-8885-5c4c3a693051", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6819cc-5e32-4a51-8a94-b3728c0a39b8", "sighting_of_ref": "indicator--24364ccb-d0cc-48b6-a3a4-57506072b698", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099aa202-5389-4713-af90-c1964e33a7e4", "sighting_of_ref": "indicator--24364ccb-d0cc-48b6-a3a4-57506072b698", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd495a36-ef89-4337-8e2f-251f2fa3e62e", "sighting_of_ref": "indicator--8e0d466f-bd55-4c61-9ff8-97e40ed47c2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f89b164-354b-41c7-b0c6-f9513df4592d", "sighting_of_ref": "indicator--ec3ae626-a1aa-45ba-8475-e41be145302e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ed6333-c633-4149-ba15-0a0a734c5d97", "sighting_of_ref": "indicator--fb39bc85-b814-4b7f-8319-5af7ce15612a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c37423d-728d-4118-aade-3051e5fd675e", "sighting_of_ref": "indicator--8d50326e-1852-4847-99f7-eafbb55078ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f13b2f7-7a2d-44ac-9f76-14b61572db26", "sighting_of_ref": "indicator--8d50326e-1852-4847-99f7-eafbb55078ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819ced04-0dda-4e2f-b475-d7040867ddf0", "sighting_of_ref": "indicator--7b46de15-e91c-4a93-9ffa-670e8985c777", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7222fc-17d4-40c5-a4f8-001348339469", "sighting_of_ref": "indicator--a246fc7e-33dd-41fc-93a1-9a89f91a3df7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16a921b-9c1d-4811-9f16-4ae7faa5c6cf", "sighting_of_ref": "indicator--a246fc7e-33dd-41fc-93a1-9a89f91a3df7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec13d55-1299-4fd5-999b-8a07e1b025bd", "sighting_of_ref": "indicator--4cd5149f-c58e-4bb9-b859-67c497866e8c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c1603c-15b6-438f-99f1-dd609d7e3a72", "sighting_of_ref": "indicator--d430e8a5-607c-45ad-8a40-c27750d301e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167f4430-7ecd-458a-a9b9-1d79c453a21c", "sighting_of_ref": "indicator--c3624e8e-dd97-4465-9370-7a36827168b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c9a27e-2ed1-46e2-87a7-1fae1c25bfbf", "sighting_of_ref": "indicator--c3624e8e-dd97-4465-9370-7a36827168b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8032eb-c783-4916-9bcd-67be61d69926", "sighting_of_ref": "indicator--3c7f8706-2b5e-4df2-b8ec-18e6c20dff84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87df889-5c55-4f61-abce-beaf3c75add2", "sighting_of_ref": "indicator--3c7f8706-2b5e-4df2-b8ec-18e6c20dff84", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c40ee8d-33b1-4de9-be7e-5044227b7601", "sighting_of_ref": "indicator--975cfd8e-3151-4515-90ce-fa38760cf6ac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc0f93d-2813-43f6-b8af-c502c22e2132", "sighting_of_ref": "indicator--975cfd8e-3151-4515-90ce-fa38760cf6ac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db94026-187d-45f5-8f7f-4e14819b557a", "sighting_of_ref": "indicator--9dfa81af-ad04-4b13-8567-db892e9c48c7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74d309d-7aab-4983-8dea-84a0b98618bc", "sighting_of_ref": "indicator--f6073483-6208-4cdf-b269-351497a7c712", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eff344b-33dc-4bfc-869a-c54a37bc5e1e", "sighting_of_ref": "indicator--84ef4a40-8be0-4a92-b110-1b5cc7bfca7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dfbb6f-4189-4c4e-96a8-e91879687e2c", "sighting_of_ref": "indicator--84ef4a40-8be0-4a92-b110-1b5cc7bfca7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc03604-536d-4081-abda-5e8472cd99c5", "sighting_of_ref": "indicator--7ca166de-c6c5-4b6c-8bc8-eac7c3ec08b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c0b62d-9d98-49dc-9d61-95650a92ce46", "sighting_of_ref": "indicator--a51855d9-e5f6-4923-a606-f83dd9e22764", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc8564b-1cc4-46d0-bc7e-fbceeafdd118", "sighting_of_ref": "indicator--4ac73831-1008-4fdd-8965-2905c2b27ad5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b57fe85-e522-4a99-886b-f7d2113c6eef", "sighting_of_ref": "indicator--3048bb45-22f6-4fe2-bc6c-061cc45a0e37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497a4b60-e281-4139-8350-11f57992fa8c", "sighting_of_ref": "indicator--4dca1a6f-2117-43ae-8e6c-163cac57dba2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2356c61-c2af-43f8-ac2c-5d8522b9faa8", "sighting_of_ref": "indicator--4dca1a6f-2117-43ae-8e6c-163cac57dba2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c980e1-d02f-4e9b-8634-7c8e90448e9c", "sighting_of_ref": "indicator--f7ad8c6b-05a4-46df-bc0c-dc4d71bbd86c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adc330b-d67a-4dae-ae04-29f0cf8de06b", "sighting_of_ref": "indicator--8f7a9383-da61-4e78-b94c-ee8c5209d71c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b23e27-2acd-4478-a8da-de96dbbd88fc", "sighting_of_ref": "indicator--6c0ad1f8-073a-4539-afb7-cbe507986f4a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bddd6a-9487-4f5c-bee5-9b5727548ead", "sighting_of_ref": "indicator--ff128112-c966-4cab-8cae-0272d09f9a59", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0aba8f-a661-445a-aa01-a5502de3104a", "sighting_of_ref": "indicator--ff128112-c966-4cab-8cae-0272d09f9a59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f839778-8230-48a5-8ce8-ba80f75a7625", "sighting_of_ref": "indicator--af943fe5-afd9-4e9f-a3f9-866072b0c712", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a687104-ee27-4b30-9fcf-0b290a750894", "sighting_of_ref": "indicator--af943fe5-afd9-4e9f-a3f9-866072b0c712", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ceca0-5202-4dd4-a46e-d5280edc1c46", "sighting_of_ref": "indicator--08e0aec6-0907-454f-92ab-7ee6d25a4b90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753ad7cf-b91f-4550-9888-7963df195bac", "sighting_of_ref": "indicator--1fa096d5-09bc-469f-b26d-c80a9f0840d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc52ca89-e015-4249-97cd-11af6bccb044", "sighting_of_ref": "indicator--85a8fcad-20d8-483c-9a76-34487a696a72", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa52f0ff-6bb2-416c-b359-f8074ee4bb3f", "sighting_of_ref": "indicator--daba9792-df93-4d4c-99b2-ceb82e6422a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356792d7-12c0-4d77-8581-d48e26e7dd81", "sighting_of_ref": "indicator--8bd0f4ab-6540-472a-a3c5-eb362d258202", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d4b18e-55bb-4cc5-b9ec-86bc8a89215c", "sighting_of_ref": "indicator--737f0599-9ca6-4941-abe4-14729db45cec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8f0196-8697-4b2a-aea9-7a7432e092f0", "sighting_of_ref": "indicator--94382f0e-3315-4783-b45a-03850fe2a0d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c4fc3e-e795-4e44-af5b-22b1d01e10b3", "sighting_of_ref": "indicator--6e8ec6e5-4838-4594-8c8f-a6059541bd1d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669b8b99-ee8c-4bb1-956b-2ae6560743c3", "sighting_of_ref": "indicator--f500f502-15c6-4637-81de-fff10b565413", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49635f0-8458-4d34-9fde-e4dbcfe8990d", "sighting_of_ref": "indicator--2f60c7ab-4aef-4229-bbc2-4a32d9dec9f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb9e51e-802a-4b9f-b3b7-874d849a3912", "sighting_of_ref": "indicator--f532aee9-d3a1-4924-9e32-72cfeb5173b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca0910f-3690-4f65-91dc-b9ce4f14aee2", "sighting_of_ref": "indicator--f62009c3-5a99-414b-84ce-360c51f80016", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9915e1c3-e6ed-478d-b1a5-d393bbdeeda6", "sighting_of_ref": "indicator--f62009c3-5a99-414b-84ce-360c51f80016", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c56582-35ab-44a2-ba4b-0f962e091ae3", "sighting_of_ref": "indicator--4f39fe5f-803b-4d6a-9dba-e3ca4b750c2f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2254bf8-0c17-4fa0-a85d-912d2fa2798d", "sighting_of_ref": "indicator--943be684-665f-442f-9cea-ba57bf6ce16d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b937d54-c766-40af-9def-74e24a5c3410", "sighting_of_ref": "indicator--943be684-665f-442f-9cea-ba57bf6ce16d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6681005-5b6e-4704-9f3c-9104be90e5b9", "sighting_of_ref": "indicator--01ae7d6d-464a-42b0-bb05-37107236ec7d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a214df-7b99-4421-ba09-70acb596a898", "sighting_of_ref": "indicator--01ae7d6d-464a-42b0-bb05-37107236ec7d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6ea480-926e-43c4-9a18-c238ff865ddb", "sighting_of_ref": "indicator--eba5d19e-36e8-46dd-8c64-e35cbc62fa07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4f6ef0-c1bd-4c9a-889a-6345cd9b9d84", "sighting_of_ref": "indicator--eba5d19e-36e8-46dd-8c64-e35cbc62fa07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61166d12-7e50-48b6-83e4-83ef84e645ab", "sighting_of_ref": "indicator--b092be2b-9753-47f9-963e-61e22144c351", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512a15e6-affe-42ab-9206-ec1c09ccfd4f", "sighting_of_ref": "indicator--b092be2b-9753-47f9-963e-61e22144c351", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b75bcd6-6264-4b8f-8045-148221503ffc", "sighting_of_ref": "indicator--f33375f4-8194-4c26-a6ef-e735ab173482", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6e9923-c9b0-4e6c-ad99-3f023e6270a3", "sighting_of_ref": "indicator--f33375f4-8194-4c26-a6ef-e735ab173482", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68481d04-5a0f-489f-b2f8-5838da137471", "sighting_of_ref": "indicator--b8527470-044e-4870-a6e1-6dcffada219e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc49b049-3b03-4c3b-8eeb-ed166263deb2", "sighting_of_ref": "indicator--cdc4233b-328e-45ba-8d09-be2bb1ce31b7", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0468adf4-2c7f-4da8-a9eb-bb32f3625aa7", "sighting_of_ref": "indicator--fb1171bb-cabb-46f0-9cb6-391c51204998", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605b579b-98e8-4e81-9d78-adffc289fdb6", "sighting_of_ref": "indicator--b56af5ce-dfef-4654-b78f-45260420383e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cde9474-6c86-4841-a51c-a451e71ae2e1", "sighting_of_ref": "indicator--945b15d5-c588-47ae-9baa-40185123a4ee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217bdd70-6d35-4518-bc83-8ba6dda93453", "sighting_of_ref": "indicator--c2d61b06-ec46-4e48-9e4b-8dae9ad23ce9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234b1790-d5d8-40a8-9238-1898edc6f558", "sighting_of_ref": "indicator--dfdb6532-4998-4c42-92cb-50435c538dc5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563dffaf-a333-4796-8978-9f98e4e967d4", "sighting_of_ref": "indicator--dfdb6532-4998-4c42-92cb-50435c538dc5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7818f587-5942-4408-a5b7-84312cfffdfc", "sighting_of_ref": "indicator--432cefbe-9baa-4b39-9ba2-435fc44a633c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dd1fd5-6140-4ffd-8d76-da284a2cdd6d", "sighting_of_ref": "indicator--432cefbe-9baa-4b39-9ba2-435fc44a633c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ff6ab2-9916-446d-af7c-3213475b56a2", "sighting_of_ref": "indicator--47ab1810-cd85-42e2-88fe-37f8d439b650", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc9e873-0ac8-4177-afc6-153940c7ccad", "sighting_of_ref": "indicator--47ab1810-cd85-42e2-88fe-37f8d439b650", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b70f5d-4d12-4675-8fa5-49430e322cba", "sighting_of_ref": "indicator--2220480b-2431-465b-b13a-10d8b43626a2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cd3a9f-fb12-4466-94ce-307a4c13c4a8", "sighting_of_ref": "indicator--2220480b-2431-465b-b13a-10d8b43626a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59ce917-e6a6-4aca-bfbd-60962af31865", "sighting_of_ref": "indicator--76bed13b-ef73-49e7-9722-b8cd3eb03215", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1224c233-d6f1-46c5-ab7a-1cda52dec6a1", "sighting_of_ref": "indicator--76bed13b-ef73-49e7-9722-b8cd3eb03215", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356785d4-8fd7-4944-9fe9-353f9fcb5e71", "sighting_of_ref": "indicator--a06a51c0-dec2-46fa-8908-66d53fa0cf3f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b262e3-cc63-489c-8ae2-6369be9c9b84", "sighting_of_ref": "indicator--a06a51c0-dec2-46fa-8908-66d53fa0cf3f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06972db1-dd0c-43d7-a5d4-d923556bd658", "sighting_of_ref": "indicator--40aa9da2-9433-4888-adfd-35d40b37bc7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81351365-f811-4861-89d8-af93d34f8537", "sighting_of_ref": "indicator--ebbd7371-a95a-452e-b651-ad036edd1835", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902a3872-d153-4284-a7ac-1fbb3017ca9f", "sighting_of_ref": "indicator--232fef5d-162d-4cbd-a0d2-6b220960078a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e890ee8-011f-4906-a3ef-2e843bd8907c", "sighting_of_ref": "indicator--8af51197-2609-450a-bde7-0c22e6427ab2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98caba84-b785-4318-ba94-f69554d08c69", "sighting_of_ref": "indicator--276ed2cb-24c9-453f-b041-881f958b1f2b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683f5951-b4ab-42e3-ad49-1b4755c205b7", "sighting_of_ref": "indicator--35aca83b-985c-494c-b298-9f50f4bae010", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c477ab04-8c12-4507-a486-90fbd770abc1", "sighting_of_ref": "indicator--7b513b4a-c173-4ce4-ac63-382420805ab8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78403ce-fd08-4433-9482-7806e46f1fad", "sighting_of_ref": "indicator--b3b214c1-c69b-4a45-8219-b496ab12bc5d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72732d1b-5485-4073-a16d-f3767091f5c7", "sighting_of_ref": "indicator--b3b214c1-c69b-4a45-8219-b496ab12bc5d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfadeb0-4ff4-4ac9-a3c4-d168e82f11c0", "sighting_of_ref": "indicator--3a1ee82a-bae7-4137-b01a-13da2ee02109", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dede8797-f1c3-4483-85a8-26a1927d35ae", "sighting_of_ref": "indicator--f2e71218-588a-4c2a-967a-36e33da52aa8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda9776f-efdf-45f1-af0e-c4a6d3aa0baa", "sighting_of_ref": "indicator--29913e43-260c-419b-bbcc-03dd5868fa3a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7ab062-5b93-43a6-b716-37a8fa363ade", "sighting_of_ref": "indicator--471d041d-32dd-49e5-af63-6e7604c7f22d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dd4827-42a7-4ecb-a26b-ae0b5b71801e", "sighting_of_ref": "indicator--672d50e6-7611-4b57-bcab-a8967516e2be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd59629-5322-4466-9609-d781a6f8c234", "sighting_of_ref": "indicator--87df2332-ca07-44af-baf4-6630dbba6758", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11da2440-358b-4a51-86f9-636c8f33ddaf", "sighting_of_ref": "indicator--047cf75f-fcd8-4113-a901-e66f6ad8b7bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c83984-5f41-46a8-9f95-bd1df29e759f", "sighting_of_ref": "indicator--87729e82-f731-4f2b-abbf-e28a51b5fd6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e1b386-10e3-4c4b-9a39-a9de2a2b6f8c", "sighting_of_ref": "indicator--23c6384a-3079-4122-bb67-b7efd80beb22", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb6fc8a-6408-4da5-9901-caa2eb10d91e", "sighting_of_ref": "indicator--5b7b4f3d-c57b-48ff-947c-88bb8b1456dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2e5f78-ca34-498b-bf3f-ede40067bfda", "sighting_of_ref": "indicator--41b45c19-26e6-4943-a822-ea6a7936ddc7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb83f35-b730-4f2e-97fb-26c60c951d11", "sighting_of_ref": "indicator--048362f8-9a76-4c46-b932-92f581dc63cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209a6d77-5032-405c-a15e-ecfc78e2e905", "sighting_of_ref": "indicator--625bc55a-ee11-4945-a75d-ac694b5b264b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccf082f-687d-45e6-b578-2530318f191f", "sighting_of_ref": "indicator--5c300291-5322-40c5-ade0-f40d1f0a2dbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a6daf3-d6b1-4592-9915-a2f8012b812f", "sighting_of_ref": "indicator--1b70aa83-7550-421c-a958-b0fd75a3ebf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadee963-c11a-45dd-b75e-828c21272cde", "sighting_of_ref": "indicator--1b70aa83-7550-421c-a958-b0fd75a3ebf3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c979ce-f9f4-452d-bbc6-6245da3bdcbe", "sighting_of_ref": "indicator--4301dab0-b13e-4400-9b53-fd2af67e7cd0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6dfb30-de9e-44ff-b52f-6bf12e2e45e0", "sighting_of_ref": "indicator--4301dab0-b13e-4400-9b53-fd2af67e7cd0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba65a2a2-fbfe-471b-8f1a-ad51764f4165", "sighting_of_ref": "indicator--aa24bfe2-599f-4592-aa3c-6beeea86b612", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d66b39-81a2-409a-ae1b-7f9d98747fd9", "sighting_of_ref": "indicator--5268666f-4da9-46a1-9e55-b8d2f2cb6d6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254a879e-818e-4595-a4e0-86a68be0b988", "sighting_of_ref": "indicator--44394e4d-983f-408f-b65b-1c9609820a32", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9df6558-6ee8-4886-959f-8d2473c52160", "sighting_of_ref": "indicator--44394e4d-983f-408f-b65b-1c9609820a32", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdea73e-868e-452a-a2df-a814ce75fefe", "sighting_of_ref": "indicator--6a42a1d8-e387-45e3-a6d0-4fea7da604ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2ec54b-140a-49af-ab39-3cac9a36c025", "sighting_of_ref": "indicator--bb10d1ab-fc28-47fc-abdd-1ac8cf22de7f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dc08d7-7fcd-4c03-bbe9-f986416f7b08", "sighting_of_ref": "indicator--4521689b-b1cf-4bed-be84-a69e209c9d12", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6deaa3-e52c-4789-878f-a7ae38f8b855", "sighting_of_ref": "indicator--8afd12d3-48d0-4c02-b1e9-712f1756e076", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacf5c21-ba14-41ae-aea6-3e8d0d4d5c5d", "sighting_of_ref": "indicator--f004d9c5-716f-46ca-a03c-a21456f99f4d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0828113a-43f5-416d-88dd-3e910f78b2ae", "sighting_of_ref": "indicator--a9d68d44-de19-472b-90e5-a5c10091cc0b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992b316b-87b0-4277-86cd-23249edda2c6", "sighting_of_ref": "indicator--9bda779d-b57e-471a-9990-6fdde37343ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b90ec2c-0d87-4ba9-9b72-6b016777b64d", "sighting_of_ref": "indicator--abd7c502-fe3e-47bd-b283-6ad2ba6937e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f335953-b4d5-463c-bea5-187c75a4e5b3", "sighting_of_ref": "indicator--abd7c502-fe3e-47bd-b283-6ad2ba6937e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3aaed6-7e26-42e5-a250-31d452629d14", "sighting_of_ref": "indicator--d5ecd686-b5d1-4cfa-bcfa-313e4c229cb3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176c1819-9c58-42f7-86de-a432e9ea0f6c", "sighting_of_ref": "indicator--c2aad011-1b6c-43fc-acd0-106dd55588fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524fcea3-0901-4550-9b56-52ce6c7f5ee3", "sighting_of_ref": "indicator--cadf3744-c81e-411b-aa1e-395614624a52", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0219e2d-b8cf-4b74-b689-5176ba5609e2", "sighting_of_ref": "indicator--04954a28-c88e-4059-a044-6b48f02126f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d71d3d-d9fd-42df-8158-04f8a17c779e", "sighting_of_ref": "indicator--04954a28-c88e-4059-a044-6b48f02126f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6601d4d-97d8-47f2-9e8e-d5ec2ea7df8d", "sighting_of_ref": "indicator--bb733606-a084-4212-a10f-3337f56bb1e4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3b5f1c-325c-4e78-8e07-dbe4e04ce898", "sighting_of_ref": "indicator--812c326e-8124-4c39-ab4b-62444512a665", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb68905c-d093-4d53-9fef-cf3f715b564b", "sighting_of_ref": "indicator--5ec92828-93ac-4c69-9827-2a4f20657cfe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c22900-1a49-48f7-96b0-7cffe44e308d", "sighting_of_ref": "indicator--5ec92828-93ac-4c69-9827-2a4f20657cfe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97600a59-5b7e-48be-af6f-59dbfbfa4e65", "sighting_of_ref": "indicator--af217b01-cdae-4317-8416-42a1c4c9cb52", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becb3e6e-ab23-4b66-967b-fbca8f2f1f37", "sighting_of_ref": "indicator--af217b01-cdae-4317-8416-42a1c4c9cb52", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e337a532-98e6-455f-995a-3e5446aa99fd", "sighting_of_ref": "indicator--d2ea4dbd-54ab-4571-86f2-39d8792dd978", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705322ed-3061-4b0d-8b6b-ca319c25d707", "sighting_of_ref": "indicator--09b3ed26-de60-4adf-b5b7-448fca279583", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85dfebf-197e-4b61-9dd4-0b2b34cf992c", "sighting_of_ref": "indicator--a2af0648-fdc2-4732-a04f-c6175173acbe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18accd80-f685-4e76-8322-e49e334474cd", "sighting_of_ref": "indicator--e91afe54-b63b-4dc0-b9e3-b84702f5ad78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4742506e-ae2e-4bd3-8c24-b9ef2738453c", "sighting_of_ref": "indicator--5f97267c-0889-473b-a827-e9b314ab6095", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcb49c0-d1d6-4723-8d7f-03f5acfe8a86", "sighting_of_ref": "indicator--5f97267c-0889-473b-a827-e9b314ab6095", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b54dd05-8a62-44bf-b95c-e053aaee4c7a", "sighting_of_ref": "indicator--7f5569df-30a7-4256-ba69-738e77dfbfc7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521e38ad-7631-449a-90e3-f16cfc6b709e", "sighting_of_ref": "indicator--fea40dec-d8d3-4337-a993-7b01ced48c19", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead315e1-3bc1-4238-aa2f-9baf02a4c534", "sighting_of_ref": "indicator--a149e376-7f7a-4ab6-8e28-e62fe16e04c7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a817fd8-3f13-4813-a311-e4f61013b5bf", "sighting_of_ref": "indicator--d5c38c54-7368-4c6a-b696-c2db2bdd4ec0", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83d34ac-1cef-4840-a02b-3a1675348612", "sighting_of_ref": "indicator--71e80d40-5995-46cc-966c-f57f10230d64", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75e331-e0f0-4101-8659-28898c586709", "sighting_of_ref": "indicator--71e80d40-5995-46cc-966c-f57f10230d64", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bd6624-eb4e-40c0-a7c2-a7445812a718", "sighting_of_ref": "indicator--233549ce-8de9-4006-ad81-e3dca7671ccc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2400d3e3-9083-41a3-a658-70b6e2921860", "sighting_of_ref": "indicator--760fb423-8d19-430e-83d8-50738af4c35e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dd7dab-5bd3-498a-b0f5-f62bfe138795", "sighting_of_ref": "indicator--760fb423-8d19-430e-83d8-50738af4c35e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc0fa1c-3c43-4684-a3fe-cbfcff95e6d9", "sighting_of_ref": "indicator--0935387b-4ae6-4f8c-bd0c-61f8cbc0f257", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4288bdfc-51c5-4770-938f-12e2d9609a87", "sighting_of_ref": "indicator--0935387b-4ae6-4f8c-bd0c-61f8cbc0f257", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266a7b3c-dea3-42d0-bde5-9093a9945b6c", "sighting_of_ref": "indicator--ef4c414b-dba3-4d5f-b2ee-4195eb44afea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f471371-8d8a-4005-9173-6ebffa88ed16", "sighting_of_ref": "indicator--ef4c414b-dba3-4d5f-b2ee-4195eb44afea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1172c8e8-6729-4709-889f-8e5c72a1e738", "sighting_of_ref": "indicator--8443dbcd-87ca-49e8-9eb2-16161425966a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a7462a-ccfd-4205-bdc0-815463ae26ab", "sighting_of_ref": "indicator--8443dbcd-87ca-49e8-9eb2-16161425966a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26534cc-8d75-4a70-8517-429bb96da379", "sighting_of_ref": "indicator--8bcdcf5c-4875-43dc-8bfb-88ae934977e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da9d844-180c-430e-8eec-8fb2039cfebb", "sighting_of_ref": "indicator--7384578f-54c6-4c3e-86fd-5a93214c63b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7302fb3-b2b8-47d5-90c4-f9f78ef6f9a9", "sighting_of_ref": "indicator--c73db924-da27-4036-8b32-b74ab2c3c5b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3467fc-99dd-4d27-a665-624892ae3383", "sighting_of_ref": "indicator--c73db924-da27-4036-8b32-b74ab2c3c5b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be22fac-f4ec-41bd-a8c5-0fcbadfb3942", "sighting_of_ref": "indicator--558340af-e600-4954-8217-fd20535a697e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8779b6db-4ebd-4ffe-bce3-641dbc9ebcb0", "sighting_of_ref": "indicator--558340af-e600-4954-8217-fd20535a697e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36330e24-3913-4bae-a82d-1ea1a5506eb5", "sighting_of_ref": "indicator--53854a92-4579-4a8b-b022-2757d2ed5b17", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3edecd8-3fa6-4d3f-af22-f126ee598667", "sighting_of_ref": "indicator--16b4cebd-031e-44e8-8650-eff5f4423370", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3443c62e-1fd3-4480-ac4f-cf4e78781fc2", "sighting_of_ref": "indicator--16b4cebd-031e-44e8-8650-eff5f4423370", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f90386d-ec7b-4293-a14b-c0156f5e0b7c", "sighting_of_ref": "indicator--e4619b35-6b61-49a8-940b-9dfee5f88e06", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0589616e-3a8c-4948-a5ae-60a3b28614e5", "sighting_of_ref": "indicator--44a06b6d-1812-45b9-9842-f1f6fba537ea", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72186c1f-f4c8-4f34-a3c9-7d11363d8960", "sighting_of_ref": "indicator--606c3c8a-f1a1-4eb8-a4ee-58c8813a7b8e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8593c1e0-1eb2-4690-a091-afe19b551ce7", "sighting_of_ref": "indicator--7aaef0ed-d753-4254-a267-8cbc3ada9f4f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c55b785-2b65-4777-a888-b61d17bc1174", "sighting_of_ref": "indicator--4dcc965b-46ca-489d-87d0-094edf0e29ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d85074-0e2c-4ee9-b9c0-e020f5529b8a", "sighting_of_ref": "indicator--728eedf5-6d93-44f9-b712-c4e1da933c48", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9f205b-33f2-4b4d-ae0b-56903e0c7997", "sighting_of_ref": "indicator--16e62899-71d6-4787-bbd2-4c23760473fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e804540b-2bd8-46f2-9efb-a43442782508", "sighting_of_ref": "indicator--4eb1949d-c645-4619-b52f-97a83369868a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c7ade3-c3b2-46d2-b8fe-969593c9b8c2", "sighting_of_ref": "indicator--4eb1949d-c645-4619-b52f-97a83369868a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43481052-62ca-4c4f-9570-896faa9f7d9b", "sighting_of_ref": "indicator--1180b8d9-eb25-45c2-ace0-06099d692434", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bfa17a-d774-4c71-9d7f-e223454816be", "sighting_of_ref": "indicator--1180b8d9-eb25-45c2-ace0-06099d692434", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2705801-336e-4f6b-84d2-4b260b91f73d", "sighting_of_ref": "indicator--303eaa27-e80c-4264-903a-affb5ce3c949", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e79dc93-a385-42f9-9393-0a8963dfbc48", "sighting_of_ref": "indicator--9ddbb08f-82e1-496f-a7b8-cae9522750f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa2da8-2ea0-4e56-bde7-b5907748b56c", "sighting_of_ref": "indicator--2d680fd5-fa37-4dce-a358-277c5a16a86e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3da6c70-91a3-49a5-b073-926030f5f817", "sighting_of_ref": "indicator--2d680fd5-fa37-4dce-a358-277c5a16a86e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e697d41-1455-4fa5-ba0c-d09678d6be9c", "sighting_of_ref": "indicator--cc6a05a9-eb4f-47ed-a4e8-617a978beec9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb270bf2-1b30-4601-85b4-b21453e2dcb7", "sighting_of_ref": "indicator--cc6a05a9-eb4f-47ed-a4e8-617a978beec9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67501afc-c5f7-4f0e-abfc-f9005e2cadd8", "sighting_of_ref": "indicator--0c01e60d-a89a-4b99-ab8e-ea2dc4bfed70", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74344ac3-cbb6-4968-b03d-c14457034166", "sighting_of_ref": "indicator--0c01e60d-a89a-4b99-ab8e-ea2dc4bfed70", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5e7745-3beb-471e-86bd-dc4215110e02", "sighting_of_ref": "indicator--b4eee6c9-87b4-491d-b6e1-5e20cc59f21f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac01480-f2ce-466f-a0c8-75d7833e8098", "sighting_of_ref": "indicator--b4eee6c9-87b4-491d-b6e1-5e20cc59f21f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404ed3ed-c647-4a04-a7bd-4b9b43016bdc", "sighting_of_ref": "indicator--ddf5cf5b-da2b-4fa5-a25b-319b5170dfbc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca561fc7-7d49-40f6-b159-d592d7abc508", "sighting_of_ref": "indicator--b17e4d72-214e-4187-b08b-6051d3cf434c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f565b2-f635-4bcd-b5cb-f4b05fed79f3", "sighting_of_ref": "indicator--870495f6-393c-4967-9c7c-69d511d90039", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575d98a8-9b88-4ea2-8b47-4375abb3951a", "sighting_of_ref": "indicator--3d7f0dec-dc9b-4073-a775-854b5555bd76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1eb2447-f1c0-42fe-be21-990d7cfe7561", "sighting_of_ref": "indicator--3d7f0dec-dc9b-4073-a775-854b5555bd76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256c7851-9084-4ddf-8fba-1b0532f35401", "sighting_of_ref": "indicator--2d2eafec-bec5-4267-9bf2-6356a8fc719c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55daa3b7-1a5d-4e08-8d1f-bf02223ef5fb", "sighting_of_ref": "indicator--2afb8269-229a-40f0-ba98-5501e49bd889", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ec19e8-0fea-4e4c-9ab2-db6b3d7566d0", "sighting_of_ref": "indicator--baaebaec-1567-435b-af81-2fa7aa32c25e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb3b078-c10d-4555-9846-527fb445cd9a", "sighting_of_ref": "indicator--05e3a3fa-a5bc-44f3-9130-8060e1f2e05c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3c8abc-7413-4cbf-85a9-ea72ecc8bb17", "sighting_of_ref": "indicator--cdedff96-3fbc-4fc4-b4e0-e1efd07d532d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe31050-c001-4a93-92c7-5e132625b505", "sighting_of_ref": "indicator--cdedff96-3fbc-4fc4-b4e0-e1efd07d532d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c8781f-33e7-4657-a5da-0d8a0df53562", "sighting_of_ref": "indicator--2c11f0bd-e295-4466-af9a-3b153d5b8ccc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c361ea-35ec-4406-b7e7-ae63d743541b", "sighting_of_ref": "indicator--68b5326c-ffe1-42f2-b633-621ecc3e2e70", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9428d6-5665-4e06-8ff6-8cc28e1a479f", "sighting_of_ref": "indicator--68b5326c-ffe1-42f2-b633-621ecc3e2e70", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f6843a-89d6-4c78-a6d9-53af2534e5c0", "sighting_of_ref": "indicator--592eca62-4b1f-4c23-9169-371254de3f9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c80f3cc-6689-4b54-97d5-638bb3777be5", "sighting_of_ref": "indicator--592eca62-4b1f-4c23-9169-371254de3f9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55986ef5-aa1e-4a28-b710-d1ee479b32da", "sighting_of_ref": "indicator--39d7b661-e66f-4819-8961-689c641273a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9af925f-1169-4b46-a938-2d127dfb5194", "sighting_of_ref": "indicator--c649921e-c897-410c-b8b0-73d76ba95b69", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc57c06-561f-47d9-957d-6a4fd21557fb", "sighting_of_ref": "indicator--055ceb66-6899-409f-aed7-36bcad27b957", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c13354-3db8-4eed-b8f9-dad1f20a2dd3", "sighting_of_ref": "indicator--af68b003-4b47-4aab-ab4d-bd0cd4cef59a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599d2e21-95de-4664-a462-3b285fe2f9d1", "sighting_of_ref": "indicator--af68b003-4b47-4aab-ab4d-bd0cd4cef59a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1400632f-0123-4cde-b523-d14b1424b965", "sighting_of_ref": "indicator--af68b003-4b47-4aab-ab4d-bd0cd4cef59a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6150b31-a470-4438-8173-5fbb0e9df813", "sighting_of_ref": "indicator--f1ef034b-a3a5-428f-add0-3b77c0ee8093", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ed6eaf-269a-445c-b385-f19f40e13ccb", "sighting_of_ref": "indicator--0409de06-08f3-4189-9189-3766ff6b8cf7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c639e05-d28b-45ce-98c6-3d74bc207d79", "sighting_of_ref": "indicator--99935ce2-e9e5-4e49-8fb5-48b20aa9eaec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb01fb0-d572-4448-b38e-e994e0a47a44", "sighting_of_ref": "indicator--99935ce2-e9e5-4e49-8fb5-48b20aa9eaec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e383d7d-f402-4d73-b2c1-e3267e925ac5", "sighting_of_ref": "indicator--d979fa57-59a0-4bb4-84d4-c7f1a0d0207d", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9843dc73-95dd-4bbf-ba16-6800bc6b8deb", "sighting_of_ref": "indicator--b88741d7-fee4-4614-8494-94c5e00ac065", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7335df3f-cb4c-4988-8e6d-9bdaf698ebcd", "sighting_of_ref": "indicator--f3ba1082-af4c-47e1-b16b-7e6f21750eed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bc6552-2e93-4109-991b-d167f9d883fa", "sighting_of_ref": "indicator--3352054c-32c3-4260-ba02-c45192527626", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bff0c6a-ec90-4ada-b0e7-44b133120702", "sighting_of_ref": "indicator--2bf490cf-5d4d-4ef5-af65-580f6b00fcfc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79430f87-5238-4427-b52e-fb54bcf0bb68", "sighting_of_ref": "indicator--fafe356b-699b-4efc-934c-acd9eac442ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15deff0a-9f63-4c5a-85d6-3b68bd5461b6", "sighting_of_ref": "indicator--f0a44302-39ac-4c0f-89aa-251d5bafa640", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935b7cfa-b186-48f2-814a-b2a9ad148b26", "sighting_of_ref": "indicator--722294d7-8edf-4529-8ad8-eecec93cd1f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b12726-4ccc-4733-a07d-3c91386756c9", "sighting_of_ref": "indicator--2cee8e9e-54db-42be-9281-01841835c523", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01229b95-531c-40d1-9b3d-b8bb5e317d0d", "sighting_of_ref": "indicator--2cee8e9e-54db-42be-9281-01841835c523", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a7ce26-289e-492c-92d1-d6b56a591b39", "sighting_of_ref": "indicator--342feb55-243f-47df-881a-5793d81e348f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0a6627-8140-4077-9f70-30a4f1e4aab5", "sighting_of_ref": "indicator--342feb55-243f-47df-881a-5793d81e348f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f35f78-d68d-44ea-b394-ff39c4558261", "sighting_of_ref": "indicator--9ab419e3-7dcc-4b47-9df9-cf7e59c739d5", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecb6d94-f91d-444e-9468-abb2e60bcd9e", "sighting_of_ref": "indicator--6968fba0-b203-4cfc-bc4d-43c55a5cac33", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc014677-64d3-4048-a0c2-dc47bcef7445", "sighting_of_ref": "indicator--bdee734f-e2c3-43c4-943f-e487465355a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0409fe5e-f97d-4561-89d2-6aa8e30c47b2", "sighting_of_ref": "indicator--03db6747-a5dc-4d45-b62a-0316139434a3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaf8a15-7f22-455a-a10d-a627e1e7d03a", "sighting_of_ref": "indicator--26429f08-b355-4e36-aa57-610fe6028407", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e485362-a790-438c-b19d-6be5447db6a8", "sighting_of_ref": "indicator--bc3fc964-800c-4af3-8a12-bb568a7d7446", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd534f6-065c-45c7-8899-d2e480f1eaf4", "sighting_of_ref": "indicator--2b1de7d4-f663-4c3a-a265-1e97646f5fb2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c707db36-8cb2-4cad-85d2-dd7bedf9b5f6", "sighting_of_ref": "indicator--f47c0d71-63f4-4809-96d3-888f2b6842c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c58cb09-24f1-482b-bef9-77e24513dae0", "sighting_of_ref": "indicator--04154617-9b07-4349-80ca-381689b9ba91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e555a697-0f3a-4886-bad0-76e212180ddd", "sighting_of_ref": "indicator--82ac55f8-ff21-4422-938f-69cadd677a0e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59708ff-4f1a-4ee4-9c95-8accd993b776", "sighting_of_ref": "indicator--82ac55f8-ff21-4422-938f-69cadd677a0e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1720e444-11c3-4819-90d6-711ccf6ad36d", "sighting_of_ref": "indicator--98c2010d-697b-4152-bc30-5d65c5248157", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fc0283-fa85-41c1-8dac-b28320355b48", "sighting_of_ref": "indicator--fab51429-e6f3-4a84-a128-1f38ef421373", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad0de9a-0057-4253-a581-50ae3732adc2", "sighting_of_ref": "indicator--d72bba65-3683-4aea-a427-9d616581d085", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d49fca-8574-445c-b432-c5d3e8b4ce4e", "sighting_of_ref": "indicator--cb9f2292-bb81-4a34-8d88-ee610273a596", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a24be8-5250-4572-9537-cbb841b98456", "sighting_of_ref": "indicator--bb53d657-86a2-4c81-9231-d9a927a69209", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf03ad6-cae5-4980-a846-38d7c979ab2f", "sighting_of_ref": "indicator--a2daa987-46d1-440c-93f8-c02ef2affdd4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f771fc-eca3-40f4-bddf-3e45d6c026ec", "sighting_of_ref": "indicator--d64d2f8d-95ad-436d-a31d-2542bb742806", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b7f902-ca5b-429c-8209-c91477194b43", "sighting_of_ref": "indicator--2e044761-f333-4752-9b69-2ce233ef22ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d517ac0c-6163-4b7e-8075-cac96d1001de", "sighting_of_ref": "indicator--3c72ab1e-2f1e-4eab-8b5b-b603025c11db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3d800e-6ee4-47be-b685-7dc4abe45f22", "sighting_of_ref": "indicator--d91bd72c-314e-444a-9a25-d3de2d474acd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d28e126-3724-478e-8723-76627ff891ca", "sighting_of_ref": "indicator--69342cda-6c02-407f-bbbb-0c327bc66a6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9715a2-59ff-433d-8158-c712a3824b4e", "sighting_of_ref": "indicator--f0946fda-e43e-402d-ae0a-07356ee69c79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91bb159-7bfd-40e9-a94a-b00f2ffd29af", "sighting_of_ref": "indicator--c642d3ec-ac19-4f1f-ae55-ed218bec1a4d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3def2ea-470a-4d62-96ca-679c19e1719b", "sighting_of_ref": "indicator--7035720d-8a2c-464f-8a38-a9995b6c5d0b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca2f86b-e8d5-43ab-94bb-85355eae2542", "sighting_of_ref": "indicator--efc570f0-1443-4f57-8866-6c9fcb8ab2ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed0f4a9-9ee3-49d2-8a25-2e5e0ceae6b6", "sighting_of_ref": "indicator--9cb55590-0686-4de4-8455-a9c0848e21e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b540a53-02ea-4b15-9de2-f981c120cbf0", "sighting_of_ref": "indicator--a4f0b86f-7edd-4f45-9c2a-f7fb662551b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91efe829-1c20-4020-8227-dc6b11f9501f", "sighting_of_ref": "indicator--fb254a2a-96e5-4887-846d-4fbecb487453", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a64e4bb-adaf-4c6b-9d57-0db492e10e35", "sighting_of_ref": "indicator--d2516f4e-4ff2-46a1-aaa2-8ba684f57c96", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4436952-a17e-4c4b-b68a-52ade84eaf9b", "sighting_of_ref": "indicator--306e5e86-a4dc-46bf-b00b-d26f46cc6bfa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3468213f-3a30-4a9c-a0da-ec4d03cadcee", "sighting_of_ref": "indicator--9d336dc8-43e5-4f69-a56f-2005f1515ed5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f845ba08-38c3-45b8-a782-85e657a8b38b", "sighting_of_ref": "indicator--1ee8c4f5-1872-4afb-b592-c98e10a291c4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca9e476-006e-45b4-9078-a24ae36b2696", "sighting_of_ref": "indicator--dee27ea0-d199-42c7-b2f7-a60e5667cc7e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5039bd85-660b-4a4c-ac19-76977d94ba02", "sighting_of_ref": "indicator--41a4c019-3859-4356-a39f-fc6c67d6a428", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8527f98e-743a-4f8f-b4b1-4b8731073439", "sighting_of_ref": "indicator--9447e782-f2c6-4ad0-ad8b-25c6d14ed629", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd70dae-4032-4fd2-87ef-2523f6744b83", "sighting_of_ref": "indicator--b7797134-208a-4135-8990-b6084f362f78", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac818cdb-0798-4ab8-acff-8333f98b536d", "sighting_of_ref": "indicator--43e0b3e6-2cd7-48ae-909c-cbd0cebd267f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b76f93-1cd2-4fe9-83fe-a2dc2d88422b", "sighting_of_ref": "indicator--43e0b3e6-2cd7-48ae-909c-cbd0cebd267f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb74cd3-705d-41f4-908f-43a67387737d", "sighting_of_ref": "indicator--43eafabf-f45c-41c2-bd24-36aa72d6ab3d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113570b2-373e-46b3-b67c-28f497764671", "sighting_of_ref": "indicator--4ae6eb08-1e3c-4d58-ba0c-4b1463da7625", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885f7294-9ae9-47b2-8318-5c8e86726945", "sighting_of_ref": "indicator--5adf408c-4d5f-4d4d-933d-d67ce7309545", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61c77a8-098c-4f52-8d0f-f6769f19c2d2", "sighting_of_ref": "indicator--e0389ed0-bccc-4e0d-bfd1-315662f4175a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b509453-11f0-429e-b892-9a72b9c25a16", "sighting_of_ref": "indicator--0d526b81-33d0-4cfc-ad5b-eabe14b0a626", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a57e21-288f-4ed9-9882-0da31d49baba", "sighting_of_ref": "indicator--5d729241-ec75-42d3-8255-944e56963026", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59300569-1e3a-4501-ba55-e79a5428b0f9", "sighting_of_ref": "indicator--5c38d48e-f28d-4d35-8201-ce6b06651ab3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7112ee4a-e06b-46ef-9d91-43a148d916ad", "sighting_of_ref": "indicator--f9aeb955-f611-4ebd-b8e0-44b482ae544b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c4e2aa-4b9a-4921-bcba-b70feb2efcff", "sighting_of_ref": "indicator--90b6a0bb-7a54-446b-87ad-fff5c863978f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d65d60-d31f-41c0-aefc-6e8bc0185ad8", "sighting_of_ref": "indicator--fae33099-d8ab-4f93-ad65-e7966e8fc0a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de5fd80-d66b-4e6f-a083-41daa6001009", "sighting_of_ref": "indicator--1fd8cca5-fcac-486b-b40c-06234d5e5e99", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8624a309-9311-4055-a35c-0e529b0323a2", "sighting_of_ref": "indicator--975d59bb-5d64-4d91-a683-756f29d0b62a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6f231b-f579-4d6b-b7e7-b073a26a900c", "sighting_of_ref": "indicator--7ce33e53-feb1-47b3-94b1-78de2fa630b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83032183-5bb9-44ee-946e-d461f440ae0e", "sighting_of_ref": "indicator--fd1d1d99-628e-4928-a31a-2e0440cc096f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68af585a-559d-414b-b018-4beedc62571d", "sighting_of_ref": "indicator--6d7e257f-0f9e-496f-849e-0564e2c18a28", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4a871a-c3c0-4195-93e0-85229b4b16da", "sighting_of_ref": "indicator--5e6601c6-eb23-4a3f-aab9-b431656b3466", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e6a25d-025a-47e1-b71c-3f89cdc1ea5e", "sighting_of_ref": "indicator--9f5c0bd2-1d94-4d39-8d55-f3ca603b5ede", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa25d08-7ff7-45ef-aac3-062510dfbd46", "sighting_of_ref": "indicator--9ecaa01e-3bb2-4219-b938-a41a07610ecc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3513c668-80d2-49b2-b824-cec63eb29277", "sighting_of_ref": "indicator--f4f28c0e-4c4a-4d29-bcdb-ef6c300f16b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe96384-3a7f-4970-bb14-f633fc8ba1ac", "sighting_of_ref": "indicator--1250002c-480f-4fd8-af34-d2df4797c373", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffe0e26-b417-4ba1-a224-66c3f67a6cd5", "sighting_of_ref": "indicator--f49354a0-f7d2-43cc-9c48-5152cc5d28c6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1144409d-90f3-419f-bfeb-84bf9ed58c89", "sighting_of_ref": "indicator--d0142d23-3967-4ef5-ab97-fc390eda315f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7912a079-1d36-4fb6-822e-57a2e78bd483", "sighting_of_ref": "indicator--3718c207-e761-475a-ba3a-c7d60ec3c182", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d506a4-83d1-41b1-8ef6-1785220a1c82", "sighting_of_ref": "indicator--a751bef0-626c-44ee-b070-e2eab7ccdbe5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3bc4ba-0431-4931-bd1b-da7907fe544b", "sighting_of_ref": "indicator--24d632ad-cd4c-43b4-85bf-41270efcf1fb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a942612-20ac-40b2-aae5-0ada75244e31", "sighting_of_ref": "indicator--8e40779d-c440-4fbb-9c90-a29f234c0a6a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbb3d3f-5835-4b35-8075-0798db8149f0", "sighting_of_ref": "indicator--d5588687-56f4-4e29-b02b-d0459c68ab6f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8ba6b7-f267-4aa1-b306-2965c87bff70", "sighting_of_ref": "indicator--d5588687-56f4-4e29-b02b-d0459c68ab6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbbca49-284b-45ba-9b09-cece87734457", "sighting_of_ref": "indicator--f22b0f07-2bee-4976-8d8b-4744c66a5fa1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e5375c-133f-49ac-ba7a-c02525b209a2", "sighting_of_ref": "indicator--787423ea-d4ef-4e60-b7e0-77e619c04d7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e45209-9f77-44b9-bc80-8ccc5d206842", "sighting_of_ref": "indicator--f31cb401-2f46-41f1-99ef-7462fc2959a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca484711-55d5-4fd8-be3b-b3b5961d259f", "sighting_of_ref": "indicator--e43e63d9-6d11-4f8f-aa72-5a406480cdd6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40914496-4c88-4f2b-9921-0f4f2cfe83d9", "sighting_of_ref": "indicator--7ac73842-47ac-4d13-867b-422a08d2b993", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733ac078-c4e1-492d-a9df-40cfc90005ee", "sighting_of_ref": "indicator--8839ba0f-1aa9-4c68-8798-4b4063de9594", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c47b93-8d97-4125-81a5-c22e6d2aae9b", "sighting_of_ref": "indicator--4b1433dc-7cd2-455f-9f89-727284d6f274", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f6f0fc-3e33-479f-a8cd-42096f855f6a", "sighting_of_ref": "indicator--9470e702-729f-4110-a450-feba7516fb27", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb5fc33-8f85-4967-97ff-7d48786ccbff", "sighting_of_ref": "indicator--4d201a78-3dd9-4769-aac0-654cc8dc1a76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0908e2b5-4bb4-46cb-913f-24fc0bc1bfb4", "sighting_of_ref": "indicator--ca12b17b-8963-43c2-afbb-1463c51f167c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed19fa3d-d618-4be9-86ed-e077114b8da6", "sighting_of_ref": "indicator--75019361-b2fb-4dfd-8c98-1669be42ed7e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ae56ef-7357-4595-bb2a-9bfb405ce3ec", "sighting_of_ref": "indicator--7938b616-998c-47d8-b346-a25bda96fbe7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8385bd4-8361-4a63-9ca2-473825a79d9f", "sighting_of_ref": "indicator--fa493d4d-7474-480d-ac09-a348faf4c0ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f43749-1dc6-4fe8-b97b-0b0e7c0224fe", "sighting_of_ref": "indicator--4b8a387e-6bf0-4e8b-be68-232fb55956eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cd4813-8e8f-424a-b14c-3764b8297b7f", "sighting_of_ref": "indicator--d7efdf97-6590-45ac-978d-8e6e2e4d764a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888b3c0d-013c-4d1d-bb72-24ad5381f24a", "sighting_of_ref": "indicator--c91f8c84-17d9-45e1-9043-b9929483ff15", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66d9ce2-54a0-489e-b885-ddca131d94af", "sighting_of_ref": "indicator--f350699c-f9ab-48dd-90c5-e965565c26b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d287a0a-beef-4547-b8e5-c0408aa78ca5", "sighting_of_ref": "indicator--e9f6960d-2ee9-4013-a0ae-93e662132103", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe2fada-2b87-4635-b783-4ec17895317e", "sighting_of_ref": "indicator--0b98a6e6-a614-4805-a6af-2f7c891e4bfa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65506877-07bc-43e9-897a-7cdfe347454b", "sighting_of_ref": "indicator--c93fbd33-506b-48f7-986d-216ad9e7cd4a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ba2a64-90d3-482b-b115-f81ef5227785", "sighting_of_ref": "indicator--0b4e880e-efc0-4d9a-914b-45a66447e011", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d704e0b-081b-4f1d-97b4-7b01cf4fd4f9", "sighting_of_ref": "indicator--e085c38b-d59e-4b0f-b645-b8e7a5007efb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2db69b-ade2-4814-86dc-7b22c5fe9fcb", "sighting_of_ref": "indicator--e085c38b-d59e-4b0f-b645-b8e7a5007efb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f874c664-d721-4ed6-b35b-0cb3a98b8429", "sighting_of_ref": "indicator--19fb34ea-6c7c-4169-a89e-f09befe6beba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdc8b0b-28b0-4774-afe9-ee0dce1e92e0", "sighting_of_ref": "indicator--cc18302e-3598-43e6-a765-de8baa26f47e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4921ae79-eb29-41ed-a24c-c6b288a2ee34", "sighting_of_ref": "indicator--cd1651cd-ed85-4faf-a279-5d54932eb2fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bd8760-ab2e-428a-a9b8-895715d09d0f", "sighting_of_ref": "indicator--4847efac-2799-4b46-83e1-7e3fe86ae372", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4473327f-d9bc-40b2-924c-86dbbe52c75a", "sighting_of_ref": "indicator--1ad0c8fa-67cc-4a4e-b45e-c14d12c211bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7662a01c-a4ca-4455-98f4-bbe59dd0cb64", "sighting_of_ref": "indicator--6b673c84-30e8-4f73-af1e-54a50086a2e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fce67e-e816-4306-9c1f-5e08610a6227", "sighting_of_ref": "indicator--6bb6a7d6-0c4a-4007-8f92-822d040c1ba3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b3a742-eeec-495e-8179-8bcfac88ee26", "sighting_of_ref": "indicator--ca00f8c5-6890-4a4a-949b-1c17fa161508", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c9e154-d0f1-452c-b742-5a8f97fc06e8", "sighting_of_ref": "indicator--0a35eade-1454-4c72-8823-ec554f2b5a2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8c7859-f186-497c-8a97-04b33852c36e", "sighting_of_ref": "indicator--6efc8d05-ba8a-44f9-b57a-322baa37b529", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776f7258-c2f8-453b-a08d-f903ca1a9b80", "sighting_of_ref": "indicator--3654ec59-326f-4eca-94b3-03c0c11ecdb7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b3458a-670f-46fb-970f-5ac1ac26b03a", "sighting_of_ref": "indicator--7d49eae2-65db-48ac-80c6-5542ba745fd6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e281ff3c-b09a-4b6e-b11f-6ca18d5ff278", "sighting_of_ref": "indicator--ec3eb988-465d-4088-8bb2-154c961cf72c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a834ad-1799-4a5a-bccd-826adb3cff1f", "sighting_of_ref": "indicator--38a2219d-a990-4c52-a4a5-24cf173d4b37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278425f5-e1ac-4d1f-9f5d-d6797d064df5", "sighting_of_ref": "indicator--2bbbce4c-0270-407b-9ce6-9f6abbc4cffc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dd793a-d7fe-4fed-a5dd-c723f4db61f5", "sighting_of_ref": "indicator--639a4d8b-f450-463a-8072-4cdf552753cf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a286c8-35bb-4113-a4af-30eddb3bf300", "sighting_of_ref": "indicator--6c663756-7be6-46a0-9241-9ca6b7103f0f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c603af3-e056-49e3-87b6-6da87d197dd2", "sighting_of_ref": "indicator--1fffeb49-dee3-4b28-a471-64143c8271a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da97941f-1982-4278-9e6d-002299ca8f7d", "sighting_of_ref": "indicator--9d41d0af-e9ee-4178-a016-52042ecea386", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d830211-b09b-4e70-a477-4653481cd31e", "sighting_of_ref": "indicator--04bc4990-c562-4cd4-be86-ac1e8bf4c811", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f75626-88d1-4c4f-8438-35e71afa054a", "sighting_of_ref": "indicator--dd081aae-dc4b-40f6-8588-0d16979c849e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da415449-2e78-4d20-b87c-e6e8e3590e17", "sighting_of_ref": "indicator--ee4fd3ef-33f2-4742-9f90-ff096c63a6bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a451de91-99aa-4533-8fe1-9b76c797e25a", "sighting_of_ref": "indicator--fb8a18ed-e854-4990-8d97-3112a0f3ffbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a33f7f5-661e-4e48-bc99-5cc3bdd96934", "sighting_of_ref": "indicator--7de52f2c-162c-4009-9b5d-38b46044e8f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e59c84-9eaa-404b-ba28-db548e5df1c6", "sighting_of_ref": "indicator--59469d73-fe38-42cb-bd1a-5e534a1812f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f323d9-354b-4048-86b1-4759ec0ad709", "sighting_of_ref": "indicator--c5b1852b-a9b4-4983-bc0b-c9f65c644f52", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483a4597-1aa5-4aaf-824f-541f296a788a", "sighting_of_ref": "indicator--22b11d04-e082-45ff-bd56-6a1206f809af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1c0e2b-3f5d-4945-a14c-ff7246582bef", "sighting_of_ref": "indicator--7bdfcb98-5749-4d18-820e-586171777b29", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd78095-1e9e-4d52-8c72-b0c723774ee2", "sighting_of_ref": "indicator--fd313aa2-b004-482d-9db4-24a4de2b55ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d2d9ff-6574-433c-9a93-5c8609207134", "sighting_of_ref": "indicator--7e7a7e93-5cf7-4658-bb76-3570f77804a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a0a285-e474-4f37-8c6a-3b50f27cd059", "sighting_of_ref": "indicator--c1c3732c-1466-4051-91d3-00da3908b0ec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888f1924-20f3-471a-a47f-da2c32cb312e", "sighting_of_ref": "indicator--4ec403f5-0b97-4080-ade8-22c950a4a1c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e312fdbc-b7d7-4b69-aa98-eb474f616a0e", "sighting_of_ref": "indicator--6699943c-bcc3-4e28-8fb5-add4b65d7fb4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8581cbd7-a844-48bc-9c70-3ebaf3f1f06f", "sighting_of_ref": "indicator--1a38fdb9-fe32-484a-9c7b-0ccf6636cb46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be89634-7734-430b-9620-56e2e5176e31", "sighting_of_ref": "indicator--d3bbbdf1-310a-4038-81bd-e7dd19fa3a09", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75c6b21-52ec-418e-8e96-bdb9ab46ab32", "sighting_of_ref": "indicator--d3bbbdf1-310a-4038-81bd-e7dd19fa3a09", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c5e3af-fabd-4e24-9e57-3415c075d4cb", "sighting_of_ref": "indicator--feffada7-96d2-4128-b6e5-d2819e546bb6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea50b2f-c3bc-4163-938e-618941b1f941", "sighting_of_ref": "indicator--d9cd58e9-2e2e-4b5f-a940-586ae3a022ee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31171e49-b37a-46b5-ad05-ebd24d7e922c", "sighting_of_ref": "indicator--9da21544-42c6-4acb-b7fb-47e75b69c5ce", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153d9869-91bf-4a51-a91a-aec74c0e6fcd", "sighting_of_ref": "indicator--9da21544-42c6-4acb-b7fb-47e75b69c5ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17379231-5486-40d9-b955-97e5efe47c48", "sighting_of_ref": "indicator--f1719179-2d62-408c-85d1-3a109730eab9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57b8ae7-ff01-4dde-9dc6-9cb6e63880cb", "sighting_of_ref": "indicator--6cdb430e-eb9b-4780-b4f4-e1aa9d905e34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa499ad-23f4-4d9f-af99-e8dd79e90718", "sighting_of_ref": "indicator--6e3f7f73-3fb3-4abb-be2a-e35f7eafc0f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cb2c08-18c0-4001-b9ed-bf5811a372dd", "sighting_of_ref": "indicator--d8317fd2-4d04-426d-99aa-dd2675e6498b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce00775e-a129-472e-b44e-58ef48385c3e", "sighting_of_ref": "indicator--c50e4eea-9617-4e23-8053-4f4fcbce8def", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce23a3c-467c-4771-8e4d-b43607454b7b", "sighting_of_ref": "indicator--af16b979-470a-4101-ae83-323bd8f1f01f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa8d939-fa6b-4aa4-b2c6-22e7c6aa9447", "sighting_of_ref": "indicator--a5316993-7199-42d6-8acb-b9e1934fbdab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218ff1f4-f2c6-4954-b425-a908be239e11", "sighting_of_ref": "indicator--a5316993-7199-42d6-8acb-b9e1934fbdab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39741e2f-827d-4833-a858-0b39115dd653", "sighting_of_ref": "indicator--f8a59132-5724-4098-b635-67093fcfe74f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec7c835-4f99-45ea-b889-129e07731c13", "sighting_of_ref": "indicator--ccc753b1-7417-45c2-8769-54bdfc1d47c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aa9820-4e76-407c-9f82-93b6ebc6cbdb", "sighting_of_ref": "indicator--1b0bf925-2eae-4e80-a670-d2158faa81c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b4c1c7-42c2-4d56-b12a-9b15dfee370c", "sighting_of_ref": "indicator--f9972ff6-2521-40f1-9d75-a15b6af30cf3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a11cde0-218e-4ad9-ac54-0b502bc33126", "sighting_of_ref": "indicator--17e32485-d033-4df9-a9f3-6969f1451954", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f37f8f-95a9-48c7-9ee8-4ebccf97a45b", "sighting_of_ref": "indicator--64c46f26-8996-4620-bcda-03d09bc27ec4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2805318c-2186-453c-82f7-b42069330434", "sighting_of_ref": "indicator--03d47d40-361d-4730-ac75-d8d254461b16", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463bceaa-0b65-4a8a-bf61-eac954e7f52d", "sighting_of_ref": "indicator--3edfb3ba-2567-46e9-9ea2-0cd49e457d85", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ce7d55-345d-4432-b7c5-44d658eb8845", "sighting_of_ref": "indicator--3adb0bab-274a-4e44-8942-9f9322ef8926", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60af28f2-7404-4122-9075-78abecd22cff", "sighting_of_ref": "indicator--d8b3ffd0-6cc0-4801-9a2d-2efb3897467d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa243726-a0a8-468a-92a4-60a322127062", "sighting_of_ref": "indicator--f82f9318-3155-4986-97ad-298854d58d5d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97a0430-ff66-4abd-8437-5f4955d2ced6", "sighting_of_ref": "indicator--6a902c19-b834-4972-899b-4e9ff05f3d26", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004efce9-c422-4192-8efe-dcf470021f19", "sighting_of_ref": "indicator--063d61e4-6562-40b7-b8fa-2dc0b8dde2aa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364a3ff3-ff28-4c08-8276-fbd2afb2b18b", "sighting_of_ref": "indicator--766b728f-eb8e-4e1e-89dd-ae27f15664bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284c51f5-c4d9-4f5c-983b-5551be18894f", "sighting_of_ref": "indicator--a21a12e3-0e12-4705-b461-566a24a39dc0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e152828a-d255-4b09-bff0-a34f21c483a2", "sighting_of_ref": "indicator--29da1be5-45fc-4aee-a829-cbf20cda8ac9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2946b4-35b7-46bb-a747-b88e09e0a71f", "sighting_of_ref": "indicator--b3a1cdab-7fdf-41a3-8af2-9b3fa60a092f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd4fe0f-ae10-4e34-bdde-8ab00808701f", "sighting_of_ref": "indicator--1703fc0e-4dee-49e4-8b99-d9feb9290eb4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863f60f5-f91d-45f1-907d-219e5b87be68", "sighting_of_ref": "indicator--805bf1ed-09d7-4def-9504-9a0110f9b8f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dba214-c37a-405a-a3f0-3b1d64e65389", "sighting_of_ref": "indicator--8b3636bc-e2ea-41f1-9ccc-ed20835a7d25", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4ec22b-88e0-4c07-913c-bb85d72eafdb", "sighting_of_ref": "indicator--07dcf1c4-116a-4fa8-912e-a52b8126ccfc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17956740-207a-4635-b5cc-b8ef4bb50e24", "sighting_of_ref": "indicator--3d912615-a877-4bec-9322-79e9aac9e23c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fda7dcd-c1ae-4345-ba77-fd822775e74e", "sighting_of_ref": "indicator--801e75ad-47c5-4d83-9aa9-9099f844a049", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f136a9d2-8e85-4cd3-a59a-3afbba555126", "sighting_of_ref": "indicator--6ff164e0-3c0a-4cee-9ae4-c48d89c3f270", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca93c65b-a3d1-412c-baf4-91e764c659ba", "sighting_of_ref": "indicator--50ccdc5f-50b0-4d87-9cef-e665b94dbf7d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcbb824-1277-4741-9694-cc6c0abf8e31", "sighting_of_ref": "indicator--912e1568-26a3-46ed-a614-84fa318f9806", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2c9be2-1bc6-4205-a00b-4fe6991151f6", "sighting_of_ref": "indicator--a4fd4efc-d2a3-4ad7-b2e3-b5c68481456a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12efcc1e-9f93-41ce-a4e1-af1d75c16fc2", "sighting_of_ref": "indicator--68385f4f-a525-478f-9bea-665520a50940", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae412a5-2d3f-44e3-b28f-25acdc035d1c", "sighting_of_ref": "indicator--56ac1381-7af6-439f-a149-2599af93d80e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cae14f-550a-40a8-a620-490a07a79e8f", "sighting_of_ref": "indicator--8c81e42e-2df3-46e5-9c82-d74e07d6d4c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b0dd60-61c2-4cc5-9deb-f95841439385", "sighting_of_ref": "indicator--dff192da-9e69-4edb-a3cf-3a17b4a7351e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7ad4d5-3ec7-483a-b8ab-354b9d6a2315", "sighting_of_ref": "indicator--27bc8aff-e4e5-4ab4-a233-1ff7d2d980c2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0a6f52-4769-4c0e-8cba-af22899cfbed", "sighting_of_ref": "indicator--27bc8aff-e4e5-4ab4-a233-1ff7d2d980c2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0218c4-86fe-46de-a497-ebbda65a1aae", "sighting_of_ref": "indicator--abafc70f-df6c-404e-827d-63c4221812ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a049ccb1-cb17-4a9d-be54-2c5604a1bbf3", "sighting_of_ref": "indicator--515aafab-ed88-4788-b210-b5bf95f15491", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565ead16-eae2-4889-a774-c7d671b46e39", "sighting_of_ref": "indicator--8e98a2cd-78ed-4a79-b34f-e36329c83f47", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c98bcb-aa9d-4cd2-8276-120743e4988a", "sighting_of_ref": "indicator--22041885-9644-4bea-8553-9eb09e9a9070", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dad93f-28db-4dbe-9f81-ced43ff0bfb7", "sighting_of_ref": "indicator--64948b3f-9e49-40f4-bee5-dd19fcf13a4b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e27a29-69cd-48f4-a4ea-bf88f571f736", "sighting_of_ref": "indicator--80a98677-50f3-4740-be7f-5184563fbc1d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9fdb18-a122-4d9f-a9eb-94c4dfed3e06", "sighting_of_ref": "indicator--22d04ea0-ad2e-4863-86fc-36f95949462d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a081a19-4315-442e-888a-272594fe2a9d", "sighting_of_ref": "indicator--813c9063-8450-44ce-a0f0-1b46e41a3265", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40efd9c-9dc5-4ced-9c00-e24c815e9d14", "sighting_of_ref": "indicator--574c88b7-e7f0-4bde-bbb1-cf32cb08b29e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b1cc29-56ed-4479-80a6-b51640e5bf77", "sighting_of_ref": "indicator--82a664d2-8e48-435b-a874-9bfa9c4dffad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add62024-ab25-4672-a4a2-b6765f684016", "sighting_of_ref": "indicator--6fac8c87-f1c4-477e-9dea-c2d56bb992fd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba60d3cf-dc7a-491e-b51a-c96850487a4d", "sighting_of_ref": "indicator--fba7a12c-505f-454b-b284-b8c0d95a97f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71587f1-d1e9-4a23-a628-9ef603cf7831", "sighting_of_ref": "indicator--b28f6ab8-cc78-46ba-b54a-317b24b27cd8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf03b59-f7da-40ea-b2b7-67f425ded88d", "sighting_of_ref": "indicator--6f4f826d-1cba-4f0c-860e-feaea5b4ca7f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd01d62d-e9f6-41f8-83b3-bf2cce29b749", "sighting_of_ref": "indicator--e94fef29-d9e1-416d-a866-e6e5dbf48115", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ef1c1c-a37b-41b9-ab9d-145631f845bf", "sighting_of_ref": "indicator--f8ec2db0-8066-42d4-aa94-500b6e2e03a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb97e2b-fd8b-49d1-9270-45f7d3fbde53", "sighting_of_ref": "indicator--6655c049-cbdd-43e2-a300-e6bedf450f52", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4032013-a740-44ff-aa21-084482499b5d", "sighting_of_ref": "indicator--6e2915e5-816d-429a-8372-ceee165487e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05a2682-545e-44b9-adf5-4bfb72d47156", "sighting_of_ref": "indicator--992ededf-c194-4e9c-9ac6-42f13b24ad37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b2c1d0-3cf7-4956-a77f-8fc9206e976b", "sighting_of_ref": "indicator--b1d72dd4-adbb-41a0-a7db-7b44ba0ea2f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60722e01-8afd-4634-a30d-647c1549b048", "sighting_of_ref": "indicator--0d33ea49-4db0-4a58-888a-41d87df429e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51240b4c-fd9b-417b-813e-0a2be29f26f0", "sighting_of_ref": "indicator--0ab99233-fd7c-4336-8969-24f49eba0396", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14a3a7d-d822-453b-8623-c3c921508eb3", "sighting_of_ref": "indicator--5cdb8944-1a65-4288-8f6a-40945ba8c1cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65589996-5471-4f48-8e2d-8178685fa0bf", "sighting_of_ref": "indicator--247bfd62-3e5d-4723-8ae3-a8dbc4b9bca7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7815b7-5b1a-4dbe-bc84-72e9c5452417", "sighting_of_ref": "indicator--d6807dcd-8ec6-46c5-9c67-ddb0158636f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fdfb98-0cce-4d9d-ab4b-d967bc54083f", "sighting_of_ref": "indicator--e9a24ca9-cb6c-4c9d-a454-d7941df7c8c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cfe25e-e982-4719-92f2-d4dc46fb423e", "sighting_of_ref": "indicator--bb14863a-1551-4f7b-9bb3-147867b95887", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7847da16-0130-4404-beda-09ab43296316", "sighting_of_ref": "indicator--40ad029a-dc64-42be-94c7-11ae0a5522ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce20b12-e8e2-4f6f-bae1-55d245e2a56b", "sighting_of_ref": "indicator--40ad029a-dc64-42be-94c7-11ae0a5522ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe4689b-4e8b-4a44-8683-35b274bd2d75", "sighting_of_ref": "indicator--cf83b345-838e-4254-bdbb-65369b197a6a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2235d702-7c05-47dd-b460-a8ca41029448", "sighting_of_ref": "indicator--9294aebc-7c1b-4b5b-b531-ea68a646259b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8d9517-13c7-472c-b8ca-2941c362dad2", "sighting_of_ref": "indicator--e2cc895c-e1a5-4975-b513-59ecaddd5800", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503eae45-5538-4217-baac-8832b521a1ac", "sighting_of_ref": "indicator--95656d99-b3a9-464d-a670-41df96ec4f70", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bf207b-5f52-4352-b589-a3e4421da5ab", "sighting_of_ref": "indicator--255f72ed-9ff3-4c6a-8d40-06b4ff522666", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc59d35-f38b-4d02-89f9-5c06c420fe0a", "sighting_of_ref": "indicator--1308b135-0366-4f71-bf0a-03b294b28ff0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dc899f-8aa2-4fc4-945a-1880790bc9e2", "sighting_of_ref": "indicator--7dc389d8-9cd9-41f5-97d9-42a55c4e2665", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873404ff-a44c-4de5-a925-b8b84fec9745", "sighting_of_ref": "indicator--7a89c497-bb98-4920-adf9-ee45cd5f86ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959fa1f7-bb53-4682-9c03-dba3558e8092", "sighting_of_ref": "indicator--ab522a15-e805-4734-9adb-919e8a41a3ac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862b3f2b-c5cf-4002-b463-269cc4729842", "sighting_of_ref": "indicator--db1d789c-b0c9-4b6e-a5ea-3fcffe532484", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5de875b-4f81-43be-affd-2adba50e5ef6", "sighting_of_ref": "indicator--c700e29a-b7c5-4559-9261-2886df71baf5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca64c958-e010-4f51-ae73-71ae1540abf0", "sighting_of_ref": "indicator--56551281-bd51-433b-a011-c0bbac870e2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385d57fa-08db-4d81-b98a-0c717b7396f0", "sighting_of_ref": "indicator--19c60073-a338-43dc-b8f7-5c11400b1a78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d34c688-4eac-4030-ae4f-efcafbb91153", "sighting_of_ref": "indicator--115f410f-cc05-4f24-8ab6-30a27cea10e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69121d9a-6a16-4336-be78-cc8e1b302987", "sighting_of_ref": "indicator--dce2c86c-21df-4af5-b88c-c32c247f77a0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f792a521-211d-4aa1-ae47-0085967d0b72", "sighting_of_ref": "indicator--008fc77b-c0e2-44fe-8f71-1be9a9d1853f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429b202f-40a9-4b1e-bfd2-afbabb5a5e69", "sighting_of_ref": "indicator--2bd5f2ea-134a-4c2f-9cf5-8e4b063717ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5b6ba2-e520-4411-b677-82b09e534a93", "sighting_of_ref": "indicator--46308d73-fdbd-4024-861c-82d3618d27fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206a17c7-d902-4c42-b580-34618d80bd9a", "sighting_of_ref": "indicator--90c68acb-c6cc-4c25-89db-cdfc965dbf40", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5059f18-ddb6-4303-9581-4e7c2ed82748", "sighting_of_ref": "indicator--c44f723d-0cb0-4795-82c6-d5040f33d222", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16727ea4-d150-4e11-b9e1-698a50d066d3", "sighting_of_ref": "indicator--b45602c8-8a55-4bd5-bd4c-e0132d44922c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3161acc9-cea2-43f0-91de-de5c1463e6e3", "sighting_of_ref": "indicator--8734b169-38ff-4544-860f-64cde20243b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33afd52f-3fd4-4e5f-b98d-008d8b5ccff1", "sighting_of_ref": "indicator--64423b99-45a0-4933-b54d-67d3b5e3b817", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd8c6e5-8297-4c9d-9934-9fb074854371", "sighting_of_ref": "indicator--e593cd9b-827f-4a32-baac-029996726b50", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50de5cfa-ceda-44fa-98eb-cd6c37d53765", "sighting_of_ref": "indicator--8d78c349-4681-489b-9adc-3ebce94dbcf9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3868e52b-d26c-4958-8615-b466e35f403d", "sighting_of_ref": "indicator--362a70d4-9e94-421c-936d-88d83b594373", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c346ba7d-f500-4db5-9a5c-4a036b3c6f49", "sighting_of_ref": "indicator--d7d94881-6de2-437c-b575-ec0426c10737", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ec77c6-c76e-4625-b5a2-4bbfef6baa86", "sighting_of_ref": "indicator--cec7577c-513b-41a0-819f-5c7149c749c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5530b5e2-2829-484f-b00c-050c69942f08", "sighting_of_ref": "indicator--981f1a2a-7660-4b1a-b760-d12151fd357b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c3c2b9-c813-4c7c-85e0-8a23e5c68bfb", "sighting_of_ref": "indicator--981f1a2a-7660-4b1a-b760-d12151fd357b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3d36ce-f16f-4a4b-958d-27e6cd29865c", "sighting_of_ref": "indicator--a88e001e-4294-4933-a8da-b746fe6ce94c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6971b96e-6408-44d5-a814-db22c299d553", "sighting_of_ref": "indicator--55cba627-d2bb-4d83-aba1-cd0f70dad79f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4562ff-41db-4b60-81b9-f433173021f7", "sighting_of_ref": "indicator--ebdf3daa-01a6-4690-8c1e-5d4f9eae3ba7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706220b6-2857-456e-96fc-472790468465", "sighting_of_ref": "indicator--37c892ca-d1e3-4b2a-be71-8fa06184551d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b60622e-2d97-4348-88cb-6c6d66d6992f", "sighting_of_ref": "indicator--646dbd10-2211-497a-bfe1-0e49fe69fc07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcbeb60-223c-490b-90e7-ad531c476768", "sighting_of_ref": "indicator--d126ae38-0b41-4ee7-baf2-1eb33b394d3f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ed2420-9422-42e3-bd9e-50bb463a2eb7", "sighting_of_ref": "indicator--4050512a-cf34-42ac-8861-64e9544874fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71573bee-d314-4eed-ac0d-3ab7a89ecce5", "sighting_of_ref": "indicator--8dfd1b51-7fd8-4463-a3f0-03c26139a87b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb76d351-5078-469d-9865-63a485199dab", "sighting_of_ref": "indicator--9879c16e-23bc-48fa-9212-41f9cfaaa84a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b56940-b9a8-4f55-a6a1-e5db7059ed60", "sighting_of_ref": "indicator--66c3f7ca-8e87-4bdb-b1f4-9908310075f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022da50c-5393-4bb2-8b89-24b46224be24", "sighting_of_ref": "indicator--4c996e02-c8e3-48f7-91cc-108c122c0858", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a494979c-47bd-4c2b-9b05-0ea17892bdfb", "sighting_of_ref": "indicator--83ef2e8f-e159-4d80-a809-a36454415bfc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45346c7-8f75-4dfc-96d5-2dae76c4c58d", "sighting_of_ref": "indicator--6e241608-1367-4d1d-9df2-4480470fa8de", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ced958-0fe0-44ba-996d-b17332b52632", "sighting_of_ref": "indicator--d070de34-e2d5-4d40-b2e6-0c20cca88a4c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9936f3-0d89-478c-b8c1-b512aef5e548", "sighting_of_ref": "indicator--af44b76e-5728-44ac-96ab-aa1de304f204", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1bbb4a-e657-4271-b31f-5b96e672d62a", "sighting_of_ref": "indicator--fd3190a0-607f-4e0f-b62b-2491824ccfe6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a8174f-2b07-4fd4-8f41-04e218e61357", "sighting_of_ref": "indicator--149156e1-1304-43a2-a817-28b271dda8e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d4c606-1e38-4764-9083-997f81dd6cc9", "sighting_of_ref": "indicator--74f48077-a5f9-4d82-b6c9-c70ca7cc4313", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8e0cc2-41ce-4a7a-8956-6dc5d925376a", "sighting_of_ref": "indicator--fb1d84be-c9d2-4eab-a5f4-1c2e69587fd9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b06543-ea8e-48ab-8be5-434e7ae863f6", "sighting_of_ref": "indicator--8453fbae-e3bc-4820-8741-39b2a2a109cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0703ff6e-129b-45a2-a5b0-686ba1e72a6e", "sighting_of_ref": "indicator--9006a214-8c07-45bd-be61-e848b33f1e43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463d83e9-2eac-48b5-bed4-6ceb51877bbc", "sighting_of_ref": "indicator--14fcaec0-42b8-4246-ad91-e66fafc8bf06", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3dedd5-47e3-4a32-a6a8-d9c12a73813a", "sighting_of_ref": "indicator--0e1b7eed-5cf5-4004-8084-1a4958158836", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66e869b-891a-4dcc-8bb1-6dc794592e21", "sighting_of_ref": "indicator--b0107f09-69b2-45db-98f1-6eab0c40e262", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5399241-732a-40e3-b7e4-91b065746781", "sighting_of_ref": "indicator--74925ab5-7470-43d8-a076-0b4150f6b84c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d4d9a5-639c-4163-b1b5-d8001736a178", "sighting_of_ref": "indicator--9dd70d58-40b7-4f01-a10d-299f74588d2a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2198aa04-9e76-4a5a-8c8c-65c1bbc32f54", "sighting_of_ref": "indicator--fc4a7426-e43e-48e0-bce1-4fca3cc51edf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1481f9ad-2ff7-4842-a951-fe939ed7c76b", "sighting_of_ref": "indicator--2d345cf3-b5c5-42cd-b921-23c288799b7b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff23ef6-54ab-4296-b2af-3c862fbe7584", "sighting_of_ref": "indicator--0be0a528-a5e9-4218-9dec-3952a13494ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6252c78-5dcd-4887-8108-9ec390b37dac", "sighting_of_ref": "indicator--4240cf1e-d09c-4a75-a4ec-9a5a3329b504", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aa350a-df1f-42ad-a497-d02ee6c6a706", "sighting_of_ref": "indicator--6cd06812-c08f-4af2-aed5-e96b965bd084", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06296bf0-2849-46bd-b33a-a150d42e97d0", "sighting_of_ref": "indicator--e2ff3a0a-1724-4f5b-8678-4230bda2c2e7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c500ae9-9dae-42d3-bef7-846441aa5492", "sighting_of_ref": "indicator--2c18b6b6-6751-4bda-b136-861f63b275d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a5744d-61ab-474e-9af6-38efb7f55f68", "sighting_of_ref": "indicator--76ed9705-cf17-4271-9eac-5ef9c5b5dfd0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687af0b1-cee9-4021-a8db-453006cffed5", "sighting_of_ref": "indicator--18387211-0d25-4b84-919b-e4e5765910f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30b7ba6-5f73-458f-b076-3201a0e1297e", "sighting_of_ref": "indicator--0d262f00-b559-444c-a8c4-6ad4be936eda", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae35f3e-802d-4a54-b7cf-e6a07db02b5f", "sighting_of_ref": "indicator--13be8549-ef7b-4c91-860f-9c6e71721e9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd14faf-6075-4569-8d40-f59d70091ef2", "sighting_of_ref": "indicator--9bd0cb1e-5a3b-4059-9f36-979a4154846d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21c4714-0c65-4d9f-a3a2-dcf7cab77e35", "sighting_of_ref": "indicator--d153f6ef-fcd4-4b5b-ad19-edb7e9843e06", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaebf8c1-3d9c-459f-b1cd-c247f755346c", "sighting_of_ref": "indicator--d67124ed-2efc-4da3-b088-37df23a6a53f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c946b132-9118-47ff-9d58-c0e8ba7cdee7", "sighting_of_ref": "indicator--5279e7ae-3bc0-4f91-b88a-64ef99cbdbc6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdd4d14-35ac-4f57-a737-5decc7a75bef", "sighting_of_ref": "indicator--f4a97ac6-3ca2-41c6-a174-72126a195bc1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7074066a-fc10-4910-af8a-19d65fe691ac", "sighting_of_ref": "indicator--af4221c5-0370-4da8-9bb4-33ac4b00c069", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a465b055-db4e-4909-adac-a11b23ec8408", "sighting_of_ref": "indicator--844503f3-c2da-4a92-9e20-04a9ed80ded7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a010bf70-d123-4d0e-86b9-245a6d976a62", "sighting_of_ref": "indicator--edc74452-67ef-4ed8-97a3-dbc022666375", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf807e4c-8d82-4d9c-87fe-6dbb1d4929f3", "sighting_of_ref": "indicator--242f4b3a-bb28-4ca4-aad8-9bbbe4e5ddec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea22224d-8aa2-4508-8545-295f59fb3865", "sighting_of_ref": "indicator--db9b3879-ffa7-46c5-adf8-0fdfc569af83", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29ffd04-0b32-4086-a309-710dd11fef8d", "sighting_of_ref": "indicator--c82a6a0e-0bd5-4835-829d-c7db5862d595", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74019494-6b85-40e6-bf16-ef4cec593676", "sighting_of_ref": "indicator--9c409259-24f0-4b5e-8853-0461b7455027", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8833f32e-5ac7-4592-adb4-f9f551e2987e", "sighting_of_ref": "indicator--23e229b6-b3eb-4ccb-829e-e8cb1972dc51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65da766-4517-49d4-bfbc-455d53dddad5", "sighting_of_ref": "indicator--3e5b508f-f462-44e6-9195-f1e81c975d73", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631b2ff5-ceda-43bb-9bf6-6d37ce90be8a", "sighting_of_ref": "indicator--e8b4b385-2885-4339-801b-2f1a39e31aff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08808dcd-4ce2-4c00-a8ca-84f7a4965b8b", "sighting_of_ref": "indicator--faf426d0-dca9-423c-b287-e3800f9c1f65", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311a8d1b-2ed6-4c46-8b3d-841c6806ae73", "sighting_of_ref": "indicator--a7834ee1-ca16-45cc-bdfb-112abae2ca8d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c7f0e6-1a19-47b8-83fd-5acd6edc6f02", "sighting_of_ref": "indicator--bcbde76c-b0ea-4514-8a5c-19a8131b6989", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a90f81c-fcec-4a6c-93bf-07cb53a1474f", "sighting_of_ref": "indicator--1f9f7ec5-1f18-47af-9a36-7b5f771a7fba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcfe8c0-b16f-4687-bc7f-486997cef714", "sighting_of_ref": "indicator--15a224f1-7440-40d3-b07f-20295fe95020", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1756f847-839e-4137-81dd-f5d5dfa65a00", "sighting_of_ref": "indicator--915cf61c-4784-465f-beff-5241ad735b47", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3373ed56-0042-4e1b-a94f-a7371c82af35", "sighting_of_ref": "indicator--5466f0fa-a12b-4ad1-aefd-5afe5aee9d1d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74996e02-3794-46f4-955a-d4932d99c0b0", "sighting_of_ref": "indicator--fc1b4b2c-1a2d-4489-a8cd-a2128d7b2d14", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e25f92-bd94-4582-82f0-116ebc84e2ac", "sighting_of_ref": "indicator--76ed69f5-cfc6-4b49-9e83-a360adf31e79", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ce4891-07df-4be7-b0d4-f6a5a1432123", "sighting_of_ref": "indicator--93a03293-b2a1-4d36-a1d4-a757f164f136", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342e810f-bc6d-4cf0-812b-5968562aee12", "sighting_of_ref": "indicator--93a03293-b2a1-4d36-a1d4-a757f164f136", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f752db88-c479-4e29-ac15-bd03cefb94b9", "sighting_of_ref": "indicator--eb031949-659f-4b06-b7ce-c7f535dac0b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7288e4-d1ff-4092-bfb3-04ab6a87f452", "sighting_of_ref": "indicator--5d32e05e-63b7-498c-a112-d6255b47244e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b790f24-472d-434f-8a25-c10af677b5bd", "sighting_of_ref": "indicator--5d32e05e-63b7-498c-a112-d6255b47244e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea43374-c9b5-4d9f-814a-02082cd2e7a2", "sighting_of_ref": "indicator--1ef6a76d-4dc9-4c8b-a86d-f82ceb40bf84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe5e1ce-3911-4d18-adcf-274b073b8f01", "sighting_of_ref": "indicator--f37fe967-3a40-4bfc-9deb-3539e072541f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576aa141-2d44-4793-b72f-80d3492d5825", "sighting_of_ref": "indicator--497ec135-0aff-4e63-97e3-bed8c7520cac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4a1c56-b8b2-4c1b-b0d8-38ed9fc67e9d", "sighting_of_ref": "indicator--2f5f1fbf-a85b-4e91-a8b1-e8be68f61dbe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694689fa-24b6-46ba-ae5b-51ff162feee6", "sighting_of_ref": "indicator--b75eedd0-071e-42ab-b0d1-388371dc125c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048cd00c-19bd-4a02-b6a3-400d916930a6", "sighting_of_ref": "indicator--9621a88f-2b50-4fad-9248-55a35ee19267", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f044dd-8cea-47b1-9e38-006b9b5319b9", "sighting_of_ref": "indicator--8d3a7b6c-f320-4317-9911-c26d466edcf7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27830d5-0a9d-43a7-bb7e-33254eedae2d", "sighting_of_ref": "indicator--95321da3-4662-4cf2-85c1-b9d2e3e4ae18", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea28ad5-d050-49d6-a9be-401177d87aff", "sighting_of_ref": "indicator--d7390245-b521-448b-b985-ac44ab59911e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5702684c-1582-4485-a546-be333c0285a4", "sighting_of_ref": "indicator--28f84ba6-566f-46fd-a271-aeeeb27c56a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808668c1-1437-47a8-b42b-2d8598d21423", "sighting_of_ref": "indicator--38a70604-8e86-43bb-9557-d132e6bf5efc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3119ea0e-181a-47ac-b216-982946e39baa", "sighting_of_ref": "indicator--3a2cf737-e24d-48b7-a979-0b0150b02126", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de496460-7b28-4de9-acdf-9c36b238e8ef", "sighting_of_ref": "indicator--0d11eee2-97e9-416c-944c-e72a25bb9e31", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18f3254-4299-4323-995a-80238815a53c", "sighting_of_ref": "indicator--615493ec-9e9d-4d18-b752-edb9fc474efd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9beb0a1f-64e1-442b-b3b3-c4ef3f0ff477", "sighting_of_ref": "indicator--3ddbc409-836e-4420-a69f-9809052b8250", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a19b600-2fd0-45a3-874b-2cd6eec6950b", "sighting_of_ref": "indicator--b7637710-099d-4915-98ac-50618527c4ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58671cc6-4f12-449f-a98f-95b29361d046", "sighting_of_ref": "indicator--ce557703-012d-4c0b-84cb-c7f221d894c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846ba03c-aee0-4f0d-8bb2-781a065b4d7e", "sighting_of_ref": "indicator--dde289e4-a69f-4ac4-98e3-6da6f857057a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7226da7-4475-48b6-a385-0320a02b91a0", "sighting_of_ref": "indicator--3bb7ddf7-0d75-48b0-a78c-a9d9850d81f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c2c2dd-e28f-48e2-bd4f-7a55102e84cb", "sighting_of_ref": "indicator--04a70f28-3c05-439a-a2f9-bdca88b7e61b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f943d8b5-78ef-4aac-9aa2-5354e64cd1f0", "sighting_of_ref": "indicator--2b50e340-1597-4501-9c40-15a6724b1d33", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79b468f-2f38-44c8-8afc-33df032cf479", "sighting_of_ref": "indicator--fd90d1eb-4df3-41c2-a430-871abb1d4f65", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b024e4aa-7a2a-46e5-8210-22a5bbceee50", "sighting_of_ref": "indicator--10518a59-41ec-4bfd-b6e0-915359115197", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee506f5-e9bc-4cda-a558-ff9991bca3d8", "sighting_of_ref": "indicator--5f7d769b-f975-4e90-96e8-7d1dd69dfd2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700ced3a-052b-4b89-b7ee-9f5c9edc42cb", "sighting_of_ref": "indicator--b48fcb06-fbfe-4c1d-8579-dde7b5649aef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f65765-5882-42a3-a7d4-17b0af1e9ef6", "sighting_of_ref": "indicator--9deda762-7c32-4e20-89c4-afcc850493d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6343595f-06a4-487b-8168-3873b739731e", "sighting_of_ref": "indicator--8a83fb68-20f5-4a19-9bb7-68ca5044f743", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433d128c-4e54-4da6-8213-3c620c2f3cde", "sighting_of_ref": "indicator--029aed3f-b9bd-418e-9336-cac2e040e3b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0852722b-3ed0-42df-91ab-9dd005f298cf", "sighting_of_ref": "indicator--e5fd8eb6-5146-49b4-82bb-78d0ef397287", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d22c660-0609-420f-9e4a-11623ad99062", "sighting_of_ref": "indicator--49f94e16-38ba-49cc-b0c7-12e2a6063e34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d60579f-438f-465f-9e4a-37e820ef6133", "sighting_of_ref": "indicator--f9cabffb-6837-44d6-a118-7a0e9aeb8d39", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c89b557-14a3-4aa9-95e8-c1213c9ff59f", "sighting_of_ref": "indicator--8bf437cd-31ba-4f5b-9b66-c1a2c78f4850", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e98563-496e-4fb2-a031-183e7d0d61ab", "sighting_of_ref": "indicator--5cc3fdc9-c11a-40e1-94ed-616ed0710e58", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82149661-aefb-4224-971a-a55141c1cf3f", "sighting_of_ref": "indicator--67d8191c-6aa6-4d5c-b157-1b9bdc85ccbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b51e072-d632-4d9e-9d55-c5ec7e5d02ab", "sighting_of_ref": "indicator--67abb1dd-2105-436f-95e1-356942f9da75", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee3358e-407a-4434-9981-be3e68937362", "sighting_of_ref": "indicator--8fe7b374-6f04-424b-a215-6a4b1a1ae60e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2513b20-b033-4a02-a6d3-5d7170e1eaf0", "sighting_of_ref": "indicator--2bc85a5c-1b1c-420a-8658-b2290d0879b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208ab5d0-b489-4be3-a65d-205c78ee065f", "sighting_of_ref": "indicator--cd21bb89-7c16-4961-b224-9b17bd94c8e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1700034a-2a41-4bcf-a67d-605fda1d1df9", "sighting_of_ref": "indicator--37ed4b57-1771-481b-982e-1d4a9b9f2f4a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e80e93-6581-42e1-9727-db0afca63ca3", "sighting_of_ref": "indicator--dac8422f-5563-4a3d-9f07-d5d21ab50102", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff58b36-13be-4a0e-a622-42061a1c9c22", "sighting_of_ref": "indicator--35ce89be-8baf-4433-85db-28f175e220ee", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0b958e-bc26-48eb-857c-b69612a62077", "sighting_of_ref": "indicator--3348a7a3-3e08-4f51-bf03-b1df1def091c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7cd636-329e-49e4-bec9-d099c723d0ad", "sighting_of_ref": "indicator--fa031c25-22a1-424f-87aa-3dc513326acc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8d68a9-b9b3-43b0-8910-71d8c2fa0a46", "sighting_of_ref": "indicator--c378fd92-03b8-4221-bb3f-a0e6038a50c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075d63c4-12d3-4918-b699-d57adcb8c3f2", "sighting_of_ref": "indicator--973102dd-3ee7-44e7-8110-1c9b860f6ce6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee05032-e49e-4805-8f76-e709a7d8194f", "sighting_of_ref": "indicator--efcb844d-8eea-4c3f-b752-ffda92318ca3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cb11b0-465d-4b3b-81ae-312b0b064911", "sighting_of_ref": "indicator--fb1b99f0-9262-43f9-b468-5cb0758b284e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f2b3c5-be32-4d8f-8d8f-c4673f09b66a", "sighting_of_ref": "indicator--14661354-4eff-4f1e-8739-ad5bb4f4a484", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805bfb30-8467-4cc1-adac-43ffe6680926", "sighting_of_ref": "indicator--fecb8c6f-73d0-4593-9a9d-950a74729bb8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fccd58-79b3-4cfc-b7f3-e73c4f050828", "sighting_of_ref": "indicator--5b46aae8-9b05-48c2-96ed-67e24efd7775", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557ad26c-448e-4d06-8975-90a0af19d919", "sighting_of_ref": "indicator--ad6a28d3-b24b-4af4-aaae-4cec47febafd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b9f982-c378-4923-a234-b7eb655361f3", "sighting_of_ref": "indicator--44f3c257-a03e-40ab-8a00-6b3feeac319a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a59337-0ec1-452b-bb70-de30dba1e6c8", "sighting_of_ref": "indicator--dabb5172-575c-4a70-98fc-5e7480623bcb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f9e636-ecb7-4788-baca-ec6cc200a629", "sighting_of_ref": "indicator--ea869875-b6fc-4c6c-8684-212d2929c9ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6899d1-1312-4df8-9e32-28ed57c6ab19", "sighting_of_ref": "indicator--cd877017-5324-41c5-b22f-3a08c83aaa40", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a569e0c-b1e7-4315-8142-2cd7cb8b4187", "sighting_of_ref": "indicator--41d8c7d6-a50f-4745-9ea4-cd9f8e560eaf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ee2fc1-df62-455e-b920-8d95944ad4e1", "sighting_of_ref": "indicator--f6985fbc-8455-441a-8103-7697f4531227", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644c57bc-23fc-4ca5-9b29-c72e3178f3bd", "sighting_of_ref": "indicator--69904a39-1e59-477b-baa1-43405a407aa8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1678c23e-5707-458a-9347-cdc54ec61174", "sighting_of_ref": "indicator--c7dcedad-e26a-432f-95e4-487812d4042c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42910ad-bad8-4557-99f1-198fa5070fdf", "sighting_of_ref": "indicator--f49b9562-df82-4246-b522-5079c82a2adb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d598fa1-0f19-4426-a997-8c9a726cf5f3", "sighting_of_ref": "indicator--51feaa4b-b999-47b1-be93-dfecd4452f13", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e2cb35-5af4-49dc-af67-305bd53a92d0", "sighting_of_ref": "indicator--2a4c2ddf-cc53-4dc8-862f-9c23eaf9d6d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cf064c-859b-4a33-8af3-86d5de96272d", "sighting_of_ref": "indicator--6e84610a-a53c-4eb2-a9dd-6e2cb0fa9b05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e933352b-6d5d-42e8-a969-0ed029b58f8b", "sighting_of_ref": "indicator--3e045b4e-5a2b-463d-9b01-0b30edc14bcf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9406c82a-8f4b-4919-9c31-f51d368acc91", "sighting_of_ref": "indicator--95869dea-55d9-4d14-a651-ccb1d8d276d5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab485578-dbaf-489b-99cd-d7d909794cd5", "sighting_of_ref": "indicator--65c62b2f-c582-4a16-9516-c2d6d3e9d59a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8bb899-d9dd-4b06-9793-7a7b15474d80", "sighting_of_ref": "indicator--dca228df-dfcc-4d84-b7d9-3e2f11b01c5b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfa6222-4ebd-41c2-94a1-5814cb0eb8f0", "sighting_of_ref": "indicator--989c5147-bd1b-4682-88ef-c9bd9c6229c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bcdefb-d8f6-4e39-a296-daec83b12fc8", "sighting_of_ref": "indicator--19ff2c84-a3a6-4f9b-ac19-36e320b07934", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23bf743-7c8c-4c88-8f1f-831024aa19f7", "sighting_of_ref": "indicator--0d3e253c-ab7a-444f-8136-c5ce117b19ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f91f3f5-83c9-495f-b9fa-ea441dd1abf0", "sighting_of_ref": "indicator--f88666de-fb1e-4605-9da7-afa8c096e437", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122c4e4c-2d05-47b0-ad4e-83b4b4916bca", "sighting_of_ref": "indicator--ef04eef8-be8d-4f61-8b78-d248d1886d09", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0eea91a-3889-442c-b18d-f6f3f312b917", "sighting_of_ref": "indicator--23917856-6e35-455d-9f24-4a494eb8edb1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d524ede9-9786-4bf2-8627-f6a04bf26f2b", "sighting_of_ref": "indicator--36fddaa7-8e2c-4ee3-9682-db9cec952521", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691150ae-a13c-4423-905d-8fe5e7e12e6e", "sighting_of_ref": "indicator--67a22957-999c-429a-9f8c-a6ceb22b0b65", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e2f2cb-e7bb-4c3c-bfcf-7e4ecbaee8f6", "sighting_of_ref": "indicator--e1341a01-ff29-4c68-87f5-d7d6eb247301", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc15683-29cc-48d2-afaa-7dff0afc1f3b", "sighting_of_ref": "indicator--d4575cc7-51eb-4fca-a9ce-176fe691aca9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76a8581-9e4a-4c32-ae0c-f82552fafb83", "sighting_of_ref": "indicator--0099c679-2e3e-47bd-9c5b-0108f4922889", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7f743d-eeb9-4301-92f3-f30d265f5028", "sighting_of_ref": "indicator--c92283af-28c0-456f-9397-067d34a98fab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4342eedf-ea01-4fca-8c7c-e9078cfaa61c", "sighting_of_ref": "indicator--763f480c-7ea5-4851-85d2-0d7d3f7a921a", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bd1c87-5a78-4972-945c-38c8b914d4e0", "sighting_of_ref": "indicator--1cffbcbd-142c-450d-b9f5-cceebe1baac3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d058a7-f84a-474f-b60e-cc471b5633e5", "sighting_of_ref": "indicator--f460db02-83a5-43f1-aba6-2b40e1f4be0f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4115790a-1780-4714-a54b-e0ca59cebea6", "sighting_of_ref": "indicator--546c40bf-0447-4dfb-8d4e-0e390538fc2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e9bdc6-b5ff-410d-83cb-998f829a73a8", "sighting_of_ref": "indicator--25df705d-ba63-4e32-b412-436f3732ad0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac72d3eb-2825-40a0-8ed9-35dc5a43f0da", "sighting_of_ref": "indicator--595e5413-3ed9-46bf-9703-e42199e808ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676c50c0-e9f7-484f-810f-50c34702c624", "sighting_of_ref": "indicator--949aa5bf-61a5-412d-8e36-73f47cda5a24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42db3d36-b4ee-4c2b-b12c-79a307d83ac5", "sighting_of_ref": "indicator--66787919-adb1-4945-b7c4-a60cf8682e92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438f8745-c93f-41fa-8a51-9b24a7afae25", "sighting_of_ref": "indicator--3dcdd63a-786e-4352-a742-1ce3048de138", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5a2ad0-201b-470c-bb5e-08dc0f615786", "sighting_of_ref": "indicator--7cbad021-59d0-4599-82db-4a43324c851a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ec86e2-2b2a-48f4-a36d-e3484ae93fb4", "sighting_of_ref": "indicator--067c1cb1-ed14-4853-b4cc-1491b39dc811", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a207dea-bd8c-4130-b5af-e030f3ce52d9", "sighting_of_ref": "indicator--067c1cb1-ed14-4853-b4cc-1491b39dc811", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b61e636-9cd6-42e4-abaa-e2bdf1d2e02f", "sighting_of_ref": "indicator--0d60603c-be22-4af1-afc0-f1d357aadb9f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81efaac4-9f69-4821-a614-1bc97727dc32", "sighting_of_ref": "indicator--99096a55-5c6e-4715-b424-7c77da205f72", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98943ac-cf73-429a-a0c6-12f19c20eacf", "sighting_of_ref": "indicator--d4408571-76f6-425d-8004-6016f1012001", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ae5ec4-8cd9-4f6e-bdb3-4bc679c4f547", "sighting_of_ref": "indicator--cc40d20c-3aa2-41fe-82ca-6d35b4ac42ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85118790-34b1-4ccc-8c16-796de5c8f04b", "sighting_of_ref": "indicator--cc40d20c-3aa2-41fe-82ca-6d35b4ac42ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b464e7-b306-4f35-a086-51162bae26fd", "sighting_of_ref": "indicator--56482c4a-f068-4cb6-96f9-0d100a18a48a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fa1a19-5dc2-41a0-877f-7fee0007ff3c", "sighting_of_ref": "indicator--d9688ef1-02d4-4cbd-a2db-11b0d85df834", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4292ef2-5c19-49d8-800e-70c9e9215199", "sighting_of_ref": "indicator--ab0d5399-c00b-481f-ac39-81801b380edf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec3484c-a311-4150-816e-91aa0ecb38d7", "sighting_of_ref": "indicator--db4672c2-6d9e-4385-b5d8-26dc850515da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98d9990-0751-4976-8c0a-769e7a0968e4", "sighting_of_ref": "indicator--bef49d63-7d50-47c7-8d5e-1cb67524bcc5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41119df-5ccd-4a95-8950-49c5f0b9922f", "sighting_of_ref": "indicator--2bd05f78-5d4a-41ad-a598-006443830c94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a266929-f32a-49cf-991f-2e0d62b31c3f", "sighting_of_ref": "indicator--85d37a2e-f6c4-4d5e-94f3-5a14c29b778f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542830aa-70f2-46de-acd6-634047b5450d", "sighting_of_ref": "indicator--39e5e28a-eab4-449b-941c-1a744e06fd8a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c925cef5-b196-4f9d-98eb-f02fe1f44373", "sighting_of_ref": "indicator--39e5e28a-eab4-449b-941c-1a744e06fd8a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a0dfe0-ad31-4658-b42d-7a11ce5951ab", "sighting_of_ref": "indicator--5a6601c6-3a60-4bad-b573-f59afd11c818", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aec9f86-bf61-4b82-a960-add2603efb06", "sighting_of_ref": "indicator--5a6601c6-3a60-4bad-b573-f59afd11c818", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b5a7df-0414-48da-a04a-929d8d67f923", "sighting_of_ref": "indicator--3eacc7c2-16f1-4fdd-98f7-d7870f178a93", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163a0a19-a385-40ca-b833-06aeaa846929", "sighting_of_ref": "indicator--3eacc7c2-16f1-4fdd-98f7-d7870f178a93", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f91c1c-9cf4-4d2e-9bde-9ccbdf988037", "sighting_of_ref": "indicator--bc82e664-e3ac-4593-9f77-41d23b6cffed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36debf9d-ce12-4469-8bc6-5d7a77d2a1bf", "sighting_of_ref": "indicator--ec21db40-b54c-4da1-898c-38fd2d229d79", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f542c17c-df10-45e4-bb47-0b045ee53bba", "sighting_of_ref": "indicator--ba53d994-0fef-48c5-b9c8-4a7097960741", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1846b8c8-d5c2-4154-b277-5239b99f2401", "sighting_of_ref": "indicator--ba53d994-0fef-48c5-b9c8-4a7097960741", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba2ea0d-4706-47a7-966b-1311e8575f03", "sighting_of_ref": "indicator--20d494da-38f4-4b5e-8201-b91b34e86197", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbae6ad9-79f2-464b-8f2c-9f9e53455eb7", "sighting_of_ref": "indicator--fb231690-04c0-4e8d-93a2-f6193b42dfd0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73230cd-7519-467a-bd24-fa75bdff5c72", "sighting_of_ref": "indicator--f760b7bb-c7e4-49ec-8fe5-178f2d19d640", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c75c50-1c38-4727-89b0-049552007bf3", "sighting_of_ref": "indicator--f760b7bb-c7e4-49ec-8fe5-178f2d19d640", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4314ae-1330-4d0c-8aa1-26e6b8c68cf9", "sighting_of_ref": "indicator--0f61ea40-f359-44bd-9228-7215a5b4bae9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a302a0-581e-49a1-bce3-77191eaed9f8", "sighting_of_ref": "indicator--94b0e1ee-8402-4b8c-b470-d04062471ed7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820d5cb3-ddb5-4ad6-849e-348b2c398608", "sighting_of_ref": "indicator--e5b9092a-8dcc-4209-9357-888e443270c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f55c391-b462-4c45-bbe4-a1c51fc9098a", "sighting_of_ref": "indicator--98d85903-1050-4258-8a3f-078ed6b1f47e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62000291-8ece-463d-b359-9d532edcbd9c", "sighting_of_ref": "indicator--98d85903-1050-4258-8a3f-078ed6b1f47e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb089880-8913-43a3-8599-d57f143e8be9", "sighting_of_ref": "indicator--41eabc0d-c4ba-462a-bae5-2358a486b102", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb171eb-4313-4454-b2a7-c14b26af5533", "sighting_of_ref": "indicator--09a2f4d7-9251-4776-a142-5f8f4b7a63a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2a796a-5378-47b3-b978-c6f6834d3eca", "sighting_of_ref": "indicator--6f702ded-f4f3-4313-a594-5df7f6d11498", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d949125d-edbb-4c81-9f67-b2b91377131f", "sighting_of_ref": "indicator--05e7e0aa-f847-4fd4-80b6-bee7f6e03103", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51139e8a-6e66-472c-bdcb-1caa47aa4bd5", "sighting_of_ref": "indicator--05e7e0aa-f847-4fd4-80b6-bee7f6e03103", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da49a81-4b48-43cc-bc69-1e1627eca4d8", "sighting_of_ref": "indicator--b74a9c32-54ac-4504-bcf7-6df05d4467d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f2dbe2-52a0-4454-9cc7-15a237c0a039", "sighting_of_ref": "indicator--b74a9c32-54ac-4504-bcf7-6df05d4467d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87b2635-e71d-4e4f-93f0-527519676889", "sighting_of_ref": "indicator--df1e650c-7b31-4c8b-9dab-0877b0308370", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2214463e-007d-4a4b-b4fd-c780d1f56b34", "sighting_of_ref": "indicator--b96dd3ae-0ca4-4a4d-8f48-f46be3a7a511", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8d2ff7-e961-4e2c-94e5-8f0d204c7623", "sighting_of_ref": "indicator--5185550d-e8c7-481a-b518-b53a34e0104b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1071d7d-fb36-4003-8225-214ba540e1ba", "sighting_of_ref": "indicator--615bd400-ea75-47dd-8d0b-20148c72c6f5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7c3a4c-e82f-4a21-a5db-f2c1b76a9620", "sighting_of_ref": "indicator--615bd400-ea75-47dd-8d0b-20148c72c6f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2cc053-f718-4369-a74c-6099c81380c0", "sighting_of_ref": "indicator--4035af57-71e7-4d4e-b3e1-176629b3084c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b3c6f0-487f-4cf6-9413-bb1b468f7765", "sighting_of_ref": "indicator--f062cc5b-261a-4a38-817a-cb5b84c92eba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531f0fa3-7c42-45ca-915b-2a65fbc6cb8e", "sighting_of_ref": "indicator--00c33242-1823-489e-b6e0-a552da175bbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa46927b-64b8-434c-8958-feabb83bb26a", "sighting_of_ref": "indicator--00c33242-1823-489e-b6e0-a552da175bbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6231e8c8-5d0d-4252-b021-d7dc6091c567", "sighting_of_ref": "indicator--d26298b1-3f63-49b8-b58d-5104a97c6ebd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f40d35e-37dc-408c-8eb1-334f75f8fafe", "sighting_of_ref": "indicator--d26298b1-3f63-49b8-b58d-5104a97c6ebd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b157c62-8757-4b7c-8835-127fc225def3", "sighting_of_ref": "indicator--a29ad98c-d3e0-40cd-aabb-8468d576a4db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a994da-4466-4012-8c94-dc0f36cb0284", "sighting_of_ref": "indicator--a29ad98c-d3e0-40cd-aabb-8468d576a4db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4555414b-6724-428e-b01f-d2303145789f", "sighting_of_ref": "indicator--9638e63d-e9d2-40f8-9435-b8df6e74f9d6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4832b0-cd86-46b6-85fa-a4f467333e0c", "sighting_of_ref": "indicator--9638e63d-e9d2-40f8-9435-b8df6e74f9d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63933be8-7b63-4253-9ead-4b9c36f3907b", "sighting_of_ref": "indicator--ab71c378-5b47-44a5-8be4-ee952655cc8d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a5b391-8716-45ff-abcd-d3611976d1c1", "sighting_of_ref": "indicator--ab71c378-5b47-44a5-8be4-ee952655cc8d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9d4269-1c15-46c3-ae05-e39c5333364e", "sighting_of_ref": "indicator--8acfbbcb-99a0-4ba9-9e4b-b1aa8b0d4bb4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7899385e-023b-4ebb-860d-db4bb474a371", "sighting_of_ref": "indicator--8acfbbcb-99a0-4ba9-9e4b-b1aa8b0d4bb4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacbdc76-192d-4c93-9a4f-0053877d850f", "sighting_of_ref": "indicator--3c828115-ab6a-451f-80c1-fb512ef3593c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4c6d37-564f-4c59-945b-41123d21e02e", "sighting_of_ref": "indicator--4f49f07c-8f1a-4346-a09e-6b79442cdf24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d541293-ba2f-44fd-8e6b-1cba266c99fe", "sighting_of_ref": "indicator--f642b266-79b5-4d6d-a415-3efdcf7a523f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd450f6f-bea9-4d67-bc1f-803c16c47533", "sighting_of_ref": "indicator--fd7f8cf5-f421-44cb-adc7-521171be8d45", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7756c74b-a5d6-4e7a-abe1-2125e53ec7c2", "sighting_of_ref": "indicator--613cd196-c0aa-4e94-8aea-b190db45163d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6a5e7a-e839-4c38-acca-9dc7ef81bcad", "sighting_of_ref": "indicator--2bf722e5-c866-47a9-be29-1f22ee11f48e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f673f082-740d-4fc3-8242-1a78a87d6e7e", "sighting_of_ref": "indicator--2bf722e5-c866-47a9-be29-1f22ee11f48e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6998395-a7f8-49ea-b7c4-14588fa13352", "sighting_of_ref": "indicator--acebb4ac-c06f-4399-b1e7-e7630b68d00a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbbd077-ec77-40e0-8f32-445836aa135d", "sighting_of_ref": "indicator--acebb4ac-c06f-4399-b1e7-e7630b68d00a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1edb24f-ea92-479f-a76d-1cdf977d63c7", "sighting_of_ref": "indicator--acebb4ac-c06f-4399-b1e7-e7630b68d00a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542ea819-ea26-46d8-b938-3066a74528c8", "sighting_of_ref": "indicator--007e27f8-909e-4489-b4bc-e156e88a1a20", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7280c86e-0b82-469c-be6b-887496052003", "sighting_of_ref": "indicator--007e27f8-909e-4489-b4bc-e156e88a1a20", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21816004-e3e7-4495-848d-e25723ca3cd7", "sighting_of_ref": "indicator--8ee59a44-c2d6-4505-a064-08dac6086c53", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6d3387-21c8-4c78-bb8f-c7bd0d1ff0ec", "sighting_of_ref": "indicator--e7ec5173-0561-4442-bc66-0e954190e7d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53530cfc-dc37-4a65-95cf-5ab196f64d9c", "sighting_of_ref": "indicator--e7ec5173-0561-4442-bc66-0e954190e7d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c524af8-63b4-4103-a298-95b70f5d3ed3", "sighting_of_ref": "indicator--b4dd8cec-d2c1-4f34-82f2-9495bac4ac76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c73ddf5-c6ad-40b1-af6b-364c71725af9", "sighting_of_ref": "indicator--a0ffb57e-5737-4618-a239-cc649005a2f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69772cd0-2d68-4dd6-8f29-3247a3a15a42", "sighting_of_ref": "indicator--428e50cd-a8cc-4b46-a163-4d59f306ff6c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a61c182-da72-4fb2-b0d9-8adb2ea81fb6", "sighting_of_ref": "indicator--91257cc2-4a12-48f2-9896-05ff0a20eef4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4354b3c8-988a-4679-9b3d-220b48070d6a", "sighting_of_ref": "indicator--c3790c14-9b48-443c-80d9-0f6deb51bf6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aadf2dd-22b7-402d-8849-7338256c1800", "sighting_of_ref": "indicator--56c304cb-6132-4eb2-a7ac-7ea1a97518af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa03cd2-6090-4ed4-9df6-3a4aa9b2f7d1", "sighting_of_ref": "indicator--0df338f9-f4a5-4d75-b3cb-2b5a118dc762", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e4e50f-bb18-4ca5-9bf7-49f12e610c55", "sighting_of_ref": "indicator--551bd8e2-8f91-4100-8438-f504832011a9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6107004-dc14-454e-b3fe-3234e37b3d06", "sighting_of_ref": "indicator--d6f729ca-312b-4c30-8dee-03271a5ea1b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd82e72-2c3b-44b8-9e68-aa8d9dbb489d", "sighting_of_ref": "indicator--29711e69-d288-457f-87f9-a9c456e457af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4625f97-f61d-47f1-a5a2-a27428f56c0b", "sighting_of_ref": "indicator--2f146867-b247-4863-b684-8059f1618cea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b19543-2dc3-4a60-97e9-24578a3ca12c", "sighting_of_ref": "indicator--0226c884-7e47-448f-9b69-cd9c8ffd4b57", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10511a41-2c69-4b77-a486-7a7fba609e18", "sighting_of_ref": "indicator--e8ebb053-14f1-4469-843c-cca8966c76b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b414b641-a1e0-46ce-b144-0dbd31ec99b3", "sighting_of_ref": "indicator--9480e06e-34bd-42dd-aa88-dfc2fbed75d5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895a3d1c-08fe-42b9-bdd4-96e703aabe79", "sighting_of_ref": "indicator--55b6a660-6387-4a1c-98d9-394e836f9790", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eea88bb-888c-4df4-988a-2d0280d3b32f", "sighting_of_ref": "indicator--d6222e86-2151-4fe5-b4e8-0549ddf23099", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7046a42-3234-4326-b536-6dd52460a86a", "sighting_of_ref": "indicator--30ae064c-aad2-466d-b951-4188bfbf3489", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da31bb4-0162-466e-9348-0717adfae040", "sighting_of_ref": "indicator--0ec30f29-2553-4878-8cc5-52ebd39b4b63", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32022089-e94f-4aed-9fad-52798b5e5385", "sighting_of_ref": "indicator--dfa274e8-bd45-4f53-ad36-d1eba0a727a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe574bf-8d49-4035-87db-c642266e5eca", "sighting_of_ref": "indicator--64ac7a5b-96fc-44ec-a735-f52056b255a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9073fdde-df5a-49d5-99cf-6c5ba36c9f80", "sighting_of_ref": "indicator--edb6e282-b498-4c05-a795-cc83d5a48035", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74171e0f-7a9b-48d4-ab82-31bc42ae03d3", "sighting_of_ref": "indicator--1fbab953-a460-4bdb-8bfe-00b19ac99f1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a524b7-cb17-4083-b797-30872987d4f8", "sighting_of_ref": "indicator--cd154be3-ed9b-4b85-a8ed-c14dc18ba1c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0025f331-ec9b-418b-a0a9-0e0862cd0608", "sighting_of_ref": "indicator--9c9f763c-6c2c-41da-b309-42ddc2a04662", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587c0d09-10a2-41e9-8be7-ceb0574f54a8", "sighting_of_ref": "indicator--765fe65c-35eb-4283-839b-56d84cf558f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84abebc-76df-4828-8a98-7b6b91fafa7e", "sighting_of_ref": "indicator--8702f43d-88d3-44db-a6ee-2f7f9a3dd8c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76446fc2-681b-420d-a383-ffc91fc8603d", "sighting_of_ref": "indicator--5719f440-d57a-4e71-8004-20c6b119b691", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e960046-f7bd-4de9-a2f5-9da4479d97cd", "sighting_of_ref": "indicator--5719f440-d57a-4e71-8004-20c6b119b691", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d3be14-41e2-4781-94a4-7ca9c6f74fe5", "sighting_of_ref": "indicator--4628d539-349c-44bb-be42-badc95c0745c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36d5aea-ad8e-4465-92ad-8123b6b9d5a1", "sighting_of_ref": "indicator--b6c310ff-35d6-4c36-9a0f-2abd5f7e4162", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af31ffa8-3d9a-4aae-874d-3a3199580307", "sighting_of_ref": "indicator--861b0421-2445-4c12-a866-54e4b05679ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e977af-bc11-4d70-ae97-ce8664deeae7", "sighting_of_ref": "indicator--861b0421-2445-4c12-a866-54e4b05679ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70ec7a0-d461-4320-bc22-ea93324e6660", "sighting_of_ref": "indicator--373fd1e6-d2f9-4f7d-bfe0-881b55bd43ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2a5a92-85ee-4b26-942b-4687a42a7ed0", "sighting_of_ref": "indicator--373fd1e6-d2f9-4f7d-bfe0-881b55bd43ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31cd237-65ae-4836-b397-b209b0e473b6", "sighting_of_ref": "indicator--5832ca84-effd-40e9-b834-f2a06120bef2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0dd943-7d0e-4796-bce9-c9521c3c58c7", "sighting_of_ref": "indicator--5832ca84-effd-40e9-b834-f2a06120bef2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fa8e6f-17b6-4853-9c53-44eec520deba", "sighting_of_ref": "indicator--14d4f443-11ba-4223-872e-e79239050113", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0dbb3a-1d21-48eb-8584-72253ac4664f", "sighting_of_ref": "indicator--14d4f443-11ba-4223-872e-e79239050113", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701275a6-2b84-4ecb-a091-d610e9bc53f9", "sighting_of_ref": "indicator--03204457-1ae7-4ba5-ae70-e75e74657aff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37887c13-8ec9-44cb-854b-efbe8b81df1f", "sighting_of_ref": "indicator--6cb47060-12a0-4834-8a0e-167f1b4165c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d77dbd2-0eca-450c-8636-cf0ea3a1a41a", "sighting_of_ref": "indicator--6cb47060-12a0-4834-8a0e-167f1b4165c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee95dbb-b9c0-4e5e-88f0-c1770d432724", "sighting_of_ref": "indicator--a5b46076-a339-44c0-9e67-628469d0b865", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87338993-9a0e-48e4-a89c-1607179ed908", "sighting_of_ref": "indicator--feae8e15-308e-49dc-bb0b-a23954e57c68", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c1b1a8-b359-4ed6-bbd9-0bbd5eaa5227", "sighting_of_ref": "indicator--448066ca-52bc-400b-b33a-123bcbd0e638", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33690535-a15b-455d-9676-68327575bdc0", "sighting_of_ref": "indicator--6988dc2d-6e00-4d40-98ea-a22c2241bf3d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c943e2-b77d-46db-81f8-1e5cbe7c2a8a", "sighting_of_ref": "indicator--4986f499-c4e2-437e-b44c-8678538edb76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787a9f55-fc59-4a0e-9215-f242a255c536", "sighting_of_ref": "indicator--62ce46f8-2b10-4783-a300-07fcbab86a9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbb6c46-d8e7-4e3f-a351-a76c4b630e6b", "sighting_of_ref": "indicator--7ff66206-1915-45a3-a945-cbc766cd1352", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c374c621-ec33-4cc0-8665-12c6f54a2898", "sighting_of_ref": "indicator--7ff66206-1915-45a3-a945-cbc766cd1352", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f0e6df-164e-444b-9f53-28675df07523", "sighting_of_ref": "indicator--7ff66206-1915-45a3-a945-cbc766cd1352", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1ab954-ba7b-41a3-9c5a-1a922eb10cd6", "sighting_of_ref": "indicator--ef7d29c5-c373-4829-9a96-92ba1a738fba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158b0e37-3509-46da-bc9c-30c161321336", "sighting_of_ref": "indicator--2a4c41b6-c813-48b6-b2dd-34df5bb14e1b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b807e5-eb87-451b-a0d7-80f5037c34af", "sighting_of_ref": "indicator--5b39e762-0167-4b1d-84f0-1ebe27d44e72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbf1309-91d6-4e57-8a05-006dc2e039e5", "sighting_of_ref": "indicator--e2317ff0-a32d-4df7-8874-6d4bf9981a75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161b91a9-87fc-4471-8aca-5de49280871d", "sighting_of_ref": "indicator--7c0967d4-d0c4-47c1-8ad2-6affa8884750", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49dea20-9e01-45d8-a28c-5389d09d6814", "sighting_of_ref": "indicator--f28a0d56-b70c-4273-8119-b24438473bcc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1fd21e-ecd7-4631-9537-ea60065dbdf0", "sighting_of_ref": "indicator--f28a0d56-b70c-4273-8119-b24438473bcc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036e9bdc-8924-4585-83fe-3b85b6ba95e0", "sighting_of_ref": "indicator--25cfe5b9-7d7f-4dcf-b48f-e9b8347fbc47", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4cea89-8e9e-4f4b-8703-d0caa8a63cf1", "sighting_of_ref": "indicator--de60960a-5a80-45bd-a066-88e11f881093", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0169a3-395d-467a-8ece-d589697382be", "sighting_of_ref": "indicator--9085f147-fc66-4b9f-abca-47fb49bc8359", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f688f432-7ded-49d5-bffc-4971080877d6", "sighting_of_ref": "indicator--22033b5b-498e-4f56-a799-d6eb5b7c5658", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92358b28-2338-4ff8-a7a9-7544ec69c0e3", "sighting_of_ref": "indicator--3b6eef53-5e36-4163-8fe6-89bdd3c7d158", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e391987-0da2-4bf6-b59f-20ce1d9565ac", "sighting_of_ref": "indicator--288b592e-b71a-4180-afec-21ec4378a057", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7fda7d-fd70-47b4-9830-1487bfc34264", "sighting_of_ref": "indicator--802d5759-06e9-46d0-abd4-ec6d5bd35507", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919bb16d-4c5e-4856-9cca-64a35c8cb447", "sighting_of_ref": "indicator--fa4b9aad-1e40-4bd2-a532-562c219a3eaa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c178e558-37d4-4cc7-bbda-7e5770a07bf4", "sighting_of_ref": "indicator--11b75a26-2dc4-4a3e-aaf5-a39ec8d77d33", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6fa13b-4a16-42a9-b1a0-b4e56ecab1f0", "sighting_of_ref": "indicator--c796cb59-7b4a-4de0-b5dd-12680ea1e849", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205776fb-2222-483b-948a-6f722ad8d4d2", "sighting_of_ref": "indicator--ec5d8a4f-5ee3-48b8-b589-543601b71834", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57b1589-06c1-4823-9384-b2d16983ca84", "sighting_of_ref": "indicator--c49a4c9d-41b9-40fc-bef7-6ef83032b007", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64486260-76fd-4461-bf71-3d78e8c462c7", "sighting_of_ref": "indicator--b5341a91-86de-4cf7-bcb6-c0e28f2f4d6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a779fde8-93b5-4d2e-9099-f0dace6ab39b", "sighting_of_ref": "indicator--4e53a41f-d6a1-4d2b-b9c3-ed713fac7035", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e9e9b5-3e81-4871-8ad5-c550ac480d9f", "sighting_of_ref": "indicator--031389c2-257d-47d6-9cc4-05e3839eafa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b8cdef-b26e-40f8-80fb-e5a063a3b8b7", "sighting_of_ref": "indicator--ce35f2c5-6d95-4fc2-b80b-4832299b3df5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9587ad29-d0af-44b8-9595-a1fadb908bd2", "sighting_of_ref": "indicator--57728303-0251-4be6-8c74-e032a91e827f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c755465d-ce57-4e81-9ee4-4e08006239e3", "sighting_of_ref": "indicator--5164898b-cec5-4eb6-affb-e1c52eb1caab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8531034e-4569-4ce9-a3d2-42ad48211cc9", "sighting_of_ref": "indicator--203281f9-f1ed-4998-ab7d-bd4e445e4f6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ad364e-d257-4a1c-b824-bd27fba2c842", "sighting_of_ref": "indicator--144f5e48-12c7-48d5-8244-62d1f4134555", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc96c3b5-17a2-4b79-8b18-0bdd37277b92", "sighting_of_ref": "indicator--ad4bb106-3e3d-4a7f-bf9b-9e9e082cd4db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646067ed-f804-4def-b379-8871fca0ac02", "sighting_of_ref": "indicator--9012f6f6-16ef-4e11-acdc-3101dce38c3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b57220f-0b01-4e33-91ad-66891be32150", "sighting_of_ref": "indicator--a340619c-99e5-43e4-beb6-532e6c9fe9eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fc7b08-e6db-4117-a10f-c91bf821bb3b", "sighting_of_ref": "indicator--eaa9131b-2f89-4c5e-a7e8-b82c6af6fdcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87804c7e-05e9-4f28-99f7-807e4ba3041b", "sighting_of_ref": "indicator--610f3e73-498d-4d64-8f73-af9db4f0cfa3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919398ec-b995-420c-b1a6-ad3333dc8afe", "sighting_of_ref": "indicator--ad27a7cc-6a61-4b3d-88f2-8ad4d4f25eb2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f8aea7-f7a6-4a4a-9ac0-4e034f37b878", "sighting_of_ref": "indicator--8beb8e06-2271-484d-857e-25605cbd4269", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b683a9-451d-4a54-bb3f-8f9957a05f62", "sighting_of_ref": "indicator--90e43381-e6dd-48e3-a0b7-befb194efa1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83ad3ae-a59b-4f38-89f8-9be20eca2d34", "sighting_of_ref": "indicator--df46e7c5-2720-49bd-862e-8fd52a612bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f73ea0-3e8e-42c1-9f80-68cb986d0bad", "sighting_of_ref": "indicator--61ff5509-f8a0-4f5d-9ab9-b73236047d99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05cf31c-fd97-40d8-a7f2-767823f7fc7a", "sighting_of_ref": "indicator--a98c5c07-f1d1-4fd9-9997-9d04ae500090", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ee9005-b235-484e-8499-a32991fba8a6", "sighting_of_ref": "indicator--03062bbb-187a-40d6-904c-b0b2c1742a1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fd3a45-d6cf-460d-9bea-dadb3e17b9db", "sighting_of_ref": "indicator--67ec9051-eef0-4b6c-ba02-864681a1ba7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d814c387-10d8-494f-895d-dc8b1f07e23b", "sighting_of_ref": "indicator--2bd660fe-5146-4f6c-a8fd-473fd3e3bc77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d5ee62-c710-4c6a-a9c2-bf82c39ab6db", "sighting_of_ref": "indicator--c5946ef1-7fc4-4abf-b1ae-e79f26b5e864", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902dd1ad-eccc-424a-8faa-41bf881d9489", "sighting_of_ref": "indicator--9ba24cdc-ae54-410f-b27c-a2d47fa928bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28743fd4-6309-4da4-b596-d7e611b7d727", "sighting_of_ref": "indicator--c3ce1514-a430-41b0-a046-cb9dd5790745", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c4e945-3665-429c-9d36-9668518084bb", "sighting_of_ref": "indicator--15e0fd8d-3ac7-4887-855d-4a22c58e8633", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47143f10-d68a-47e6-8328-3435228c5a9c", "sighting_of_ref": "indicator--312750bc-9e60-4941-bc57-0dde3cea9ff6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab24d84-5c2e-4d50-b7f7-9c34f11c273d", "sighting_of_ref": "indicator--6c5e972f-10ab-4eff-8c24-a8d13ab16eb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f163ac5-88c0-4648-8075-3ecc9b0572cd", "sighting_of_ref": "indicator--68445c97-ab0d-4562-b984-798203249d4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273cb056-d5fb-44dd-ae13-0766b11b4958", "sighting_of_ref": "indicator--8693ca8c-6a44-4908-85d5-da2d9474900d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbd3ed0-7670-437c-bbf4-ca0ce769ec4f", "sighting_of_ref": "indicator--dce93867-76a1-47aa-82e2-b365a5c60cf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ab4b29-7112-4096-ab32-6ef4064a468e", "sighting_of_ref": "indicator--ae37f930-4abc-490a-8392-45a0162948f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbd37be-622b-4f4f-a8f3-f3a5400cad35", "sighting_of_ref": "indicator--fd38932a-869a-4320-831c-fa6173514777", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb28f05-a97f-494a-b95f-862b53bac35c", "sighting_of_ref": "indicator--dea363ad-9db7-42c1-b5ce-63d67039cbd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2f47d0-e904-4ed1-af21-41eaae3e62e4", "sighting_of_ref": "indicator--9efb8086-a213-4ae4-bc16-9e59cea9319b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee08da9-279c-48aa-a02f-3311dea314d8", "sighting_of_ref": "indicator--c9b2990a-2763-4926-b9b7-ca87d0ab6dc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed32130-543b-4371-8e93-1f31fdff62d2", "sighting_of_ref": "indicator--c67481c6-55b0-4d76-884c-839b44bc4c88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a4b93c-6672-4fc9-b0c7-eea50e530fd0", "sighting_of_ref": "indicator--5c9d1c34-f761-4edd-b896-29a4bc830975", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9726f933-ca3e-47ce-914d-aaa9544d08d3", "sighting_of_ref": "indicator--f6f60256-8b01-440d-af72-90fbafd35147", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0db03c-a6d4-45de-88e3-a30642388592", "sighting_of_ref": "indicator--04b6e8d7-aaa2-420a-922a-ba2815d75b3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc0a37e-cc9d-4461-be53-487a530eb8fa", "sighting_of_ref": "indicator--c2b2b0a6-bb60-4989-ad34-4f162c73a2c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68bce47-2b65-4f0f-90f7-cdd0060a7201", "sighting_of_ref": "indicator--98ba7be7-c6dd-42b2-880e-c8bcaf887422", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f482b52-1645-4d6e-82ee-94e99da53f8c", "sighting_of_ref": "indicator--4d4201d2-51fc-4948-8717-5ae332dd229c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005b8ccd-f5ff-4612-bf23-24179d95789c", "sighting_of_ref": "indicator--e6393651-09e8-4dfa-8a16-41bfee05de08", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31878094-41a6-4e37-ac4f-2ccc477dd245", "sighting_of_ref": "indicator--8f06e3ba-886a-4f3e-b78d-129c762d99d9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89379525-f441-4425-a856-8de90266daa2", "sighting_of_ref": "indicator--7ce4237d-2952-4c4b-8a8e-e6b0bc3e803b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029db7ef-de0c-4189-a922-738806e72813", "sighting_of_ref": "indicator--73ebd8d2-a065-4b5c-b715-f26bceaa4023", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaff5a62-5836-4c47-88fd-95bdb901c44e", "sighting_of_ref": "indicator--ac80cb3c-14fc-4e86-9f08-396b2cfc659a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5644b180-2c5c-47de-a826-63ad02e67703", "sighting_of_ref": "indicator--2d66c908-c863-4021-9ec9-929acbcdd997", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98793a2-b498-4870-8bf9-b05550a7989f", "sighting_of_ref": "indicator--2d66c908-c863-4021-9ec9-929acbcdd997", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384f8164-e682-4a90-8490-cc23b311443b", "sighting_of_ref": "indicator--53610f17-b87e-4c1d-805b-d060793afaf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b114167-b3b2-4ed1-8042-d9f343290496", "sighting_of_ref": "indicator--53610f17-b87e-4c1d-805b-d060793afaf3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577dfe22-2dd5-4676-ace9-d5772e788667", "sighting_of_ref": "indicator--30740d66-7a31-42f2-b02a-74b6e7500f6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c34385-b2d5-4120-babb-fb85a67f3fb4", "sighting_of_ref": "indicator--30740d66-7a31-42f2-b02a-74b6e7500f6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dccafc5-1162-40f5-baae-57fb1982a7a9", "sighting_of_ref": "indicator--78345e04-1c82-483b-9117-16f8eb301050", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5652cbe-5f14-409a-a616-70c308831b23", "sighting_of_ref": "indicator--0c9afb23-55ab-4c8b-af92-3e0ed594eefd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dabb11-38a8-4f24-b7de-8bf3b6e9e653", "sighting_of_ref": "indicator--399934f6-7500-40df-8676-00e2c2f4b6e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52848391-49f1-4133-91f8-3c7e408d0b38", "sighting_of_ref": "indicator--d6de21ce-dcaf-4bb8-8233-06230789af52", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a50b5d0-f618-4364-b651-fb0814dfe9fd", "sighting_of_ref": "indicator--b529f040-6036-4639-908e-2ecace0be1ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecd9618-c061-441d-aa07-ec474e9dfc4a", "sighting_of_ref": "indicator--a7a7d2ba-6df8-48e8-99dd-f9e96858f55b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baad496-cdfb-4f4f-b56f-9959ca5957e8", "sighting_of_ref": "indicator--a53038be-81c6-48f1-9307-c83951df5d58", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38f7d39-018f-4379-905e-4f6147e9b844", "sighting_of_ref": "indicator--61d27f3c-16ae-423b-b434-9cbfdaa857a0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35261460-6e5b-4296-b0df-66d62598f1bb", "sighting_of_ref": "indicator--0660f1e2-fa05-44b7-aba9-6ec161de3434", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec34453a-bd8b-4900-af56-515831d5dfe4", "sighting_of_ref": "indicator--0660f1e2-fa05-44b7-aba9-6ec161de3434", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec424a9-63de-41d2-8533-1b290c0d737f", "sighting_of_ref": "indicator--3ecaea27-e9d3-45c4-9fda-b18dde92de56", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c2de5c-e5e1-4233-b7fc-8d773a8589d7", "sighting_of_ref": "indicator--0b3321dd-796c-466b-88ee-30a77a65a481", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50299037-1ec8-4630-b9d8-ba3ceec46f98", "sighting_of_ref": "indicator--91763356-7ce1-4f55-a95f-a5f9adcbeee5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887c3b43-4ca8-4478-9e8b-9b9a4461caef", "sighting_of_ref": "indicator--2a174f3c-2352-4fd7-b652-10e13dd17b2f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f699ae74-f924-41cb-b707-a79355de08d3", "sighting_of_ref": "indicator--404d7a71-6dc3-4756-a52e-7e5679009b00", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d886ef80-830f-408e-ad49-9ad5950e5d35", "sighting_of_ref": "indicator--6a22dc15-bbd5-4e49-b72b-e8bc4bcc10e5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a548f3d9-a8a7-4470-baa6-f53593bf0843", "sighting_of_ref": "indicator--4590fb8e-7f75-4a6c-8530-98431dfbba05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0b0c4d-deba-45fd-8229-fd7c2fdeff6b", "sighting_of_ref": "indicator--4bbe07d1-286e-40f8-86c9-c3cdac4bf179", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c5532b-e662-4c6f-92bb-856ae21e967b", "sighting_of_ref": "indicator--3ac63a7e-9b60-405f-b3f3-b1a61b61427e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7509a2b2-5de1-4964-9728-f6bb1effa354", "sighting_of_ref": "indicator--8f77f177-81df-432f-9552-e509a2ac3449", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21fc6cb-3bf1-4aa4-83d6-e55c028e8f80", "sighting_of_ref": "indicator--7891bca7-607b-4491-9f96-1caaeb21be0d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea15f19-021e-4387-bf60-ecd74b96275b", "sighting_of_ref": "indicator--5ac05283-63df-46a9-92d3-3b93a0e9f03c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e931f9-fb72-4914-b79b-9bafdc54fbee", "sighting_of_ref": "indicator--fcc4c391-95a2-4a13-96e7-470a2047c74f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec8959c-7816-411f-b1bd-e4445978fdec", "sighting_of_ref": "indicator--13ae9163-0db6-4a24-ace3-a7b73277e174", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c42754-7aba-4e16-9904-ea0b3bc495ee", "sighting_of_ref": "indicator--0fef4f93-7de1-4a93-b959-d7d1d4d7731c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a4ac4f-82c0-4f00-85be-b6265e579480", "sighting_of_ref": "indicator--11462047-fc40-4dfe-801c-b8fdca30c9b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a186a0-1c4d-4f2c-9ccf-c9fd225fc42d", "sighting_of_ref": "indicator--11462047-fc40-4dfe-801c-b8fdca30c9b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788ef157-9061-4572-8821-73f4de91e32d", "sighting_of_ref": "indicator--1a850873-a170-4926-ad0e-0f60f66a8f2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0a5381-a884-469a-8ce9-5890070deaf7", "sighting_of_ref": "indicator--92995dd8-8754-4bf0-8c96-13740bef09fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cad5aaf-aaf7-4495-a791-d84d994a7697", "sighting_of_ref": "indicator--1b8cc4b4-695e-411c-94ae-08013ad3b052", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e517285-12f5-46a6-91fe-d835e0a8fb57", "sighting_of_ref": "indicator--2b72c094-0f54-4d47-8dce-e4c87e0c548b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab18405e-30cf-41e3-a8af-0f43f40c7a80", "sighting_of_ref": "indicator--d2ba99ad-fb4f-4d17-a05f-baaac51cc96b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c519118e-3458-43d5-af8d-56b3cdca7126", "sighting_of_ref": "indicator--6f9020b2-f698-4575-85b5-7ade22710b23", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a76a9c-4d43-4901-81cf-4ee8996c5bcd", "sighting_of_ref": "indicator--0ce4a2a3-f584-4ad6-aa72-387315e18dee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c9dac3-713c-44dd-bb32-a1bf3b7db336", "sighting_of_ref": "indicator--3f24d436-e7ee-4b7a-9673-f90fb139ab6c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf51c175-01c8-4be8-a1e0-a72e97187c7f", "sighting_of_ref": "indicator--6dec39f6-2c76-41b6-826b-9bb6802ef084", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf318803-df30-4cba-867d-eb352fa40a71", "sighting_of_ref": "indicator--56c3fa12-ddd1-4bdf-9860-f9e0580526d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dda4e1-dad8-4ac4-b3d0-6fb0de97714f", "sighting_of_ref": "indicator--c4b77e3f-6494-4ed8-9c35-0665fcb21717", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd34e9d-460a-4e55-bc36-ab9c1d523dbb", "sighting_of_ref": "indicator--5133551f-e4c3-4899-9d39-b102adad69c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a60ba3a-78e4-4f67-b346-df0c6cd5e122", "sighting_of_ref": "indicator--fc2c2ae0-8e3e-4879-a993-d373cca69e26", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aee82c7-af81-4baa-ac07-93bc69d5226d", "sighting_of_ref": "indicator--4b66b9c0-8b7a-472e-81c4-885abe9e3adc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac27c734-87e8-429c-8425-b3b3e78d8d13", "sighting_of_ref": "indicator--c4244140-5d3a-4971-b6d5-15e30ad32e15", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d98d9c-0386-4cfc-956f-932bdec48999", "sighting_of_ref": "indicator--1f41d244-ca0f-465b-91ac-f4817585818a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3320eed-d07c-4d1b-903a-e0e24b50c451", "sighting_of_ref": "indicator--d1eeb782-2d17-4055-98d6-3eba724aa26a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f00ba3e-cfe2-4c50-b583-6a22af5c0852", "sighting_of_ref": "indicator--b418115b-1ed5-4033-91ff-46fd0c6352a0", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f4e6a7-5581-43d0-89a2-f9dfc27fef73", "sighting_of_ref": "indicator--8cc25ab4-d3de-4844-8742-a8b569d47536", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9e0a3b-ad5e-4aed-ba63-6ae64b3a5e7d", "sighting_of_ref": "indicator--5f3f07d5-51f4-4e21-bae4-fe1f660cca76", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3915ea-0042-4edf-a5cc-c5efb4fafd65", "sighting_of_ref": "indicator--eed2dccb-ba63-42e2-b73d-1093af34ce6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdea4aa-0b56-41be-90a1-bf6c87cdec79", "sighting_of_ref": "indicator--e9c951e3-e2f9-4f13-9894-717cc5f908a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba73eb91-95b3-44b8-93d9-582e87158eaf", "sighting_of_ref": "indicator--0b4fdf6e-5532-44a8-be38-7599991ba4e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30b5796-9cd9-4ce6-86c1-268d0476ca6c", "sighting_of_ref": "indicator--1480a5a6-50a6-4db1-808f-f53b522ab6df", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bee0a4-ae1f-44f1-9e47-f484a46b283a", "sighting_of_ref": "indicator--0aa6e5d2-90c3-40a0-9c85-93f63239efe9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01c57bc-b65f-403e-86f9-5622d0d761b6", "sighting_of_ref": "indicator--2c3ac31c-20ee-4a9a-be3b-376f414b15eb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d2f74c-1602-4b9f-846b-b5bc6d66abcf", "sighting_of_ref": "indicator--31853b93-7cc2-4c64-b2a8-6f94be560396", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bb686b-7eb5-4185-89ce-d75f658b1b17", "sighting_of_ref": "indicator--34e3da75-1efd-4972-9d5f-a509354e454d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d705adaf-29d2-441b-9078-008d36747d15", "sighting_of_ref": "indicator--f6861d0b-fe39-42c4-9541-a11a7a649775", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc423e5-c62a-4991-9583-541c60702869", "sighting_of_ref": "indicator--a605419c-dcce-4fe7-8a7f-982d3ad6859b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b632ed-793c-410b-945e-d79c08db98d3", "sighting_of_ref": "indicator--a605419c-dcce-4fe7-8a7f-982d3ad6859b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e541d87b-4b5f-4322-a947-93b88ce6d54f", "sighting_of_ref": "indicator--5ae4d41e-e0d3-48e0-aafa-3642ce5a5236", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3a25c1-577d-4393-ae55-cca8bc8fc50c", "sighting_of_ref": "indicator--5ae4d41e-e0d3-48e0-aafa-3642ce5a5236", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f6c757-7acb-46fe-a0f0-0af95149817c", "sighting_of_ref": "indicator--8a67363e-6daf-4c1b-bbf6-0f982233b9b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e674f0-4ecf-4d60-a0e4-44ea4ecee231", "sighting_of_ref": "indicator--67dfba0f-13fd-415a-a803-587bd1ce6565", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f931d3b5-7e38-4c9b-b05e-ac77de52ba5c", "sighting_of_ref": "indicator--cb639dc0-0e66-4f75-969f-a5d73bd3a020", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52edad2c-253a-486b-8199-01c8ef07aac5", "sighting_of_ref": "indicator--764b7671-62a2-4b0a-82de-88155398b474", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912f4988-e4fe-47d0-9462-2376a7bd92e1", "sighting_of_ref": "indicator--754fef7d-16d2-44fd-8183-a227f0f8b703", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa4ab9b-0d28-4006-9035-d006db91af51", "sighting_of_ref": "indicator--ce1380c5-19b7-4712-9490-c7b86791e346", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38f09ba-ed71-4d93-9eb4-1ff10c807293", "sighting_of_ref": "indicator--f90b2487-790d-4cff-ba23-a7b93ba105e3", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547711bb-aa3b-421d-b984-2baa041630ca", "sighting_of_ref": "indicator--b0da343b-e5a7-4234-bb6f-3b20869ddd24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eeff095-bb94-4343-90a0-2a0be3edd11a", "sighting_of_ref": "indicator--eb15dfb4-20da-451e-b7a1-651fb6cc8c49", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10154dca-a289-43fe-a1d7-d3d4add399fb", "sighting_of_ref": "indicator--95d930ff-f9aa-4504-8200-6e939126564a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15e3b18-e701-4d8f-9e15-f14e6a4d1eec", "sighting_of_ref": "indicator--95d930ff-f9aa-4504-8200-6e939126564a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96bdd79-cc80-485f-99e6-173df96d26cc", "sighting_of_ref": "indicator--95d930ff-f9aa-4504-8200-6e939126564a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cb4332-280f-48e2-bb24-e4af58e318ab", "sighting_of_ref": "indicator--cf2aca8c-f3af-476c-ab42-3dabd3456d4f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb99d855-80d3-42d4-a30f-5f4b85a78347", "sighting_of_ref": "indicator--922dd878-73e5-41c6-8483-be9cf5a5e690", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078cd3a7-575c-4d99-ad49-6ffb9be9a753", "sighting_of_ref": "indicator--69f2ccc0-4920-48e9-a36e-fcc69ab2b365", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437481f5-5383-4778-a0b8-62822d70bfe3", "sighting_of_ref": "indicator--ee35d2cb-fde0-4083-a523-0ecb334e80a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b420b3-e984-439b-8c81-6369a1bba115", "sighting_of_ref": "indicator--be008a34-b7dc-4966-ae41-935d75c4c11d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d870179-7052-48e5-a77b-fcda035362be", "sighting_of_ref": "indicator--5c483ae3-1aa4-4710-a6b6-98af7094eb6b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8974e44-d0f3-488e-810b-c234e2dad865", "sighting_of_ref": "indicator--913ef655-b596-44dc-a4a8-1dee1d75b506", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c20ac0-3cdc-4fed-bda7-92db415339c7", "sighting_of_ref": "indicator--abb2f81c-757d-40b4-84dc-3e54da32a247", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46dc455-1b5a-4c60-b9fc-abe0b4db1a81", "sighting_of_ref": "indicator--56cbd053-e6ce-480f-9e78-d6a586bc94c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb41060-99af-4058-936f-1607027c04b9", "sighting_of_ref": "indicator--5ec46fb9-6d49-4151-a3d8-9010f2af25cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3046b3ed-0a3b-4191-8bb5-dc6318eded16", "sighting_of_ref": "indicator--71df49b7-0058-4b25-827f-271a5029772a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c88182c-33bf-4533-a057-99572152e5b8", "sighting_of_ref": "indicator--bc2fdc09-cb07-4cbc-af81-b94140d29cff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8126551-c818-4ad4-bc06-6804f379c0c6", "sighting_of_ref": "indicator--bc2fdc09-cb07-4cbc-af81-b94140d29cff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33da9775-6314-483d-a852-65d3cea9e368", "sighting_of_ref": "indicator--36c6b9d4-7f74-47f8-a283-b9642d5a59c6", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0193fcc-985f-4c39-906d-c646879c429f", "sighting_of_ref": "indicator--b417af6e-2eb1-40dd-92d1-74f214ae4280", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef427a53-3f34-495e-8423-c5349270a706", "sighting_of_ref": "indicator--56fff81f-5b80-4f44-a3bd-fd9894a34177", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833840d3-54fa-44ac-a5de-6fe64d41764c", "sighting_of_ref": "indicator--9cb65685-ca34-45ac-980f-4427130479a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22b7ef8-f433-46fd-a519-dfa7a2f0079e", "sighting_of_ref": "indicator--c052040e-ed4f-41c8-949d-939ef94bf0fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440437bd-0500-4272-b1a1-b678c281afae", "sighting_of_ref": "indicator--9e7f68f6-9242-4852-b9c5-f992e6a23f19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eac089d-68cd-4945-85e3-abcdcc017a23", "sighting_of_ref": "indicator--9364fabd-cd8f-4659-bc31-6fd767f58a8b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49fa067-65b2-4dce-9c5f-e0ec68f8979e", "sighting_of_ref": "indicator--b7830949-38d0-49d7-96d2-a223df796059", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6445a783-192b-44d9-bdce-e9fdbad464bb", "sighting_of_ref": "indicator--99b81935-c30e-4fb5-b597-19330fe289ef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3764c41a-c63c-4110-8fdd-7a95e07103ce", "sighting_of_ref": "indicator--97030ca3-3f44-44eb-98c4-2e54324bad03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a68940f-6ff5-43f2-a3df-d01282a492d5", "sighting_of_ref": "indicator--d9ec45a2-cc38-4794-aa7e-b95e463ac52f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cb4e20-4d0b-4c0d-9316-c2a2fe04d32b", "sighting_of_ref": "indicator--dcc093da-b17b-4bbd-8e24-2030a944a465", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af574edd-e00d-4264-a69a-9296fc2a36ea", "sighting_of_ref": "indicator--ebab3db3-55fd-4944-b7c4-34c65f325def", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e60e73-a33a-4f6f-84d2-dbd56930611b", "sighting_of_ref": "indicator--02bcf48f-fe72-4b9d-a53f-c784dd54e0f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856262f6-4d4b-4f85-a702-2fe93076c014", "sighting_of_ref": "indicator--1577277e-51a5-4a44-9f10-5dc87e9b9668", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb930813-87ad-4797-b21d-ff7f84e5a1f0", "sighting_of_ref": "indicator--8cc75583-bba5-4e5a-b447-f6ecd6d82244", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a84789d-ba2a-4fac-8514-5b5a29365cc3", "sighting_of_ref": "indicator--cfbe2b5b-c402-43f3-8d9e-2519cdbd9f29", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de51861-1095-4708-bf66-425555032491", "sighting_of_ref": "indicator--cfbe2b5b-c402-43f3-8d9e-2519cdbd9f29", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d42fb3-11c7-48f7-97e4-ddd0166d2333", "sighting_of_ref": "indicator--c4f646f1-2e87-4476-862d-a9a6c098d201", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f99a31d-7cf5-40e0-acf3-fd35e45454ce", "sighting_of_ref": "indicator--aee59b89-1242-42a8-9434-90bfd370728f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8253fe35-e1d6-4149-b853-7b75b28d61c3", "sighting_of_ref": "indicator--aee59b89-1242-42a8-9434-90bfd370728f", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9717d10c-0429-435d-acfc-4a937aa217db", "sighting_of_ref": "indicator--653933c0-ba8b-466d-9d4e-ff71c0c5872b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2954137-53ff-4f95-98d8-8c5ca5f2f203", "sighting_of_ref": "indicator--87e1d414-bb06-4f71-89b9-4be71e46a599", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e7cd7a-9999-43b5-acf5-f8c4433a43c6", "sighting_of_ref": "indicator--219d0ccf-82a0-4475-b71b-b8f07be5a7f4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93524743-026c-4987-bbf6-6c9ba95896c7", "sighting_of_ref": "indicator--9ae0fc84-c0c0-4f0d-9433-75320a3d992f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61a0057-2c9f-435c-91a9-ba24945d3fc8", "sighting_of_ref": "indicator--8f5e3a64-7260-44ce-ab7b-a19503d167d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5db03bf-aac1-402b-95e8-2b9a6eccaf52", "sighting_of_ref": "indicator--d3e99728-8922-47df-a3c2-f44763ed63b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1488b1f-2be0-4d0e-b30f-541c7577f652", "sighting_of_ref": "indicator--2d628dda-c79c-44a9-9e75-60976f918fe1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cc17fb-60b8-4cd6-a6b0-d0e6efbff7bd", "sighting_of_ref": "indicator--74aaf1c0-8128-4aad-b996-7b9e671bb38e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122224b8-fb13-49a8-928c-b77725ef7d6d", "sighting_of_ref": "indicator--f96bfb21-fcad-45e6-8ab4-112787d3dff2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca34499-e148-4845-97a2-46690b754775", "sighting_of_ref": "indicator--1b1c98d5-b4c3-4d29-8fbc-2ad42dce0b0c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d3e9f5-e141-42fd-9b39-4ebd0340abec", "sighting_of_ref": "indicator--d6388ecb-7413-46e2-8a56-56bdd1a73950", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d0103d-dcd5-493d-a58d-d66be7c20ae6", "sighting_of_ref": "indicator--d6388ecb-7413-46e2-8a56-56bdd1a73950", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3802bfb8-5063-42ec-99bc-b0e8dc270ed1", "sighting_of_ref": "indicator--859cd973-d3ee-47e3-a1b1-af386018d933", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108bc495-659a-4afd-9e37-c22563d62f8c", "sighting_of_ref": "indicator--859cd973-d3ee-47e3-a1b1-af386018d933", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba5937b-5181-48cc-b05e-e7e38fafb330", "sighting_of_ref": "indicator--11bc8814-6ab5-46ec-a7f0-00be8bc1cc95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7647193e-7b20-4df7-a5e2-5c272e29a4b3", "sighting_of_ref": "indicator--25aa95ae-9bcd-4c83-9c38-b2f022eae416", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5319b772-c7bb-473f-8257-d15c8f9e08d0", "sighting_of_ref": "indicator--89f4fe62-607b-440e-918b-951c655c603c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c0c72f-a7b7-4241-8093-04099dbc793f", "sighting_of_ref": "indicator--89f4fe62-607b-440e-918b-951c655c603c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974ffdf9-e338-40be-983e-2d845dc5a8ea", "sighting_of_ref": "indicator--644abdc0-f70a-4f00-a7c7-08bd8882ab23", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24facb6b-e8ce-44e3-9231-8ef8f0135618", "sighting_of_ref": "indicator--06feb6e7-c41e-4275-9e17-f83579367543", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8011dff5-06cb-4f40-9de9-ab70e621ff0c", "sighting_of_ref": "indicator--06dacd10-10ad-47f4-be99-7cb835ac9f5a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a6605b-23a9-4b6d-9ba2-82c75de0b847", "sighting_of_ref": "indicator--dc575fcf-8dd2-4e9a-81a0-6b720beba87c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fbdb79-7a65-4901-b8d4-cf68d08bb877", "sighting_of_ref": "indicator--1ccb9608-d6e2-4e42-9a57-415b631fdfe9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f73e85-96d3-4471-bd75-b507b158a36f", "sighting_of_ref": "indicator--1ccb9608-d6e2-4e42-9a57-415b631fdfe9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed75eab-0281-444c-a78c-00599d9cd450", "sighting_of_ref": "indicator--846f05f4-de26-478d-a066-ca08f8ecc2fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b8e9e6-5c4d-4e87-869e-19623267dfcd", "sighting_of_ref": "indicator--db1912ad-4d73-411e-99c5-685a7c044edc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283786db-5a03-4749-8f50-ae4656964ce4", "sighting_of_ref": "indicator--8928237a-49cd-44b5-b6c1-40a3b59212f4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68c9498-ea6f-43aa-bdc2-33b3ca9020b5", "sighting_of_ref": "indicator--8928237a-49cd-44b5-b6c1-40a3b59212f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c319d5ec-aa45-4146-ba66-a2f869592600", "sighting_of_ref": "indicator--81a4221f-9329-4099-979d-3120630cb458", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db6727d-d6a7-4024-a83b-aaa60f5f4f79", "sighting_of_ref": "indicator--cbbb6557-e462-40fa-908a-a0d7aee1e31f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8014fe-200f-45be-8c6e-5255b8c87427", "sighting_of_ref": "indicator--500e443e-545f-4d60-8b61-d29afaec7e26", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13778759-f234-4934-b1a8-16b365f2968c", "sighting_of_ref": "indicator--5cce50c1-5cb8-4612-82a1-9272cb56b96c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e62b8d9-6054-4149-8687-ef9ce46f69c1", "sighting_of_ref": "indicator--5cce50c1-5cb8-4612-82a1-9272cb56b96c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91493e86-4d95-4094-b123-667b731c9d2c", "sighting_of_ref": "indicator--46fd307d-ad81-4d70-8ff1-f56ff331c140", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25461bd4-80b2-4326-b189-ac1a60c785ce", "sighting_of_ref": "indicator--46fd307d-ad81-4d70-8ff1-f56ff331c140", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30819b7a-938e-4703-832a-3ba2a2b33461", "sighting_of_ref": "indicator--03b26084-39cc-4b01-a51b-05a648cc403a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bebe5d3-a9d1-493d-8deb-5f0b773d6a0d", "sighting_of_ref": "indicator--5fc6f78a-59f5-4d58-8164-e1ce8b8b265e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897c9948-cae3-41d0-b0bd-9747acc96a35", "sighting_of_ref": "indicator--27191780-96b6-49f4-bf1c-f00cfe405bd8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01e9506-8060-45d6-b766-df15ada6a9ff", "sighting_of_ref": "indicator--27191780-96b6-49f4-bf1c-f00cfe405bd8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0e7e32-c05a-4fd1-8a74-73fb75e7e038", "sighting_of_ref": "indicator--e75ac417-bca5-4415-9ec0-f661ed832aaa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596870d1-3724-4b8f-8a2d-e6eb1ba56d39", "sighting_of_ref": "indicator--e75ac417-bca5-4415-9ec0-f661ed832aaa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940b74e4-1c16-424d-9f14-fea09105940d", "sighting_of_ref": "indicator--9aa5db6b-2a1b-4992-b9e9-0ee4330a6d24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d95593-e693-42fe-b49c-8e72d94ba7f5", "sighting_of_ref": "indicator--9aa5db6b-2a1b-4992-b9e9-0ee4330a6d24", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da37445-9d10-4ef3-8ebc-5ccf0f44165d", "sighting_of_ref": "indicator--faef48b8-2cdd-41b5-a27e-7808fce47fae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba91d37c-5bb4-46ff-a680-8989e97a1cd4", "sighting_of_ref": "indicator--faef48b8-2cdd-41b5-a27e-7808fce47fae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6d034c-042f-421a-8848-081b02585b76", "sighting_of_ref": "indicator--3f225b81-b9da-4aa0-b321-f4c5e64c8d96", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17b0fa1-e337-496c-af9d-5e4db9a46a5c", "sighting_of_ref": "indicator--3f225b81-b9da-4aa0-b321-f4c5e64c8d96", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1965044-0aea-47e0-b5d6-f008631a64ce", "sighting_of_ref": "indicator--8cdb5543-dc09-4d2d-a8ee-e4bc44f60d41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9acfa2-3b86-48bd-bed3-4b1c54e40a07", "sighting_of_ref": "indicator--8cdb5543-dc09-4d2d-a8ee-e4bc44f60d41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04d1890-749a-4c62-a10a-3022b91c08f5", "sighting_of_ref": "indicator--092dee92-5391-42cd-9df4-ddc6abe3917e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6699a2fb-d2f3-4796-9121-19fe866057b0", "sighting_of_ref": "indicator--7b7440fc-f8df-485c-8773-e055dd8cbd04", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1e984b-dee4-4c17-afd7-3ac916e05b24", "sighting_of_ref": "indicator--b7e718e3-c8cf-4893-9863-4ae16c785a93", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec5f7cc-2686-4341-8f69-e894f3638b17", "sighting_of_ref": "indicator--7a92468a-5cd8-44e2-a52f-a7ab05ad0c1f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd02067-a0c5-495c-9395-80c6a85c4d9f", "sighting_of_ref": "indicator--7a92468a-5cd8-44e2-a52f-a7ab05ad0c1f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fb7d2e-4f96-4514-a464-711844f3f268", "sighting_of_ref": "indicator--5065264c-bb85-45a7-bdfc-562c796d0c91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fdbc20-ad6d-45da-b9ec-2bd214a5f472", "sighting_of_ref": "indicator--eb0fc56e-43d4-4056-bc74-1f21448d7dfa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bf6f9f-015e-4a34-adc5-c216b41e2925", "sighting_of_ref": "indicator--289715ff-a938-4756-8dd9-73d3550c971b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec34c9c-de15-4452-b3e8-d83d812eb4ca", "sighting_of_ref": "indicator--289715ff-a938-4756-8dd9-73d3550c971b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815358d9-0c33-4656-beaf-e1312877c2d5", "sighting_of_ref": "indicator--a51e5c66-cb4f-4348-b838-8eb631ad85b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b059dcc6-27c1-44a2-9ddb-3a19c9337a6c", "sighting_of_ref": "indicator--36cbe546-8b5f-4b54-ad1a-403f9060f127", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e47d49a-1fc4-4bb9-8e75-417880fb79cb", "sighting_of_ref": "indicator--dc965fe4-a9ac-4c64-a792-4f682f0a702e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0d3d66-397d-4db0-b837-2ed9503e63db", "sighting_of_ref": "indicator--d6de3395-c83e-4ebf-b155-001a311ea592", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaffb0e-6bc4-4e80-909a-695285ad1fad", "sighting_of_ref": "indicator--e6bda253-74da-45e8-b58d-ff9eabd832f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94e0cb8-8296-4329-9cc9-dafb1d487675", "sighting_of_ref": "indicator--1e17374f-dc2d-49ad-a73f-891bc7fecb72", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcea21c-960a-4579-b6e2-0bfdde89de62", "sighting_of_ref": "indicator--2876902b-63d5-4e4b-9ceb-094e6842a08d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6c8ce4-98eb-41fa-b8fb-e9025b0cb33f", "sighting_of_ref": "indicator--5cfcb62c-d6ac-49a1-bcc5-53f488a30cbf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a57358a-05e1-4c79-aad8-0f0469be05e1", "sighting_of_ref": "indicator--28d14d26-f2d8-412f-baaa-a5f31cafcd79", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7655fe3e-d2b8-4e7e-80bb-39de0bc15df0", "sighting_of_ref": "indicator--28d14d26-f2d8-412f-baaa-a5f31cafcd79", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ef2720-bda2-4901-af7b-9de4231f7d61", "sighting_of_ref": "indicator--440c7387-5886-42d0-88c8-840a2e880bd2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce195f6-b647-4933-8e8f-f1fc942de11c", "sighting_of_ref": "indicator--440c7387-5886-42d0-88c8-840a2e880bd2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bc31f5-1433-4be9-9140-b28e4be47735", "sighting_of_ref": "indicator--4cdc3c70-8ef9-48ea-a653-74ab5d74a03a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9a0ca1-77c9-4ee2-be00-30fbc9e827cb", "sighting_of_ref": "indicator--4cdc3c70-8ef9-48ea-a653-74ab5d74a03a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c453ab19-fcb9-4887-a687-cbecf75c5a21", "sighting_of_ref": "indicator--669de1da-fd64-4608-b033-b22a08c9b2f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2965a1ba-7f2c-4c83-9f2b-3ea527f19f2d", "sighting_of_ref": "indicator--7d2a081b-5046-4d2a-80e3-0a6cbf3dadaa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79381c2-efc9-4f10-ab3b-9c4502f5cd0b", "sighting_of_ref": "indicator--0cfa0f1b-ea94-4213-a269-cd54c4884878", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6586f45f-fab7-4fb8-9a43-9d4a3d9c28fa", "sighting_of_ref": "indicator--535f89c5-07d4-4aec-8e0f-9f7b5457ac33", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb28135-9608-4e42-8535-582cf5b0d621", "sighting_of_ref": "indicator--535f89c5-07d4-4aec-8e0f-9f7b5457ac33", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79dfcb49-c7ee-4afc-b902-fd47880b6e0b", "sighting_of_ref": "indicator--8b4b7ced-61bd-4565-a810-d9536c7d2686", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a501b9f-8618-491b-86b0-189c43b68fc7", "sighting_of_ref": "indicator--7afb7cf2-d249-4976-948c-8cea487da540", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1002444-6587-457b-a650-1d26099cee24", "sighting_of_ref": "indicator--d252a5bf-6ec0-4329-9c06-ef5d1eddcc67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ac2969-dcd1-42a5-890c-a780e0a4655e", "sighting_of_ref": "indicator--57260174-200d-4540-8c2d-7d12e5742401", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a07e23e-fd4a-479f-b9c7-a2d6131077c8", "sighting_of_ref": "indicator--57260174-200d-4540-8c2d-7d12e5742401", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d2e574-e5e0-4532-b260-fc1482f81278", "sighting_of_ref": "indicator--5ce3eef7-3570-44eb-ac13-827fc4689916", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd43d8d4-59b1-44c1-8a2d-5cd314da5f2c", "sighting_of_ref": "indicator--21c741dc-8e0d-4326-9fa4-105d2d9523d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3403d33d-9be3-49a6-903a-1ef3290a62bf", "sighting_of_ref": "indicator--17c9b168-c87a-4291-bd58-0baa7a323fd8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6257fb7-0264-4836-9beb-da78688f7925", "sighting_of_ref": "indicator--3b0317c7-4a17-4318-8fe9-4a7c37fcc8a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d63ec6d-c20e-42b6-bc67-379d59cc53e9", "sighting_of_ref": "indicator--727cf66d-a976-4cca-a086-6c3152cd7c41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee156318-167b-4c1b-a48c-730a8ee54d8b", "sighting_of_ref": "indicator--727cf66d-a976-4cca-a086-6c3152cd7c41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3d7f27-4497-4a08-8184-a701d5cc9380", "sighting_of_ref": "indicator--25d82742-b0b1-41ce-a01f-faee0c60e751", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a73bbf-4eba-42cb-84cb-7866e17da3f5", "sighting_of_ref": "indicator--febccfb9-8aae-4cf0-998e-92817dd5972a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d25351-fd5e-4f93-8830-264337649a0f", "sighting_of_ref": "indicator--14052086-3b32-42dc-804c-f10277129fcf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8504eb-996a-4b4d-ae93-f6f3f3fa0545", "sighting_of_ref": "indicator--e11212f8-3009-432c-a764-40b46f9d7eec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc5d356-4a12-485a-b347-3db9bb9e15d8", "sighting_of_ref": "indicator--69693c25-9126-47d9-9086-59211f97b667", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7ce61a-aec4-44e8-8d16-de543643a826", "sighting_of_ref": "indicator--69693c25-9126-47d9-9086-59211f97b667", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12811f3b-bd1e-4eca-8c0c-f9c9b837c736", "sighting_of_ref": "indicator--c314cdc5-c349-46b8-8bec-06504d5b727f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574cadd5-8ee5-43a4-aa39-8018438eb7e9", "sighting_of_ref": "indicator--c314cdc5-c349-46b8-8bec-06504d5b727f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1180509-ddf3-4c66-9dac-d1e84d32e581", "sighting_of_ref": "indicator--cd8024e5-0755-4723-a162-0b152dfc8cd1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300c8448-04c4-4355-bc5f-63fc8b7a5f66", "sighting_of_ref": "indicator--6133d225-cddb-474b-82bc-ac8ab78b37c2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e953c8-2a18-45cb-a951-d52624ac9cf7", "sighting_of_ref": "indicator--042f6a01-5e17-48d0-97f1-e15bff3ef891", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f731d1c9-25a6-4438-8edc-238599e8f890", "sighting_of_ref": "indicator--e827a514-4e43-49e9-9440-4805d5671ed9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a231aa6-a5a0-46d7-8679-0f4c7516513e", "sighting_of_ref": "indicator--82ec47cf-5f00-4b5c-ab0f-72af935429c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b461529b-2c40-435a-91a8-c38801af9459", "sighting_of_ref": "indicator--83a2db2d-28d8-4413-b1ac-4602d8ab3fac", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af4c5cd-4e6d-4d0b-aa83-b65678181cbc", "sighting_of_ref": "indicator--356b9df1-95d9-4e3d-96e8-fcc2fdc66de6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67770983-0e83-497a-8796-9ca36cf1bcdf", "sighting_of_ref": "indicator--356b9df1-95d9-4e3d-96e8-fcc2fdc66de6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41964db8-915d-486a-b15a-20561cb5818f", "sighting_of_ref": "indicator--d9d1458f-140f-4fe4-a78f-af9b889e267d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb86f4d-4f0e-4e8e-8d04-c9f1c61086ee", "sighting_of_ref": "indicator--4fc5ad98-c867-4207-bb80-d0cdab1fbe0b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc71372-6355-4b77-95a0-c4345fb0eb2b", "sighting_of_ref": "indicator--4fc5ad98-c867-4207-bb80-d0cdab1fbe0b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6a4293-5daf-42a8-8827-386f116e2aa1", "sighting_of_ref": "indicator--7c5bd169-7a68-4804-b24f-7f61027a41f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30bedb6-7050-4097-9b1c-4b41bec4e67a", "sighting_of_ref": "indicator--43324379-3ad3-4022-8e78-33e9f263b010", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2901f3c-e704-4346-b2aa-8e01611e9f6b", "sighting_of_ref": "indicator--8d22f649-895e-4182-a18f-6f869c389f2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7542d431-1e95-44f7-980a-a298e30b83fd", "sighting_of_ref": "indicator--12c9eb5a-3c83-4be8-bc7b-7a7f3c1d62ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e08177a-2cf4-48be-84b0-ca277201cc3c", "sighting_of_ref": "indicator--dc6cedde-e05d-4994-8de4-74228e221da4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37fae84-2e64-4ded-8e95-f64199492168", "sighting_of_ref": "indicator--0c35ea85-cb59-41e8-94a6-8cfbc2b83cb3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84467cab-48a8-4c74-9532-1e230c24b658", "sighting_of_ref": "indicator--e0f6dbf8-15f5-42ea-bd55-ab58e951cc00", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baec9af-e9bb-4775-ac48-a5f244084e5b", "sighting_of_ref": "indicator--d75b1d8f-cfb3-4563-817f-8371a0b0ea96", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c682b817-f75c-4a8f-9a42-538650033f0a", "sighting_of_ref": "indicator--d75b1d8f-cfb3-4563-817f-8371a0b0ea96", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9ad30c-3a22-4ecd-898a-0a7fe71197f9", "sighting_of_ref": "indicator--9244ad6f-a145-409f-b628-bf9a36903936", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e4bfb0-85a0-43e4-98e0-68d1bef00c90", "sighting_of_ref": "indicator--3a898b31-2b5c-48d7-9e5d-c21991e77acf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb9f6b5-814a-4b0d-b132-234cfcd72f66", "sighting_of_ref": "indicator--ec1b9bfd-2b86-4895-9f9f-d716368c616d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f25b21c-992f-4967-9618-f941c8d08a24", "sighting_of_ref": "indicator--3f86fdd8-a991-4ccd-923c-6d1880bac38d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54927527-85bb-4adf-858a-507910934524", "sighting_of_ref": "indicator--0efdf42e-a4a9-4432-9919-101916a86870", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ee119b-b1ec-4987-b18c-bebe944390a9", "sighting_of_ref": "indicator--707040b3-d5da-46be-a856-f7ccbd946434", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3800f999-9097-4ab4-851e-c14a808f3330", "sighting_of_ref": "indicator--d6d7d237-d658-478a-91b1-81bb4f946e36", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abec822-123a-47a2-b34c-a0976a738cd8", "sighting_of_ref": "indicator--b5dbeec6-46f5-4e50-bebe-a9c79be8d0b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dcefe3-75c1-4070-91dc-acd8c1556047", "sighting_of_ref": "indicator--8ff80cf9-21d7-4a8d-9aab-434bd424771d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4768e3-9e88-47ac-aefb-05c654f47280", "sighting_of_ref": "indicator--54c5b83f-5c32-4215-aa46-6e4146553cc7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd28574-e618-47d3-9abf-969c6f13f943", "sighting_of_ref": "indicator--b32f3ee5-0054-4262-93e1-8b7431bc12ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e15c2c-efa3-41b4-bebd-07ca6029d93d", "sighting_of_ref": "indicator--26f73403-d449-484a-ad9e-d6b0aabbf314", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91133c0e-7d99-4170-b11f-bfbf9ac52ba7", "sighting_of_ref": "indicator--f04244ea-2f41-45cf-8061-94bfe31d6959", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de473f57-710b-433b-925a-d686eaf83c2b", "sighting_of_ref": "indicator--df6dd248-ef68-4432-a9b9-4e30d0046516", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92453418-9510-435f-b51b-252a8b4d3da7", "sighting_of_ref": "indicator--4ea297bd-0bab-4789-8624-191dfff81697", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6034ab-d5ad-4222-970b-bbf2a71db2d1", "sighting_of_ref": "indicator--8283b985-60a8-43a7-b81c-16ab77bca047", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428e884b-3bee-4971-b5b1-bb43500e359e", "sighting_of_ref": "indicator--4790ff50-7fef-4f4c-ae2a-ce2ceb260c9e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c43e60-3f84-4e42-bd1d-f2623b49673d", "sighting_of_ref": "indicator--3a06507b-a121-4e94-82a4-2dd938772fc3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4934d02c-5d97-4235-b6d9-4fff11b4d067", "sighting_of_ref": "indicator--8136799e-d11a-4d54-b5af-a09df883b9dd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bb0e9a-1999-43cb-b0cf-0909a770747c", "sighting_of_ref": "indicator--890ec764-f62a-45ed-9f94-c26903cbf328", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb2d04e-508d-4112-b02f-22237402b0b3", "sighting_of_ref": "indicator--fad85f05-280e-4f55-93e4-21f3acda8ddf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82d2cac-21de-463c-bdec-8669fd9663de", "sighting_of_ref": "indicator--0494a078-f87c-437e-a3ea-ea1f44d167af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7865449e-dc4a-4515-96eb-4ed189836e77", "sighting_of_ref": "indicator--a25a7a90-b968-4d9f-a77b-b1a52d4245a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3b322c-162f-498c-bdfa-fd080509f325", "sighting_of_ref": "indicator--554de2a7-df9b-45fa-b60a-0e70b0b0d6af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5377486-866f-4bb3-9e1f-8669a348c6cc", "sighting_of_ref": "indicator--384c66ed-4ad9-40b8-b5c4-b8e984c07300", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930e88f9-f60f-4c5c-b201-219c68382df4", "sighting_of_ref": "indicator--71bab435-edc0-43b0-9fa2-cf81dec5bbfd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695a05ca-46b8-425c-9417-f59e5edc4ca9", "sighting_of_ref": "indicator--71bab435-edc0-43b0-9fa2-cf81dec5bbfd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b034fa18-0a52-477b-a22a-91c578dd4865", "sighting_of_ref": "indicator--9f59f0f7-8d1c-438f-8ef0-a40669e1519f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2971ef-0c3e-4a1d-9490-bd7d61f1690c", "sighting_of_ref": "indicator--54149528-57aa-4991-9ff1-683351f58478", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3e2bc4-723e-47fd-b703-dc62edf6a1ff", "sighting_of_ref": "indicator--bde2788e-909a-4c3e-8c5b-e136b34eddef", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9d2bb8-ea8b-49b9-a2cc-ae04ea3008ea", "sighting_of_ref": "indicator--dd5135ac-c3d4-4afd-b130-95caefbba90a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8074f78-290a-473f-a75a-dd4e9fd128bc", "sighting_of_ref": "indicator--a9b1e307-487d-4469-b394-dc72e9b3a4a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb3266f-3451-45d7-b1c2-f66974a899b9", "sighting_of_ref": "indicator--756ac621-cf23-46de-ac98-44a66f962b85", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0e86e6-632c-472d-8323-014e82f9f4c6", "sighting_of_ref": "indicator--3202613b-4073-4198-beb0-125b12d91069", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c80fc55-a954-4c14-8619-b64576ad01a9", "sighting_of_ref": "indicator--03f5f3cb-5328-4a34-a0fd-130d81e59107", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2155b260-912f-4892-bb47-41d70181db7e", "sighting_of_ref": "indicator--4f95a936-be7b-400e-9c40-3301c31402b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228a74e7-4e99-4ff7-8d60-47ee79d237c9", "sighting_of_ref": "indicator--5297a5f1-8b3c-4858-86ab-9c57d51e4d47", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad2cd13-b40e-4e37-9a0f-9bcdccc20ce6", "sighting_of_ref": "indicator--5297a5f1-8b3c-4858-86ab-9c57d51e4d47", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fbe594-21ae-40d3-999f-ac62a4485f9a", "sighting_of_ref": "indicator--ff4d7542-c36b-40be-bc6c-9391a521cca5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74a5267-08f1-4c1f-ad80-5f28632b2dde", "sighting_of_ref": "indicator--ff4d7542-c36b-40be-bc6c-9391a521cca5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ae529-97ca-4105-958e-2d957f779860", "sighting_of_ref": "indicator--98abaf65-905b-41d7-9fc5-02247467a23b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c467c30e-fb63-4769-8e1a-61184456c4ed", "sighting_of_ref": "indicator--5dd5a3c7-0903-4c4e-9046-0ae33df784b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb902513-d203-42ec-85f2-975942ee450c", "sighting_of_ref": "indicator--e36f4b1c-2dbe-44ac-80dc-ac2db9b5c6b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edc07b2-0a2c-4907-b16e-cf4ba27c5abb", "sighting_of_ref": "indicator--06269725-80eb-48b4-a7a9-a97c11efb223", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd8aea9-c4de-4fae-ba6a-193a0d54c388", "sighting_of_ref": "indicator--037e6fff-d3a8-4aea-8d8f-41356e49a3fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2f5c83-3173-4114-8b24-ad7dc52aa9b2", "sighting_of_ref": "indicator--79642910-8664-4e95-8e93-209762d9e8e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3154dba-8082-4cd5-b2db-14b53eaeb99f", "sighting_of_ref": "indicator--67ca4bd7-289e-45ee-a6a8-8c24895629d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb88ade2-3030-49dc-94b3-5fdb04e6b6e0", "sighting_of_ref": "indicator--1b7f4e14-b181-42be-a777-d7bd89e425f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb27b12c-d2bd-4953-93fa-39829258d268", "sighting_of_ref": "indicator--1b7f4e14-b181-42be-a777-d7bd89e425f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cd47fb-a97e-4709-87e9-73a9298e34f6", "sighting_of_ref": "indicator--0749072d-9a13-46f8-8eca-f213277ac640", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34612ce-6fa1-4e72-96bd-e5d57661dfb7", "sighting_of_ref": "indicator--d2aa309c-40a2-41de-9cad-57f72c5bd77b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaffd780-cff7-4e03-befa-f510093190ae", "sighting_of_ref": "indicator--289f2af5-6414-4f45-9c15-b8439991dab6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600b1cfd-0ac2-477f-841d-ca110816d958", "sighting_of_ref": "indicator--ec8cc5ad-b15a-4126-865e-67c5be3d5b3e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970a621b-6ce6-4a95-9228-cade7d20d161", "sighting_of_ref": "indicator--fe16b969-166b-4f8e-8a36-523d4e9b8d32", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe62b04-0d46-4f13-b296-04a5bcb086b2", "sighting_of_ref": "indicator--a5d5cf31-16ea-4f4b-b569-be7663e58656", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b77be26-af2a-4ef1-aa01-d50fba7b60da", "sighting_of_ref": "indicator--a5d5cf31-16ea-4f4b-b569-be7663e58656", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16893961-98af-4965-bd54-55ac1d130e13", "sighting_of_ref": "indicator--a1bd78c7-8a01-4ae4-97b9-39c0578ec9a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdf133b-574c-4605-86b1-216144b9cc61", "sighting_of_ref": "indicator--4472ac37-b4dc-43a9-b4aa-a9ab6bb869ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dbe523-7f2e-43d4-b5b7-f35ed01f9180", "sighting_of_ref": "indicator--4d12eb7d-a8ea-4a72-a049-4ef882d17ce3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5e54e8-0cff-4ac6-8ce5-02934653bfd8", "sighting_of_ref": "indicator--b33d007a-be68-40cb-9f15-450d7b76e7bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be3eb0a-3d1a-4d4c-86bb-f5e8e725f80a", "sighting_of_ref": "indicator--00c4e6f0-cb66-4a2b-9175-dff40455aeed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d5745b-e8fd-4325-b1f7-47e8157900f7", "sighting_of_ref": "indicator--1842a338-bc73-44a6-a8bb-a4236453515b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1730e8a6-2d48-4b39-bf1b-de2a77e53800", "sighting_of_ref": "indicator--1b7417ea-ebf7-4d63-96e5-89bec0382a9b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0300c7-f495-4136-99ae-04dfd77c6074", "sighting_of_ref": "indicator--ac69fff7-00e7-4301-bd99-351bcdeeb863", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65458da8-904b-484d-ae16-bab6369dcc54", "sighting_of_ref": "indicator--ac69fff7-00e7-4301-bd99-351bcdeeb863", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739ac659-50b9-458a-a550-1a880e7017fd", "sighting_of_ref": "indicator--75ee18f3-793f-4626-a1fc-ef248e578b50", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71c8841-746a-44fd-8e05-0c0844af90a3", "sighting_of_ref": "indicator--1352ff92-09bb-4912-b0de-56f4e856e9bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f33a47-0b58-4035-a8af-bfc3c9514d88", "sighting_of_ref": "indicator--d7a8b4ff-01a6-476c-8801-3f908431f971", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c7be53-caaa-4d23-89b2-131c94bbcfee", "sighting_of_ref": "indicator--7fbae972-4eb9-4fd3-acbf-869283a7148b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c751a7-db69-4f16-827d-e08401c749a9", "sighting_of_ref": "indicator--f0ee8085-a899-4011-8899-36380ff40a08", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954c4dfd-aa8a-4b87-8fdc-50ba2c149681", "sighting_of_ref": "indicator--8d858e80-5784-4085-b198-2f1ac4702bd2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04257eb9-4022-479f-9084-67ec8f2434d1", "sighting_of_ref": "indicator--40fd7161-b45d-4a65-98b1-5dee434d89d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61eae3d1-56de-4aa5-ae35-504a43d60a6c", "sighting_of_ref": "indicator--feed7c35-a12a-4ce8-9fe1-490076584401", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d65602d-2056-424f-9050-ac1374022547", "sighting_of_ref": "indicator--800d2f97-2d52-4bf9-91cf-dbb5f4581377", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e44cb0-32e2-4719-b965-6f5369b96141", "sighting_of_ref": "indicator--62985ba6-83e5-4a46-9468-144be7c22bae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c138d396-b76d-4b06-af6d-859d3b5633a1", "sighting_of_ref": "indicator--0a3de5ee-7b43-44e0-bcae-648df9ec69b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047e9f0b-cdc7-41d7-b1cc-b2869a216001", "sighting_of_ref": "indicator--99003a04-63dd-4887-a7e5-85962b838da7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78d1a67-c919-4856-8622-ca3a346838fb", "sighting_of_ref": "indicator--af82b57f-a5a6-4814-bb5b-60e7160f510b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a0e7f7-5ec8-4d24-88b5-ab02d6dc9fb0", "sighting_of_ref": "indicator--6f32c2d7-29aa-4a16-914f-cd8ff81f09a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370e463d-0fdd-428f-9fcb-f16eee8384df", "sighting_of_ref": "indicator--6f32c2d7-29aa-4a16-914f-cd8ff81f09a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff54095c-ad37-4b4a-a9cf-03aac57c0c8b", "sighting_of_ref": "indicator--811e01b2-b15e-4159-82cf-99857669c994", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a4c949-c29b-4dd8-9f90-ff8e0d811bcf", "sighting_of_ref": "indicator--3c2af5f2-11d9-4e09-bb8f-86fe5d97a111", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d5931c-4458-4d59-8726-8110caf7383e", "sighting_of_ref": "indicator--3c2af5f2-11d9-4e09-bb8f-86fe5d97a111", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a63499-28f8-4622-a106-340cbcae3eef", "sighting_of_ref": "indicator--9d7f730f-a196-4c93-8270-a8348a2b0813", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391c0b06-de78-4177-8b2f-c26e28c7e6c6", "sighting_of_ref": "indicator--9d7f730f-a196-4c93-8270-a8348a2b0813", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e6ab24-7db6-4516-9ff8-20f5298164da", "sighting_of_ref": "indicator--05737281-cf11-43de-844e-3f156bd76a68", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137b7fc7-76c2-423d-a3d6-01f8b782c2a2", "sighting_of_ref": "indicator--05737281-cf11-43de-844e-3f156bd76a68", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9016039-359b-4926-9634-0f0e141f55b3", "sighting_of_ref": "indicator--5a3ff013-cefa-42f3-8218-297b124821a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff918a63-6a68-4944-9702-a46eade1b8db", "sighting_of_ref": "indicator--6eb3ae38-350e-4149-b8f2-9c843d65c217", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca03ffc8-9ea9-4557-82df-f3758e379b49", "sighting_of_ref": "indicator--364ceb46-917d-4ba9-ae90-5424959ab074", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bfe8b3-85bf-4f0e-925b-89dbd9f1ffa2", "sighting_of_ref": "indicator--cbc1a680-8246-4466-8eb3-7b2f4c7d2bad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34aaaa0-ce99-4baf-bc9d-2ae209b7e391", "sighting_of_ref": "indicator--267aa6ad-41d1-4b56-98c8-a9b9fa86fd64", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0307dac-5f3a-4fa1-be75-60ddb0f318a5", "sighting_of_ref": "indicator--e1f9afbb-1978-48c9-9d6a-b00604bfa366", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679d1779-359f-499c-a0cc-e6a47b384201", "sighting_of_ref": "indicator--94942c8f-f1a7-4e20-bdf4-219382030753", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be8b91c-cc63-4633-9379-9e0d0419f154", "sighting_of_ref": "indicator--2d789d0e-d65e-4c31-a9ab-569bbdbdddfd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbae0238-928f-49f4-809e-169e9c4f13d3", "sighting_of_ref": "indicator--2d789d0e-d65e-4c31-a9ab-569bbdbdddfd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038063bc-fbc7-4ebb-a22b-4eb8b9c424e6", "sighting_of_ref": "indicator--95059d48-9adb-403b-be6d-0e36d56d9be2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7a5a47-5c74-4983-85e7-3049d6d52647", "sighting_of_ref": "indicator--196ea033-abe2-4803-a725-c113075011b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed32bcdd-87e9-42bc-bdfd-bdf464759280", "sighting_of_ref": "indicator--cd639409-2e89-4572-ad9c-4fad58898d5f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c6d82e-3331-4a33-9619-2f2c7da2b95a", "sighting_of_ref": "indicator--b0e9970f-8fb4-43db-acbb-1b11314eaa24", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29a37df-a152-4dbb-9ecd-905a839c848c", "sighting_of_ref": "indicator--d09e6d40-bec3-491a-b78e-9d28afec3b92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3d9b93-4057-4d33-9f6b-86842b507f5f", "sighting_of_ref": "indicator--d09e6d40-bec3-491a-b78e-9d28afec3b92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfbfd43-8fe6-4046-b4ff-b831cfa83082", "sighting_of_ref": "indicator--3414795d-f2f2-490d-a72c-d2f5cea51b34", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da87813c-6bbd-45b7-a8a4-66c96641cdf6", "sighting_of_ref": "indicator--2f2a8b66-bec2-4ece-b82f-625ee88cd391", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d86730b-a55a-4de3-b0c7-e963055836d5", "sighting_of_ref": "indicator--2f2a8b66-bec2-4ece-b82f-625ee88cd391", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aade6617-f150-41bc-8798-a986b278b2a1", "sighting_of_ref": "indicator--c462f537-d6f5-4750-b083-b0f520c0a047", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ec353e-a980-432c-8926-f3f24f89bc93", "sighting_of_ref": "indicator--13d3cb1f-3097-435b-83ee-3d50c44fe2d5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf36887-bb19-4841-a4a3-e01b2c2cf5ec", "sighting_of_ref": "indicator--1797466b-6747-4d64-b53f-f83106fa6281", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac703337-44bb-4e03-a683-d4d0c8fa8921", "sighting_of_ref": "indicator--c6dcea5f-d847-4902-911c-ebb2a7ddfc11", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a7d955-c9be-461f-a641-c4409b3c6c0c", "sighting_of_ref": "indicator--c6dcea5f-d847-4902-911c-ebb2a7ddfc11", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400d16b9-92ab-4150-9a72-30fad2e5f1eb", "sighting_of_ref": "indicator--c6c5bfa3-ac4d-405d-9ab9-a29a34e17a58", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628ccc25-9ac6-4102-acce-96e309e62c90", "sighting_of_ref": "indicator--a748f1be-0e7b-4b84-bfc7-a8e3911d9b09", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbd1b67-0853-41eb-a78f-ac29ea791fe3", "sighting_of_ref": "indicator--a517f2f9-65ec-44e2-98cf-8528884f6462", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0379f5-e6d9-4e54-bdad-2e1ca20a3886", "sighting_of_ref": "indicator--27b8e01f-d65d-4c67-81c4-aaa038e60218", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc7bde3-266f-4822-9763-66682ed983af", "sighting_of_ref": "indicator--6249308b-9693-4b76-9f30-729597ffb038", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c9769e-145b-4030-a0a6-f0bbd41985d0", "sighting_of_ref": "indicator--08e327e1-c817-4deb-a269-c3f53beb8e98", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83464bb3-19fc-4c92-a427-c74a0261d95d", "sighting_of_ref": "indicator--affae3f0-a484-4901-bd7d-6749078bd4e0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151e93ef-545b-4953-bf89-fe420ab09b58", "sighting_of_ref": "indicator--c7c6e31f-95e4-4750-943b-5522d75948bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83bc477-5300-483a-8d9f-d7cdb8cb837f", "sighting_of_ref": "indicator--c8fb741e-1d7b-4785-ae3f-2f3340410c32", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c9ca1f-2307-42cf-82e2-7ec27afb5d23", "sighting_of_ref": "indicator--30cbdc3b-deb1-4694-b777-3bc751a32a05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f663e97f-83fe-484b-aa86-541e5bf801ee", "sighting_of_ref": "indicator--4b64f549-1374-4bab-ae98-4bdad8ac118a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f792d1-045d-4d8c-bb5b-46663682d202", "sighting_of_ref": "indicator--b971bb1f-f266-4e75-89d5-474dc8da6808", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7466f41-c83c-4cf2-946f-3c5379ceb0d2", "sighting_of_ref": "indicator--40484e87-b4d5-4d36-9753-ff8a6e4ac2b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9819b74-de2a-418e-b725-21b12fd698c6", "sighting_of_ref": "indicator--3d9fc5e5-39d7-4e70-9a59-6546d468c250", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4718f8e2-5136-4e9c-bb74-5554d55612b3", "sighting_of_ref": "indicator--28c9ec03-f7a9-4091-865a-689177299482", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7eac3f-eb67-4051-aaee-e11c679fadbf", "sighting_of_ref": "indicator--6e67822a-8adf-4528-9bb6-be657ef56a6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d928dd-2465-48cb-b303-1369f93dbeb4", "sighting_of_ref": "indicator--6e67822a-8adf-4528-9bb6-be657ef56a6d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b73aaa-4092-48a6-8aca-dceeb8a786f4", "sighting_of_ref": "indicator--7d6e0f5c-3a1f-48eb-9062-daa30f26f10e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e3bc26-7ad8-4206-91d6-73828030cdd4", "sighting_of_ref": "indicator--6431aa63-52d6-4c8f-9c61-f98d5abb28f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edf093f-2e1f-4a72-89f4-58e35f531635", "sighting_of_ref": "indicator--ea86c664-3277-4839-9369-68a69b6a7c15", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef7191f-5fd5-4a3b-a374-a0ae7f35d6b4", "sighting_of_ref": "indicator--ea86c664-3277-4839-9369-68a69b6a7c15", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5473a95a-3899-4dbb-ad75-f126ef366894", "sighting_of_ref": "indicator--39006b4e-c3e0-49a4-8198-088ddc259207", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00880fd7-6622-4119-9ac0-df27f7ada266", "sighting_of_ref": "indicator--4b73f1db-12f6-4667-99b8-79fe4ce75000", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa39de9-2d32-490f-bf9d-4a7ebe4061e7", "sighting_of_ref": "indicator--ed96fbdd-9ed6-406d-9518-1880ca8b1c7b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517659d9-f940-4525-a2bc-ced4a08bc50d", "sighting_of_ref": "indicator--87cee148-2976-4dfd-9491-6009c8d303fd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed37628a-bdf8-4578-b954-e431d434b133", "sighting_of_ref": "indicator--b9ebed80-4b6b-4276-907f-0883464e36b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953f15c7-4e8b-4fe9-9271-1821e938f767", "sighting_of_ref": "indicator--c3de2a11-b7cb-4e3f-ad3b-3216c1a24b9f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90aa5a0-1b40-45c1-986b-bff186c7f37c", "sighting_of_ref": "indicator--e5c03f5f-c7da-421c-b46e-fec5679549cb", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09602f37-f3eb-4abe-80df-a0a56bce2afe", "sighting_of_ref": "indicator--f56853c8-b195-4cf4-b4bb-2978ef421650", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03eddebf-b6a9-4eef-b8f4-7321b960d5fa", "sighting_of_ref": "indicator--67b96ca5-5f46-4a70-b002-8f65189ad52d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76845e34-7644-4c02-84c7-050dbdff2987", "sighting_of_ref": "indicator--e5567dc1-c34e-4b9d-b5ac-725e71a83ed4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeaaadd-c8c9-48c3-b69a-b82ac197b65e", "sighting_of_ref": "indicator--e5567dc1-c34e-4b9d-b5ac-725e71a83ed4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b49d56e-b74c-4085-8c0d-a1b948ce5a26", "sighting_of_ref": "indicator--f9cb199a-d694-4bdf-8f45-2cd8f7cef896", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffae0105-e02e-4d4d-bff3-77c9d1a1228a", "sighting_of_ref": "indicator--4df83dec-0d62-44df-9d9f-494a0ce7e88a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8660b90-6db6-4b66-ad71-553dd7e354e0", "sighting_of_ref": "indicator--0e0d7794-4f15-4757-bf1c-607e6ae40383", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41398eb-1fd5-4325-8943-7552997ec308", "sighting_of_ref": "indicator--0e5239f8-c8df-4cb2-9b0a-1d685253deb3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1785d95-e9e2-494b-9afc-0960a914d306", "sighting_of_ref": "indicator--75a0191f-5dd7-4612-a93f-0ee8a0c0d7af", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d1d379-4a0c-4eb9-947f-2b5ade47708e", "sighting_of_ref": "indicator--6e5584b4-3af9-4c80-bd27-ee8b05026b80", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f5d350-5a10-441b-878e-c1ed75e8171e", "sighting_of_ref": "indicator--6e5584b4-3af9-4c80-bd27-ee8b05026b80", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6890d796-c4be-4aa9-88af-1218b6d233c6", "sighting_of_ref": "indicator--9e9570b9-ee4d-4c49-b1f3-bee95a7b3483", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec8be50-d203-413e-9ed6-dcabcc74472a", "sighting_of_ref": "indicator--796d5e63-9445-4869-9242-747976ae64b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0eee47c-0eba-4b99-82d1-7f014ed9fa91", "sighting_of_ref": "indicator--796d5e63-9445-4869-9242-747976ae64b4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba9124c-0f88-4489-8ced-4d83f368e839", "sighting_of_ref": "indicator--432aad24-ce14-42f6-9b20-03c0e977b643", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532edda4-3be0-4cb2-8086-a3ec3e25827c", "sighting_of_ref": "indicator--432aad24-ce14-42f6-9b20-03c0e977b643", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe78ed5-0568-4e19-b7f0-973161d7e937", "sighting_of_ref": "indicator--6740c890-673c-4070-af4f-0f2403a12da1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e699b4-3ca3-466c-8a2f-2fb7a58aacfd", "sighting_of_ref": "indicator--96ae6828-eb7e-496c-bd7d-cf1ed4e4ebab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b84cfd-b34d-4476-a296-a1a9a24314e9", "sighting_of_ref": "indicator--96ae6828-eb7e-496c-bd7d-cf1ed4e4ebab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb83da6d-675a-4165-9050-96e799050def", "sighting_of_ref": "indicator--526940d6-d1aa-41b7-9be3-b72b8b31e8e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222235eb-9a05-4ad9-ab66-138984266e8f", "sighting_of_ref": "indicator--aa90dd1c-49b5-4d0d-87b8-332ce7ca2245", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e02b6c-e322-4023-b29b-003a2cf2ca1b", "sighting_of_ref": "indicator--e492e9aa-74c9-4b79-a3da-1247ff983428", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27ec05d-94a0-4286-b2d2-8dd6a19790e3", "sighting_of_ref": "indicator--da326e91-465f-4382-8d69-fd7970843adf", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1af8375-7abc-4fce-b3d7-02e0371f0c86", "sighting_of_ref": "indicator--3fef81fa-8100-4ca0-aca5-6a4a36d6a3fb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8242602c-094c-4eee-b4af-76e015606417", "sighting_of_ref": "indicator--96a8c278-f57b-4e37-b7df-148d94468b31", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0f603d-bece-40a5-9532-a6852f9ce904", "sighting_of_ref": "indicator--bc34fac0-1e86-4a28-b03b-d98d34ba9ad7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5207aeb7-72b7-4802-8038-e8e3d8c49029", "sighting_of_ref": "indicator--179f3b88-ea0a-478e-928f-9c3f47ae4fb8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ee17de-83a0-4f20-af32-c3879721ffdd", "sighting_of_ref": "indicator--2318e078-fef0-44d5-b9cf-af0a08347813", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1d7e75-5d8a-4802-a7e3-3322a713bb1b", "sighting_of_ref": "indicator--72b1cb4f-70d5-4dd0-9ca4-b1f094d7f3ec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a02fe7-76a8-46bc-97cf-6d863c679e63", "sighting_of_ref": "indicator--24a023d3-a1d1-4013-975c-7e8c5a2674d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c532a17-dff0-4c26-9d17-78d7886ee7c6", "sighting_of_ref": "indicator--04cc80cd-084e-4d02-acb8-afc01b1c6f63", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb82347-d335-4d59-a66a-b9a11089d744", "sighting_of_ref": "indicator--165ff8d8-8acd-48eb-b9b2-f2588462f863", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abae87e0-4f9e-462a-bc0a-38eff6ae62e4", "sighting_of_ref": "indicator--11a7e900-ab17-48bb-ad33-522e75887d01", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434bdbfc-c770-4bda-b71c-54004bfe4665", "sighting_of_ref": "indicator--11a7e900-ab17-48bb-ad33-522e75887d01", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be32f30a-f9e6-46d6-8882-781806e3b04f", "sighting_of_ref": "indicator--94122982-3f0d-4571-8367-15a0fff59cbb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710f5f11-c11d-4537-8900-39e21e4081e4", "sighting_of_ref": "indicator--94122982-3f0d-4571-8367-15a0fff59cbb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b5e48e-450c-469b-9955-87d320d6de97", "sighting_of_ref": "indicator--a8b3c104-0081-4a6b-b87f-5e1a6b53ba99", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb62bb6-3b78-4226-af86-3413feb5ef69", "sighting_of_ref": "indicator--0e1f60de-769e-4556-b47a-4671f46c10f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5847a0-567e-4578-a26e-cb977e635045", "sighting_of_ref": "indicator--8c3af7d7-bb4c-4c2c-afee-e92cf71f5e55", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3770f53-ee2f-43a8-be8f-cf5d9ad0b3f6", "sighting_of_ref": "indicator--ef753a4f-cf06-4fdd-83c9-45ef461cbba1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5119e3da-a6d9-4809-b68f-cf1eb0b57b85", "sighting_of_ref": "indicator--ef753a4f-cf06-4fdd-83c9-45ef461cbba1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f713c9e8-2a1b-4d6e-b912-a899665252a6", "sighting_of_ref": "indicator--eaacbcf4-4c40-404f-aef0-f6bc0c2efef9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790beb0e-6460-4c7e-9a03-320f62ba893c", "sighting_of_ref": "indicator--c4381c70-8397-4a31-99dc-eb4f0439434f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba1edfc-f543-4815-9019-97dc62e7ad9b", "sighting_of_ref": "indicator--1ec3b0ea-ebc5-4f1e-a339-dd9c0cf5c10d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e99f52-3fa0-4b79-83c0-9bcdb23a6f5e", "sighting_of_ref": "indicator--1ec3b0ea-ebc5-4f1e-a339-dd9c0cf5c10d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaa05b4-70d9-4c75-8879-da8ed03315ee", "sighting_of_ref": "indicator--bd4b0cac-6289-46ee-bcfd-d7c3db0e9d8e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084c1054-5218-41ec-92e4-9c73135211a2", "sighting_of_ref": "indicator--e14ac01c-309a-4eb0-b34f-a122c7b0b025", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba57552-f9f2-4018-b444-83fb710aa707", "sighting_of_ref": "indicator--d4bcef81-9daf-47b4-ab81-14b0ae1a9052", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cb5870-85c8-4547-8195-e2ff407e829a", "sighting_of_ref": "indicator--98187f33-b601-46fd-ad58-7a012e22ca1b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e31c6df-35ad-48b2-86f0-8e0c329cd6a3", "sighting_of_ref": "indicator--d4026d25-2fdb-4682-b3ca-9435c6823c06", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6ea49a-0c46-4442-b434-864068a61d40", "sighting_of_ref": "indicator--9a38abb9-1e2f-45f1-a3bb-08fa6272777c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c09997b-0883-4a5c-8e93-8cb682090cba", "sighting_of_ref": "indicator--a37f3c1d-221d-44c8-804b-66399ae36200", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b552b55e-86ba-47ad-b275-e6a7fdf28257", "sighting_of_ref": "indicator--33ab63aa-cbdb-41bd-a64c-9debde1f1876", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdf43ef-25e0-4d4f-a4f3-cbc341d3d2f7", "sighting_of_ref": "indicator--dd6afbd2-4a51-4244-8f8c-b4d3e33e1412", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdbec4b-b866-4a26-b9b5-dcb4e4b2ad83", "sighting_of_ref": "indicator--05edbb41-0b79-4c59-95c6-915a69f21a2f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8150eaf3-9376-4af1-9872-e77715b5c4f5", "sighting_of_ref": "indicator--05edbb41-0b79-4c59-95c6-915a69f21a2f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a916812f-9759-4978-8819-11e6c9c924c7", "sighting_of_ref": "indicator--04fec839-7e72-497d-a311-787f1f08d050", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1bb10e-b1f5-4f50-b0f5-db9d62259ad7", "sighting_of_ref": "indicator--04fec839-7e72-497d-a311-787f1f08d050", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61a127d-a9bb-4024-b8d0-20bc140ea3cf", "sighting_of_ref": "indicator--4c6b5d24-cf85-4ff6-b598-2464e4e685e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e6c1ae-cf29-4509-b1d0-fd91a3112e19", "sighting_of_ref": "indicator--1f654156-b915-4a75-b104-8fdbe798bcdd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a233e2c8-1b00-4b13-88c3-279b33bcc89f", "sighting_of_ref": "indicator--e45e388e-ea52-450a-9e35-a4a39cf0216d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0d9367-ee76-4068-ac12-09848608ad4a", "sighting_of_ref": "indicator--e45e388e-ea52-450a-9e35-a4a39cf0216d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee988e5-697d-48d1-be72-308c9eba2ef2", "sighting_of_ref": "indicator--bbb116d4-d9cf-410f-bf87-c7e21054906a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd72512-32c2-4063-a318-a308728c968a", "sighting_of_ref": "indicator--9170930c-26f1-4917-a2a1-d3ba19144a51", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48847bb0-dacd-4500-afb6-82ab9877f044", "sighting_of_ref": "indicator--d057d71c-803e-4ef1-b8e7-3464a2754cd8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d49aed1-44a3-4fe3-bdfa-b88c481c3e99", "sighting_of_ref": "indicator--7f69d3c5-632b-41dd-8dfc-106a472fdc7a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aefc86e-3cae-4e70-8c2d-2f05ecd0278a", "sighting_of_ref": "indicator--76232520-2d2a-451b-852d-b9c6b860e58d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a0fe8f-c046-4a82-8e4c-8bd3f4324928", "sighting_of_ref": "indicator--db9999b8-7d18-469a-886f-913aa2901ff5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496f3e06-f603-4588-8d7c-9270c023ffc6", "sighting_of_ref": "indicator--78ea3c48-9a24-4068-9002-d7fdcec4ac2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9307e53-d4f3-4562-aa30-f7da7b5c2e4c", "sighting_of_ref": "indicator--10846487-04c6-4ef9-9048-38598459e061", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150c32a7-3e0d-496b-a400-896bdf663974", "sighting_of_ref": "indicator--f0465264-5eb8-4f2a-b1b1-7da46be6cf41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a041e331-6aaa-49db-8105-93742cd9d0ba", "sighting_of_ref": "indicator--742190a3-3cec-4539-9710-e498a3b47593", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c6351e-6adc-4fca-8257-fe1528888ccd", "sighting_of_ref": "indicator--9ea5021e-7a6b-4cb0-a353-30b739bdb983", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97a346e-331d-44a4-a140-60c648fbd06a", "sighting_of_ref": "indicator--c8465f55-44cb-4b9a-b369-64a438b2b548", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25e01eb-f8d5-4494-9693-6b5490cc314f", "sighting_of_ref": "indicator--c8465f55-44cb-4b9a-b369-64a438b2b548", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1755a603-e178-4fbb-98e9-d40bd9a069b7", "sighting_of_ref": "indicator--1298ee81-fd86-4b59-92b8-fba424aefa41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c269f6a7-dcf5-4288-a9bf-5b1b5e6e205d", "sighting_of_ref": "indicator--31afc942-ec10-4baa-a9c1-37309cdc35c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6028286-3078-403f-a17a-3f03791b3050", "sighting_of_ref": "indicator--421d1ec0-8e55-4414-8078-57b783f92b87", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454d3b63-51d1-4b93-a502-fe4f788f3544", "sighting_of_ref": "indicator--6520bdc9-140b-48c4-b7b8-795c872b29ac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60b83fe-9fff-4cef-9a23-24c5f50f44a5", "sighting_of_ref": "indicator--069236ad-1ffc-4574-b7ff-80a891a9de78", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba52130-da0e-4b3e-8d6b-44703b31d3d9", "sighting_of_ref": "indicator--069236ad-1ffc-4574-b7ff-80a891a9de78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8d977e-9a37-4fa0-aa53-c811d09b3123", "sighting_of_ref": "indicator--63d23ed2-eaf6-4a73-bd4d-d34967250e9a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ec863a-97af-47c9-80ba-7590648d23dc", "sighting_of_ref": "indicator--87d446b3-6d07-4369-931d-052fa05f13d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd4c417-dab2-43bc-b58f-5663d288de6e", "sighting_of_ref": "indicator--0b0afce3-1ce0-459b-8640-56012487270d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b428c55-0439-4ce9-9cf1-415831da18fd", "sighting_of_ref": "indicator--c6339a4e-4787-4f71-8ed7-eae93c265495", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715ee555-2333-4e06-b527-997b04a3ea9a", "sighting_of_ref": "indicator--cd8eed36-2455-41f6-8d29-c2e6c6c52e6f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e8688f-d987-49ac-89e3-f5f9dd753733", "sighting_of_ref": "indicator--bf20d512-6231-4054-b3c4-8528001f55d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a41fea-8954-4606-9680-7a8acd5988b7", "sighting_of_ref": "indicator--f97eefed-c063-44f9-8874-72b6b4540f49", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9956090b-9999-4529-af73-500d21b28a98", "sighting_of_ref": "indicator--f97eefed-c063-44f9-8874-72b6b4540f49", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0828be6-6a53-4293-a6e1-6fb3ce37ce77", "sighting_of_ref": "indicator--a68499d9-e1dc-424a-a4c0-a4c5f58acb80", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f189b8-3e4f-46e8-b974-8eb4ed0a8674", "sighting_of_ref": "indicator--d8a06161-4caa-4311-94e8-c7df687dcd07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af63396-e8ed-41aa-8681-38c6b5b5016f", "sighting_of_ref": "indicator--79b50f48-b3fd-47e6-8b0a-4330230bc768", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a241780-8c00-4ef7-950c-b685712fb48d", "sighting_of_ref": "indicator--9d9c70d2-2bcb-42d5-bd1c-fd40af185409", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49aca3d3-e7d6-490d-83be-a3bdb17825d3", "sighting_of_ref": "indicator--69326b96-de1e-4f0c-9105-c47ae0c31b53", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cb6218-a5b2-4053-b076-ddf79df8b300", "sighting_of_ref": "indicator--a4bb07c9-b581-4ea0-8a74-539546096eaa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6a40ed-1232-4e0a-8400-f2ca096b53cc", "sighting_of_ref": "indicator--a4bb07c9-b581-4ea0-8a74-539546096eaa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc195208-5b47-41a5-bfa3-791c9c9ccdcf", "sighting_of_ref": "indicator--50417922-71e0-4fd6-bd8e-5a1d417e62d6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d126a9af-8afd-4e8a-b362-42152cd082b9", "sighting_of_ref": "indicator--938485a3-a296-4ccf-92ee-1efc50c42669", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42a7e3c-d1f0-4464-9425-4a154cec57d9", "sighting_of_ref": "indicator--7f51fc3a-aa11-4c2f-829e-73111802d0e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e448d04a-05bc-4107-aa50-50ce739d7c53", "sighting_of_ref": "indicator--d740958f-b97b-48e6-a86b-6e18ae0036d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f0e96c-16d5-4742-8e5c-65078a546986", "sighting_of_ref": "indicator--e0e99386-39d0-47a9-ae88-608efb776926", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7b5144-a5ec-41f0-b254-35b57018a48a", "sighting_of_ref": "indicator--4e4698da-6a65-4ab6-a87a-d9e26095b0fb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56142c8-ee97-44f3-973a-abcf0fc73085", "sighting_of_ref": "indicator--990cfcae-ceed-47fe-8eaa-7fbda0dc9136", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83597e8-a733-42d5-a545-626e36c22479", "sighting_of_ref": "indicator--afb6844b-f688-4078-8cc2-8a6c69f02ca0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9c2759-90eb-4738-9410-5cfee63208db", "sighting_of_ref": "indicator--afb6844b-f688-4078-8cc2-8a6c69f02ca0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d28b89-9cbf-4934-8e51-b0816b9b2833", "sighting_of_ref": "indicator--fab7f42c-2b81-467a-b9a2-8a6227850522", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baf3fed-7cbf-4bc9-984d-04083e106208", "sighting_of_ref": "indicator--09bd8ece-43f0-481e-812c-ae87f1c3c068", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0910425-948f-4f71-96bf-16192ab07dc8", "sighting_of_ref": "indicator--09bd8ece-43f0-481e-812c-ae87f1c3c068", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a520cc4-1fce-4ebd-9395-f40c93f9025e", "sighting_of_ref": "indicator--7737353b-b543-404f-9568-43d8bfce2ff6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad959bf-7b1e-497a-aa14-84646456978d", "sighting_of_ref": "indicator--7737353b-b543-404f-9568-43d8bfce2ff6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44d2937-2b4a-4fb3-bb53-064fdd2754b6", "sighting_of_ref": "indicator--58247cbe-62d8-4663-8157-020a451b4f45", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1216b926-48ee-4dd0-9ef4-16f13eaed193", "sighting_of_ref": "indicator--96497429-4c9a-4f7b-a3c3-c767f1d47150", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e553e2-2cb7-403c-a7e0-721a683b0a64", "sighting_of_ref": "indicator--b1425d60-4b0e-4c90-8ee9-0d85c11857e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538c148b-d45a-44f9-b2ec-10a7e4c69b3b", "sighting_of_ref": "indicator--4ce8fbc7-93b6-4507-95ee-d4806434fdc2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8327be1e-a4e0-4f2f-b55f-652e2c7da6ec", "sighting_of_ref": "indicator--4ce8fbc7-93b6-4507-95ee-d4806434fdc2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68540afd-d13f-44a9-8178-5cf8c15aad20", "sighting_of_ref": "indicator--4ad31356-318d-4ee5-acdc-93537e493391", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f229afd4-5b9b-47ee-8dd4-d32566f30a6d", "sighting_of_ref": "indicator--3d5e443b-1314-4bea-9652-77dfcb8b91c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f82f29-d2ee-4ee8-a710-6edb51df981b", "sighting_of_ref": "indicator--c038b9f0-7779-4866-a42e-b81a88589cd5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcbdbdf-c4c9-4f93-8c29-a97782b3c5c8", "sighting_of_ref": "indicator--cc4b20c5-ee30-49cf-9c2a-aa57b4f74e52", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666c02c5-19e0-467f-b250-1b67ca03ef23", "sighting_of_ref": "indicator--941eaae3-1676-4b42-b687-96fc061f0123", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3471244-ee6e-456f-bf72-40f989a50607", "sighting_of_ref": "indicator--c4cc8357-a7e9-4de8-9416-6e3f4ac303d9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c17d66-6cd2-42fc-be25-4ef188c33d52", "sighting_of_ref": "indicator--77538e35-03dc-404b-bd67-b700f26ede66", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4c0a86-93bf-413a-8739-756d9b2a4e7a", "sighting_of_ref": "indicator--215ff01b-4f71-4fdf-a47f-edf5011984ad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b74a2c-bc70-42b7-bec0-e87e02973723", "sighting_of_ref": "indicator--b595980a-1c42-47cf-a8df-410524e9f344", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b0d431-45d9-41eb-b22e-b6dcbbf6df38", "sighting_of_ref": "indicator--3e77bc00-30ba-4021-b9fc-7713de6d0cf5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69f28c7-2ea5-4f4b-94dd-c467052be67f", "sighting_of_ref": "indicator--0d81e3a5-5778-465a-8538-6064bb26ffc9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ae4b5-5aa7-49b8-8c0b-189f658e61a2", "sighting_of_ref": "indicator--1e7651ea-7450-4176-bbfc-83aef13468e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242ed595-7637-4d3c-8da1-b36286e1d620", "sighting_of_ref": "indicator--f3bf7ea8-d0b5-4e02-90e5-24574126b0b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccba5de4-8a89-4f48-8659-2f005e8c9db6", "sighting_of_ref": "indicator--d9ccfccc-709d-4293-bfe5-88a01130f14d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137f1683-236b-4181-bdfc-bb532a651d00", "sighting_of_ref": "indicator--a9682c8a-ce10-4e1f-9715-d34c891b2077", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1fdc98-f5ac-48c2-854c-c53542f10845", "sighting_of_ref": "indicator--a9682c8a-ce10-4e1f-9715-d34c891b2077", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dc148d-0ebf-49d6-907d-5f44664f8fe1", "sighting_of_ref": "indicator--3a8e9ef9-9998-472d-8464-480648aab450", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5e69b7-14dd-4b3f-bc22-d8e52241bb97", "sighting_of_ref": "indicator--94169cc0-9360-4c1f-8faf-08304692fcc7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d225893-2c64-4a78-ac3f-1206eb8742ed", "sighting_of_ref": "indicator--df97c073-6ae5-4c23-8076-65812879841f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fce1c03-dcf1-4a48-821b-71a09eba0c94", "sighting_of_ref": "indicator--94701ee3-444e-450f-95d8-79b4051966d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c07f19-ec2d-41ab-9578-23848a81988a", "sighting_of_ref": "indicator--3576ea8c-da40-487f-ba70-dc0d119e0cc5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db13ebd-cf4d-4463-bd10-a651f499475b", "sighting_of_ref": "indicator--3576ea8c-da40-487f-ba70-dc0d119e0cc5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f41a60c-4518-4073-a97d-be4ff5e3914e", "sighting_of_ref": "indicator--f5cac5e3-8372-4170-be85-19ab3f57f957", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1365a01-0059-4201-8bb1-df46c7511777", "sighting_of_ref": "indicator--916eded1-187c-44a0-a5f3-4a035d27cc2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe30ac5-269a-4f39-92e1-2d975a7e6e73", "sighting_of_ref": "indicator--cd186dbb-1bf2-4cf1-98de-2769852f131c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717fd596-8cc9-472e-a226-45f26ef0fbd6", "sighting_of_ref": "indicator--cd186dbb-1bf2-4cf1-98de-2769852f131c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f3a182-b932-4dd8-9e7f-b864cd066b81", "sighting_of_ref": "indicator--a1279531-30e6-49e9-b8d1-d9ffe597fb90", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0580aea0-af3a-417d-9acf-4c31d3b3622c", "sighting_of_ref": "indicator--a1279531-30e6-49e9-b8d1-d9ffe597fb90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04d6d23-77ea-46b3-94d5-07660e38041b", "sighting_of_ref": "indicator--1e233628-4471-46c7-b438-7ff0dcb8d3a8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0072ab5-64b4-47bc-a104-3daff9adb75d", "sighting_of_ref": "indicator--aadbb3de-febf-44f2-bdc7-fd54d0d144e7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff64cc41-2b07-4ea4-a449-ef7b4d20dda4", "sighting_of_ref": "indicator--6f918190-0c1b-435d-ac9b-14a9369d588c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a82b52-92b3-45d0-af1a-749912a0e206", "sighting_of_ref": "indicator--eaca8993-a3f5-4be6-8a40-54da3450a81b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9415c8-9b20-41ac-b744-2f495cfe7893", "sighting_of_ref": "indicator--eaca8993-a3f5-4be6-8a40-54da3450a81b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a94c24-99b3-464d-b048-34d227e57f11", "sighting_of_ref": "indicator--6daafbfe-c946-4636-9585-e9e301db0320", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b50a2a-1658-4838-985e-ed6ae5e5d94b", "sighting_of_ref": "indicator--6a5468fd-0814-46b9-851b-20be50b90aa9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22839df-f51c-4385-b26f-fa0b6204e68e", "sighting_of_ref": "indicator--2500ba86-da07-4117-8cab-00dd5055eb2b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425e30e6-6d86-41e5-8ff1-42b4acb58a58", "sighting_of_ref": "indicator--799835e1-32ee-4b8a-a8ed-fe9da4c22258", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538b8edd-13a3-483a-844f-4eb97e6c164b", "sighting_of_ref": "indicator--ebc38874-5925-4220-bb4d-2032eaf66d71", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1051cf3d-66d4-4aa1-8d05-7d7eef2f8bc5", "sighting_of_ref": "indicator--1d145455-eb19-419e-9970-09c3da06bade", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10ced4c-e161-48a3-b800-132a52f046aa", "sighting_of_ref": "indicator--567439f7-752d-4663-87d5-1f5ae3926644", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c923b015-f716-4488-a31e-efe2191ee17b", "sighting_of_ref": "indicator--5a4b0d17-cdfe-4240-b656-96a45b629836", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070a6fdd-00f5-475f-b8d9-f2577acf91f1", "sighting_of_ref": "indicator--5a4b0d17-cdfe-4240-b656-96a45b629836", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea78dbf6-fc45-4818-94ea-1e00c6ddbeeb", "sighting_of_ref": "indicator--61b0eb65-d224-4375-bbde-41ee388afb48", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466063be-884c-422e-848c-fb7d422ad00c", "sighting_of_ref": "indicator--61b0eb65-d224-4375-bbde-41ee388afb48", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a55043-ed6f-4ddc-9f8b-2cd487bc43de", "sighting_of_ref": "indicator--40bcaa3f-68d3-4c92-867d-9c0bfc74a90f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38b3af5-f79d-497c-a93d-f709d1d2c509", "sighting_of_ref": "indicator--4017947f-eaa6-4bd9-a13f-907d5d148900", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7654b476-58dc-403a-b3b5-0051546e7155", "sighting_of_ref": "indicator--ec7abf11-54a3-41a2-8322-93d494d93235", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b5898c-7cee-4a0b-b23f-f1f67a30f9fe", "sighting_of_ref": "indicator--ff7d0258-45b8-4584-8ca7-c952ee4c37d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc48bac5-112a-4b4a-920e-bac397f05219", "sighting_of_ref": "indicator--f2d13270-4c9b-4175-a0a4-d1b7169634fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b63f7a-2506-4d53-9bbe-4a3e2cbb97f2", "sighting_of_ref": "indicator--214ca7b1-58e7-4770-badc-7b3ee38c2f88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5831fec-edd7-43b6-aee8-2d3a30ac3b60", "sighting_of_ref": "indicator--f62bf84f-718a-427b-b369-1ce3d3ee92d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb44392a-3ed4-46c2-a742-d0acc41bf673", "sighting_of_ref": "indicator--14aee471-c301-44aa-a786-42906e634913", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a60d82-c57f-4444-b7c7-ff132ed040ef", "sighting_of_ref": "indicator--3992a0d1-a555-4b15-9aec-ce71640c9b21", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeceb1a-c0aa-47a5-ac77-a371cc98dcfb", "sighting_of_ref": "indicator--cb8c06b1-a3b0-46b0-b059-efb520b5a4e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addf7b02-5b82-4d5f-9a16-c928096d58ec", "sighting_of_ref": "indicator--29681131-4140-4b47-8321-a0c58df8ad5e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350e4b66-1f8f-49c2-9b76-1c5b8062a4f3", "sighting_of_ref": "indicator--b1cdab23-be5f-4a4b-802a-e3c3848a6d94", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a61f2c-341f-4376-943d-b4988e312495", "sighting_of_ref": "indicator--b9a1d953-9a8b-4cf4-83c4-ffbecb1153db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edffa06c-41a2-4bd1-bb32-261b37ffe495", "sighting_of_ref": "indicator--cf61311b-c552-4797-b4a6-1ae9d3e2031b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4e60b4-40b9-4c34-b40d-c7f63bea5d38", "sighting_of_ref": "indicator--a93348f0-1043-44cf-b570-bf2ee8c1277e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce1249b-136c-4627-bf3c-a2c4d9bd55c7", "sighting_of_ref": "indicator--4201ce6e-4dbf-4cc3-8b89-b46a1b8f52af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0fae59-df41-4167-9d92-fa46c1243a80", "sighting_of_ref": "indicator--4c6fdace-ba9c-4ace-9b6e-cec6c31f3182", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91156e0-b0cc-4686-954d-1a0761c40185", "sighting_of_ref": "indicator--a7b7c0d8-7290-4971-8f59-27fb628cc758", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530b66da-0156-4a7b-b7e8-e94e0f715345", "sighting_of_ref": "indicator--a7b7c0d8-7290-4971-8f59-27fb628cc758", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9cd33b-cca6-4c33-ad77-2c05cef249d3", "sighting_of_ref": "indicator--3391f0e2-0b3a-4347-91ce-2acae8c8cf21", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d93937-7556-477a-84f7-78204fd9d57e", "sighting_of_ref": "indicator--ed4588ac-1c27-4f6b-9b06-897dd2053c88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70263fd-e453-4021-9535-7f298f59b0f6", "sighting_of_ref": "indicator--ed4588ac-1c27-4f6b-9b06-897dd2053c88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933044a7-eed7-4590-a08e-e35b66367b53", "sighting_of_ref": "indicator--26f8b0e7-f53e-414d-8aea-3cf1a8473f99", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e868c9ff-e71c-4c45-88bd-1a6d56ed54ed", "sighting_of_ref": "indicator--26f8b0e7-f53e-414d-8aea-3cf1a8473f99", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19439db-092b-4590-a0f9-5432de2d4c4c", "sighting_of_ref": "indicator--45f1255d-7193-46f4-9dd8-d40c97ba1abf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202b0a56-9c17-4b21-839c-95858b012380", "sighting_of_ref": "indicator--45f1255d-7193-46f4-9dd8-d40c97ba1abf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dd0ed9-7a1d-4205-b541-72e19be38fc5", "sighting_of_ref": "indicator--76f539c1-f214-4080-9f0b-a03284565c08", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfe0016-2cb0-452d-b450-e3371c1b2f12", "sighting_of_ref": "indicator--76f539c1-f214-4080-9f0b-a03284565c08", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad00b41f-03f6-4ba1-bb83-39153bf5e932", "sighting_of_ref": "indicator--60e98fa2-2e2d-4b6b-854c-f9dca257af37", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2014d2bf-7fc5-40b0-8163-908d165b23f5", "sighting_of_ref": "indicator--60e98fa2-2e2d-4b6b-854c-f9dca257af37", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfec5f72-6818-4f85-95c7-3d240ee639b9", "sighting_of_ref": "indicator--d6a4eb51-0396-4bca-991e-a59aa0e3226c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84010dd2-ff78-4360-98d6-84b79c6ef0c8", "sighting_of_ref": "indicator--d6a4eb51-0396-4bca-991e-a59aa0e3226c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b208bf1-d485-4800-b9a1-d09e46dee00b", "sighting_of_ref": "indicator--3326b209-94a8-4872-a39f-48bc1af2d0cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9c2e05-2cc5-4495-af36-dc587de64b4f", "sighting_of_ref": "indicator--3326b209-94a8-4872-a39f-48bc1af2d0cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3257d5fb-cdc2-4e80-8e79-020bbf6e51c8", "sighting_of_ref": "indicator--31b04607-695f-481e-92a4-8115dd782a1d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af01acbc-e257-4acb-b608-4a10a27865ad", "sighting_of_ref": "indicator--31b04607-695f-481e-92a4-8115dd782a1d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c991592-0b0c-418e-a8ad-d8ef8d67bb5a", "sighting_of_ref": "indicator--19cb438b-8f4a-4544-ab1e-12958b10f636", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065a2757-40e9-4f3e-a729-a33bc9ae6840", "sighting_of_ref": "indicator--19cb438b-8f4a-4544-ab1e-12958b10f636", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aa4777-f0ca-46c9-ae44-27005fcb7bd9", "sighting_of_ref": "indicator--07309c99-6a45-41d6-8222-294adab3bf8c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb1f1d7-c014-4bc5-9893-a582f049a584", "sighting_of_ref": "indicator--07309c99-6a45-41d6-8222-294adab3bf8c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ed148a-ee5b-4f7c-8267-4d0ca35d2b7b", "sighting_of_ref": "indicator--1065480f-6495-42a9-a1e8-6a07288f4640", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1287ac-1097-435a-aca3-ffe084cd74cb", "sighting_of_ref": "indicator--1065480f-6495-42a9-a1e8-6a07288f4640", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42130f5b-63b8-4743-8b3c-e12ed77e5410", "sighting_of_ref": "indicator--bcf92aa2-df9b-4621-9d04-db84613ebca8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62bd0dd-b178-4554-a58f-622640b4adf5", "sighting_of_ref": "indicator--bcf92aa2-df9b-4621-9d04-db84613ebca8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2309f8-7216-4005-8ed1-f31c45ff7109", "sighting_of_ref": "indicator--283119c7-0a21-4a26-af08-7c4e028188a3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba77283-e2f9-442a-b2e6-58d151f8d76e", "sighting_of_ref": "indicator--283119c7-0a21-4a26-af08-7c4e028188a3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a327593f-3305-4ac5-83ee-00dc05cff98c", "sighting_of_ref": "indicator--4e5ab562-721c-4528-ac6a-51526054aa9d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7986cf-d0c0-46e6-96bf-d0901853382c", "sighting_of_ref": "indicator--93bae32d-58d8-4f55-b48d-709c65b37474", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0d7412-6303-4348-af9e-3a8c4b110341", "sighting_of_ref": "indicator--93bae32d-58d8-4f55-b48d-709c65b37474", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f63746a-0bf8-41af-874b-50b956577af9", "sighting_of_ref": "indicator--4c4de5f5-d8c6-4d08-a4c1-c4cecb271e70", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68913088-2087-4c1c-946f-d1cd228674cc", "sighting_of_ref": "indicator--4c4de5f5-d8c6-4d08-a4c1-c4cecb271e70", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31268992-c92a-4a82-8e15-e749519779a9", "sighting_of_ref": "indicator--8cc1bc5a-3de7-4400-bc6f-4e5026496b2b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eed413c-ea11-42b3-95d4-8823df5160a4", "sighting_of_ref": "indicator--e5716ac4-1821-4006-8800-3d6deef31b15", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afde1714-9cf7-4ef5-a009-64e31c1be0a5", "sighting_of_ref": "indicator--64b99c69-588a-4850-881e-6fc40d02f992", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a9dc64-e2fb-41c0-8061-3352a8cee8e4", "sighting_of_ref": "indicator--64b99c69-588a-4850-881e-6fc40d02f992", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79dc4abd-ed62-44a2-965c-aa83f9f99d90", "sighting_of_ref": "indicator--96bd1970-2cc4-42b2-b52d-014b527d8428", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bca51c-5f15-45a7-af9e-0d0ce50b26a6", "sighting_of_ref": "indicator--df9cafac-8649-4b4c-bba5-3c774baf5579", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fc672a-7ecf-40ad-925a-421026fd7ec6", "sighting_of_ref": "indicator--df9cafac-8649-4b4c-bba5-3c774baf5579", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc58b57f-5578-4882-bf56-9258722ab4da", "sighting_of_ref": "indicator--38ebabcf-cec0-4bc3-ac15-1cff0f90d48f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c34b51e-0a82-4169-acdd-b5d8722ee7f6", "sighting_of_ref": "indicator--38ebabcf-cec0-4bc3-ac15-1cff0f90d48f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6220723f-c566-4471-aa97-0e934d6d0a9a", "sighting_of_ref": "indicator--84e756e7-b96b-4d54-8529-aec7aaf9b503", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cafc093-dcda-4375-83cd-ace5869b34fd", "sighting_of_ref": "indicator--f865c025-12e0-4a20-bc38-fed33ed75409", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c108e6-6f18-4440-989d-802d13c2a56f", "sighting_of_ref": "indicator--f865c025-12e0-4a20-bc38-fed33ed75409", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df871df1-d8c0-4986-85a4-b8ae45936e94", "sighting_of_ref": "indicator--c14bae86-807e-4410-ac6b-6b672aecae76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca576b93-b65f-4146-8976-b6b88269a9d8", "sighting_of_ref": "indicator--c14bae86-807e-4410-ac6b-6b672aecae76", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5231f27d-0efc-4dae-832c-bd4f3b0c9487", "sighting_of_ref": "indicator--7c606d8a-9df5-4394-a613-cf9d4c769fc3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2486ff-df0b-4659-99a2-b0671671f32a", "sighting_of_ref": "indicator--7c606d8a-9df5-4394-a613-cf9d4c769fc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a129ab-9808-48fd-80f4-af36fbe30182", "sighting_of_ref": "indicator--2419a307-7ba4-49bd-93fc-4ad828536847", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e38b613-24b4-41e1-bb2b-fb11064a4ce4", "sighting_of_ref": "indicator--2419a307-7ba4-49bd-93fc-4ad828536847", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce5c4f2-13b8-4df3-bc41-704ef50c17c8", "sighting_of_ref": "indicator--0469cf88-b5c5-499c-a0c0-b3ca9dd5e977", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ebc8a4-269a-40d3-994d-a30b8f023714", "sighting_of_ref": "indicator--0469cf88-b5c5-499c-a0c0-b3ca9dd5e977", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4877cb75-39d9-44ad-a166-5edaa982b443", "sighting_of_ref": "indicator--5e070bf6-158a-493b-a5c7-14b49fabdc74", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20534b02-7239-4016-b126-0c985bcff3c0", "sighting_of_ref": "indicator--5e070bf6-158a-493b-a5c7-14b49fabdc74", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b424ea1e-528d-4c92-9bdb-6fc122dda528", "sighting_of_ref": "indicator--db0f873e-3aec-4219-94b5-2ac2df02bfdf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5392b568-a0a8-4187-8f3a-e0d2fcb7e188", "sighting_of_ref": "indicator--85624bc5-b3dc-4d4e-a58e-4227beac30f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9976917-34c3-410b-b5a0-a8791318fb43", "sighting_of_ref": "indicator--908447f4-59e2-4cfb-a8aa-d2cfb17b75c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7969661a-c280-4c12-884a-ffdf9b8ee86e", "sighting_of_ref": "indicator--e2c1484b-a291-4eca-b1a9-3a6a9f4b723c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01776d54-b0a3-4506-8711-ae412ce0acf4", "sighting_of_ref": "indicator--e2c1484b-a291-4eca-b1a9-3a6a9f4b723c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98563dd-e756-4425-a308-4662c79e79bd", "sighting_of_ref": "indicator--f85d9e15-64c4-4cfd-b260-3627562a26bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a5806c-4fd6-44ce-9c91-67ac3fbbacfc", "sighting_of_ref": "indicator--b08619d4-fc96-4030-ad4f-5359a4e5211c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ffc6fe-c3d8-491a-98cd-604b07c73cf6", "sighting_of_ref": "indicator--7c7c2e71-3b3c-436b-a060-bc3e43deaaab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb4526a-83d9-4d39-a848-d8743df1005f", "sighting_of_ref": "indicator--fda3f70d-fd17-4c45-a412-a3cfc113f2c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e508e3be-9ee4-4837-a28b-4a5440ad0180", "sighting_of_ref": "indicator--466d515a-412c-45a0-8048-16c2daf21cf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43101a14-677a-4935-b21d-cf8f85bd228b", "sighting_of_ref": "indicator--466d515a-412c-45a0-8048-16c2daf21cf3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1580bec5-5449-4e2e-8b67-b1ced8548dd8", "sighting_of_ref": "indicator--447f58ee-94b7-4ccd-a775-38a40b4a5541", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5db203b-b0e8-4c30-957f-7716121e7c91", "sighting_of_ref": "indicator--0fee3b74-541c-4f44-9c3e-1173f4802a72", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a83091c-7175-4b64-a13a-686d6c34e1ad", "sighting_of_ref": "indicator--9ad26e76-c213-4353-9533-51a74f040763", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee667be-95b9-4914-94c5-c0bce4a744be", "sighting_of_ref": "indicator--9ad26e76-c213-4353-9533-51a74f040763", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aec5b5a-1851-4395-b7dd-5217b628f7b3", "sighting_of_ref": "indicator--eed2ab92-b12f-46d8-bfe6-d2492e562cf8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6ab5f6-1dfe-42fb-96a0-f0c09f06db45", "sighting_of_ref": "indicator--eed2ab92-b12f-46d8-bfe6-d2492e562cf8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82866cc4-a6bc-4020-a195-70363ece673e", "sighting_of_ref": "indicator--1c507535-e5b5-4484-baa9-dbe53755c40c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848d9e5f-5d06-407d-a798-c2a9797970d9", "sighting_of_ref": "indicator--1c507535-e5b5-4484-baa9-dbe53755c40c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29820c0-dc0e-416d-9d1f-7c6e93e57c39", "sighting_of_ref": "indicator--0a6facd7-5e30-46ea-8aa3-0d3ecbd18eec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a54873f-3748-4129-9246-484929251f95", "sighting_of_ref": "indicator--95d4cc37-d167-4bd3-9910-b7c788e76432", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7e4226-37b5-4c04-96fd-827690e0b779", "sighting_of_ref": "indicator--b7b2db88-e28c-49b0-a15e-a9d164aebd86", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7848b6f-adc6-4979-b732-eba851c9cc25", "sighting_of_ref": "indicator--b7b2db88-e28c-49b0-a15e-a9d164aebd86", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcefafc-74ff-460d-aefd-d15ce9646975", "sighting_of_ref": "indicator--ff6eacb9-37ac-4cbd-962a-de2efa033d83", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ecfc7a-7658-49e5-b666-054edc3d3c99", "sighting_of_ref": "indicator--ff6eacb9-37ac-4cbd-962a-de2efa033d83", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4876ab12-98ce-4c1f-8c60-0c11e8c84a07", "sighting_of_ref": "indicator--b7449af7-8610-4984-8380-1a01a3290ae6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628a3f8e-b6f1-4864-b43c-2a19d1123fc7", "sighting_of_ref": "indicator--1eca170f-557d-4ce4-806e-b6cd7a40c1d8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe078588-210f-4d7f-ac2e-e76dc686b7b6", "sighting_of_ref": "indicator--1eca170f-557d-4ce4-806e-b6cd7a40c1d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec157e7-c5f6-45b1-ae49-9b632cb765f7", "sighting_of_ref": "indicator--27dc6ef4-1eb6-4a30-b42f-f8941e3dc4e0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75fd551-e908-4a57-ab1c-f0ddc2a62eff", "sighting_of_ref": "indicator--27dc6ef4-1eb6-4a30-b42f-f8941e3dc4e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5674085f-a0c5-4c9f-9e6f-5c5836172ce0", "sighting_of_ref": "indicator--b95d9db3-66f1-412e-8e9e-c0479e91e5d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33162ce7-117e-40c4-ab0c-a507c6d639b7", "sighting_of_ref": "indicator--b95d9db3-66f1-412e-8e9e-c0479e91e5d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d8efef-491d-4c5e-aca5-2be3ab712320", "sighting_of_ref": "indicator--e531afd1-9f72-42e2-b9c2-0500c66a4fc3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4370569-e908-4e1d-b46c-6ba900c8b4ea", "sighting_of_ref": "indicator--e531afd1-9f72-42e2-b9c2-0500c66a4fc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e991ed-abe2-4655-abc3-3e949d2068ba", "sighting_of_ref": "indicator--1347c1e5-2b80-4b7a-ae9b-69d39bf759fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4f0cf6-e174-4a64-bd17-c15320254c0c", "sighting_of_ref": "indicator--965b31c8-8d6e-4f96-8d93-f4d826cd8a4e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a2ef0d-3587-476b-8eb2-5d64a9f1fd67", "sighting_of_ref": "indicator--eeabafa8-e6ce-41e0-83f3-e51e6023c9c7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db538a6-aaef-4821-875d-8cff015a14fc", "sighting_of_ref": "indicator--eeabafa8-e6ce-41e0-83f3-e51e6023c9c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f68c33-ef1f-419a-a96f-23fdc1a04c0a", "sighting_of_ref": "indicator--65a1655a-00ea-426d-8efc-8906368b07d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8117990b-2241-49f6-a8eb-34ae1b896512", "sighting_of_ref": "indicator--fa98e3d1-4dd8-4d13-ab00-d18ea666779a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519f413c-a3e9-45c4-afaf-b5d90261a064", "sighting_of_ref": "indicator--4a50b143-fac2-4aed-a55c-5f6c0b779c67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fa401a-76d1-4dab-a424-5ed74bca5a72", "sighting_of_ref": "indicator--589e10bc-645f-4abd-b084-285e273689ce", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5c59ca-c867-45f9-987d-3cb3d1dd1c1e", "sighting_of_ref": "indicator--589e10bc-645f-4abd-b084-285e273689ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff42449-fec8-48b8-87ad-fd6e3474b145", "sighting_of_ref": "indicator--24c01c4f-5604-4181-9b86-235eb439dc57", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eb5542-5db5-45f5-9f0c-dd929aa093ea", "sighting_of_ref": "indicator--24c01c4f-5604-4181-9b86-235eb439dc57", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073a15a6-628a-4518-8be4-ea22daeb91e2", "sighting_of_ref": "indicator--644d85be-00b3-46cc-add1-4546f4f84901", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9126da-63fa-4cf7-8f33-7d8273dbba82", "sighting_of_ref": "indicator--10cfefd0-60f8-48ee-a1a1-6184f6ecec15", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c13832-cb86-493d-88e8-3751a07eee68", "sighting_of_ref": "indicator--10cfefd0-60f8-48ee-a1a1-6184f6ecec15", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e0d2a7-c913-4d38-ae47-3097484896aa", "sighting_of_ref": "indicator--76d4605e-1a14-41da-ac54-eb738b232955", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7490d3-7568-4e85-8f51-f20dac905f97", "sighting_of_ref": "indicator--76d4605e-1a14-41da-ac54-eb738b232955", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989f2826-96c3-4aa8-ae2c-c68e760d7a27", "sighting_of_ref": "indicator--27a9811c-2de9-4224-8fcc-edb85c6e479f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ad24e3-bbf9-4cb1-acdb-6fce3be2bbe1", "sighting_of_ref": "indicator--232e166e-59b3-4ddc-afff-784591c4e220", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d5a9bc-4419-45a6-8b55-d10a98d410bb", "sighting_of_ref": "indicator--232e166e-59b3-4ddc-afff-784591c4e220", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16253cbf-7a34-4d78-8d35-8b38c46b89ba", "sighting_of_ref": "indicator--a2a86f02-1687-44bf-9e75-147961bc21e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182acb98-bf05-42d2-8b1d-97fc7dd45e38", "sighting_of_ref": "indicator--a2a86f02-1687-44bf-9e75-147961bc21e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1025c656-464f-4c97-a6dc-d53e9df6c34d", "sighting_of_ref": "indicator--15165699-303d-4bcb-b9b9-316f5918c117", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7948c7f3-7a6d-4645-9037-86c87eb47f58", "sighting_of_ref": "indicator--96f1ac76-a68c-40f8-b9c9-472547ca80ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37bdafc-d517-43b0-9504-878c736a9dab", "sighting_of_ref": "indicator--96f1ac76-a68c-40f8-b9c9-472547ca80ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73aa80a-ee57-4f1c-aadc-a707db62eceb", "sighting_of_ref": "indicator--0f16ac22-78cc-44ec-8e2d-c2371d45b614", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a44b39f-8f3b-4bbc-b3e4-cd2671bb80d4", "sighting_of_ref": "indicator--0f16ac22-78cc-44ec-8e2d-c2371d45b614", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ce9e7e-7cea-4c94-83c3-f92931271fd4", "sighting_of_ref": "indicator--effc64c9-ce40-46b4-9827-de9c27b947be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0160d1-fd0a-4997-9287-ba8259ac24e6", "sighting_of_ref": "indicator--45832a0c-c756-4aaa-a67b-04c0fe03690a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e1f73b-b192-4afc-934f-69a6d519e317", "sighting_of_ref": "indicator--8ba12416-9d8f-4526-ad6b-1a8da0940595", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de92f07a-1ee9-4906-bc15-1dabae6a2289", "sighting_of_ref": "indicator--3475f31e-aff7-4e79-a149-5d84b61c0bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14d28ad-ff2b-479c-a3e1-c872c39ef9f4", "sighting_of_ref": "indicator--82c8271a-65a7-43ef-bd4e-fa7c92f8b32c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936f2af0-8010-4548-9b9a-287c9f5da9aa", "sighting_of_ref": "indicator--82c8271a-65a7-43ef-bd4e-fa7c92f8b32c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c7023a-16d4-434b-8720-fb62af61b08d", "sighting_of_ref": "indicator--ac01fa99-a235-4d02-8bef-26d270106f8a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05365dcd-dea5-48df-83d8-b1ab39a96e24", "sighting_of_ref": "indicator--fa1994c7-c6a3-4428-aa87-1ab0bbee5cbe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2967b569-914b-46b7-a7cb-4af08ca6fa37", "sighting_of_ref": "indicator--fa1994c7-c6a3-4428-aa87-1ab0bbee5cbe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddea6c0b-b6c3-4517-a864-f3a16300fc62", "sighting_of_ref": "indicator--586960e8-43c1-4d3a-a541-ab7fa12fbfa0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d3b76b-3013-4066-9b35-85b9d1a35265", "sighting_of_ref": "indicator--26842ef7-3ee6-4585-8cc0-4a4d2563e9f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0768619b-4545-421f-acc9-10f979396e9c", "sighting_of_ref": "indicator--26842ef7-3ee6-4585-8cc0-4a4d2563e9f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377c1e25-a2df-4f5e-b1b4-92adf7062d0c", "sighting_of_ref": "indicator--3ac65dd5-66c4-4002-8ae9-73735511ca01", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70af6b9-e0f4-4ed1-acce-6833018969f4", "sighting_of_ref": "indicator--3ac65dd5-66c4-4002-8ae9-73735511ca01", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977f91b7-bbbb-4bab-be14-65c6e6430d97", "sighting_of_ref": "indicator--d541ea4e-8c61-4345-95e4-f43bc8975db3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd5e0e1-3c63-498e-825e-d8a04841a0ee", "sighting_of_ref": "indicator--d541ea4e-8c61-4345-95e4-f43bc8975db3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fdd46a-c571-4e04-956f-a7b8782c76b0", "sighting_of_ref": "indicator--b73efb55-d43b-4add-ac1b-0e4ae213e7e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6675fcdd-dedd-49bf-8acb-b22e78af0eb2", "sighting_of_ref": "indicator--ec00404a-6c8a-4f62-a5ee-9fa63f489b5f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63918929-dfb2-424c-afb3-1cf872e06d0a", "sighting_of_ref": "indicator--ec00404a-6c8a-4f62-a5ee-9fa63f489b5f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624e8103-5bea-4062-8b02-2728e6783f14", "sighting_of_ref": "indicator--0d7d2b5e-41a0-4215-934f-2d8d23447e9f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c9e957-531f-414f-a950-535aedaaa431", "sighting_of_ref": "indicator--cb2d43da-6ee1-4def-806f-3c2a11b86125", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19242af9-5573-4fed-9e49-db7d707fad2e", "sighting_of_ref": "indicator--cb2d43da-6ee1-4def-806f-3c2a11b86125", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508d7fb8-a0c0-4d33-ba40-c5a94169ab82", "sighting_of_ref": "indicator--d411278d-2621-4393-9c90-4d45255e3b92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3169794-40e2-44c2-b7f0-c44cc5ea37b3", "sighting_of_ref": "indicator--6950d317-f14f-4a68-9e10-060c7a4c9fe3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5204541-d477-4b10-9c9e-e6a5e6767c76", "sighting_of_ref": "indicator--9dfabdc4-0acf-47f7-9ef7-26ad2aae9e64", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaee2e1-8993-4ad8-a69f-fdca5e2faa2e", "sighting_of_ref": "indicator--9dfabdc4-0acf-47f7-9ef7-26ad2aae9e64", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f12ed37-a506-4bfd-868d-1a949e6376a9", "sighting_of_ref": "indicator--d5534cb1-c934-4a63-ab86-3abdd0915c84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cee44e-45f2-4a4b-a8ba-306cbcc339e2", "sighting_of_ref": "indicator--d5534cb1-c934-4a63-ab86-3abdd0915c84", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167d5074-bdcd-47a6-8d07-8bb8b5a1b617", "sighting_of_ref": "indicator--810e5a29-0f5e-4f16-adec-23341bedb53a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36757ba5-59aa-4377-a2b1-98d303244c96", "sighting_of_ref": "indicator--810e5a29-0f5e-4f16-adec-23341bedb53a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a941b9-03e1-47c1-afba-e26fc4b13584", "sighting_of_ref": "indicator--b5af0573-21bd-45db-ac2e-2c05f435241d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3444ac9f-5e1f-4e9b-8c88-043f1ebc3d6e", "sighting_of_ref": "indicator--95001895-459f-42a4-894d-d096f8e080fc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9db6999-124d-4ec8-b908-549296c2d930", "sighting_of_ref": "indicator--fbee3cea-ef9d-4898-877a-f57fbe858c17", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd99f9e6-cbda-4628-9c66-b3e05c583612", "sighting_of_ref": "indicator--fbee3cea-ef9d-4898-877a-f57fbe858c17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92eee7e-dac3-4e05-9bfb-04fbb65a21a6", "sighting_of_ref": "indicator--c3d94f8c-a411-4fd5-a8af-e4a4f76cb2b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fc502d-bfe6-4588-a2de-0b03e640bbcc", "sighting_of_ref": "indicator--95f68d67-250f-4c49-9f4c-f7123c9f9aaf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87517a3-35a3-4ad7-ae32-88cd95b73227", "sighting_of_ref": "indicator--38da9609-8c6c-4efd-bc18-e42504baf720", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34388706-a714-4ffa-832b-47fe64f92dc3", "sighting_of_ref": "indicator--0d2bbb47-f91b-401d-9c9c-fb24a87bf0e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25debf30-b853-4847-b183-d1bfd52577c1", "sighting_of_ref": "indicator--0d2bbb47-f91b-401d-9c9c-fb24a87bf0e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4ed361-6b4e-4393-8f30-dcf153a234f0", "sighting_of_ref": "indicator--90035354-f492-4ae8-bdad-c5f04b2fa901", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a8193c-b00d-4641-8f81-63d4fb886b00", "sighting_of_ref": "indicator--cca5a46f-4a4b-4549-8233-f93e40e32dca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda9f78e-91d1-4345-8aa2-c1c2679e4615", "sighting_of_ref": "indicator--cca5a46f-4a4b-4549-8233-f93e40e32dca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f72e85-fd96-44d5-871f-e246d767a541", "sighting_of_ref": "indicator--e3ea3f12-efec-45a1-accc-f165d49025bb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c529d1-442a-49d1-aa70-56a206ffbfc2", "sighting_of_ref": "indicator--14455cf2-6d59-498a-8b0c-add291b8bd13", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb10edf-eaff-4386-9a4f-4b52e94c3d8b", "sighting_of_ref": "indicator--76fb5e8f-fc69-48b1-823c-3b8b2b50c0d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cd9e9d-1f20-4433-9028-acdf6bb17b9a", "sighting_of_ref": "indicator--76fb5e8f-fc69-48b1-823c-3b8b2b50c0d7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8122836b-423c-428b-9a04-56cbb5aafff3", "sighting_of_ref": "indicator--8423a5b9-fadd-4289-9553-0b35f4c7f70d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b2b432-d4b7-4ed4-9269-547803509ff7", "sighting_of_ref": "indicator--8423a5b9-fadd-4289-9553-0b35f4c7f70d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca3b5c2-d852-4391-965b-0f413a6e74f3", "sighting_of_ref": "indicator--2cca0b73-222b-4f61-b9f0-c4c1e010fe90", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07affe17-0a34-48a7-9897-a394ce726848", "sighting_of_ref": "indicator--2cca0b73-222b-4f61-b9f0-c4c1e010fe90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee5298a-a003-426b-bebc-95d70406380b", "sighting_of_ref": "indicator--10cdd8ee-2b72-4d9b-b20b-6e18061bce92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0db54e-c8a7-40d0-ac53-4b5d82780100", "sighting_of_ref": "indicator--10cdd8ee-2b72-4d9b-b20b-6e18061bce92", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b34942a-1ecc-489d-b26b-81b6514f6f7a", "sighting_of_ref": "indicator--da6e5629-a615-446d-9808-4875d5a73ba9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c6bd28-8d5d-481c-9a60-7061bbc746bf", "sighting_of_ref": "indicator--da6e5629-a615-446d-9808-4875d5a73ba9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84805cc0-8edc-4bd3-ae84-14503fc681d6", "sighting_of_ref": "indicator--52354d34-a2f9-4366-9563-64b7d2519d2b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a543a662-23a1-44ec-a87e-3b1536eee88e", "sighting_of_ref": "indicator--52354d34-a2f9-4366-9563-64b7d2519d2b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c3abaf-3345-4ecc-95bf-664784520f47", "sighting_of_ref": "indicator--e8add90b-eb2a-4bde-aaae-5937a933b134", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e1dea3-c736-42f7-83f2-656b3f69a1ae", "sighting_of_ref": "indicator--e8add90b-eb2a-4bde-aaae-5937a933b134", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5705692-8742-4d64-ae92-cc935fcd05d3", "sighting_of_ref": "indicator--c0ffd8e9-8a87-411b-a05e-4e51863342b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0de548-ab6e-46da-8632-b2b6a010b6f1", "sighting_of_ref": "indicator--c0ffd8e9-8a87-411b-a05e-4e51863342b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da0e18c-5f77-4797-ae15-dddfdd1b0375", "sighting_of_ref": "indicator--f1f0ce21-bb5d-4a98-b61f-3acf5e6c6023", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb19893-0273-4169-8475-b6c39b21f870", "sighting_of_ref": "indicator--f1f0ce21-bb5d-4a98-b61f-3acf5e6c6023", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6b33f8-164d-4d77-a455-46d4caf96b1a", "sighting_of_ref": "indicator--55a8280a-2b50-4a82-be75-a6af5accce4b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8133c9-76e9-472f-b1cd-57db2fe61c03", "sighting_of_ref": "indicator--18847f5e-c531-4386-b977-dbea32e23063", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028f1a13-7ced-48e9-a84c-9741f7e978b6", "sighting_of_ref": "indicator--18847f5e-c531-4386-b977-dbea32e23063", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b00f95e-f174-4443-8d3a-6a4a0946d304", "sighting_of_ref": "indicator--5085cec8-2167-4e9c-a1c7-a3cfddfbb589", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a3f34a-dc1a-47fc-8360-d5743209c814", "sighting_of_ref": "indicator--5085cec8-2167-4e9c-a1c7-a3cfddfbb589", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcd4bc5-816b-4e8e-82c9-279d69305063", "sighting_of_ref": "indicator--5a09b76b-0eaa-4e5e-82ae-e00d86fe6ec8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80732e30-100b-4f83-9c86-e02cc23df4f1", "sighting_of_ref": "indicator--10c23a9c-0ce4-4671-a455-e6fd38e6b4c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238a7f9a-9498-4d88-9de1-a5a2bc2d7cae", "sighting_of_ref": "indicator--1c65f6b7-5399-41d8-ae1c-af749721e372", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150fc493-ff94-4e48-8079-4a2146fad45a", "sighting_of_ref": "indicator--1c65f6b7-5399-41d8-ae1c-af749721e372", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873f7652-14d0-465b-9e53-466afb5b59d2", "sighting_of_ref": "indicator--94451507-72c2-4484-a276-63bc1b5700be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944e2f8a-914a-476f-a896-99fba5329a5c", "sighting_of_ref": "indicator--6255d721-7107-433a-9d67-02bff66326bc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1dcf41-b879-4eb5-81e6-c43d5d612482", "sighting_of_ref": "indicator--6255d721-7107-433a-9d67-02bff66326bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbd21b8-ae11-4f76-bd85-0c5f084f4d62", "sighting_of_ref": "indicator--b1cc7634-8046-48b3-b4d0-e51b6ebe1b5f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c447a64-9eb9-45ee-8e01-a21624b2d64f", "sighting_of_ref": "indicator--b1cc7634-8046-48b3-b4d0-e51b6ebe1b5f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ee1e50-7475-4111-b2df-14415f4c13c2", "sighting_of_ref": "indicator--12d95d07-16f5-4300-bfd0-5bb5cfd29f07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23222abb-d0b0-4661-845e-29b830a9c126", "sighting_of_ref": "indicator--12d95d07-16f5-4300-bfd0-5bb5cfd29f07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593aecef-e69e-447e-aa52-8b58c9a09ade", "sighting_of_ref": "indicator--6d902fdb-137b-4de5-9ffc-772fe788791a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db0d526-69d1-409f-afe5-0422eb1859e8", "sighting_of_ref": "indicator--6d902fdb-137b-4de5-9ffc-772fe788791a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da664a76-abee-4453-ba6b-690ca6f28d9b", "sighting_of_ref": "indicator--41caee7e-cf0e-4986-822f-4e8cc8713f05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b85fb9-d8f0-4c57-9f39-7e4c6044a85a", "sighting_of_ref": "indicator--41caee7e-cf0e-4986-822f-4e8cc8713f05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5652c0b-93a1-499b-9134-3d5d524b2488", "sighting_of_ref": "indicator--c7afca0f-a495-4e46-b311-89678e056757", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a769a23-6c29-42bd-97c2-957ee54b4b54", "sighting_of_ref": "indicator--913e3bcb-b0be-4a5f-8574-c8ac35b113de", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eff49d-f40b-43e7-a98a-17890c325918", "sighting_of_ref": "indicator--9c0f3fc7-5243-4544-9100-d1ed6f52d171", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50367366-38e8-4fc1-95ed-bb63f827b6bf", "sighting_of_ref": "indicator--4369cfab-5bd0-42d2-8fe1-0225b2bc695d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586781cb-46c6-494e-abc5-ab7f7c16763d", "sighting_of_ref": "indicator--9d4c2a4d-b585-4da1-a8dc-ee6e0e56770b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bc1be2-f68b-41e0-a2b2-629f72a5c1a9", "sighting_of_ref": "indicator--86d1d1f1-2cf1-46de-a87a-a57554d0be02", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002b0bcd-0b7c-42fe-a3fc-967726ccba01", "sighting_of_ref": "indicator--86d1d1f1-2cf1-46de-a87a-a57554d0be02", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a720622a-f7fa-4828-9705-09dc47e934c7", "sighting_of_ref": "indicator--8de568d5-fa7a-4a07-a4d3-2a98f29482d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cff3aa-74bb-4526-bf8a-1d50691ff60f", "sighting_of_ref": "indicator--75044724-4d1d-494b-9f73-eef5628bb7cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31fc2d3-5b17-4f4e-9bc9-f29d53585e49", "sighting_of_ref": "indicator--525d1d23-1eff-4c9b-a37a-26431261bc63", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892d357b-3b6f-4fa0-88a6-93eb84772699", "sighting_of_ref": "indicator--210c07e3-41cd-4638-ab67-76c793174f06", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d345c957-c2a1-4958-9edf-99b4d6cc1c65", "sighting_of_ref": "indicator--efd539cf-fb49-4660-bdc9-5bf4d64a456d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11503c5f-ffd5-4887-a462-337347644f44", "sighting_of_ref": "indicator--c22cbe66-2f66-46c0-ba74-02dec89fa019", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b8a96b-2407-43a4-8b0e-8e3c18c2fc92", "sighting_of_ref": "indicator--7817644a-1f4a-4e9d-b4ea-c5dfc38acb8a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc749241-42a7-4066-91df-cc7823552697", "sighting_of_ref": "indicator--e4468f94-19fe-4f78-af09-44e68002d05d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d44e0c-2d36-45f6-bc6a-8602021eb183", "sighting_of_ref": "indicator--e4468f94-19fe-4f78-af09-44e68002d05d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a9b523-4394-4e2a-a436-d121e3086122", "sighting_of_ref": "indicator--78e0e79b-0922-4a6a-a230-084faa4f8272", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345e550c-e419-43ac-b470-11ff11d5672c", "sighting_of_ref": "indicator--54138f38-e0ec-4dc4-833d-16c5ef65c76c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73d2128-bba5-48e6-8b73-ca05ac4773f3", "sighting_of_ref": "indicator--81aae276-a85f-45aa-a562-8ad57a952fde", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c894e1d-002e-4c1e-8be4-fbc46cede2a0", "sighting_of_ref": "indicator--81aae276-a85f-45aa-a562-8ad57a952fde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88ac9c1-7872-4251-a9fc-5b2c1d14cd72", "sighting_of_ref": "indicator--3b5db3f0-218e-45c9-bbb3-8de2b0c222bc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f6705b-eb2d-49c0-9c10-49454cef98a8", "sighting_of_ref": "indicator--3b5db3f0-218e-45c9-bbb3-8de2b0c222bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bee01f0-c394-438b-b31a-6b19847169fa", "sighting_of_ref": "indicator--99b84652-8875-40c5-a27e-b004b2ef2825", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1696cab-bf1b-4637-afd1-3b71e77b73ff", "sighting_of_ref": "indicator--99b84652-8875-40c5-a27e-b004b2ef2825", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01db804c-ed82-4115-ad1b-12d6039d5bd6", "sighting_of_ref": "indicator--b57e2375-335f-475a-9f8e-645c9ad57856", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e44e73-fceb-425a-8f6b-e1dcffd1d1aa", "sighting_of_ref": "indicator--b57e2375-335f-475a-9f8e-645c9ad57856", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10920e98-e4e6-40a6-9618-d73c7e2b2043", "sighting_of_ref": "indicator--b17b1902-4c1f-46a1-8651-f38e91231ed3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6b9c88-e54d-45ab-9920-855eecf87f3d", "sighting_of_ref": "indicator--b17b1902-4c1f-46a1-8651-f38e91231ed3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbee1aae-fa4a-4e8f-8e59-6d0611132232", "sighting_of_ref": "indicator--907a9b72-fab2-46be-b1ad-e9cfd134d5c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d427230f-1377-4c97-a4f1-2a5806120258", "sighting_of_ref": "indicator--5bfc99c8-6e5c-44c9-80f8-a3a42caeafe3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed0d516-d15d-48cd-b904-4a85303ee54a", "sighting_of_ref": "indicator--5bfc99c8-6e5c-44c9-80f8-a3a42caeafe3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e124925-a527-4dec-9b20-ac0ec9125689", "sighting_of_ref": "indicator--e094e809-3463-4c6e-a1e0-87ba7c5f0038", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c56589-dc58-412f-9d0c-80330bea08ec", "sighting_of_ref": "indicator--e094e809-3463-4c6e-a1e0-87ba7c5f0038", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355b62c5-9c05-4a74-8828-78bdd4dc78b3", "sighting_of_ref": "indicator--c176fd55-4cf1-4239-a219-4004e1d3176d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa19ecb-6a73-4109-993f-64907e06cd43", "sighting_of_ref": "indicator--c176fd55-4cf1-4239-a219-4004e1d3176d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29c81cd-385b-42bc-b2fb-19026eec6332", "sighting_of_ref": "indicator--782117c3-2026-485f-b1ef-6a911445a126", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9790fdf4-30a7-4208-a7b8-192b8d2ea4a0", "sighting_of_ref": "indicator--782117c3-2026-485f-b1ef-6a911445a126", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75442bb9-f6e5-4c57-8a0a-1ea94d56db54", "sighting_of_ref": "indicator--0d4a0056-a8fa-45df-b788-7f3fb7066e6a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb58498-8bd5-4821-9dfd-f0fde39025f8", "sighting_of_ref": "indicator--0d4a0056-a8fa-45df-b788-7f3fb7066e6a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1237e3a1-c23a-4f2a-88dc-fb2b85cdb162", "sighting_of_ref": "indicator--b34acf8d-e538-4e29-baea-674f4b27651a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d62ea07-843c-4ed1-802d-c4770517c91c", "sighting_of_ref": "indicator--b34acf8d-e538-4e29-baea-674f4b27651a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77c3ba5-e911-433d-9cde-c793fda16ee0", "sighting_of_ref": "indicator--1557649a-0023-40ab-ae44-a1b10be8ed74", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1315e2b0-e58d-4d28-90cf-458153e2468a", "sighting_of_ref": "indicator--1557649a-0023-40ab-ae44-a1b10be8ed74", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a48c975-cddc-44d9-b02e-5cff8a70dde9", "sighting_of_ref": "indicator--0214a192-46a7-425c-8483-2f67f344b78a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408be819-882b-4b1b-affa-25fcd005fd70", "sighting_of_ref": "indicator--0214a192-46a7-425c-8483-2f67f344b78a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad0ecfd-580f-4079-82fe-b98816e6c5e3", "sighting_of_ref": "indicator--1775f1f9-bdd6-44c6-91aa-49dc990ced41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ac35a9-19ea-4f37-87bf-01c36ef5fbd6", "sighting_of_ref": "indicator--abc407e0-4b9b-4218-a299-3dbc6ad6f252", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f91ddf-bae4-4fe4-a98f-5e3ffced5c81", "sighting_of_ref": "indicator--641bdad3-be4b-4e16-8488-607276f6b3d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d572988-6628-43a6-b8f4-a7da76ecba78", "sighting_of_ref": "indicator--f1c09df0-0fe0-471b-9ef9-c757ae2a971e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e59efb-024e-4a22-a392-0ad774f05c63", "sighting_of_ref": "indicator--71770baf-30b2-4c07-825b-0af978e0069c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d031351b-c658-47d2-907d-341e3db626fe", "sighting_of_ref": "indicator--71770baf-30b2-4c07-825b-0af978e0069c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28c34bf-5b3c-4daf-96f3-cae54e5bdfbb", "sighting_of_ref": "indicator--79f8cc18-142d-4318-8b74-db62ba94d33d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba273f92-bec1-476d-bc68-e90dbfac57c6", "sighting_of_ref": "indicator--c2ad1b52-e7a7-429c-b029-f15677dad79b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ff3021-7fad-4640-8fac-9da78cd8b6f1", "sighting_of_ref": "indicator--96f6fb8c-24df-4557-adc8-9a137694618c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426e8cf5-9f84-4e7f-b8fb-5e1cc52a5cf9", "sighting_of_ref": "indicator--a41b07a3-83f9-4745-bbae-86de1e6a616b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b234aa1e-4346-4cab-9986-a8b9b59727b1", "sighting_of_ref": "indicator--6afb5f44-5268-4c93-8ba5-651487933875", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831520cc-2bac-46ad-a1d1-368cb8d3e9ca", "sighting_of_ref": "indicator--e3f69258-8181-4a3a-a144-b1d57f1ae45d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375eb800-e46a-4bc7-a8b1-59217f7fa676", "sighting_of_ref": "indicator--63fa1e26-e5f5-4a6e-9ab3-e219973ea9b0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65d8a4f-da30-46b7-bb65-6b063f076ba3", "sighting_of_ref": "indicator--020677c4-f1b8-46ad-b34d-b72c343df05d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b772e3-f0a2-45b8-a109-b48fffbcb105", "sighting_of_ref": "indicator--537fd76f-5501-4304-b622-e361034d13e5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6179b7a-3c31-4670-a690-fc7a2281ea97", "sighting_of_ref": "indicator--143cfd21-5c53-4cc1-bab9-700786df9744", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d11ba9-211e-4f8d-ab9f-f36168c41053", "sighting_of_ref": "indicator--143cfd21-5c53-4cc1-bab9-700786df9744", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d3b0cc-4e7a-4bcc-9f2b-33f14cf8af91", "sighting_of_ref": "indicator--1e3a2d5b-da1c-41d2-bba9-f1d6e47213ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f336bccb-702b-4050-9f43-89d8db647cfb", "sighting_of_ref": "indicator--1e3a2d5b-da1c-41d2-bba9-f1d6e47213ad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3257b3df-6f43-4ff2-a5a6-972414d69c50", "sighting_of_ref": "indicator--ac282395-e751-46ca-9c20-8870bf7bd49d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac4014f-fe13-4465-a129-197c55570989", "sighting_of_ref": "indicator--ac282395-e751-46ca-9c20-8870bf7bd49d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca74a88-3871-4cec-a318-1b0048faebe7", "sighting_of_ref": "indicator--6d53baad-f0d9-4013-854f-f4b0ef150910", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcea604-2fa1-4dc1-9d32-1e1590a1a4ec", "sighting_of_ref": "indicator--a010c2c4-5f2a-437d-a478-cf8979ee21bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef77f00-09f9-4106-8961-67ff1de812b6", "sighting_of_ref": "indicator--a010c2c4-5f2a-437d-a478-cf8979ee21bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a136a166-d96c-4b21-8aab-e5a22f4b98e8", "sighting_of_ref": "indicator--498359ae-1aa3-4f95-b05a-b88fd92cd20d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452b6fe3-3ba4-460c-9dca-01b27c65cc17", "sighting_of_ref": "indicator--20f65b75-f784-40f4-8bdb-bd0f29cf8c07", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe96720-b728-41df-a42a-20afe6de2cfa", "sighting_of_ref": "indicator--20f65b75-f784-40f4-8bdb-bd0f29cf8c07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1555ce47-d3c0-4301-939d-844f043af2fe", "sighting_of_ref": "indicator--fe36112f-1b85-47d9-bc4f-7a658730a7fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1469528f-9d4f-41d8-8bbc-041975311c4d", "sighting_of_ref": "indicator--82669aa9-6230-40f3-a0fd-d1ff36498c24", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239d9bc5-c4b9-4709-af22-7ab3cc384616", "sighting_of_ref": "indicator--82669aa9-6230-40f3-a0fd-d1ff36498c24", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9971f5-439b-47d8-b837-73922a0585d5", "sighting_of_ref": "indicator--525f086a-38bf-4c68-a3da-fb311ced422d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cce440-b47a-4c3d-8f65-67df06d2aee7", "sighting_of_ref": "indicator--959beff9-5aaf-4b87-b18d-f275ee6f079f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce9288f-e848-42ac-a344-83862171aecd", "sighting_of_ref": "indicator--5018f983-5314-4f84-815b-fa102b1a75d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0926fc28-53d1-4fe7-ae91-0b1982f6bcf0", "sighting_of_ref": "indicator--5018f983-5314-4f84-815b-fa102b1a75d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c0930e-7441-4863-bcde-b40fffb69c44", "sighting_of_ref": "indicator--e014a82a-856d-4791-95c1-a9f6fa9c6b7d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a01305-ac88-4a06-a041-ca1bffad7476", "sighting_of_ref": "indicator--e014a82a-856d-4791-95c1-a9f6fa9c6b7d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35365de8-98bf-4fb4-b700-1dfe9fccd227", "sighting_of_ref": "indicator--d1404d34-7892-450e-98f2-67aa13a4845c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034eeb42-45bf-468b-9c31-dd9316371bb9", "sighting_of_ref": "indicator--c1f52112-2c2d-4d96-b4f3-a609bbd78bcd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d651a610-5b9b-4ac6-a4bb-a3692972889c", "sighting_of_ref": "indicator--c1f52112-2c2d-4d96-b4f3-a609bbd78bcd", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db5c5ec-6818-44f6-a606-1a814af84c0c", "sighting_of_ref": "indicator--570389e9-72e8-47e5-91d6-5c2e07791b9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb491f42-11aa-4f24-a8a4-f259a1a4329c", "sighting_of_ref": "indicator--35abe93c-7827-4b69-8fbf-34da9c037b4c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854e7fc5-5916-4d90-bb48-390ec902d029", "sighting_of_ref": "indicator--a417cc97-57e9-4bfb-81e0-3ccd2e358ca5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bd3077-8fe3-4499-94d4-a46e71d9978c", "sighting_of_ref": "indicator--fb95d65c-9aeb-4c20-a4d1-465cc1b27fa6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c127aa03-27ed-4cc5-9630-430239298c9e", "sighting_of_ref": "indicator--b162b837-16b0-438d-b553-17b99283510b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7d8532-7e17-47b4-b701-90af75eeef22", "sighting_of_ref": "indicator--56cdb852-1662-47c1-ab6e-6d64f6f47f0a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659052f4-1dbd-4536-8c44-8bb628ebcdcf", "sighting_of_ref": "indicator--13c6c017-6eb9-435a-8d5a-12e1eb4b1fe1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da214b0-381e-4a24-b248-1e21450c98cd", "sighting_of_ref": "indicator--d62fb437-e981-4f53-82ae-0c303188cb95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648b3fb5-c51e-4055-a529-b612da4f3b3a", "sighting_of_ref": "indicator--37604cdc-f886-44ca-9172-3735bcab02c5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e2a19b-34b6-4a1e-8e4d-22a2ad5ffc58", "sighting_of_ref": "indicator--2723fba3-7c74-4c7e-b280-905de60f66de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00979b30-d9c2-409b-9d00-3cd3960d86a2", "sighting_of_ref": "indicator--fc2f4667-bfb8-430e-bdf8-3c6b9eab9e5d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e832f297-e74f-4005-9d8b-fae2ed35d3d2", "sighting_of_ref": "indicator--39efe6f1-8919-47a2-bade-65ab13316362", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fab0b5e-adf1-42a8-baab-4c0e2e15188e", "sighting_of_ref": "indicator--f0901502-3117-4792-862d-a0f9c2ac8f34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969d304e-edf4-4029-bbe9-e60614390dbf", "sighting_of_ref": "indicator--5ce291c4-42d2-4480-a7db-f4fb2f592803", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728adf4c-fdbc-45da-ae7f-985f685d5f21", "sighting_of_ref": "indicator--5ce291c4-42d2-4480-a7db-f4fb2f592803", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c865f6c2-f46f-4585-87ca-141147068851", "sighting_of_ref": "indicator--00538539-f8db-4d13-96ad-84e6a0905870", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914d4d73-1f7a-4614-a597-33b92a28a9ef", "sighting_of_ref": "indicator--6acec6be-f4ec-4047-a107-962898bdb2f2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fbdbf2-1d25-467d-9dbc-e7f7daa01201", "sighting_of_ref": "indicator--7c2a9d35-326c-44a4-af61-4c6564251901", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1834ed-13da-4999-8284-f3c155bdac7b", "sighting_of_ref": "indicator--11fb31b2-2f34-4f96-805e-29ed401dc68c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e17223-414d-477d-824e-820815fac920", "sighting_of_ref": "indicator--a307ab95-af84-40bf-b196-53b416efc342", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ffd176-aca8-47e7-bd89-b8d4729e1608", "sighting_of_ref": "indicator--11960821-66bc-4e8f-be81-a4cd4956562a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1441a3-314e-4e45-a7d9-64f3aab0e4f1", "sighting_of_ref": "indicator--11960821-66bc-4e8f-be81-a4cd4956562a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5bf48c-1396-4ee8-8fd6-90f13d9aa6b3", "sighting_of_ref": "indicator--f9443c83-ab38-465d-94ea-87f96c7aab0e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df23264f-ef20-408c-9a4c-da5a7a81d3dc", "sighting_of_ref": "indicator--5a099116-c804-445c-9dd4-dddbff92d780", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67912832-b473-421b-bc11-694f3e26db5e", "sighting_of_ref": "indicator--d646e2f4-8298-445e-abfe-43e91d1454a6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a43d100-bfb8-4dea-b1e5-d1813a62331a", "sighting_of_ref": "indicator--3e2e042d-429b-45a5-bbac-91de9ff01ece", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc946c8e-adb7-4b0e-b968-17ad777275fd", "sighting_of_ref": "indicator--837aa96a-f7b7-45cc-9396-aba63615b5d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e358a8-912e-4a5d-a4df-9088a38ecd73", "sighting_of_ref": "indicator--e52f1c83-42c9-4937-95e2-f4df53bbc013", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214b7604-8c60-4fc3-96a2-156d7c39c6c9", "sighting_of_ref": "indicator--81ac8c87-20bb-44ff-b09f-d3758b500acb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1524f982-3940-499b-9ec4-7181184173ed", "sighting_of_ref": "indicator--2996cf80-5d84-4d1f-8faa-cf7d1d1415af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6d9553-66bc-4e07-bfa3-bb8fc3d4027e", "sighting_of_ref": "indicator--17927be1-0d31-4633-a865-100d4a512b99", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175a3ab6-1f55-46b8-92f6-e6512ed36df0", "sighting_of_ref": "indicator--e10aff55-f9c4-4699-80b6-108a79fb358d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff48efa0-c7be-49cc-94c0-38b115856451", "sighting_of_ref": "indicator--0e04b4f4-fa2f-4dca-9fd3-9fa9274755c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499427c9-6f78-4960-b92d-148bca0494d7", "sighting_of_ref": "indicator--0e04b4f4-fa2f-4dca-9fd3-9fa9274755c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684e867e-c55d-4e10-ab80-3159f1d489bf", "sighting_of_ref": "indicator--daebd171-0aff-478c-b8b4-e6d3576f7351", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2ff69e-cad7-4c3c-a11d-5427298b75cf", "sighting_of_ref": "indicator--371c07c4-32c6-462b-8263-57055cb4a764", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9703ff-8dbf-4923-96e5-66441627c354", "sighting_of_ref": "indicator--371c07c4-32c6-462b-8263-57055cb4a764", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7396723f-7ade-4f12-baca-4ed56c76c12c", "sighting_of_ref": "indicator--5740d75a-c02d-41ff-aac3-dbc1209ff2ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cecbee-7617-4c6f-9244-ef074b4aa40d", "sighting_of_ref": "indicator--d751c037-1c69-45a6-b7c4-50b17b302906", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e63e78-5122-4da6-ad32-4cdce59c96dd", "sighting_of_ref": "indicator--d751c037-1c69-45a6-b7c4-50b17b302906", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c491292d-5f73-40bc-83a4-24c2e98d3633", "sighting_of_ref": "indicator--baa7eb57-90ab-4532-8920-8824f608657a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc425cf6-15d6-43c5-a484-f6f66e663c2e", "sighting_of_ref": "indicator--baa7eb57-90ab-4532-8920-8824f608657a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbab53f-9fa3-471f-a1dd-7f765bf3c991", "sighting_of_ref": "indicator--0e55789e-ba86-4ffb-81dd-c0d2ec22829e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce02b3ed-098c-4b1b-a09b-57b0513509e4", "sighting_of_ref": "indicator--4c2529ea-229b-4a60-a1e4-180ecfbb3403", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb767bf-9be4-4581-a753-50a7e518cf73", "sighting_of_ref": "indicator--dcc831f2-8210-4765-a930-dd533dbc264b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac2dc01-ac34-44d0-a4f3-84c31648b699", "sighting_of_ref": "indicator--8dabbcb3-0f57-41e3-b225-acdc6a49a36c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dc6003-f7e2-4a2d-aeb9-0e0d206fc927", "sighting_of_ref": "indicator--3abdae3e-08f0-4da3-a71e-88725b665a36", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3201eb23-43e1-45f9-8848-5e94d4b009b4", "sighting_of_ref": "indicator--6090da62-16f2-453e-afea-20a39b100223", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a558de9-27e9-48a9-b319-9e4dc5e1c050", "sighting_of_ref": "indicator--d95098c4-c8d4-4beb-901b-d41d149124f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3683f8-8235-4bc1-9e61-60ccdd28ca4d", "sighting_of_ref": "indicator--d1996b6b-3bb6-4e9c-9914-19ae37e7a9a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479cbe2d-21be-4f00-b99f-dc35bba225b0", "sighting_of_ref": "indicator--455f43c0-84d9-473b-9f8b-6a090f4d2729", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7374742-669a-4207-baa6-8b6f9ff87fec", "sighting_of_ref": "indicator--2ca90499-eac4-4de6-861a-7413f6df6378", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e037d5cb-cd40-48e1-971a-67396f986719", "sighting_of_ref": "indicator--bcf99f55-303e-47ed-bc20-8ee751b29d0e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845f82f3-4978-4cd1-bf30-d8a6d66ff694", "sighting_of_ref": "indicator--da5ee6fb-4249-495e-aa5f-ca1ac5f3f535", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbf4684-eddf-48b6-9865-6dab06c7454a", "sighting_of_ref": "indicator--44c59bab-261b-4961-8f76-65419a410ed9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb6a479-51cb-4b6d-8902-87b1c944527a", "sighting_of_ref": "indicator--8d7e619c-7543-4eca-854d-3b69c73af2b5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1c0b06-17e8-439b-8269-f0931230744a", "sighting_of_ref": "indicator--5df98a27-b054-4a8e-b3fe-96307fb7a135", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973766e8-d5b5-43eb-a9c2-55842e36f803", "sighting_of_ref": "indicator--efef9a80-e284-48dd-9de5-2228f89200b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78856240-f412-4272-8c27-d30c00637b65", "sighting_of_ref": "indicator--764683b5-a1a1-476f-9d64-4558a0a5c632", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f050a8b9-729b-44f6-a7f2-160674fa47b1", "sighting_of_ref": "indicator--c7ac630d-1056-4fa2-83ee-e7b885c81bb8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9efa502-faf6-4954-832b-88c85bc961b3", "sighting_of_ref": "indicator--661ffc4a-862f-46f3-a947-d1a70e7e732e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53590197-2d2a-476c-b516-5436f15f6326", "sighting_of_ref": "indicator--05ce5b8a-c758-4b5f-baf1-7b418c3b32a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1dba75-93fb-46d8-81d1-d97deed3667d", "sighting_of_ref": "indicator--ec89cab9-a606-4b89-b26e-1e650bc4400a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66078f91-128c-4c62-b626-58353e54482a", "sighting_of_ref": "indicator--ec89cab9-a606-4b89-b26e-1e650bc4400a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc26fdb3-43a8-442f-8506-19f0fb29a69c", "sighting_of_ref": "indicator--5bdfb853-5876-4fbf-9c46-9e20da3c16e3", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07df6f8-57cf-436e-ab24-dcab9c99c163", "sighting_of_ref": "indicator--8b2e66f5-78cf-4398-a06f-225e921460d3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ee1867-0159-4c3f-bee2-9d8bf769f035", "sighting_of_ref": "indicator--10dc0076-7626-487f-a4a2-98a6ede9db05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9464c138-9026-4ab2-a8df-8ef109a5055f", "sighting_of_ref": "indicator--c3d31242-346a-4484-a5b0-7ca7d55f3b7e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3114f184-a184-4da9-963d-81f109a14c8b", "sighting_of_ref": "indicator--71abce7d-f7b7-4431-9ca7-34a138987aa1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d737ac68-8a05-404c-81f8-39cfe465a175", "sighting_of_ref": "indicator--6bfff2d5-7911-45de-8728-e1e67f55d014", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a7d025-358b-447e-9f65-d4a1437c0093", "sighting_of_ref": "indicator--6bfff2d5-7911-45de-8728-e1e67f55d014", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69af137e-aa61-4c4f-b38b-07cd5218baa8", "sighting_of_ref": "indicator--4259feb5-30d6-457a-84ed-740d3fabfd46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd948139-8a1d-48de-ab50-af8aedb05441", "sighting_of_ref": "indicator--6392fe10-724d-433d-9c32-19d97330f20f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f470552-c3e3-4ff7-8946-8ba283f531a4", "sighting_of_ref": "indicator--4f571033-d811-44a1-88e7-8a21640eb6cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae6897e-6486-4aeb-8e17-7f76796c478c", "sighting_of_ref": "indicator--35a7c276-a474-4070-919f-a10184213996", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cec197-7caf-48d0-82f4-442784de8fff", "sighting_of_ref": "indicator--2d28f28f-389c-4ce3-a22a-2fbe74af5b84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d248018-708d-43d0-bc46-f942eeab873e", "sighting_of_ref": "indicator--2516ff53-ed32-429c-b32d-457a268b7543", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a98ebc5-2739-4754-ae2c-234b4e388f60", "sighting_of_ref": "indicator--be25f258-329d-44e6-896e-1b1aba3c659b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea7c00d-6e34-41cb-b9ab-d9d99aabaaaf", "sighting_of_ref": "indicator--0d81d4e1-a674-4d7e-8c73-b40ddf3664fc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f82c1c-7deb-448c-b180-65b259040adc", "sighting_of_ref": "indicator--68941bd1-ea96-4fe1-b99d-84462223770a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b077e4-d560-4834-89ca-ef4a793264f6", "sighting_of_ref": "indicator--68941bd1-ea96-4fe1-b99d-84462223770a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74837c70-bfc0-4ec0-8ce6-5ad506aa1120", "sighting_of_ref": "indicator--bab8cd86-ec05-4d5b-a8c5-94e1a22b360d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b559f367-89ea-4b3c-b24d-f89efbff6b3c", "sighting_of_ref": "indicator--935d0ec6-16d1-4271-b3b6-37b0100dee5b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1fe1e3-3d70-4159-a792-fdbad9ccc00b", "sighting_of_ref": "indicator--0095f970-9911-42e1-9172-fac759437e3e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b136ca-939f-4e98-9729-22b17fd25009", "sighting_of_ref": "indicator--0095f970-9911-42e1-9172-fac759437e3e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6ec4c5-fe2f-4457-b9af-6918b12e2dd7", "sighting_of_ref": "indicator--408a4f3f-bfff-487b-a088-50035c53ede4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1b6928-1599-4858-a6c2-44a38a2c37fe", "sighting_of_ref": "indicator--33c6e60f-05ae-4bfa-8a6e-330c8dde59d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bd43b8-3025-4568-8ff4-51774afa8d2b", "sighting_of_ref": "indicator--e9f62baa-57ef-4307-b452-3628c5310de3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4c46a8-bab2-49a0-8a13-372a407f8c96", "sighting_of_ref": "indicator--cc09f6b1-2345-40a3-8ae4-e15a253a77d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48320971-243d-4add-ba20-48f9619418dd", "sighting_of_ref": "indicator--6e16b7a4-2e3c-4c76-93ed-d42a0ac84720", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb1d8d7-63e0-4aed-a713-75109be5f89c", "sighting_of_ref": "indicator--3a064267-05de-49ac-a644-4fe5a9f3e7ee", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70f4825-f99f-42c6-87f5-31e09f2f8260", "sighting_of_ref": "indicator--5ce9181e-b131-478a-baa0-87cb398b95a3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627c9fa5-c5a8-4a1d-ae3e-318e6c84a109", "sighting_of_ref": "indicator--b33585b3-3827-4038-9074-8eea3fe69d41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5a1065-10af-4b05-9f66-82c689d54af5", "sighting_of_ref": "indicator--b33585b3-3827-4038-9074-8eea3fe69d41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a3a032-f980-4bfe-b64c-74e71abc6ab1", "sighting_of_ref": "indicator--d5712822-97a1-4291-b433-9a9ea0a7e796", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181bf37e-27bf-4828-878c-a6e0a09f6137", "sighting_of_ref": "indicator--bf9ddf83-001d-4014-961a-b1e84a7f60d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b677a54-81f2-48bf-a9cb-6610892c2225", "sighting_of_ref": "indicator--c99c622d-ecdd-4198-a423-de43d8394ab7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ac367b-a8ae-4094-96c8-843a99510684", "sighting_of_ref": "indicator--c99c622d-ecdd-4198-a423-de43d8394ab7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dc896a-f300-4bdb-88ad-26a2e5094a10", "sighting_of_ref": "indicator--3f145c37-80c2-4339-8586-3c6ddf8b1e17", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cca50b-6c96-4c8d-ae91-3537c5cc0f2a", "sighting_of_ref": "indicator--3f145c37-80c2-4339-8586-3c6ddf8b1e17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a895e2d-0063-40cc-8b2b-9499f448d446", "sighting_of_ref": "indicator--b8eb0000-d0b8-46a9-b9e3-a3bcfc9e5872", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dba7fa-7fa6-4bda-958b-291231d06f3c", "sighting_of_ref": "indicator--99bfcb0c-a6ce-44ad-ba32-9fc26d096985", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd856ee-8407-41d0-b827-e5e5034c3be1", "sighting_of_ref": "indicator--99bfcb0c-a6ce-44ad-ba32-9fc26d096985", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763c631f-a8ab-4376-834d-34af420317e7", "sighting_of_ref": "indicator--b4236430-432e-4a21-9359-3a4cc821c80e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fd5932-c725-4fe3-b2e9-310a76d6ecb5", "sighting_of_ref": "indicator--feade1c1-505d-4348-9c09-4c1ce14ebe51", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf273f75-43e2-44d4-b65b-6861391a9c1a", "sighting_of_ref": "indicator--1e59ab57-8976-47e8-9ec1-6037586e7a7e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df2e606-f04e-4775-828f-9b4fc6a9bbe1", "sighting_of_ref": "indicator--1e59ab57-8976-47e8-9ec1-6037586e7a7e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a77ce5-7325-433f-b6b2-f07a40949981", "sighting_of_ref": "indicator--55937a4a-43f6-47e5-a9a2-6009b73ff3ce", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58e289a-1146-4896-ae87-dfe5305ebb9e", "sighting_of_ref": "indicator--55937a4a-43f6-47e5-a9a2-6009b73ff3ce", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c6bf04-6318-4892-9af3-e03883bd9615", "sighting_of_ref": "indicator--dd0ab6e1-d0e9-4027-b085-b605bbff606a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80539fd3-cc66-44da-a8e5-b4f66823dfb5", "sighting_of_ref": "indicator--dd0ab6e1-d0e9-4027-b085-b605bbff606a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db30db51-b8de-47fb-8762-a945f8bf8d07", "sighting_of_ref": "indicator--2035f9b9-f080-48a4-9432-7e99f889ae61", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4597eff-38a4-41cd-8bda-59fcf6128b44", "sighting_of_ref": "indicator--2035f9b9-f080-48a4-9432-7e99f889ae61", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb411a84-17fb-49c3-bf76-d36fc78e357f", "sighting_of_ref": "indicator--a65aa3b9-036f-401a-8fcc-056e19edd7c9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3785b3-e3b8-42e5-a402-53f40c3c3af0", "sighting_of_ref": "indicator--a65aa3b9-036f-401a-8fcc-056e19edd7c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae73d47d-9102-4c2f-8b92-eea8462cdd0f", "sighting_of_ref": "indicator--21811f05-dcae-4d9e-b985-ca6a5156352f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a3390e-93c4-4811-a52d-0d3c51d27e60", "sighting_of_ref": "indicator--21811f05-dcae-4d9e-b985-ca6a5156352f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0359b285-2ce1-4390-91d0-135f2a04f808", "sighting_of_ref": "indicator--f7b8b85d-27af-425c-98b9-cb43d4517914", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c3284d-4b31-4917-b30b-332cbafa2555", "sighting_of_ref": "indicator--f7b8b85d-27af-425c-98b9-cb43d4517914", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fb32fa-1b44-4d76-80a1-e6a663ee34fc", "sighting_of_ref": "indicator--477ca271-c518-4103-9987-6fdce62025cb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ba837b-54e9-4288-81f6-240c8a71883b", "sighting_of_ref": "indicator--18478a3f-b40f-4a6d-a134-822a54ac98d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a06835-29f5-4ee0-ad90-45b986b7d3e6", "sighting_of_ref": "indicator--18478a3f-b40f-4a6d-a134-822a54ac98d2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013225f0-0ade-4171-862f-ffa6b2ab9d69", "sighting_of_ref": "indicator--1251ca9f-3c30-4ec4-9488-c9c1d0497a59", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1d6d71-daf1-4218-a422-b78fd431d5a6", "sighting_of_ref": "indicator--17d35e0a-4f56-4bdc-8143-9063afcf9b2c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7235846-6ebb-495b-8d6e-84eeac7b6a2a", "sighting_of_ref": "indicator--17d35e0a-4f56-4bdc-8143-9063afcf9b2c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da828fac-17ee-45df-993f-a810b998c337", "sighting_of_ref": "indicator--57399b10-40da-40b4-953b-5d60b2a53942", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8b8124-22e8-4a97-a130-ba4e6d43e6cc", "sighting_of_ref": "indicator--57399b10-40da-40b4-953b-5d60b2a53942", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fe5d01-c3c0-40e7-a7ab-63a313d0e089", "sighting_of_ref": "indicator--4df8ddf0-03d4-4685-85e2-b0128804b7f8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd72c4c-af0a-4871-9d65-fcd0dc14212b", "sighting_of_ref": "indicator--4df8ddf0-03d4-4685-85e2-b0128804b7f8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd88c15-d556-420b-bc03-caecbfaed15f", "sighting_of_ref": "indicator--9a500214-a30f-4126-8b3e-17545a17d624", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd245d46-a3fe-4b38-b11b-b66d86787c1d", "sighting_of_ref": "indicator--9a500214-a30f-4126-8b3e-17545a17d624", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5bbca8-e8b7-4bcd-bfca-6177d6d57b27", "sighting_of_ref": "indicator--37326e60-bb2a-46d2-8102-66771440aa88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b076633-f0a5-473d-bc09-3f513ee9c9a8", "sighting_of_ref": "indicator--37326e60-bb2a-46d2-8102-66771440aa88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3c3ce8-9033-4543-8de6-c3f63bb316d4", "sighting_of_ref": "indicator--7d30b99d-6a7a-493c-8506-4e61ba659d19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f83e4f-c086-4c35-a64d-3341f7b90c02", "sighting_of_ref": "indicator--7d30b99d-6a7a-493c-8506-4e61ba659d19", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ef5481-cc5c-4353-9993-56e42c930cc0", "sighting_of_ref": "indicator--28d5bba0-b71a-4a2e-a51d-37f21da70461", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e449ce-813f-4786-896c-e1d606174873", "sighting_of_ref": "indicator--28d5bba0-b71a-4a2e-a51d-37f21da70461", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adfd94a-82bc-44a1-9e3c-237a2eb7b5d7", "sighting_of_ref": "indicator--c00dd06e-8b85-4fce-bd12-52db9e0080d1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a2198c-219d-498b-a86f-804af85f64d2", "sighting_of_ref": "indicator--c00dd06e-8b85-4fce-bd12-52db9e0080d1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68ec954-3e7a-4091-b574-f4ef12e68537", "sighting_of_ref": "indicator--ef1456a4-dff5-4c9c-ba91-eb9456f1a9dc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3a2abe-599e-4bbf-836c-abb20c56246e", "sighting_of_ref": "indicator--ef1456a4-dff5-4c9c-ba91-eb9456f1a9dc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dc321d-0e8d-40bd-9061-8c4d24f7f8e0", "sighting_of_ref": "indicator--aaf21284-37f6-4dd7-9581-6f76a27082ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1a925f-6aad-4860-ae9d-e56ebe554425", "sighting_of_ref": "indicator--aaf21284-37f6-4dd7-9581-6f76a27082ad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51508483-7616-45a5-95a9-181331dba887", "sighting_of_ref": "indicator--cd9b5986-d78b-40c0-b1c0-955b86dc4a00", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0cb499-834d-4263-924c-b3fbe1420a57", "sighting_of_ref": "indicator--2b0a9c30-bf4d-46c8-88e7-737fb8866133", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b45d8a-a06f-4a5a-8328-81fd2c65cdf2", "sighting_of_ref": "indicator--2b0a9c30-bf4d-46c8-88e7-737fb8866133", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d5c35f-c573-49b1-a024-f5194775a8a9", "sighting_of_ref": "indicator--7262702c-b37b-4a00-99a0-c9cbc0bff580", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e48cff-2cdb-43b1-8a86-b85564d7ab08", "sighting_of_ref": "indicator--7262702c-b37b-4a00-99a0-c9cbc0bff580", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c5406e-31b0-41e2-9278-73b3e0794b1a", "sighting_of_ref": "indicator--331839fe-8310-422b-aefe-0dd3703d6525", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad87debd-1760-47d1-a30d-7f6e33346714", "sighting_of_ref": "indicator--aa491146-a7c3-4e3a-b070-6c90c5f2b2d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077d140e-15d0-403c-95b5-555509847f34", "sighting_of_ref": "indicator--aa491146-a7c3-4e3a-b070-6c90c5f2b2d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb47d4bc-2322-491b-95b4-e93197e7987b", "sighting_of_ref": "indicator--14167056-5c00-4953-8252-bf146eca054d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914d2a07-c79b-408a-9e4f-5a21ce197c20", "sighting_of_ref": "indicator--14167056-5c00-4953-8252-bf146eca054d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4fc634-a916-4cd4-a1dc-d2b05a9694d4", "sighting_of_ref": "indicator--e71938a2-f8fd-4068-9113-a461c8466460", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0397ffc-aea9-4c11-98bd-14bdf98ece65", "sighting_of_ref": "indicator--e71938a2-f8fd-4068-9113-a461c8466460", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984866b0-8d92-4de7-a2ea-4b0e263abe35", "sighting_of_ref": "indicator--a3a05fdc-21c2-4a68-be87-93c141f090bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bf423f-7a14-49d5-8928-b2c4decfa47c", "sighting_of_ref": "indicator--a3a05fdc-21c2-4a68-be87-93c141f090bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d284c10a-3df4-4869-aee8-3e71d5fd3aeb", "sighting_of_ref": "indicator--dc1426f4-2b66-4afc-a963-f425eceb98a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6164689c-6acc-49f4-bd55-71cfa8152d6f", "sighting_of_ref": "indicator--dc1426f4-2b66-4afc-a963-f425eceb98a4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c561be40-63ad-4fcb-b319-3c613a9f36ee", "sighting_of_ref": "indicator--758e13fe-728e-4deb-a697-1402952e47b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb1d2b-c8f3-4297-92da-3158a6cfeb85", "sighting_of_ref": "indicator--758e13fe-728e-4deb-a697-1402952e47b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2390e6e-5f69-426c-8549-fe9c3ecfa0a9", "sighting_of_ref": "indicator--a1c0de4a-bec9-4103-a83e-b667ad2eef16", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f48fb07-4349-4a48-b942-125542423462", "sighting_of_ref": "indicator--5ddc618d-6731-44b8-9455-0fe1b13f665a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959d7eda-a0c8-4a68-b5f2-1ea4d506aca3", "sighting_of_ref": "indicator--5ddc618d-6731-44b8-9455-0fe1b13f665a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fe921d-3059-4398-aa0f-61b07bae191a", "sighting_of_ref": "indicator--24d2bbca-39af-4fc4-b977-42bfb86c0102", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba4ce85-2129-4afd-877d-14dda3e25ec1", "sighting_of_ref": "indicator--24d2bbca-39af-4fc4-b977-42bfb86c0102", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f333b97-4144-444a-8da2-d07b1d8ee9cf", "sighting_of_ref": "indicator--54fd4184-bd6f-45fe-8362-8ebd28a3e4c7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab7df4e-02f6-4666-9cd0-806f48b6bca1", "sighting_of_ref": "indicator--54fd4184-bd6f-45fe-8362-8ebd28a3e4c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5c604d-b3e5-45a6-94d3-c55a88e44cd2", "sighting_of_ref": "indicator--90222a3c-061b-462a-8ebf-8e27d4c56791", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1243569b-b703-4dfd-b8f7-78a9ac98e011", "sighting_of_ref": "indicator--90222a3c-061b-462a-8ebf-8e27d4c56791", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28aa397d-89b0-49b1-8e92-6a0f0b8f9a59", "sighting_of_ref": "indicator--7ff95c3c-73dd-429c-8389-7866a1ec4714", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef201627-3425-4431-ba11-a6237f1a729c", "sighting_of_ref": "indicator--7ff95c3c-73dd-429c-8389-7866a1ec4714", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489a7873-5126-497d-9348-349f88cc6402", "sighting_of_ref": "indicator--c972ddd2-0349-4a5e-bde6-4c53c1ce229e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dc9d40-cf21-4e2f-91cf-f378be228ea9", "sighting_of_ref": "indicator--c972ddd2-0349-4a5e-bde6-4c53c1ce229e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a93f46-d4bd-43f0-9160-7e3738c8842e", "sighting_of_ref": "indicator--50e845b2-f1b1-41fe-b9b9-fbf7a180ad14", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa375849-7809-499e-b0e5-1590c1ba0fa9", "sighting_of_ref": "indicator--2598b652-87f5-44db-aa67-8e4a6369305a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce2ee01-688d-45e9-bb63-2ce34cacce6f", "sighting_of_ref": "indicator--2598b652-87f5-44db-aa67-8e4a6369305a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960ecf82-adc4-4541-8733-5d67f53e4b39", "sighting_of_ref": "indicator--22aca0fc-cee6-4118-8bd5-d83dbb4e21ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9a7a21-50c0-4d4a-a0ec-ec674bdc979f", "sighting_of_ref": "indicator--22aca0fc-cee6-4118-8bd5-d83dbb4e21ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1169e6d0-4da4-43c1-a42c-e5ae68a9db17", "sighting_of_ref": "indicator--15d570d1-1c73-424c-bc83-3314dec948da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f326165-d4fc-4d69-9721-3312bd975bc7", "sighting_of_ref": "indicator--15d570d1-1c73-424c-bc83-3314dec948da", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8297cb17-d2de-43d4-abbb-8df127d46a78", "sighting_of_ref": "indicator--a23d05e0-6626-4309-bac3-948a3c027be7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb55d8a-17be-4e76-95db-e40a7a9d01cf", "sighting_of_ref": "indicator--a23d05e0-6626-4309-bac3-948a3c027be7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a0aa04-2371-4591-b230-d3f2b48c009f", "sighting_of_ref": "indicator--7c40f08d-2c56-4710-aa69-c9be814bc682", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6289013-f718-4fbb-ac2f-df0b5cd04295", "sighting_of_ref": "indicator--7c40f08d-2c56-4710-aa69-c9be814bc682", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cb5ca3-ef25-4ec6-be78-8c0a0442bd13", "sighting_of_ref": "indicator--bd0ba09f-be4b-41f2-8daf-6f1b6b7354bf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839c71bb-304c-4006-9b6e-a07bfb436fac", "sighting_of_ref": "indicator--bd0ba09f-be4b-41f2-8daf-6f1b6b7354bf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2700c862-d9eb-4062-9526-26369ae6d5aa", "sighting_of_ref": "indicator--b3032d9d-3b44-41c4-abb1-6e8c8451cc48", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26208c79-239b-4d38-ab78-71e8d9d015a7", "sighting_of_ref": "indicator--a1ab745c-6bd2-4954-ab50-fd1cb08f0c18", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b1007a-23f2-4cf7-ab0f-248295c9197f", "sighting_of_ref": "indicator--77faf089-9404-43c1-98e3-e6d7b4456f4c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0996e68c-1c07-4a76-8077-f5484b647312", "sighting_of_ref": "indicator--77faf089-9404-43c1-98e3-e6d7b4456f4c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e64d9a6-5d39-4985-a1b3-d6791c721958", "sighting_of_ref": "indicator--9f936848-fcf1-4625-9339-39108e02a82f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb797767-5e31-433f-bda6-dca94c42c934", "sighting_of_ref": "indicator--a58b70ea-0ff6-4f0d-af70-0b849ae09d5e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dd9b8d-306b-41dc-bf59-222744080f58", "sighting_of_ref": "indicator--7498a3fe-158f-452a-a58b-0690528fea73", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24594567-5f8c-420b-abd2-b0d8051d4328", "sighting_of_ref": "indicator--7498a3fe-158f-452a-a58b-0690528fea73", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2fe2c2-ae55-4469-97d1-21878e92d0fa", "sighting_of_ref": "indicator--69a62948-3078-4d44-acfd-9a8346148c19", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03eb9c27-02ef-4b9b-89b8-2b0af22d90e1", "sighting_of_ref": "indicator--0fb770c6-f67a-4155-9987-10120c92fb02", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90658744-dd49-4752-9a53-b675f3a15b23", "sighting_of_ref": "indicator--0fb770c6-f67a-4155-9987-10120c92fb02", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0938c18-1698-4fcd-b82c-86c92597d7b3", "sighting_of_ref": "indicator--d31358e5-feed-4fa3-8469-bf68d5d683ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac9955d-e115-408f-b2d4-2d2ac034b2c1", "sighting_of_ref": "indicator--d31358e5-feed-4fa3-8469-bf68d5d683ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e1e491-c99f-419e-adaf-d39c46a45465", "sighting_of_ref": "indicator--a7ff437d-198c-4004-a545-01bf31790eb4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc429454-d4e1-4111-b44d-de450d8dff3d", "sighting_of_ref": "indicator--a7ff437d-198c-4004-a545-01bf31790eb4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358f95d9-2dc5-4f07-aee9-60c0f015eb38", "sighting_of_ref": "indicator--58b3d2c8-985a-4f2b-b6fc-0801c51d386b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddceb97-946b-4d31-9be5-73a9bfdb3387", "sighting_of_ref": "indicator--58b3d2c8-985a-4f2b-b6fc-0801c51d386b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf11e14-4a94-43f9-b121-9595d8b1b921", "sighting_of_ref": "indicator--c9d48f9f-0f98-40c2-85cd-3807412f78be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfa196e-4faa-4da2-a20f-f69e3266eb15", "sighting_of_ref": "indicator--c9d48f9f-0f98-40c2-85cd-3807412f78be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6cb15c-3970-4c62-a06b-1eb42e943f0a", "sighting_of_ref": "indicator--6e0ee3db-e65b-4b16-a0d7-ac047181391b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a4cfd2-3380-490f-bad1-44d4f2fc6c37", "sighting_of_ref": "indicator--6e0ee3db-e65b-4b16-a0d7-ac047181391b", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185bfb9c-1db9-4844-8122-0b5b0b292c18", "sighting_of_ref": "indicator--adf63f5e-1ce2-4689-8e06-c5dc74d29e3d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50175b84-3568-4b2e-b6a0-5b1f0c63c3d9", "sighting_of_ref": "indicator--adf63f5e-1ce2-4689-8e06-c5dc74d29e3d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1040ab-0e37-48cf-83f7-2de90893281d", "sighting_of_ref": "indicator--8ba7887f-8f0e-40fb-be56-d0961b7f6f5f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd736079-ff2d-462a-a621-dd95a42f5459", "sighting_of_ref": "indicator--8ba7887f-8f0e-40fb-be56-d0961b7f6f5f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018d5fd4-2ce4-486b-ba92-0b94feb8dd03", "sighting_of_ref": "indicator--8c1ee9e3-0bce-4d7c-86ca-3c6a655c52c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58b63b1-88bc-405c-a5dc-28e30ac48a8c", "sighting_of_ref": "indicator--8c1ee9e3-0bce-4d7c-86ca-3c6a655c52c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5990facd-7504-4c9a-b695-0932053ed671", "sighting_of_ref": "indicator--1cbeca98-a83a-4753-8208-af9567a7ba14", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b76164a-aee7-4b96-970a-a776ac7fa6e9", "sighting_of_ref": "indicator--1cbeca98-a83a-4753-8208-af9567a7ba14", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4362d53c-2243-4328-9b2d-4751004e2100", "sighting_of_ref": "indicator--099f9916-5269-477e-9f61-fb8e28f9aaf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e0e98b-9ecc-4fcb-ba75-2e85f7c91d62", "sighting_of_ref": "indicator--099f9916-5269-477e-9f61-fb8e28f9aaf3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58047a93-6ecd-456f-8f7f-c522f1c25436", "sighting_of_ref": "indicator--33fb98e5-3463-40ed-b757-e4812ccf2ecf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec060f5-3cb6-485f-b17b-4455f8efc8af", "sighting_of_ref": "indicator--33fb98e5-3463-40ed-b757-e4812ccf2ecf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b55608-6bdb-43a6-a89f-d715c4338dc2", "sighting_of_ref": "indicator--07c756a5-b6db-4136-9985-121cba78922a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4b59c0-5974-44fe-a6cc-4ea7f0ac5236", "sighting_of_ref": "indicator--07c756a5-b6db-4136-9985-121cba78922a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190fb9e3-174c-4af0-ab70-f90bcdf45698", "sighting_of_ref": "indicator--006b2085-aad7-4862-a898-6fd2d8c1e98b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e97389d-5c78-4fd6-8687-5453254e60c4", "sighting_of_ref": "indicator--09c18d06-b84c-408e-b16d-dea44d54123b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a390c72-e32b-49a8-9539-e30186fb944b", "sighting_of_ref": "indicator--fecf3cd4-2423-4199-a46b-5a6f4dca9e9e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46238460-ce97-4091-adaa-9266aa638fa5", "sighting_of_ref": "indicator--fecf3cd4-2423-4199-a46b-5a6f4dca9e9e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e062e9-64c9-4cdb-94a9-e73976752727", "sighting_of_ref": "indicator--1afc8fe8-8790-4675-9316-c3fa234402f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80018cf1-4e4e-465b-a0e6-3257cc1d5260", "sighting_of_ref": "indicator--1afc8fe8-8790-4675-9316-c3fa234402f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84f100c-2c20-4a99-8427-8b1d6a826e99", "sighting_of_ref": "indicator--2d6ac07a-4ca3-4336-987c-c325346b9a3d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef331782-0bc6-437a-872b-90c0ad39b712", "sighting_of_ref": "indicator--2d6ac07a-4ca3-4336-987c-c325346b9a3d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5819541b-b3ac-44a4-ba28-27ff27fd4f96", "sighting_of_ref": "indicator--78c6e266-7ec8-49ff-b557-fe76b9ae73ba", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6c0ba0-03cf-412f-8f1c-737bfe8a09d1", "sighting_of_ref": "indicator--78c6e266-7ec8-49ff-b557-fe76b9ae73ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ffbd5b-c056-4ba1-ae41-08b2bd2be2a8", "sighting_of_ref": "indicator--39ad9d83-2694-408f-a2e5-db8b70272e26", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238f07ae-89a1-4946-9c56-b833df614453", "sighting_of_ref": "indicator--39ad9d83-2694-408f-a2e5-db8b70272e26", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0507503-63c4-44b8-856c-55b8a9e31484", "sighting_of_ref": "indicator--bd515d6d-8237-4de7-bca4-835f002e19b8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d87253-9b33-4325-be89-f36e17b5a3fd", "sighting_of_ref": "indicator--bd515d6d-8237-4de7-bca4-835f002e19b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93963f3-facc-427a-887f-9cf689f24bd0", "sighting_of_ref": "indicator--d18177ab-993c-41fe-86c4-60e5c16f317b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac81c995-fe89-4dd6-b1f4-a11204589ea4", "sighting_of_ref": "indicator--d18177ab-993c-41fe-86c4-60e5c16f317b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1adee7-8dc4-4823-a05b-281b033ff631", "sighting_of_ref": "indicator--cb50aa8e-f83a-4899-857f-379aad335406", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef37d13-24d9-4299-9156-c89ebded4e44", "sighting_of_ref": "indicator--093ddbb0-b5da-457d-ad58-acc16e26d8b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb39ca0-f724-4b74-b4ea-0b1942aa5f8c", "sighting_of_ref": "indicator--093ddbb0-b5da-457d-ad58-acc16e26d8b6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4886484f-bb9a-4279-b42d-613257a1cfda", "sighting_of_ref": "indicator--6117cb22-9b28-454a-940c-e55025c006cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f697f4-ce99-41b7-b9cf-7f61e83d460e", "sighting_of_ref": "indicator--6c1275eb-8262-49c6-b66f-83bab14c0fe4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a99608-f672-4c60-8ff5-44630f6e1a0d", "sighting_of_ref": "indicator--4719677c-cdc7-4141-89c8-fa595a3ce8bc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92929855-8faa-408d-bb01-84c8688fdd8d", "sighting_of_ref": "indicator--4719677c-cdc7-4141-89c8-fa595a3ce8bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafef8a4-c637-4bfa-a1f1-c8963ba90cf8", "sighting_of_ref": "indicator--2298c327-be1c-406d-98ec-8cd65dd78cd1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7714b754-6f92-456d-b370-d5811c5de715", "sighting_of_ref": "indicator--2298c327-be1c-406d-98ec-8cd65dd78cd1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815b762b-bb4c-410d-b4f4-e395cfcbba72", "sighting_of_ref": "indicator--710416b8-6f28-4185-8c52-3b3b34ea0e20", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431f69ea-3d7d-43da-af7e-ae883f217b9c", "sighting_of_ref": "indicator--710416b8-6f28-4185-8c52-3b3b34ea0e20", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7799ee-0dbe-4d08-a314-06f40e81040a", "sighting_of_ref": "indicator--76944552-4845-48eb-84b7-43fe47ae5a2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8638d8e-6773-4d7e-89b7-88c8ac7deafe", "sighting_of_ref": "indicator--76944552-4845-48eb-84b7-43fe47ae5a2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc87b57-92ac-4e4f-9819-29deec054e57", "sighting_of_ref": "indicator--f453a672-5323-4840-a804-97c574cdba46", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17c06da-ac79-4c93-a413-8eaaf4bbbf86", "sighting_of_ref": "indicator--f453a672-5323-4840-a804-97c574cdba46", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca0a915-ce5d-4f33-bc36-ec33628d772f", "sighting_of_ref": "indicator--3d0b1131-7b7c-4fe5-988e-12a0410a983d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff903b11-961e-439d-99cf-6a09fb4f744f", "sighting_of_ref": "indicator--41033004-d296-4122-87ec-ed7a267ef0c2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd83a321-556d-42bb-855d-39b1719c7525", "sighting_of_ref": "indicator--41033004-d296-4122-87ec-ed7a267ef0c2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f04e9e-9bcd-43a6-b8d2-9c3363f589a3", "sighting_of_ref": "indicator--460e65c3-4506-4394-96bd-4fb3982a8b22", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f87f12-3629-45cb-8e1e-5b562b442188", "sighting_of_ref": "indicator--681db85d-2d01-43a2-a298-ea64be23d4ae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba250912-56e7-4f9e-8f1a-9fd6512f2f12", "sighting_of_ref": "indicator--8056d41b-def8-41ff-8065-ef91b2de468a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295aa873-af51-4bd6-b8a9-b9a511c2bc4d", "sighting_of_ref": "indicator--8056d41b-def8-41ff-8065-ef91b2de468a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de8580b-e5ca-411e-948b-8e7be39f65d3", "sighting_of_ref": "indicator--e6946964-d761-432e-b616-66a7ef5a009c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a88512-fee0-476c-9907-b9f77a4ef6fa", "sighting_of_ref": "indicator--e6946964-d761-432e-b616-66a7ef5a009c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca69f458-05d3-4352-b979-7213c57da2d9", "sighting_of_ref": "indicator--0857cfd6-e4d6-4ef6-b733-d4f7a26ebfd6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b524fd4-6213-4629-bdd6-bd38ee7f7b94", "sighting_of_ref": "indicator--57fd874d-b210-43f0-97e5-ecebc29acec1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d530a08c-da29-42ce-bf51-aa9fb54baee6", "sighting_of_ref": "indicator--57fd874d-b210-43f0-97e5-ecebc29acec1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2cefe6-6045-4f8c-bbdc-e539902d8fc6", "sighting_of_ref": "indicator--d8435e3e-73e4-4465-95bf-b885b1f45228", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb8db70-dd7f-489c-8af6-cd5ed6acf63e", "sighting_of_ref": "indicator--09f15b49-a6a1-4d0f-b80e-be3c931ee772", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770286b5-a830-435e-9074-7ce7de59d74a", "sighting_of_ref": "indicator--09f15b49-a6a1-4d0f-b80e-be3c931ee772", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385f53e5-004e-48aa-adcf-f77b94540a68", "sighting_of_ref": "indicator--c6937394-2ca6-4abb-9398-f30eeb9e284c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2142d7c-fca4-4983-9307-3938732d5eda", "sighting_of_ref": "indicator--c6937394-2ca6-4abb-9398-f30eeb9e284c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1664211-5347-4714-964f-29da92db3677", "sighting_of_ref": "indicator--4d13ed6b-0ed1-41c9-b15e-b762bc479221", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905216d0-71fa-4d54-8a08-2e79a71d9735", "sighting_of_ref": "indicator--4d13ed6b-0ed1-41c9-b15e-b762bc479221", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d53fada-1ec5-4ad9-9a34-11a56ea56b3d", "sighting_of_ref": "indicator--12ab395a-a78b-400f-8a5f-acc3f14c8151", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c901cff7-a9d7-49d8-9a9f-1912d5928dd1", "sighting_of_ref": "indicator--12ab395a-a78b-400f-8a5f-acc3f14c8151", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a6bfdd-e138-4460-98be-3b9c69f91622", "sighting_of_ref": "indicator--b900a7ca-1d8b-4de9-8c2a-186e4ab86525", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8b92cd-8af6-4135-9357-27cb456481e8", "sighting_of_ref": "indicator--ba753817-e956-4db5-b2c2-154a21c4da3a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb7a03b-c19e-4897-aa33-3c57a187554b", "sighting_of_ref": "indicator--ba753817-e956-4db5-b2c2-154a21c4da3a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f12bf6-a299-452a-b321-c1844aa0a977", "sighting_of_ref": "indicator--f3c8c703-4e9f-43b3-8b9e-80b68e696089", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a71c3e0-0af3-4f7e-8508-276c9b20f7d6", "sighting_of_ref": "indicator--f3c8c703-4e9f-43b3-8b9e-80b68e696089", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d2ca83-d6b3-4446-9e8d-2f822dc00398", "sighting_of_ref": "indicator--076c6be5-54b8-4acd-8f6f-24acf8270402", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688da153-c4de-4d8b-963e-cec1e31124c3", "sighting_of_ref": "indicator--38bdaf83-59b6-4086-a4b6-e373307e0852", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e009c495-8251-4faa-9777-008889715af0", "sighting_of_ref": "indicator--38bdaf83-59b6-4086-a4b6-e373307e0852", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7242b46-71b2-42e7-b25d-6eb19c283bbc", "sighting_of_ref": "indicator--c26beadb-25b2-43bd-a2c0-baabd2ebeefe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4db7b8a-3c68-45dd-9b86-0665a2295a80", "sighting_of_ref": "indicator--c26beadb-25b2-43bd-a2c0-baabd2ebeefe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28a1a6a-f3bb-4b3e-acb6-95baea0dea9a", "sighting_of_ref": "indicator--4e075149-db9f-4120-95df-9bca216f4a2e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d1f932-89f4-4a0d-a82c-72d199141d6a", "sighting_of_ref": "indicator--4e075149-db9f-4120-95df-9bca216f4a2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2240d15-a07a-4f5c-8ae9-2f6d83f78db4", "sighting_of_ref": "indicator--09d71b5e-c253-4015-9e45-7c7ebf5acba2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6e1a68-0894-4f01-8cef-004744961473", "sighting_of_ref": "indicator--09d71b5e-c253-4015-9e45-7c7ebf5acba2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63471d81-f52f-4f4f-a074-47c65b9f9f94", "sighting_of_ref": "indicator--ba9deeeb-4b5e-4af2-88e4-cad6fc9c7549", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a9aa89-3546-4a99-b43f-589ba62a26ce", "sighting_of_ref": "indicator--ba9deeeb-4b5e-4af2-88e4-cad6fc9c7549", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0643fb69-7beb-4304-b64c-59f546dcc3ba", "sighting_of_ref": "indicator--7edd0f17-cdfc-4f76-bb6e-fe46eec13485", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeddd36c-6a81-4272-8817-11819a371ac0", "sighting_of_ref": "indicator--7edd0f17-cdfc-4f76-bb6e-fe46eec13485", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eead145-4a01-42c8-ba91-e69ccd6d6daa", "sighting_of_ref": "indicator--9e56462f-f4ee-49ab-bd1c-5551f453f91d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708b4afb-6e61-41d2-95a9-a2eb20c79402", "sighting_of_ref": "indicator--9e56462f-f4ee-49ab-bd1c-5551f453f91d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7951305c-d77c-4767-85b6-98a725ab5013", "sighting_of_ref": "indicator--11623146-ea69-486b-8fb9-cb141c85ae11", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe1dd8e-c599-4b7c-a4ac-0c5753a0811a", "sighting_of_ref": "indicator--21cdc854-e71a-4733-b14a-f82e11735892", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb9328f-5a5b-4aad-9487-fcaae479c5c7", "sighting_of_ref": "indicator--5e9e8e38-7665-404a-b56d-7e4fc272763d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e77e32-25d0-4414-9257-eccc24b09d68", "sighting_of_ref": "indicator--5e9e8e38-7665-404a-b56d-7e4fc272763d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39c3cfa-b1c8-460d-a10b-1cbb7f16709e", "sighting_of_ref": "indicator--b478cd87-286e-4285-8453-024570c7581e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd8b432-7818-4450-9d7a-27343dcd3ce3", "sighting_of_ref": "indicator--b478cd87-286e-4285-8453-024570c7581e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4348449-80d2-4285-b9ca-b2dc8fc0289b", "sighting_of_ref": "indicator--c06332fe-f353-4820-854d-45f7da7bddfc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2359e9-6d0d-45d2-9c46-5c422b3fc465", "sighting_of_ref": "indicator--c06332fe-f353-4820-854d-45f7da7bddfc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828530fe-059c-4bf2-ac16-d099eaa2bcbd", "sighting_of_ref": "indicator--65485bc1-f0f3-4d2c-a626-e82529585ab3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccf8b1a-7c15-41af-a806-2ab413b75caf", "sighting_of_ref": "indicator--65485bc1-f0f3-4d2c-a626-e82529585ab3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2731d8ca-efa7-4f07-921f-b0a448703aa1", "sighting_of_ref": "indicator--b1c32c1c-df76-445a-83a1-c82b718d523a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b03865-784b-4b72-9e2e-5e7576f37dab", "sighting_of_ref": "indicator--be15094c-85dd-466e-beb6-06d9ade91ee4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b501677a-6ab0-4784-81ea-15dd99136bf8", "sighting_of_ref": "indicator--be15094c-85dd-466e-beb6-06d9ade91ee4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39a88a5-ae43-4c9e-87b8-25f65404b48b", "sighting_of_ref": "indicator--777df385-0f51-473e-aae6-6fdde8677f88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c44845-962f-4c7f-b962-b8a4ef0791de", "sighting_of_ref": "indicator--777df385-0f51-473e-aae6-6fdde8677f88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50eea18-5ac1-4479-8ad8-26cffaae2f84", "sighting_of_ref": "indicator--44037b6d-89a1-4461-bace-5204013a09d9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c80c71-6812-4041-84ab-9d9a41139338", "sighting_of_ref": "indicator--44037b6d-89a1-4461-bace-5204013a09d9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cd5351-d770-4a87-b5f9-7ff47bb27996", "sighting_of_ref": "indicator--4a73c5a1-47fb-4c26-811d-baf85ed1f95f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64573cc-9fe2-485e-ba91-0b9a533d2ebf", "sighting_of_ref": "indicator--4a73c5a1-47fb-4c26-811d-baf85ed1f95f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedbe031-968e-4166-890e-92311103f00d", "sighting_of_ref": "indicator--eda90ad3-7346-47e7-bd6d-81c964b8f5e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc06bfde-3433-4b49-9bbc-9fb5b44b7daf", "sighting_of_ref": "indicator--eda90ad3-7346-47e7-bd6d-81c964b8f5e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93058a5-5813-43c6-b365-f5b593af94ce", "sighting_of_ref": "indicator--a6a8dd6e-f53a-4f29-b4e0-dbf6d4bebd73", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4163227c-fb35-48a8-91dd-c0ea2466cd8b", "sighting_of_ref": "indicator--c628e8a1-63cd-4536-9cf8-2594a0a47115", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e74ab5-ec4b-44ec-ba86-e4ae8bfe891d", "sighting_of_ref": "indicator--d483f5aa-62af-417b-8c2b-3b4f6c6ded1e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31de649e-88e7-463d-bcc9-b7f5f9bff93a", "sighting_of_ref": "indicator--d483f5aa-62af-417b-8c2b-3b4f6c6ded1e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae549f4d-ed0a-4978-8b36-3596d02035d1", "sighting_of_ref": "indicator--58893664-ead1-4681-9aab-093e7132eafd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1027456f-88e1-44bf-92c7-02650a782b02", "sighting_of_ref": "indicator--ebffee5f-9def-4967-9a38-aa27657e43fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3df926-c63a-432a-bc18-f88956b08b92", "sighting_of_ref": "indicator--752c46a5-91f4-41b3-8e11-e4e9026f9382", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fc99fd-36b8-47a1-b226-d627d38e045b", "sighting_of_ref": "indicator--dbe5f05f-e793-44f2-8757-069046a76ab0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbca53f-965e-4374-b7e1-8b97d105f121", "sighting_of_ref": "indicator--dbe5f05f-e793-44f2-8757-069046a76ab0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a7580-1d09-4fb9-9ec0-5cdf6ab20060", "sighting_of_ref": "indicator--30fe46ea-4d3c-4eff-9939-6eafa637797b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5cfe2f-720c-4f45-b715-4e78cbe223b4", "sighting_of_ref": "indicator--940386da-2ac1-4b8c-a565-c54e38859ac5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936aee8f-5b83-4482-92e4-8a280bfde0b3", "sighting_of_ref": "indicator--2c5086ec-2e99-459e-b0ca-a397d8ba45b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d10f205-d233-4fa5-848e-6dc5d9e6a68e", "sighting_of_ref": "indicator--a841a198-2376-4081-91e4-f7fd0786391f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9325ae6-96d6-4d74-b333-f636bcb86002", "sighting_of_ref": "indicator--a841a198-2376-4081-91e4-f7fd0786391f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6431bab0-27b9-47a6-9d30-f8f392efa595", "sighting_of_ref": "indicator--c78b1a13-d074-4aaf-8632-79d6222930e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4028080-ffc2-42fc-a4e8-f7e60ca93708", "sighting_of_ref": "indicator--c78b1a13-d074-4aaf-8632-79d6222930e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e89436a-7022-4ba6-b741-7960afac80ba", "sighting_of_ref": "indicator--ac06ad08-66ff-4e70-b40d-6cca2146dd67", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b888424-ff06-4964-8ea3-941c70f4dad0", "sighting_of_ref": "indicator--ac06ad08-66ff-4e70-b40d-6cca2146dd67", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0634c503-4f29-49cf-8eb1-80e2e727f1fa", "sighting_of_ref": "indicator--155dd7a0-d4d5-4d2c-ab20-8fe22390b5de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdd9a34-d59b-40ae-9159-e43e14568635", "sighting_of_ref": "indicator--9dc88638-35c7-40e2-962f-075f0b19877b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07ff844-c515-4489-a298-6082bb8db3eb", "sighting_of_ref": "indicator--9dc88638-35c7-40e2-962f-075f0b19877b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9f0cdb-1a56-4fb4-8d8d-02b554a47b3c", "sighting_of_ref": "indicator--39486f89-3fb7-45f8-bf5f-ad3d62f0225b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b792aa-3474-442f-8a70-7f9f9eb73629", "sighting_of_ref": "indicator--c4234024-d62d-435d-b480-0a4132bcc1ce", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a14d0a-da8a-484c-8cb0-0a5417b573cf", "sighting_of_ref": "indicator--e1a740a7-32a1-47b4-9859-763f41713d7f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb6b1e9-734a-4aa6-a1af-5b52507843ef", "sighting_of_ref": "indicator--20535e60-6e8b-497c-b1a5-14ce3cd17af1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60c77bc-bb6c-43aa-bf4a-3da462f1b327", "sighting_of_ref": "indicator--c73b2b58-fed2-4853-b093-e68d5492a7e0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157a98b4-5bdd-497d-bca9-77f051a7b1dd", "sighting_of_ref": "indicator--c73b2b58-fed2-4853-b093-e68d5492a7e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78415cfd-3358-49bb-90a9-d8ffd2f136fa", "sighting_of_ref": "indicator--c7276617-43f9-477b-801c-623e954dfd1d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c707c5-98b2-455b-9e23-9a1a1a6bcd30", "sighting_of_ref": "indicator--bc211d90-6618-4147-b671-d4e899e10440", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef2b7c8-7322-4907-bcad-888dae9ebbd8", "sighting_of_ref": "indicator--bc211d90-6618-4147-b671-d4e899e10440", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a2fd34-fceb-4c6b-be55-f99a43d2afe0", "sighting_of_ref": "indicator--cc209b0e-66fd-4d01-8d9d-ca1ab13202c7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f0ec55-2dd5-4b5c-9d47-6a2b200a1cc5", "sighting_of_ref": "indicator--cc209b0e-66fd-4d01-8d9d-ca1ab13202c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5953dd3-f53c-4207-b8f6-668aa369da15", "sighting_of_ref": "indicator--3d8b8e29-c39a-4551-8a0b-f92b78f306c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deee6ef-4286-4c07-89dd-f5c4d0b4e2d2", "sighting_of_ref": "indicator--3d8b8e29-c39a-4551-8a0b-f92b78f306c8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad7b0fe-e835-4404-bb96-3a4f2658774f", "sighting_of_ref": "indicator--655e0b61-f67b-4cc3-a3b5-f7c8de45b2b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5f4bed-45bc-47f8-8c25-d857d718647a", "sighting_of_ref": "indicator--e3f2ad9b-044c-4a4d-9a76-3db08c6850ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d9212c-1515-4532-bdf6-d3610ad7cab6", "sighting_of_ref": "indicator--f6e7668d-2fe2-4df4-bbb5-67329fc2f048", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d467d4-6a1f-47c0-9f76-438b463d2964", "sighting_of_ref": "indicator--f7b4989c-fdaa-4ece-adea-b6052939dd5f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d602f92-0452-41ca-b057-53a300575ff1", "sighting_of_ref": "indicator--96a25df2-7688-4ecc-bea6-54948ff7247a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae59242-db76-4ae0-b558-90c2f4a9b2d6", "sighting_of_ref": "indicator--9068c3b0-957b-4f2a-9074-0732c35d8efd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058b707b-1372-41a4-b25a-6251e04ea6d1", "sighting_of_ref": "indicator--9068c3b0-957b-4f2a-9074-0732c35d8efd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16507104-2e89-413b-bf8f-88fe1034bd49", "sighting_of_ref": "indicator--72470c4f-9828-40ba-9259-0af3046f7122", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da65991-5570-43b5-837a-6c38355b3a9d", "sighting_of_ref": "indicator--976ae661-7ebd-4031-91bc-6ecf1f8300a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139a4100-7b62-476c-ac5f-a054bc34cf92", "sighting_of_ref": "indicator--976ae661-7ebd-4031-91bc-6ecf1f8300a9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79dc9138-1a0a-4206-b4e2-9340f069b353", "sighting_of_ref": "indicator--68b098b8-38a4-4333-abe0-0a349effdab6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8186b359-44f6-4a2a-af9d-2cad046952a2", "sighting_of_ref": "indicator--c1b65d1b-d5d5-4d75-aecd-4b4d9fe2aef6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400053fe-aa1b-4ab6-b9c9-9a693f635fad", "sighting_of_ref": "indicator--c1b65d1b-d5d5-4d75-aecd-4b4d9fe2aef6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8ad652-7321-4b29-97e2-0d8a1bc60404", "sighting_of_ref": "indicator--a18ebb81-6bd8-401d-9894-315e4957d8eb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca269df-dd4d-4fd1-930c-e1af9c2f7db9", "sighting_of_ref": "indicator--d9d080f1-3d6e-438b-937f-36a7553b45fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bb0d29-5407-4e90-95a3-2f8bd3e9c973", "sighting_of_ref": "indicator--d9d080f1-3d6e-438b-937f-36a7553b45fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fb7f56-00ae-48af-be35-65434dc2d29d", "sighting_of_ref": "indicator--d5cc941e-12f6-438f-ae53-a6ea2fb0fd6b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069f75aa-8fd8-436f-9268-27d5c4254091", "sighting_of_ref": "indicator--37a736ed-1cfa-40a3-9d56-91c18a654a43", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e4ddae-d25d-4850-95c1-2702132441ad", "sighting_of_ref": "indicator--37a736ed-1cfa-40a3-9d56-91c18a654a43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bddc1e6-ab65-4bd5-8dfd-33ecbcdefa79", "sighting_of_ref": "indicator--caa7016e-0efe-4422-b0a9-bc3417dc616c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dc56aa-e921-4925-8093-c2aa7c35c8f2", "sighting_of_ref": "indicator--caa7016e-0efe-4422-b0a9-bc3417dc616c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96afa79-111a-4f23-ae3a-9e3b66966316", "sighting_of_ref": "indicator--fa402c7d-cc09-4f15-813d-1cfa6c5c62df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4856614c-d1e4-474f-a798-518c7ca2051c", "sighting_of_ref": "indicator--fa507533-edda-4001-a8c1-0e45e91b3c70", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f265bd2-9c21-4cac-86f6-2d18d6738fd3", "sighting_of_ref": "indicator--fa507533-edda-4001-a8c1-0e45e91b3c70", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab66bca-24b6-45bf-a956-297fe91f7672", "sighting_of_ref": "indicator--d50db94d-60cc-4d9b-ab3e-07f1585e1e2e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a8e8f8-010b-4606-899c-a458feaa39d8", "sighting_of_ref": "indicator--d50db94d-60cc-4d9b-ab3e-07f1585e1e2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ce9b74-d48a-4e0d-a108-71db9ffcdd17", "sighting_of_ref": "indicator--c70c8ca3-229c-4365-9abf-76515d6da7e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c019056d-9975-41eb-95f9-bb2276b4e4e1", "sighting_of_ref": "indicator--224b2a4f-d110-4d6b-8268-06b923262861", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac023ec-327a-4060-81ee-e1c39f2140a1", "sighting_of_ref": "indicator--224b2a4f-d110-4d6b-8268-06b923262861", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfdc176-72ad-4bfa-b00e-ef5200279388", "sighting_of_ref": "indicator--004c0f9d-8679-4bc2-9f2a-342cae0a7286", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c94b521-3c2c-4832-a968-ff82823af9c4", "sighting_of_ref": "indicator--595965e1-1910-49b7-a2e9-4b8d06189cf3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884d89ea-0072-41aa-8eb1-8faa47c01ddc", "sighting_of_ref": "indicator--329460cb-ad5b-4a08-87b4-b6b1719483f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bc8ace-cd47-4d6c-9bdc-1553c2f5dc3a", "sighting_of_ref": "indicator--329460cb-ad5b-4a08-87b4-b6b1719483f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564e358e-50b6-4350-b291-d9abb814bc73", "sighting_of_ref": "indicator--90b09874-aa77-48c5-9533-1a350f264eed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d821e-2712-49ef-8a66-82c2b5d38952", "sighting_of_ref": "indicator--90b09874-aa77-48c5-9533-1a350f264eed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b7a09e-6aa2-494d-b590-f2e98763092f", "sighting_of_ref": "indicator--0db5aef5-67ae-41e0-8794-82b5c4a27cbb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a325298-94d0-480d-83f8-9de382ed0531", "sighting_of_ref": "indicator--23b7a2ee-af93-4061-9410-b434c6a5771e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9126bd29-8a7f-4bcf-a877-5f0cc047cc19", "sighting_of_ref": "indicator--23b7a2ee-af93-4061-9410-b434c6a5771e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0afb97e-31bb-446d-97f1-94c1dc44eddf", "sighting_of_ref": "indicator--7c383bba-16db-4ccf-9c0c-b44949176a1e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209b5a0e-767c-498f-9add-428bd76e2536", "sighting_of_ref": "indicator--7c383bba-16db-4ccf-9c0c-b44949176a1e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cd5223-be12-479d-b247-d61e08762cae", "sighting_of_ref": "indicator--b6bf2683-9fb6-426f-ba56-69461e6facd1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb08e161-2080-4b23-8b0f-b9e0e9b7664e", "sighting_of_ref": "indicator--b6bf2683-9fb6-426f-ba56-69461e6facd1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceb3c61-ecae-4323-bbb8-60948f1bc102", "sighting_of_ref": "indicator--0ae762c0-3de6-4e0a-b8d9-783d8e41aeff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cba43fa-467d-4285-b49a-e2eac95599f6", "sighting_of_ref": "indicator--ffdcf97d-b194-431b-a50a-bad245aa0825", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ed3845-6060-45b2-8a7e-3b1d247a6157", "sighting_of_ref": "indicator--ffdcf97d-b194-431b-a50a-bad245aa0825", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59bf3d5-f312-493a-a0e4-f87c1b3ed852", "sighting_of_ref": "indicator--f8fe92a2-6309-42c1-9ec6-260aa1993d96", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadc7a11-ce0d-40e7-8b9f-6409ad8d8899", "sighting_of_ref": "indicator--f8fe92a2-6309-42c1-9ec6-260aa1993d96", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e387e97-024f-4229-b741-911b9e465c0f", "sighting_of_ref": "indicator--d7531883-e68e-408b-be77-c141611fce8b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c027df-c8a9-4015-a455-581cd8b90f4a", "sighting_of_ref": "indicator--a4287678-d487-4a86-b4da-47ffc03a0973", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ecb374-c831-4bc1-bef3-bbe5d89868d0", "sighting_of_ref": "indicator--b691ff0e-19e8-421b-8764-48bb82651b08", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cde38af-5a89-4217-bc06-679031b7c230", "sighting_of_ref": "indicator--57722cc6-fca3-45f9-ad13-b46375dcebc1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0b861b-3cca-4b27-ac34-db9d69194b69", "sighting_of_ref": "indicator--d448e50b-1ca0-445f-a831-8d1b1cc64797", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44aa5da3-f1a2-4087-8c46-815c307c327f", "sighting_of_ref": "indicator--32b92d11-cc3c-4f4e-aba1-99efbcf7b25f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cedc4d-c13e-46fc-9a06-1c3115ce53f0", "sighting_of_ref": "indicator--32b92d11-cc3c-4f4e-aba1-99efbcf7b25f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46d0c93-890f-415b-a3c2-bd3deeb2b703", "sighting_of_ref": "indicator--3f70f9b6-2c3c-4db9-9eb5-f96451aacee9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede2d1b4-b6fe-4aed-8b65-aa8153f2b9ef", "sighting_of_ref": "indicator--3f70f9b6-2c3c-4db9-9eb5-f96451aacee9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0852d3-dd7b-4f58-9e48-eabc3beb366f", "sighting_of_ref": "indicator--7cca07b0-dc49-44cf-a280-a29bd0d9fae6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715b50ef-09c6-43de-b181-acc5ef9cd1e8", "sighting_of_ref": "indicator--7cca07b0-dc49-44cf-a280-a29bd0d9fae6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e99858-011d-4a26-9291-b23e4175ddfb", "sighting_of_ref": "indicator--4436e72f-db8c-4953-9183-5fa627a5971c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7915764-45eb-4716-84b7-47f1ca5bf48d", "sighting_of_ref": "indicator--4436e72f-db8c-4953-9183-5fa627a5971c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608dfe16-99c9-4958-9a6e-0f25bd031b13", "sighting_of_ref": "indicator--80449a2f-5956-4f44-93b3-7b033a74ce72", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae58f8c-f00d-46ad-a3fe-b3a656d56545", "sighting_of_ref": "indicator--bc250d04-4ba8-46d6-981c-b6d6e379a1c5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c50902-98c6-456b-8fcf-4b367613a309", "sighting_of_ref": "indicator--bc250d04-4ba8-46d6-981c-b6d6e379a1c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bfa0b3-9c40-40c6-bfed-84b00b7d0192", "sighting_of_ref": "indicator--1d1041d6-c054-49ea-a268-1435bdab0dc3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5185cadd-da9e-4d07-a9c7-4b92ad9bf04a", "sighting_of_ref": "indicator--1d1041d6-c054-49ea-a268-1435bdab0dc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df1abfe-36b1-4f98-8855-b671836a946e", "sighting_of_ref": "indicator--a877e14e-7824-4877-b989-6545f19fff22", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b22235-d444-48a5-bdc6-8b749b8c0104", "sighting_of_ref": "indicator--a877e14e-7824-4877-b989-6545f19fff22", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c367d94-43a0-4200-b8e5-d7ece1ad98a7", "sighting_of_ref": "indicator--bbffcbf0-58f5-4cec-a114-1cac516af499", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ce8c4d-e530-45f1-975f-142f3fc0b8f8", "sighting_of_ref": "indicator--bbffcbf0-58f5-4cec-a114-1cac516af499", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc37648a-0eb6-40cb-82b8-fd412482c864", "sighting_of_ref": "indicator--8524fd59-c3fb-47a6-b9da-0af68bfdbd17", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901225e7-1d63-422b-a3a6-ea7e9b33d05b", "sighting_of_ref": "indicator--8524fd59-c3fb-47a6-b9da-0af68bfdbd17", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609702fa-03f7-463b-b2bf-1ac777eb41ef", "sighting_of_ref": "indicator--8bff4aba-9237-49e8-8bfa-81b144a61e60", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d244ce40-f34b-475d-8931-af6389db0b81", "sighting_of_ref": "indicator--8bff4aba-9237-49e8-8bfa-81b144a61e60", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b1c0e5-1d8e-4d36-87a6-8e33dd12bd34", "sighting_of_ref": "indicator--edd285f5-7f0a-455d-9586-036bca375cc0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0109789c-1076-4137-a9b9-4a544b0b4b49", "sighting_of_ref": "indicator--927c49a7-94c9-435c-be8b-c4de441735e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3338973d-07fc-42b1-a235-d081f55508db", "sighting_of_ref": "indicator--6eb7eca6-0d02-41f6-add0-51445d032fd7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc2c011-a9dc-456b-8d86-a969b88a8fe3", "sighting_of_ref": "indicator--298fa18c-9002-4e04-9f6f-2454a28676e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3494d847-9d19-42dc-817f-b61ffc4fc30b", "sighting_of_ref": "indicator--efaa431f-e8e4-4dda-b1e7-bdf07951ba02", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fee11d-7d58-4599-8d7e-fc0bdb495061", "sighting_of_ref": "indicator--fa227f10-1a4a-4f55-9d3b-8c0e1d718b90", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e72f89-a5bd-4396-a01d-8d5f6d1638d2", "sighting_of_ref": "indicator--4cebdf81-b5c3-41a6-8e33-541046899b02", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520aedfe-1eb9-4656-af5b-6549812e58ed", "sighting_of_ref": "indicator--da0e7c85-d2bf-4995-ab94-e535e1608048", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fd902b-09ae-4a77-8a6b-1e884bf84b0d", "sighting_of_ref": "indicator--86058226-0404-4730-a5c7-8dd7046dba71", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b60e6c-0fad-419b-b807-8c8165a8e018", "sighting_of_ref": "indicator--86058226-0404-4730-a5c7-8dd7046dba71", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57d7542-91f0-466b-acdf-9e3beab0ca26", "sighting_of_ref": "indicator--4d154dfc-4103-4ca4-b8ef-4fa5aa1b7c92", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bb34c4-5fad-4fcc-bb72-cb1953f2c559", "sighting_of_ref": "indicator--7f64c9df-1238-45e5-bfcc-2fd0fd1aed32", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c20727-2e10-4261-ae9e-84934e23dc65", "sighting_of_ref": "indicator--55728d1a-6716-4018-a7e5-a468dcf15932", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafd2ab2-0b21-45e8-831b-10157f8ed422", "sighting_of_ref": "indicator--b39ed48c-647a-4e6d-a0f7-463b6951eaab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c66c54-4a3f-4f85-83ae-b49b0ae8a9a4", "sighting_of_ref": "indicator--b036ef90-0293-4d56-9cf8-7d8e2d097d77", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceeaafb-8210-42a7-8512-3d69b68b6399", "sighting_of_ref": "indicator--cc0e4516-ae43-4a2a-b033-ba1ed95cf524", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053a46bf-0f44-4605-bee5-4c04f13e41fb", "sighting_of_ref": "indicator--cc0e4516-ae43-4a2a-b033-ba1ed95cf524", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e840c54e-ccba-4258-86a9-908041cd4349", "sighting_of_ref": "indicator--a0b51b9a-c2c5-41de-88e8-ab220deaa991", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe82276-efc8-40a7-b0fb-ecb03c223464", "sighting_of_ref": "indicator--547cf99c-c42c-4742-a9f5-a89348ea7b93", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddd0795-7cf1-4563-9b3b-5548cf820afb", "sighting_of_ref": "indicator--d7af4e41-6beb-4471-a792-543cbd2bd3d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b114ae6c-d076-4869-9b2c-70183bda6ece", "sighting_of_ref": "indicator--c35e9dc2-77b9-4963-8738-53973114877b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6e9995-3b5e-4030-876a-1f91169d5e34", "sighting_of_ref": "indicator--1435bd5f-0b75-41c9-aa15-08df8fb54d95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24574ac-6ece-4792-81f2-f795dab33447", "sighting_of_ref": "indicator--6e6e8f45-707d-4dc1-a9cf-adce9e3763fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292593cc-55f4-4fab-988e-e8ac89440b74", "sighting_of_ref": "indicator--0443c146-eefd-4972-afa3-7c4e9104ca60", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7a2e4c-758e-464c-b567-d5c37419ab60", "sighting_of_ref": "indicator--d5ca8169-bff6-4d55-a000-224160daebc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520a3231-b8eb-4763-bdfc-c97675981d2a", "sighting_of_ref": "indicator--867345d8-a1cf-422c-9ad4-e645b96cd8a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dce8c5-f892-4a97-9c07-a414d7a4cb4e", "sighting_of_ref": "indicator--13114d8a-80eb-4b64-bbc0-402e2b1ce9e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ded626-05c4-4917-b533-63ebe56e27df", "sighting_of_ref": "indicator--0fc0ddee-f26f-4384-a989-fe7ae37a7f90", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9e8141-c692-47bf-9a19-95015ecb66f7", "sighting_of_ref": "indicator--0fc0ddee-f26f-4384-a989-fe7ae37a7f90", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e43c67c-178c-4bb6-baf2-3b8f74e60a92", "sighting_of_ref": "indicator--af3a281f-c850-4a35-bd22-7151e7922e05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acf3453-804f-49d1-9241-d54c4fb9ddf7", "sighting_of_ref": "indicator--584e7339-51ae-4caa-af76-98f0a2d28bbe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408e5b66-d28a-432a-bccb-6d34701b5f04", "sighting_of_ref": "indicator--9058d45a-501d-4988-9ffe-c0d6c5a25c88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc887d8-e16d-445e-b74a-195098e21a05", "sighting_of_ref": "indicator--99dfbef6-2a0f-4544-80e2-d10ffc930f50", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67352a63-03c6-4e6f-9b19-17708f94f444", "sighting_of_ref": "indicator--f001a4d6-38e7-426c-afd6-a8ec0cebd66f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c355d7b-ee7a-4cae-805a-97d0ae65db7b", "sighting_of_ref": "indicator--47cb2d8c-d049-433c-9dcf-c4b453006cf4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc1ae3d-ac49-4148-a357-7d99b29b4988", "sighting_of_ref": "indicator--1128242c-1643-49ba-88e3-dcbb9fb247e0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b457a5ff-c90f-444f-8cc5-3823c63a4867", "sighting_of_ref": "indicator--279cae0c-b6e9-4652-9a2f-4fff15ec3eae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4101dd-8d32-4d0d-b130-94f54b725b64", "sighting_of_ref": "indicator--7364b861-ef37-41da-8769-b76c6b96af70", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc23df4e-56c7-4778-860b-751d306acecf", "sighting_of_ref": "indicator--6f377bbd-1877-4c2e-bb6d-5a6c473412a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e198b2-b674-4fa3-9899-a7264bac945d", "sighting_of_ref": "indicator--cd92a4cb-42d2-4ae6-9b2a-55178300c22b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd19bd00-aeed-458d-816b-a33f541ddf0a", "sighting_of_ref": "indicator--aae79fab-41a4-423f-ad29-2ec1ad60dde4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5281ca-385e-4ba8-9229-baa4c71b4953", "sighting_of_ref": "indicator--70a68c74-c131-4aff-9aac-f6bf476799c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57eacc98-6c60-4111-ae63-af874492f711", "sighting_of_ref": "indicator--854ab02b-2cfd-4c4a-93ba-fc21ea232f48", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b12d7d-70a4-4182-80f5-f255a1e447bf", "sighting_of_ref": "indicator--a61a1232-2fd0-4f22-ad15-89ea1e9c1114", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b455dae0-1512-40fd-8125-7d26f3d6f568", "sighting_of_ref": "indicator--a61a1232-2fd0-4f22-ad15-89ea1e9c1114", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cdcb15-445e-4619-bda6-dbfb0f9cd75b", "sighting_of_ref": "indicator--472f64a6-eb6f-4008-b37a-bfea95f75e43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ac640f-9333-4aa3-9dab-f9168933b2cd", "sighting_of_ref": "indicator--9d38aba0-3965-4f8c-b225-76f4e228d6df", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108fb329-bc79-409d-a3ab-78f9f266d540", "sighting_of_ref": "indicator--6ef242e3-223d-48a7-9a2e-622057308a69", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48c1419-12c6-4fd0-a215-4c6c1ea63a43", "sighting_of_ref": "indicator--85dc1d88-7ced-451d-bf8a-51a7df56683f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddecbb96-13e8-4932-a341-7f12f07eda34", "sighting_of_ref": "indicator--85dc1d88-7ced-451d-bf8a-51a7df56683f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420038ce-d246-42e5-9e66-f7d0f8bcf6fc", "sighting_of_ref": "indicator--9f060c03-e169-4f5b-aba6-f3b095ce393a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1777a719-6c7e-41cc-96b7-78f622b1bfc4", "sighting_of_ref": "indicator--2fb42e93-3959-4934-9ad9-1b270b6c1cf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680072d8-33d4-45ba-a774-40aebdaccf3e", "sighting_of_ref": "indicator--85815fcd-2e00-4792-bc2e-f0ff564b9ea8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8e834e-deae-4ac2-84d0-4006870ed58d", "sighting_of_ref": "indicator--4efd6007-c18a-44a0-be05-53f19a7d7295", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ca3557-66ba-46a9-8a8b-ae5788adbe14", "sighting_of_ref": "indicator--5f40144b-aac2-457f-8526-252de4eb76da", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0846d490-7fe6-4f87-9885-3cd95a14b8f5", "sighting_of_ref": "indicator--82aabc23-40e0-42fc-93c7-38ae45820c55", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a199f137-f590-4342-9007-631bd4c3e417", "sighting_of_ref": "indicator--78131701-b56e-4290-9901-281dbcc44a62", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa8e9c8-1bb5-492e-8079-22325b92f989", "sighting_of_ref": "indicator--d83ea9e6-e7d2-4a87-ba1d-7f931386cb3f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef531f4-0ac1-4492-abb0-ff63cb03ad91", "sighting_of_ref": "indicator--d83ea9e6-e7d2-4a87-ba1d-7f931386cb3f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd78240c-103d-43ab-8304-c322d2bb68d7", "sighting_of_ref": "indicator--b3ab6ca5-df6f-414d-80a2-9d10e5d52ba6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e55219a-9271-4708-9574-340ab0b21958", "sighting_of_ref": "indicator--53989dc7-de27-4cff-967c-470f53718dae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ca4dd9-c9d5-4f48-8acf-8e8b94de385c", "sighting_of_ref": "indicator--4c50914d-9eb4-4822-9bd3-8dc39b490105", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca8c40e-80ea-4813-9b27-1e187dab4252", "sighting_of_ref": "indicator--e8ef7795-5221-40db-8a27-e81f43550617", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fa6b5a-2773-4627-8efc-62e8485f07e7", "sighting_of_ref": "indicator--ead762d3-8e78-4776-94f2-062fdfffdc51", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999b9a06-5915-4912-9286-899bb1707993", "sighting_of_ref": "indicator--7159216d-88ff-4a32-9e1f-bd58d92378cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9a0681-8789-43fc-bcef-44d7dee5aefb", "sighting_of_ref": "indicator--7159216d-88ff-4a32-9e1f-bd58d92378cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c954b60-d5f1-4e42-b064-649902eba83e", "sighting_of_ref": "indicator--760535b5-593d-4ae6-8d8b-9144319cd2f1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd9cfad-daf9-43de-9a50-3b50ef7c2c8e", "sighting_of_ref": "indicator--760535b5-593d-4ae6-8d8b-9144319cd2f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ad7c21-4b85-434b-8e44-e6fa0e5717d6", "sighting_of_ref": "indicator--321d31b5-fcb0-4ac9-8280-a773354cce6d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfdf3f4-64c8-459a-aaa5-28fc055cbf99", "sighting_of_ref": "indicator--91f62cb2-a3bc-48eb-9938-1f8aae8c8220", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361da013-b3f3-4825-83e2-2e55484131be", "sighting_of_ref": "indicator--96e78527-54fb-480d-a5f3-1463e76f41e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3565caab-edb5-42a2-80ac-6cc681b7df87", "sighting_of_ref": "indicator--e7055309-7615-4e22-9592-5d2946732688", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd9b9d5-7fab-4f57-8b8e-2464bed4ab4b", "sighting_of_ref": "indicator--7d668235-9cd3-439c-b340-c596644f4914", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1a618d-f646-4f93-b72f-de9b5e03c53f", "sighting_of_ref": "indicator--94743a82-9234-44fc-b53c-a4d118ac1d4d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b58f1f-e815-411b-ba7f-c386b87064eb", "sighting_of_ref": "indicator--96a99994-fcea-4928-aade-a49805ba1dfe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d25059c-53b9-4a54-bf91-7378f5e0221a", "sighting_of_ref": "indicator--cfb2e9f3-f1a4-4059-bee1-66f96d5fef98", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed2fd56-b6e5-4c67-921f-d8e2bba2699c", "sighting_of_ref": "indicator--ade30540-d53a-4057-bdb5-e52e80165766", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d66508-666d-434d-9870-efe5994d7750", "sighting_of_ref": "indicator--50ad24d5-8cbd-4d16-aab0-06950975e66f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ace7eae-17a9-45f8-98e6-ebb2dca1c77e", "sighting_of_ref": "indicator--cebf4a2e-004b-4c67-b941-3c4c15e5b8ec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017be4f7-35e9-4d15-82e8-fdb1066f736b", "sighting_of_ref": "indicator--f5fa5196-d1c2-4c0b-bb5e-cc70ec94c4b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1e3232-4b25-459b-b109-987258e51fec", "sighting_of_ref": "indicator--479fa724-f432-46f3-a76b-a822f61a4b05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41328fdd-38a1-4e67-bc1b-210a5cbdf21b", "sighting_of_ref": "indicator--479fa724-f432-46f3-a76b-a822f61a4b05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478108d2-e480-4ed2-8f43-9fc559b5167f", "sighting_of_ref": "indicator--b20cbf45-1e57-4b5c-b2e0-cc27676500ea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c14b26-3b66-4f3b-97c4-4fca527658ec", "sighting_of_ref": "indicator--40460ab0-1579-4f10-89ed-85bd70c743b3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407ff812-c98a-4cbd-9b33-2c84d0e8cbde", "sighting_of_ref": "indicator--272cac02-cfc8-4565-9040-a4b358d43c4e", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c60722-9263-4204-8a8f-e37526a66331", "sighting_of_ref": "indicator--97af555c-facd-4656-a64f-6200ee199309", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049d320d-7670-487f-bbc8-c67217c182cf", "sighting_of_ref": "indicator--2b240fb2-5fe0-47fc-af8d-59e1353c1826", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd847909-d450-4bbd-b2f3-a66512aa27d4", "sighting_of_ref": "indicator--ca245e73-325a-496e-853d-5e01e527d074", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f470b2-97f1-4de9-9db7-60e9424e2832", "sighting_of_ref": "indicator--864b7039-a3d5-45df-9dd7-12ecb5777d91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a843a96-49c0-4df4-b3a1-2d7c3a9fe5d7", "sighting_of_ref": "indicator--5f185283-cb84-4b46-9cbb-4b756326aea6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad093ad8-51db-4ac4-91e8-45fab2c82a1a", "sighting_of_ref": "indicator--5d58076d-2572-469e-9481-4f4bc222c26d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c94250-82aa-4f51-ad13-e4c7f5c146b0", "sighting_of_ref": "indicator--7fb8e319-1e32-41f4-9055-08597ee73ff4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4888fe63-0cfc-4787-811d-44e55c36cc36", "sighting_of_ref": "indicator--d62672b8-2fb9-46c9-a1b6-0d936d1e237d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8520f8a6-5c8a-4541-b218-7823b13779d4", "sighting_of_ref": "indicator--0d92aa96-cea1-4f85-a759-fa0ccb7de02b", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc079f1e-b291-4e7a-b7dd-334316def1e2", "sighting_of_ref": "indicator--ec8f69b1-24f6-449d-a7f8-b1375f3bf036", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c38d1a2-a827-4e03-8c01-940317213597", "sighting_of_ref": "indicator--8c125daa-a43e-4a50-9e61-1dfb4da45ad1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a3e31a-ff13-4045-9733-81ec402a90fe", "sighting_of_ref": "indicator--8c125daa-a43e-4a50-9e61-1dfb4da45ad1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aeef350-38ed-4c08-9ce9-f44492af768b", "sighting_of_ref": "indicator--79052cc3-38d1-49ee-b6ce-bb2b6b9e93d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9631a7fa-ab8c-4362-b08a-68209c4782dc", "sighting_of_ref": "indicator--79052cc3-38d1-49ee-b6ce-bb2b6b9e93d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e3e3c6-e4f5-4a45-a61a-d7daa05e0351", "sighting_of_ref": "indicator--810cb9c9-30c4-456e-9c24-270a460e4608", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1260a70a-13c7-426d-b13a-3164b4a35620", "sighting_of_ref": "indicator--18466442-c8ca-4aed-beb9-1da9bc90ce81", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dde68e8-9df3-4a4e-8de0-ed886d724954", "sighting_of_ref": "indicator--18466442-c8ca-4aed-beb9-1da9bc90ce81", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff69b965-8714-42f2-a295-b1d8649daaeb", "sighting_of_ref": "indicator--858e46c9-940e-47e0-b94c-a62c09e1a8d2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57eb88ed-8d01-4886-b027-dae5e9a92af3", "sighting_of_ref": "indicator--858e46c9-940e-47e0-b94c-a62c09e1a8d2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615f19e5-45f2-4ea6-8edf-aab7ca76a66a", "sighting_of_ref": "indicator--5382e29d-0039-41d2-b8de-f9fd0ccdac56", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71b3f3b-7a9d-424f-b912-2f504050309a", "sighting_of_ref": "indicator--1420ac10-7264-47d7-9106-028e19f2f015", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d60e67b-7d1b-43e2-9d87-5f09af7c2313", "sighting_of_ref": "indicator--53b56cc3-dff4-405e-b554-2c8d6c1c2fb9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5a1c75-b160-43fe-9277-e5d8247b5b43", "sighting_of_ref": "indicator--53b56cc3-dff4-405e-b554-2c8d6c1c2fb9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdee3c75-a0ca-43e3-8fd2-eb43ec223c43", "sighting_of_ref": "indicator--627f3d66-4270-41bd-94d2-f36d6dea477f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014c7df6-b578-4633-9591-38d0f4b9f459", "sighting_of_ref": "indicator--393f6dac-04ff-46f8-a0f3-c92b815eed4e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a9a5a3-8c47-4546-8dfd-dd7254270139", "sighting_of_ref": "indicator--c90bbcc9-9dc0-4eb4-a6b5-e5ad77e235a6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d52a5f0-761d-494b-ba2b-ea2647b0ee5c", "sighting_of_ref": "indicator--c90bbcc9-9dc0-4eb4-a6b5-e5ad77e235a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cf5217-44b6-425e-aaee-50aecf576719", "sighting_of_ref": "indicator--a57cbae6-5cf0-4fa6-b8c8-0edd2e4b3f4e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0928b18c-de52-42ed-a492-1bfe464f0590", "sighting_of_ref": "indicator--a57cbae6-5cf0-4fa6-b8c8-0edd2e4b3f4e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607b2e30-2f14-4184-a0ad-913b5eb65ea0", "sighting_of_ref": "indicator--4a62d141-3639-4656-8bdb-c07ac03252ff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8919f8c-ef94-4c63-9a99-bc1c0b0d6721", "sighting_of_ref": "indicator--4a62d141-3639-4656-8bdb-c07ac03252ff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581f1dba-2a41-465a-8fde-24162c2a8dea", "sighting_of_ref": "indicator--4ee560d9-4156-42c3-b2d2-c268283b3f08", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863aa45f-1178-4659-8698-7a141baa8be5", "sighting_of_ref": "indicator--4ee560d9-4156-42c3-b2d2-c268283b3f08", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92564d9-6325-4455-941c-8d6d60f34909", "sighting_of_ref": "indicator--cf1d9b83-2845-47d8-9fa6-b9b454b03a8a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f57bd0e-867c-4040-b1b0-629a520bfa30", "sighting_of_ref": "indicator--94ce0526-8300-499f-9faf-b893732c48e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ca1f7b-d6d8-498b-81dd-c1927b265838", "sighting_of_ref": "indicator--d757d216-d028-4c3c-aae0-39164cbfb3b6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0059a22-5d7c-4e61-9e83-3f310da94ba6", "sighting_of_ref": "indicator--4d1d68fd-7bd1-45c8-b2af-56f05429c64a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da8353c-6825-4cb2-b50d-e6833d35ee48", "sighting_of_ref": "indicator--58a141cb-d73c-4670-832d-71d0173036a5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c38e210-7671-4d33-a0a9-4111639320cc", "sighting_of_ref": "indicator--3e5948c8-5168-4f38-a679-d9e249b259d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63311b6f-1770-4c0a-8bcf-35d2f171e136", "sighting_of_ref": "indicator--043d7edd-98da-4733-97eb-3e4b25e62197", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe95ff99-0376-43d0-a684-4b836f372b1e", "sighting_of_ref": "indicator--043d7edd-98da-4733-97eb-3e4b25e62197", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fb997a-cfe7-4cca-981f-d0acab415060", "sighting_of_ref": "indicator--5abdf1b4-dec6-4552-8ffa-ffaa542495cb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858a6d99-54a3-49f3-b33f-be7260aa389d", "sighting_of_ref": "indicator--5abdf1b4-dec6-4552-8ffa-ffaa542495cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472fedad-84f7-41fe-afc8-f59a0316c5e8", "sighting_of_ref": "indicator--59a683aa-497b-4268-80e1-8e1e71501953", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0f8c1a-475e-43fd-82e2-0a13eb578ed1", "sighting_of_ref": "indicator--59a683aa-497b-4268-80e1-8e1e71501953", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccc0e2e-475f-4809-adc3-7fc0e1a0c4f1", "sighting_of_ref": "indicator--b5e7909c-cbd6-466c-986c-a710387a7eb7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6f5f57-314e-413c-bc23-2197920591bc", "sighting_of_ref": "indicator--b5e7909c-cbd6-466c-986c-a710387a7eb7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2155b70b-4c58-4fab-9666-8a9d7733d698", "sighting_of_ref": "indicator--df35a6bc-e326-49e7-b55e-9c591a728b9c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfb8c71-aa72-42f5-84ed-547f4833a8df", "sighting_of_ref": "indicator--df35a6bc-e326-49e7-b55e-9c591a728b9c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d650e92c-986f-469f-92cd-fb6b88507fc9", "sighting_of_ref": "indicator--ec31ebdf-23d6-4513-bf24-fedea7dcb465", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4262b63-5be4-406d-9d86-68cba7c33a1e", "sighting_of_ref": "indicator--ec31ebdf-23d6-4513-bf24-fedea7dcb465", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2b11ea-0d65-4282-b84c-02e2ceb94a0c", "sighting_of_ref": "indicator--0a2d7104-80b8-4475-9ef7-89227ae86728", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8c6d7b-62f4-4ec9-bfe1-4036fcec489e", "sighting_of_ref": "indicator--0a2d7104-80b8-4475-9ef7-89227ae86728", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e6a835-6812-4655-9bc7-e2e861bc588a", "sighting_of_ref": "indicator--a53bf389-bb5f-48aa-9057-f42471712863", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3cba88-6f4d-4e5e-b73b-838487323e84", "sighting_of_ref": "indicator--a53bf389-bb5f-48aa-9057-f42471712863", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60384f98-bbc2-433c-917a-c3cce4b2d23f", "sighting_of_ref": "indicator--63d2baf4-632f-4820-b47d-34202ce1d6fe", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe1339e-2c4f-49ed-a2d9-a32505f9a73b", "sighting_of_ref": "indicator--63d2baf4-632f-4820-b47d-34202ce1d6fe", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167a5304-474a-444b-8609-fb5ad7283abb", "sighting_of_ref": "indicator--03eaab45-256b-4081-9620-953d01f9527e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27561ed5-4130-499f-953d-e2d55c8cfaec", "sighting_of_ref": "indicator--03eaab45-256b-4081-9620-953d01f9527e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0e2163-3efa-4dfb-8ea1-09722e0e1a4b", "sighting_of_ref": "indicator--26e9f29c-b98d-4efa-8c24-dbfe2e5b6431", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cebfa54-5104-47c4-b336-68c4b28d331e", "sighting_of_ref": "indicator--26e9f29c-b98d-4efa-8c24-dbfe2e5b6431", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d80c65f-730d-4bf6-8a6b-d873bbaa5d72", "sighting_of_ref": "indicator--36dbb377-2285-4248-b27d-58b15bd13970", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcd5500-2476-4973-8066-74fdb5b7f552", "sighting_of_ref": "indicator--36dbb377-2285-4248-b27d-58b15bd13970", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c33c381-ae80-42e2-ab34-b903e4545942", "sighting_of_ref": "indicator--f077a98f-ecc5-4b28-a582-124f16a755e8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b9d32c-b111-43c6-87f4-4b3d929d32de", "sighting_of_ref": "indicator--f077a98f-ecc5-4b28-a582-124f16a755e8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f72b746-f57b-4929-8a65-bd43c40720b9", "sighting_of_ref": "indicator--fcb7d894-a91f-4b44-aca6-b8ee01667e35", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc6e564-d0df-4bb3-8c31-f79d4b72f8cb", "sighting_of_ref": "indicator--f0a01982-1527-4674-85a2-df64733f308e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26c9718-e5fd-4f07-8d2e-cd208bb28783", "sighting_of_ref": "indicator--8fcb5785-bcf8-4d68-b696-cc905a5ad95b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fcefe3-fd0d-446d-af48-643581f5799d", "sighting_of_ref": "indicator--35c5e229-c767-4038-90a0-1e82ceaa9edf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce9ed73-8724-4bb2-b2d5-5bcb511fc157", "sighting_of_ref": "indicator--fd0b63a4-1faa-4424-89b0-12ec68a4f19a", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8141dbb8-717e-4711-8510-9d56db04ed52", "sighting_of_ref": "indicator--6fac7625-75df-40c0-9c0e-003e8ea90c62", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c3a9ed-b81a-45a4-9688-aa1874997d4b", "sighting_of_ref": "indicator--400fb571-2f38-4024-bd69-cc4af329a839", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41986c9-5c17-45d4-8364-bcda27fe1cf3", "sighting_of_ref": "indicator--21bd9b20-b77a-4157-bdab-e608c489c35d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bf1ef0-bc38-4b3a-9845-4f7e99e031ef", "sighting_of_ref": "indicator--fe4b9920-041f-4343-af50-04b2e72a2402", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58b39a1-e7a6-4035-86f8-f899f637fdf8", "sighting_of_ref": "indicator--35aaf68c-ed55-42e8-9104-cca70dcc447b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a012a6-5ed5-487a-aeac-a8720025738d", "sighting_of_ref": "indicator--fcfe4f38-ea2a-4b33-b3ab-f0e4fc96ab58", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ca75fc-29ee-45cc-a851-f020d8c5cc7b", "sighting_of_ref": "indicator--791d586d-ccd5-44a2-90a6-ec4aaa0f636b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cdac81-2461-471f-a030-ea2a9dabf889", "sighting_of_ref": "indicator--791d586d-ccd5-44a2-90a6-ec4aaa0f636b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd8401f-3ae5-4e42-86f3-d1c0c18d88a6", "sighting_of_ref": "indicator--5dba787f-4e02-4c48-956e-942ba74c973f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c375df0d-8b6a-436e-b208-933fd9fe00e8", "sighting_of_ref": "indicator--5dba787f-4e02-4c48-956e-942ba74c973f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d152f02-fa8e-4984-832e-687c2361dbc0", "sighting_of_ref": "indicator--fabb6d8e-92b8-4971-8892-8645d76ed5b7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e14e22-bdd3-4d8f-aa8c-cfb2f5c6d1bc", "sighting_of_ref": "indicator--fabb6d8e-92b8-4971-8892-8645d76ed5b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1240a7c9-c8d1-4b53-a1c9-0baa64d71ca2", "sighting_of_ref": "indicator--96ef7800-4930-4a44-9a10-4a3820a2f660", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3099afa3-212d-4df1-9e98-6f7ef517acdd", "sighting_of_ref": "indicator--d331fa0f-6b30-49b8-8cf8-29a259bbd372", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dec5eac-f8a5-4440-a543-3b7a589fa007", "sighting_of_ref": "indicator--d331fa0f-6b30-49b8-8cf8-29a259bbd372", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8d016f-1c9f-4daf-8510-69faa2ee9e33", "sighting_of_ref": "indicator--c1ae966f-6dd2-41da-b0c9-a10df066973b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4c299e-b450-4cbf-b1ec-9553f6c3eb0d", "sighting_of_ref": "indicator--c1ae966f-6dd2-41da-b0c9-a10df066973b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207732c7-2f75-4694-968b-5c32dc407015", "sighting_of_ref": "indicator--3a792445-ae7c-46d6-abf0-fd99a8458811", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b7d476-589c-4c4f-9e5d-be25bf6b879f", "sighting_of_ref": "indicator--3a792445-ae7c-46d6-abf0-fd99a8458811", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef01638-cc84-44f8-8309-56d32ef1ad21", "sighting_of_ref": "indicator--6591b34a-9c9d-4385-b18a-ac30c85a2e6b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdbab33-e4d7-45ba-8099-a6ce2f3b73ca", "sighting_of_ref": "indicator--6591b34a-9c9d-4385-b18a-ac30c85a2e6b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bf1712-9501-4386-b96e-eeb7398045da", "sighting_of_ref": "indicator--95608266-3e12-4b97-851f-6b24a0a99537", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0956fc-663c-42b5-95d9-0e7e85897324", "sighting_of_ref": "indicator--95608266-3e12-4b97-851f-6b24a0a99537", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955ba74f-d366-48e0-9da6-7e2213f9d92a", "sighting_of_ref": "indicator--f8d81a20-436f-4d4f-b52b-6fff0c540c72", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74f0e9f-9da9-4d08-a6ae-71ffa41bf951", "sighting_of_ref": "indicator--f8d81a20-436f-4d4f-b52b-6fff0c540c72", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f73efa-6520-40d6-be5e-2116d2a9db3b", "sighting_of_ref": "indicator--0b8cdb4e-dc50-40d6-96eb-6a626005edec", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6970ca87-d5e0-4fb4-a340-9a44f57cc671", "sighting_of_ref": "indicator--0b8cdb4e-dc50-40d6-96eb-6a626005edec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8266f88d-95b0-42ff-8615-58f3c800dc11", "sighting_of_ref": "indicator--1ba5f631-db52-4e51-83b9-ec313b9a39e2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce838154-343f-4901-b6d0-cb0e998b1392", "sighting_of_ref": "indicator--1ba5f631-db52-4e51-83b9-ec313b9a39e2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74160a1-0046-4de9-b973-4847093e68cd", "sighting_of_ref": "indicator--3b1e6364-9f2b-483b-b2a6-eefd9b7df22f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17247a5-082b-407f-8c94-094b7e81792a", "sighting_of_ref": "indicator--3b1e6364-9f2b-483b-b2a6-eefd9b7df22f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edd14b7-e018-4b9a-ba10-a37cf81fc4d6", "sighting_of_ref": "indicator--24649635-4fad-49b2-9e05-190561520823", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ebe3c9-a96e-4d25-9f1c-45137079b26c", "sighting_of_ref": "indicator--24649635-4fad-49b2-9e05-190561520823", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811a7a17-1534-4006-8b04-18862f612014", "sighting_of_ref": "indicator--753abd41-f9b9-459b-8203-d592a539105b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d49117-8b71-4a28-8893-95e1236182c7", "sighting_of_ref": "indicator--753abd41-f9b9-459b-8203-d592a539105b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acd6654-87ad-4511-b59d-51effb556e59", "sighting_of_ref": "indicator--a064f9b4-34f1-4758-9ae5-a10f2fb2b611", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbbb68a-48bd-4fd1-b760-ad89ae5f4edc", "sighting_of_ref": "indicator--a064f9b4-34f1-4758-9ae5-a10f2fb2b611", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778188d0-a8b0-4394-a8a4-c0177f18d51a", "sighting_of_ref": "indicator--9b0fecd2-1a4e-4952-b445-1bdc3af257db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3c2f74-663f-4c79-8faa-88f4bfef7e3e", "sighting_of_ref": "indicator--9b0fecd2-1a4e-4952-b445-1bdc3af257db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f37d94-447e-4bd3-9d05-23e7480deaaa", "sighting_of_ref": "indicator--84a4a27c-ab8c-41ef-a125-60dc8671bce8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fdcf5d-6642-4c88-8093-12a966cf5321", "sighting_of_ref": "indicator--84a4a27c-ab8c-41ef-a125-60dc8671bce8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8486f1db-0875-49d8-9498-632fc0d47486", "sighting_of_ref": "indicator--ea40df0d-4fa9-4537-b95d-59eea3e91872", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617c8a58-3a97-4d52-ad9f-742479de9ed7", "sighting_of_ref": "indicator--ea40df0d-4fa9-4537-b95d-59eea3e91872", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e079ca-a265-4fed-a4ff-db61e959dd53", "sighting_of_ref": "indicator--3afcd31b-958a-43d1-b3e9-b5fd0a34c3d7", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d35c51-ddbc-4800-b163-5553b42b0c54", "sighting_of_ref": "indicator--0b994084-d5c1-4515-a20e-f85cc23f09b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea49000-9447-47b4-8cef-4a272650ed40", "sighting_of_ref": "indicator--9e0f4e6a-c452-4eff-8f4a-08729ffd3bd4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60929a2f-7fec-488a-80de-1be0f380e874", "sighting_of_ref": "indicator--1824adb8-7cfa-4df5-ac8a-fc6ca7cc8a0d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033e2c4d-eb21-4ab4-ab0c-e428347dde33", "sighting_of_ref": "indicator--3a6242e4-3417-4107-9823-92842c57ed15", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6440853-7673-426e-beb2-979e1367f438", "sighting_of_ref": "indicator--5f788875-2572-4dec-b22f-cbee34a1117a", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69679ae8-54ba-4021-8c36-150fdf02ae9a", "sighting_of_ref": "indicator--02ca7d80-e12c-4882-b9b0-a3240c0079b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33af8836-f2a9-436e-aaf6-69a8e2cf420b", "sighting_of_ref": "indicator--dcda5cbb-8b4f-497f-9f13-0d7403e78b4d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3182f2b9-4040-4a83-bba6-132c7bebdd57", "sighting_of_ref": "indicator--20af0fd6-5f8c-41c0-9252-328cf81307d3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d012098c-29b5-4210-9f0d-727789d8fa16", "sighting_of_ref": "indicator--3f32a443-d6db-4d26-80c0-6c1ad56fb313", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479b8b2a-771b-4b7c-806c-832da0022f43", "sighting_of_ref": "indicator--730050c2-5090-4ecc-9cba-8ca073b8d669", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d4e1a5-04cb-45dc-8889-55ffd836d5d0", "sighting_of_ref": "indicator--e1119034-f408-4052-a467-e95686c2d108", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d6195-6150-4ffb-90bf-ed7e27e53df2", "sighting_of_ref": "indicator--1c66c62c-3309-4adb-ac4f-380580395469", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed47d49-de0a-4041-9444-d33d1884aba5", "sighting_of_ref": "indicator--f20a7663-9e01-4925-92b9-dfa0147170f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab39c6f-b003-4095-b4be-51bcd1678826", "sighting_of_ref": "indicator--beb2810f-cf05-456c-8652-a674b3b6bf03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f690bbe6-2266-4973-9624-be83544aba91", "sighting_of_ref": "indicator--80fde535-64c5-453b-abaf-22d974d76b4b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ff6aa7-8b8d-4dfe-a66b-6829050befe0", "sighting_of_ref": "indicator--132a7d46-9bd8-43b6-8fd9-c41eb7d081cb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9088402e-2a1f-442b-9222-99db97debf31", "sighting_of_ref": "indicator--be7e68eb-c8a3-4354-ad78-36b9accd0627", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2e84ca-ec39-4b9c-9df6-7b15397df070", "sighting_of_ref": "indicator--b522724c-aa85-4e84-b5cc-2ab498d434ea", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f8e30b-c36b-4e3f-a221-b957cabe20ab", "sighting_of_ref": "indicator--6a1faaf9-0458-466b-abad-e680a50d3fe7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877a29de-581a-4dcd-9dce-eab95323bd3a", "sighting_of_ref": "indicator--79919939-4547-415e-9d0d-2d5ac39ef6be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c2c61d-6a51-4833-8114-ea6528db2394", "sighting_of_ref": "indicator--0e516655-13a2-42da-b521-d507f097081b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d32d7c-1e5b-455b-973a-c35e72bf941b", "sighting_of_ref": "indicator--4a625b83-3baf-4890-9402-4779e7efea74", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08fa607-91ae-4bf8-8887-1be3548ac3e2", "sighting_of_ref": "indicator--9750c594-23b1-408a-85f5-ce1543157a03", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73113e55-366b-4130-a359-f1eebceeffd9", "sighting_of_ref": "indicator--be09b9f3-bdd1-449b-9ceb-d288a489b83c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afee881c-9960-45e2-9b6f-cfbcc2036832", "sighting_of_ref": "indicator--e34445e9-e811-45b2-9249-0ad305a7a6c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea803d5-d1c8-4485-8e5d-022bd0e71bac", "sighting_of_ref": "indicator--e34445e9-e811-45b2-9249-0ad305a7a6c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c012f17-23bb-4f67-bfe0-8161c505dbc4", "sighting_of_ref": "indicator--be53be0a-eb25-4e1a-a8c5-db4fba081dd0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843f9462-16ce-472c-b520-94f0f95c404c", "sighting_of_ref": "indicator--70e0c5b0-56bc-426a-abb8-7650101f4120", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e7e69a-629b-4745-825c-3a4bd4203d3b", "sighting_of_ref": "indicator--599155a2-1370-4595-b213-e29d05e797a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc59f8d8-a679-4f47-82b7-380d2048a49f", "sighting_of_ref": "indicator--873e1f97-88a7-43dd-a024-421c41c6090c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193bd3e6-2c3b-455a-9592-9ffff9de8c2b", "sighting_of_ref": "indicator--c0aebbf0-795a-465f-82ea-05f8d16bdf42", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4b67c9-411c-4307-9cb7-c7f5a0b06fa5", "sighting_of_ref": "indicator--ddca798a-1ec5-4e9b-a978-b94faaebfd77", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dacf7f6-d0d2-4fb5-b7fd-561e93e32377", "sighting_of_ref": "indicator--042f8dda-d177-4f8c-af10-aa28e4d6bc5b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc66098-58e4-4486-a44d-0fc7a665ece1", "sighting_of_ref": "indicator--ea749ae3-9590-4572-8012-303bba5b1389", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df82a7b1-e3e6-40cf-b9c8-6d88456774c4", "sighting_of_ref": "indicator--e63ae61d-7288-43f9-b88b-e148a6773297", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120cee7b-4055-43dd-b2bd-83e61a3365c3", "sighting_of_ref": "indicator--5d6ca86f-57b7-4926-9266-d15d9f558352", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c3d5ef-5ec1-4658-8c00-71ffffd81528", "sighting_of_ref": "indicator--93d4e815-fafe-4ddb-8b07-9f44f3631b6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e333567d-987a-4b4d-9f35-b5a5ba0f7403", "sighting_of_ref": "indicator--6462481e-e29d-46b4-8be6-5f50c9d72b4c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f5ee96-f336-4f76-8473-ec9f7d9fdb2c", "sighting_of_ref": "indicator--c9e6bde6-b671-42a3-901f-45593917f8b9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d771d55-fe53-4eed-b5c9-c0e754b5ef49", "sighting_of_ref": "indicator--2219b295-3c63-414e-a8f0-c08ac83fc65e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff0b3ff-b9b1-483f-9387-a374c46fa40a", "sighting_of_ref": "indicator--ef21d078-ac66-455d-9d31-634e03bf75ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d904d3-b08f-413d-a416-3956135b1dea", "sighting_of_ref": "indicator--8f81c6dc-ad6a-484f-bd3f-6b8b12cc50f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ca7213-e8e1-4e5e-aab5-b9b040e8ef55", "sighting_of_ref": "indicator--93e3b102-e5b0-4918-8f40-5a1d36213742", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c4fa74-7352-4513-ba16-f9493383c1cc", "sighting_of_ref": "indicator--fb35001f-b84f-4ac0-a079-602e27cf23a9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665547c2-2801-4633-98b9-8bf0675515ac", "sighting_of_ref": "indicator--b3060a40-137c-4ece-a6a1-61d8ec6e6460", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1118334-b95c-4dda-9a5b-0720ee40eb58", "sighting_of_ref": "indicator--25d28e84-9591-4816-bc2f-34a967e93838", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6fb3d3-6f46-4098-b6e7-e24f0638dbc4", "sighting_of_ref": "indicator--85bfefed-c903-449d-8ca2-56d63a7a8330", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8e95ee-fa91-4a6d-9a21-12900e7502c3", "sighting_of_ref": "indicator--457f7295-bffa-4e16-92f7-1cd919c34be1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a7f19d-5a51-4f5d-8808-708468c216e8", "sighting_of_ref": "indicator--2d43725f-6282-40db-8ddf-ec2902a25bba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b89b76c-9400-4101-94dd-c03eb011a253", "sighting_of_ref": "indicator--2e7ee4fc-e14b-4e1c-bdc8-584989a986aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09439682-46cd-42c1-8aee-d496a577ce56", "sighting_of_ref": "indicator--1ce9c408-ad1a-4cd6-ab5b-40315553cacb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93948009-2344-467f-b7aa-909af6ddc41a", "sighting_of_ref": "indicator--1652f5e4-9877-478a-950d-98e098babd34", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b17befb-9fed-44ff-8fc8-2184556ced29", "sighting_of_ref": "indicator--45eafddf-ba0f-4414-be42-852677b23b35", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43f6c61-c143-4e3f-8035-5dba8b98d930", "sighting_of_ref": "indicator--f00eb8b5-0173-41c6-b2a4-9296db3d40cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2c0d05-26e9-4297-8df2-e83ccf6bbf69", "sighting_of_ref": "indicator--eee75784-aa43-4633-a236-5c31384b3811", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c8abdc-2b1c-4439-995a-b2a844d37c96", "sighting_of_ref": "indicator--a9f0a9d9-9b04-4277-a47b-4d05d032b662", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9733b61-e582-4ef4-ad28-eb6146211f7c", "sighting_of_ref": "indicator--4eb8531b-1fa3-48eb-9d6e-0dd5a0045bf4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf02ccfb-fb8d-406c-97eb-5be5a92f6998", "sighting_of_ref": "indicator--6c507aec-eaf8-44ef-91d2-143cc49950fa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcea52d-70bd-45be-8772-3dfc7abd4ca5", "sighting_of_ref": "indicator--dc914da4-907b-4a73-aa18-594aba61d302", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd02da0-7f2b-4e31-8b3a-9058be7570f8", "sighting_of_ref": "indicator--ab3211d0-c213-4b2f-89a2-0e270c6ddc7f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472ede5b-d6af-4827-90af-ddff39c98e7b", "sighting_of_ref": "indicator--b4095e4c-7441-479a-8c00-3cc83c42efa7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610a90c2-e582-4ece-81c6-1a1723424691", "sighting_of_ref": "indicator--f7681e16-164c-4d21-91b5-780c03368693", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820d7316-1645-4bdb-a5b2-0651e72b9d16", "sighting_of_ref": "indicator--76892ac4-a460-44b4-b683-30e775844bc4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb64cbc-002e-414f-a00b-81b78d9bf596", "sighting_of_ref": "indicator--898ddcc4-f2d7-4fe1-96bc-b0459fbde261", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f9360e-c800-4305-9fa5-27ddf130f744", "sighting_of_ref": "indicator--898c45e2-ac90-45d1-8fe3-93b6fa4804c8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef46e1f-08ae-4f0f-869e-ba70c4043210", "sighting_of_ref": "indicator--83c9b762-4ef2-4d99-b1af-2453ae53b92f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a93beb-a310-448d-a88b-bdaadedcd067", "sighting_of_ref": "indicator--2898a1ba-2b50-44e3-9216-dfecc8032c41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c9636d-ed25-4284-96cc-230f82f9e07c", "sighting_of_ref": "indicator--b9634768-b23c-4726-b970-55ac4cbaf66d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae138369-4765-4d80-8648-42d0ff716b26", "sighting_of_ref": "indicator--467e2e30-0c99-4cfc-afe7-1f595fe0d9db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee1909c-2ea1-4a64-a1bc-61139a953055", "sighting_of_ref": "indicator--5a68fc2b-4572-4346-a447-eba587343c69", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d548fe-26de-4289-8ef6-d0213a4450e6", "sighting_of_ref": "indicator--43076886-c89a-4a4a-ae30-169483d0a373", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454d6f8d-782a-4956-a5f0-d1f9e2347e90", "sighting_of_ref": "indicator--5e01676e-1e54-4b5f-b752-94b1f51f22f8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34405603-b71f-4956-9641-1b48377a2a51", "sighting_of_ref": "indicator--46d21e25-adff-4f63-a6c6-fca63e46b28b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdbfd0a-b2ac-4643-998f-102fa4592f08", "sighting_of_ref": "indicator--d7527254-a796-4d6b-b241-b2a6fb69bdc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9300a0-0a0b-485e-8c0f-ff02907be2f9", "sighting_of_ref": "indicator--51385294-8b54-487d-9951-e1561c916ac2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71215f67-b65f-4404-8b9e-58cf82bcd602", "sighting_of_ref": "indicator--aa134fbb-744b-44d3-8167-2b7a1fb70ef7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c76f1f-d7d9-4018-a8b3-3fd307640c4a", "sighting_of_ref": "indicator--5c08ae76-e916-4046-82c4-3aed0179be4a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31e3eee-fb36-45e7-a1dc-af2972868647", "sighting_of_ref": "indicator--70246a4f-4f62-4729-b429-6dc5938c4cdf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1680c370-53b6-4da8-b5e9-c3c1787bb844", "sighting_of_ref": "indicator--198793d8-6d32-4641-b34b-716de660fd43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024a1f6a-429b-466e-bffb-903f336290af", "sighting_of_ref": "indicator--b341533a-e4d1-48d7-8942-fd10ca812bcf", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5b0159-4611-4560-86ad-390bde23ded3", "sighting_of_ref": "indicator--b5b74f71-8eb2-4372-babe-4dc928713ad0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64e6ecc-8982-40ce-88eb-163c2c82eeb7", "sighting_of_ref": "indicator--dfaf4043-da83-497a-a103-b6008f8f66bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f42026-f2bb-4753-9f72-fec1bc9fb566", "sighting_of_ref": "indicator--4f94f43b-2af1-45d1-a127-1957231e7ae2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb4fa21-6c51-4e60-b7e1-e24c50e9b182", "sighting_of_ref": "indicator--5163c061-afec-44fe-816f-786e9d082750", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5181e0-19de-448b-8449-b50825f10f81", "sighting_of_ref": "indicator--9f721b22-d7a9-4b84-b2db-95cc9b3d75c7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e6c097-ad4a-4450-b375-c8b4ac936c1a", "sighting_of_ref": "indicator--2563513d-63d4-4ee5-84a0-5a053e22552c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d1fd8e-7035-4bd6-8c2f-ee4e6446bbdf", "sighting_of_ref": "indicator--9936f5a6-ea48-4d44-a547-8047aa78c5d8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b91ffc-5d80-4a14-a6ac-816e23211cd5", "sighting_of_ref": "indicator--be0cc0ee-d696-4007-bf24-98d0f528fadb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea59ccf2-fe92-4d03-a26b-e9f6dc3c67b4", "sighting_of_ref": "indicator--175b7721-a290-459f-a683-d8bb606e56c3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04c88eb-75b5-4dc9-a08d-98f1ae636847", "sighting_of_ref": "indicator--569f1028-ec75-42cc-a1ca-14c0017ac7b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880adf26-0508-4baa-9e71-888bfe2f72b2", "sighting_of_ref": "indicator--05a263a2-0710-4120-89ec-94ee8fd92acc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ed33de-dfd1-4232-8dbe-542adf113af0", "sighting_of_ref": "indicator--f5eb54b3-ed28-4b77-992c-e7320bf8d160", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c515ce-ce37-44ef-855a-d0beb6a1b8ee", "sighting_of_ref": "indicator--87207234-8aae-4091-87ac-990d818c87b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef91164b-9b0f-49ec-93fe-1c5af620d936", "sighting_of_ref": "indicator--f40408ef-2706-4fac-82d3-af1b17eaf788", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10866ff5-ea5b-43a1-963e-3350d109ff7d", "sighting_of_ref": "indicator--39886864-19db-413f-a066-5dee662306a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04857fa-0305-4055-a4db-aa80c7876eb4", "sighting_of_ref": "indicator--146870ea-09a4-4f7c-8e95-1debd55955be", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a94f10-9264-4047-ab63-b709fbfa6290", "sighting_of_ref": "indicator--146870ea-09a4-4f7c-8e95-1debd55955be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d19a66-98cf-4f73-bb0e-503f89bd640e", "sighting_of_ref": "indicator--119c6a95-b0d0-471b-93cb-09cee6e1e214", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26f67de-3831-4353-970c-75cc0143d05d", "sighting_of_ref": "indicator--3d0677ec-2c86-41d9-af8c-2e5300bc5e27", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ea46d1-969f-41e1-8ed8-59a39494407c", "sighting_of_ref": "indicator--49b689f9-fec0-4c4d-980c-77b7f03409a5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247936bf-e925-4884-89f7-ab9e717b4b2f", "sighting_of_ref": "indicator--4f6a711b-3758-456f-8393-e671d6c1849c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8973a853-1b81-4efa-bdcb-c767a4bd6561", "sighting_of_ref": "indicator--46d03ce8-9c89-4f61-9654-214d2d6ff202", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2846226-8399-4759-a052-d936402a543f", "sighting_of_ref": "indicator--ea880117-7791-438c-b566-8e2cddaa45ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b476391-dea1-496c-8ff1-c03500c6784c", "sighting_of_ref": "indicator--dffd9814-5980-4d61-ae2a-8cf96f62f2ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01664154-4eb9-4e6f-b8b9-2f8cba630944", "sighting_of_ref": "indicator--3556f8b5-481f-46a4-8be5-9940e6f5488b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911a3b9d-18c1-473f-b8ba-aeb2d5bae754", "sighting_of_ref": "indicator--37f01e92-e25f-4009-af0b-5515b9bef544", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cbb7c3-0970-4bb1-b24c-5141c389438e", "sighting_of_ref": "indicator--56134d31-267b-4d62-884c-1befa0d6a5e9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1f3305-4dba-4050-b851-504f98bcb662", "sighting_of_ref": "indicator--adf29808-d5f5-4a0e-a18b-e41b76f94b42", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c94d92-6e5d-4ee6-8f27-53975af2be7a", "sighting_of_ref": "indicator--641da5f9-508f-4212-ac97-d2c61ec94192", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a479755b-8e14-48eb-866a-a3b2be36cbfa", "sighting_of_ref": "indicator--2f782047-903a-416c-8c56-ff1990def831", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ea0917-0bd9-43fc-a271-7a9267b71d69", "sighting_of_ref": "indicator--dea96dc1-8671-4d6d-9576-6d177b9bc17f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3efbd9-5ba7-4cf9-acd2-d8447b40e67f", "sighting_of_ref": "indicator--4673492c-6654-4423-bc32-1b81daa384cf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f41bf9b-f619-425b-a8dd-5a95feeb9c5d", "sighting_of_ref": "indicator--d557685e-9be9-4ebc-89d9-50941b60b376", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7d229d-d6e0-4a72-8da4-e2f838e45db6", "sighting_of_ref": "indicator--abba400c-a78a-42bf-83b0-53e71615e320", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a922f1-a912-4a41-8143-9e5a8640c534", "sighting_of_ref": "indicator--abba400c-a78a-42bf-83b0-53e71615e320", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287c3baf-0b30-4f72-8dad-47d821ccb504", "sighting_of_ref": "indicator--3e570970-c6e8-43fb-aac3-626f410e780d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b256f46-e4fe-4273-8ada-74fd2e82557c", "sighting_of_ref": "indicator--3e570970-c6e8-43fb-aac3-626f410e780d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0494b6f-0f7e-418d-b818-ea2b90cdc8f3", "sighting_of_ref": "indicator--621f9999-75ec-4724-ab3b-3d8f91b1f5bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79419380-627e-4eea-9163-fdbed9929ad3", "sighting_of_ref": "indicator--621f9999-75ec-4724-ab3b-3d8f91b1f5bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e12889-d98e-4c4c-8638-253aa609633e", "sighting_of_ref": "indicator--a3d47cc6-a475-4552-afe0-fa99e364ee71", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d772c47-0620-4999-a90f-ae450006b75d", "sighting_of_ref": "indicator--38fd0fc7-be4d-4394-8eaf-f811f861921c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8d06f8-1613-4b6e-9335-19fdb10b124a", "sighting_of_ref": "indicator--6d8faacf-caa5-4076-95da-7ecdf7500bb5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b31dc96-ca7a-4f16-997e-58c8784a8567", "sighting_of_ref": "indicator--bc21ec81-78a2-42f6-85c7-49161618aa71", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec560cd-fd56-41eb-8b80-5607913f95f5", "sighting_of_ref": "indicator--bc21ec81-78a2-42f6-85c7-49161618aa71", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d5cb45-01b8-41e0-8aa9-ca7ce4e57fab", "sighting_of_ref": "indicator--8cf83b82-725f-4f00-b06a-b7ff95c38871", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201f2708-722e-4ae0-bf4f-05b390bc5d9e", "sighting_of_ref": "indicator--8cf83b82-725f-4f00-b06a-b7ff95c38871", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29e50cc-08a1-4085-a30e-2a8f2554a63e", "sighting_of_ref": "indicator--206e6d83-d52d-4086-a1f9-a5babedb8295", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5631c8b-89e2-4e3e-87ac-9b13c47c30be", "sighting_of_ref": "indicator--9556f18c-58cf-4150-8b2b-e0f238699398", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e461d9fb-7683-4974-9aae-4eee12fc8df9", "sighting_of_ref": "indicator--96002035-9ce3-4531-b970-68e00cc0a7b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aab1b72-f017-4f8a-9026-dc3d9085ede4", "sighting_of_ref": "indicator--673105f4-3a06-44f1-82a7-f929a0159f29", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6f0048-0c42-4f4d-9d95-a2473b236281", "sighting_of_ref": "indicator--673105f4-3a06-44f1-82a7-f929a0159f29", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528fb3d5-30a1-4c23-a336-a5ff8c6a831c", "sighting_of_ref": "indicator--df491a27-0b68-43f0-b30b-2bcb1587e9e9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec08a0c-fcbd-4ce9-ba3f-00b876a2fb00", "sighting_of_ref": "indicator--df491a27-0b68-43f0-b30b-2bcb1587e9e9", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ab286e-28a8-4cc3-9d2c-13263fc16846", "sighting_of_ref": "indicator--c2258930-f778-4284-b02a-c825206819ce", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62145118-57a5-47de-97de-3403dd2d3b55", "sighting_of_ref": "indicator--53fa9c96-f5b0-4bd5-92d0-4c702a450fcd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69605a73-f216-485c-9c38-024523875161", "sighting_of_ref": "indicator--53fa9c96-f5b0-4bd5-92d0-4c702a450fcd", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebce1bcc-e006-427b-b96c-34fa15bbc1f6", "sighting_of_ref": "indicator--8387d9b9-3725-4ff8-b50e-6eb0a7ea3414", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e8293e-bbb9-4bf4-b322-3aa88e6c32f5", "sighting_of_ref": "indicator--8387d9b9-3725-4ff8-b50e-6eb0a7ea3414", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d0cabf-feec-46f6-9557-6daae9aa6a61", "sighting_of_ref": "indicator--fd5de290-ea35-44b8-9aea-c40ec019134d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01f40de-c4e3-44fe-978c-f1e803672c61", "sighting_of_ref": "indicator--0725075c-a6b5-4ea7-af3e-aab325ae4d38", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17b19c4-0ae9-494f-828d-f2eafbf6717a", "sighting_of_ref": "indicator--0725075c-a6b5-4ea7-af3e-aab325ae4d38", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed22111-ccbb-48c7-b612-de5531b0912e", "sighting_of_ref": "indicator--c0e5ea2b-38d1-4671-a742-2615a95586d2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b634dc5f-c833-4b47-87a0-fe90cbf7963b", "sighting_of_ref": "indicator--c0e5ea2b-38d1-4671-a742-2615a95586d2", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9912aa3-b1be-41c1-b172-5ed903c50bfc", "sighting_of_ref": "indicator--c0e5ea2b-38d1-4671-a742-2615a95586d2", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688c5c81-41d4-410a-b856-98b8634fbf12", "sighting_of_ref": "indicator--113b4f2d-0962-4b06-8c3e-8987641ea982", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223a4fe0-ea00-40bf-8d48-f91a627626de", "sighting_of_ref": "indicator--713c73e9-d654-4584-a6c1-d1e567beced5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ba4f1e-323c-456f-ad61-7d8412f17c38", "sighting_of_ref": "indicator--b44e0a92-44e1-4cf4-be08-191b193d9a97", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1ec477-6e99-42a3-9f0f-d6f95a1c84a2", "sighting_of_ref": "indicator--c7f8f77f-929d-4359-9e16-031fbeec07e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1665bba-cf30-419a-a870-f110ac91bfe6", "sighting_of_ref": "indicator--e1e033dc-9b7f-4ee5-86f0-906fa3dad705", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4c5eb3-154b-4c12-90ab-57c62df3095d", "sighting_of_ref": "indicator--9d8fcd35-6d59-4787-b6b9-3a529635cf38", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215cfda6-19aa-4c52-ba53-b595fd7343ae", "sighting_of_ref": "indicator--ebb82a32-9610-42f8-b52e-0fb3d56bb1cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1cec9c-830b-455a-8d9e-41694fcaca51", "sighting_of_ref": "indicator--ebb82a32-9610-42f8-b52e-0fb3d56bb1cc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95828aea-5af8-476d-a176-7c37eed5f622", "sighting_of_ref": "indicator--848a5599-cde5-45e8-9677-27137a1947e1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35d1eab-ebdf-4cd7-8dec-1b1f40e18c99", "sighting_of_ref": "indicator--848a5599-cde5-45e8-9677-27137a1947e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43952636-359d-4625-bd4e-d6805719b60b", "sighting_of_ref": "indicator--6e5e704e-2450-4b46-89db-0027faf0e678", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a9ab25-b7c0-4138-958c-3a3a5ad677e6", "sighting_of_ref": "indicator--279f9659-2d55-4393-b199-cd7800b6cb8c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8bb761-1d6c-4a83-a2ce-6edb5d704e2f", "sighting_of_ref": "indicator--279f9659-2d55-4393-b199-cd7800b6cb8c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92cf969-3da1-4676-aa83-eb1af74ed941", "sighting_of_ref": "indicator--279f9659-2d55-4393-b199-cd7800b6cb8c", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1541477d-4591-44c8-9e4e-3d6163308672", "sighting_of_ref": "indicator--c23b7ace-911a-4e74-a913-0512f8169c19", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396c0a04-9020-421c-805c-4f2ea2d54f0c", "sighting_of_ref": "indicator--c23b7ace-911a-4e74-a913-0512f8169c19", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8173f9-b44e-40fa-93ca-82de8c6b3f0e", "sighting_of_ref": "indicator--476433ea-6960-470c-8e78-e8fdee4e9d34", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ec6024-2db3-44cb-8e92-828fce4150e3", "sighting_of_ref": "indicator--476433ea-6960-470c-8e78-e8fdee4e9d34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a79d0dd-ee56-48e7-bdf6-24af56905b66", "sighting_of_ref": "indicator--a538bd12-1eac-4e75-8cfe-811cdbfa4db6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86f16e8-3d61-4f18-8623-cab41749ecf8", "sighting_of_ref": "indicator--a538bd12-1eac-4e75-8cfe-811cdbfa4db6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cb29a0-8cac-4ed4-b59b-423b966a1161", "sighting_of_ref": "indicator--e5a43521-311c-44e5-9ea3-e88077c7efb6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1d563e-9027-40b2-b704-2fe030873cf9", "sighting_of_ref": "indicator--e5a43521-311c-44e5-9ea3-e88077c7efb6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6852cf5e-1409-4b9e-bcd5-9c5ca5fd3378", "sighting_of_ref": "indicator--8d6e0437-0444-4942-9dff-142805bb2ae6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3812278e-f061-4fcd-aff3-bc935b35edd4", "sighting_of_ref": "indicator--e20be88e-b30a-4504-8cf6-49198a47d8c1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91f9ef6-42f8-44ae-a9d4-b1c6ce2208d7", "sighting_of_ref": "indicator--a50845df-b1e5-4ab7-8bea-c98322f217b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4f5131-7f1a-4e83-968a-f1adaa4f438a", "sighting_of_ref": "indicator--b71c8fe5-29d6-4348-ad63-f6e16d213c99", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c325df-228e-454c-b0ef-6ff71092ac0c", "sighting_of_ref": "indicator--b71c8fe5-29d6-4348-ad63-f6e16d213c99", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa66c6cf-17a0-417a-8d3b-6a8563fe56de", "sighting_of_ref": "indicator--f9eb9a08-5503-41d5-86e6-dc2e3e14fe8d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19aa31bf-debe-4d67-843e-c0656298e7e0", "sighting_of_ref": "indicator--ec89c9bc-c4dd-4fd3-8627-1636cad12970", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e67a46d-0d74-4465-ba3b-7bc53d0b8ee5", "sighting_of_ref": "indicator--a1df2353-f9c2-4d16-8030-3c4d8867428f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24e444f-e463-4729-8a10-e63a10952015", "sighting_of_ref": "indicator--bf388a16-2191-48d8-bfef-cc1eacbc4de5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f87824-ec49-4392-91f1-3e8efb5db4e8", "sighting_of_ref": "indicator--bf388a16-2191-48d8-bfef-cc1eacbc4de5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42997fa3-8536-44bc-adbe-9b0ded81f667", "sighting_of_ref": "indicator--28e24193-fd21-4455-8252-b09e5b109c78", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516f7468-c813-4782-9a90-cfcf89670816", "sighting_of_ref": "indicator--28e24193-fd21-4455-8252-b09e5b109c78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def452e4-f93b-4796-b851-a1ce15a7e450", "sighting_of_ref": "indicator--fe188e99-a907-4951-9d8b-3fa013f37fa9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64029eb1-6492-4a73-829e-4cfebc6dc879", "sighting_of_ref": "indicator--8b6a9480-1c6a-4472-b0e1-c2a958471654", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0361382-7c0e-4775-8ff5-b5a255be88d2", "sighting_of_ref": "indicator--7656f647-5de1-4609-83bf-859c63dfec84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a411cfd-1e94-4a94-b021-b13380810934", "sighting_of_ref": "indicator--edb36726-5eac-433e-8a66-07cccd7a819f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b665f6-952f-442d-af8d-d0509f8eaeaa", "sighting_of_ref": "indicator--bd8fde96-c592-4e81-a721-8957d4512e54", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a648b76e-1bd8-46b4-a1f1-3586ad310339", "sighting_of_ref": "indicator--fdd12719-f7ec-44f3-b640-326205668bb7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87755ace-e65e-43ff-975e-ca3b2505d67a", "sighting_of_ref": "indicator--fdd12719-f7ec-44f3-b640-326205668bb7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a73d004-71e7-4eab-8b57-d05cc1b217ea", "sighting_of_ref": "indicator--2f1cd526-31bc-4e52-9c29-49b5f4260ccb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd0068b-b5fa-4462-8317-3e6d3a1918f7", "sighting_of_ref": "indicator--6670226f-00f2-4c5a-a359-9f7d6c89de95", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad277e6-94aa-48d0-8d15-f9e4ba33612d", "sighting_of_ref": "indicator--dd58ba43-f708-4966-a84b-d3e43f67ab6e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8547e86-fd13-4c8c-af6a-c766ce857d61", "sighting_of_ref": "indicator--dd58ba43-f708-4966-a84b-d3e43f67ab6e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38dc814-0b40-4bc7-aaa8-a53454a32295", "sighting_of_ref": "indicator--883f4e91-85f4-4e6e-9376-d7493c10e2a1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe86d3e-75c1-4dfb-89c9-23c939c7627f", "sighting_of_ref": "indicator--84e39d04-10f0-452d-8dae-325b545d1b76", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2279eb24-c8ef-4f36-9133-1b3273a6d95c", "sighting_of_ref": "indicator--b9c125b9-2671-4119-a74e-68566e8e4845", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f8df2b-2ee6-4851-8880-55dc48a31662", "sighting_of_ref": "indicator--ad1bc485-b56b-4b82-9dee-fe25e5a6ecde", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267148b1-707e-4270-b4e8-228e837ae483", "sighting_of_ref": "indicator--ad1bc485-b56b-4b82-9dee-fe25e5a6ecde", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27196dc8-da5e-4fd8-8018-a695774581d0", "sighting_of_ref": "indicator--c844e0f5-28fe-4410-9b76-d44d62f7c26e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b326e7b-e282-4864-b63e-f14679bc1ac5", "sighting_of_ref": "indicator--0eed178b-c5d9-44bf-adba-c28f82638ea2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f679e87-fcbd-46c5-9ba4-066c34b388a6", "sighting_of_ref": "indicator--0eed178b-c5d9-44bf-adba-c28f82638ea2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa9294e-cbd5-4b7a-b842-da2344b8eb87", "sighting_of_ref": "indicator--69630145-da03-4f62-8d6c-5d4b55c838cb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf6c908-8350-4d2a-ba99-52b1a1a88e96", "sighting_of_ref": "indicator--6cc3ab7e-be5f-4338-92cc-c9f553c590c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4128183-5cab-4f5b-807f-b1010a09d7d7", "sighting_of_ref": "indicator--6cc3ab7e-be5f-4338-92cc-c9f553c590c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb9e82f-137a-4ea8-857a-6811b2cd59ab", "sighting_of_ref": "indicator--eef8b0cc-2910-4b8f-91db-c4a143681df7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0926c2cd-bac3-4258-a87f-54649c52d410", "sighting_of_ref": "indicator--7e60df88-2b87-4875-8ea3-7dda9a206710", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85aff8e4-144a-4846-997e-3fcd399e044f", "sighting_of_ref": "indicator--166c26bf-18f8-4793-8921-25685a1e767d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6d6ba0-6d46-4b90-9bd5-cd9cd7ae389a", "sighting_of_ref": "indicator--11f9b638-0196-4b3f-9f50-b008eec9fe6c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92339693-69db-4406-8743-08e61adb7d9e", "sighting_of_ref": "indicator--11f9b638-0196-4b3f-9f50-b008eec9fe6c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e760eee-c66c-412b-a6c9-84bcc07fa5e9", "sighting_of_ref": "indicator--0c8d774d-1ffd-41a1-9302-b27ff76af693", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bacee5-0b98-485e-8749-a76212944f77", "sighting_of_ref": "indicator--0c8d774d-1ffd-41a1-9302-b27ff76af693", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7bef93-3c7c-472b-8cb8-445a26536a23", "sighting_of_ref": "indicator--f7f9082b-e4f0-46db-8ef2-e94c206de4ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1ceff5-d766-49d9-8dd2-cb4e4002c0e5", "sighting_of_ref": "indicator--f7f9082b-e4f0-46db-8ef2-e94c206de4ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ee7f0a-e1b3-4529-8282-7321cebfe1f9", "sighting_of_ref": "indicator--ff9003f7-3a19-4606-bfc0-a473ca6d246c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a32554-d957-4114-bb2a-0c43dea2881e", "sighting_of_ref": "indicator--ff9003f7-3a19-4606-bfc0-a473ca6d246c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4679b60-67da-4084-8825-226f822b3acf", "sighting_of_ref": "indicator--a0f41cdd-296a-4ff1-bbac-1a4c31161cbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4139fb3-5bb8-4c03-b97b-f1af32e01104", "sighting_of_ref": "indicator--a0f41cdd-296a-4ff1-bbac-1a4c31161cbd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42f8060-ade6-4ceb-a9b2-84e6b5969e16", "sighting_of_ref": "indicator--fd6f3f6f-6093-4010-82a0-dff9b2f79c39", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258218b8-d773-4a27-8016-233d7149c02d", "sighting_of_ref": "indicator--b621aa57-68a6-4cd6-8371-fcee2f4ae058", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa7de19-3aaa-4fa0-87a7-f61648308dfa", "sighting_of_ref": "indicator--c57b3331-6801-467c-a179-2b757e4831dd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c890465c-fb60-4d33-af56-d634c4bf8958", "sighting_of_ref": "indicator--c57b3331-6801-467c-a179-2b757e4831dd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1201ca29-0f97-4fb1-994b-7f986611c4d2", "sighting_of_ref": "indicator--697e204e-01c6-44ce-9cdc-8359b78f8b1d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f98369-f6c8-4915-9c64-ea9943841271", "sighting_of_ref": "indicator--3f4f23f7-b891-451e-a2a1-e16710b92f4a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a33a14-5fce-4481-b1e7-5e769fd05aca", "sighting_of_ref": "indicator--a70745c6-123e-4888-bff9-6c302f3ed9d6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767ef455-99e6-4eeb-858f-5413c6ef901a", "sighting_of_ref": "indicator--a70745c6-123e-4888-bff9-6c302f3ed9d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120066bf-350e-41ec-8f7e-623af42235db", "sighting_of_ref": "indicator--f447f697-750b-4442-addb-8d25f9e5cb10", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6142e0-9dcd-46a3-a29c-d3873f8fa82b", "sighting_of_ref": "indicator--f447f697-750b-4442-addb-8d25f9e5cb10", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745b02c9-c65b-4856-9da7-910ba672403b", "sighting_of_ref": "indicator--7419b631-f059-4729-9fb8-a03e2f869346", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218ff85e-54ac-4caf-8631-665750ac8cb5", "sighting_of_ref": "indicator--7419b631-f059-4729-9fb8-a03e2f869346", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811b6105-42a7-4fdc-ad37-b3caeb6c1be0", "sighting_of_ref": "indicator--b11ffcbd-2611-4e85-97df-24ab9cbdf888", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c89cd1-b2ef-42e0-bfb8-6ff444ef2fc4", "sighting_of_ref": "indicator--ebcf991b-5fc1-425c-96cc-92b27194eac1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0703ce1-eb28-4ed6-a11d-f8ace8640836", "sighting_of_ref": "indicator--d85bf037-19b7-4d1d-a795-f251a393afa8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcff433c-7257-4924-81cc-2115d8d8e38c", "sighting_of_ref": "indicator--3045abdf-3e49-40f0-aa2e-365e9b1ddd3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2959d9e7-9988-4814-babc-0cfa745903f7", "sighting_of_ref": "indicator--cb0204cc-544b-4007-ad8a-433f2471e4f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94deaf3-0c00-4d16-a8b7-de76512ecc72", "sighting_of_ref": "indicator--26423a86-541b-46bc-af59-699e6ec07233", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5fb363-0604-4f14-9c2f-d2ea67996924", "sighting_of_ref": "indicator--626560c5-5131-40b6-82cb-9ec133990442", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ef2639-3058-4e4b-af8b-da9b48c32674", "sighting_of_ref": "indicator--8abe8ba4-441e-4ced-a0f2-39781f97dd88", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1be8a4-f709-46a7-9354-da8bb4fd462a", "sighting_of_ref": "indicator--aa5b25aa-8f6e-4357-8f46-f009ee0b308c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b25a23-ee4d-4a35-92e7-633c490f1fe9", "sighting_of_ref": "indicator--45f8a978-3a37-406a-aab9-95fcab51adf8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be02ec4-a45b-46f3-af3b-8ca1a4b66eb1", "sighting_of_ref": "indicator--1b209d92-9b1a-4376-8a2a-bae49d33ce45", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d10c92-3175-484c-baf7-63c737a49e1c", "sighting_of_ref": "indicator--1b209d92-9b1a-4376-8a2a-bae49d33ce45", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe7fc32-b5d5-4861-8bd2-5647f3e166da", "sighting_of_ref": "indicator--745948c8-277e-4771-976b-146dd5b02dc4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e142c64-1e47-4c7e-a941-fe48264c3136", "sighting_of_ref": "indicator--5aedfd0a-84aa-44a4-a30f-50c141abaf8a", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51dee97-9769-49e6-972a-ecf51b3bac61", "sighting_of_ref": "indicator--e932fa53-4ee1-4980-8f7f-23a72b2aa86f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4258f77-216c-4595-a01d-b79498bd7155", "sighting_of_ref": "indicator--fbeb376b-37d1-45b8-ba44-4a59dd692c93", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4599b8-871b-485f-96ae-503fb2f4c60d", "sighting_of_ref": "indicator--c328ae6e-2ea4-4af8-9a67-54b1a762f396", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20474b98-3db4-4195-99b3-b370447e057d", "sighting_of_ref": "indicator--8fb67e9a-4115-4710-810c-eb4215bdf2bd", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e97c809-0b2f-4873-9760-6a1afa9f95c7", "sighting_of_ref": "indicator--91978715-b12f-4fb2-8076-270a2c8654c2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48af2a90-b392-4cdd-b26a-c967e5db661b", "sighting_of_ref": "indicator--848a2fd7-7ce5-463d-b16c-38b1ecfd41a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49933a7c-4aa6-4509-8180-e82686d53a91", "sighting_of_ref": "indicator--f95ecb22-eb8d-4968-b1f6-54284db9b09e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc8006d-d91d-4da1-b6af-adc00b46d7da", "sighting_of_ref": "indicator--16a18f9d-2be7-4549-b252-dcacbf23cba1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cebf975-0852-4b26-8c83-cb1decd519ac", "sighting_of_ref": "indicator--43185dad-5bc4-4cc3-932c-6a88276cd875", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0233b240-edaa-407d-b5a5-147e8db5c0da", "sighting_of_ref": "indicator--49b891e7-36c4-4d5c-9d4c-148aba5cdf3d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4f81d9-9598-4ceb-86ad-bc798e5fda18", "sighting_of_ref": "indicator--71efa3e8-0b68-4623-a90b-acf5fca57ca4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490f0ec1-cfa4-46fb-81c8-c288bac10fe0", "sighting_of_ref": "indicator--71efa3e8-0b68-4623-a90b-acf5fca57ca4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937d8ffb-ff60-4d59-81a2-33c346fb41c4", "sighting_of_ref": "indicator--5ca4ecac-169a-4d4b-ae1b-5428ee65d4bc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5822994-ca9b-4327-acad-d91108b69ddf", "sighting_of_ref": "indicator--5ca4ecac-169a-4d4b-ae1b-5428ee65d4bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dae988b-bf5b-4cf3-ba90-92166ea9b413", "sighting_of_ref": "indicator--903d35eb-4372-4661-bb6a-0881c9b2ad05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a468afc-5b66-4385-b0fd-58c1acb73250", "sighting_of_ref": "indicator--903d35eb-4372-4661-bb6a-0881c9b2ad05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cfaf0a-d4e5-4c2f-ab5a-1ca3bdd7d308", "sighting_of_ref": "indicator--af3e0d50-3eec-40b7-949f-e365a21eedb4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d13dc52-473c-47f3-bae9-b016483d5f17", "sighting_of_ref": "indicator--af3e0d50-3eec-40b7-949f-e365a21eedb4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29cbe65-78d6-48fd-81a3-384be889a7cc", "sighting_of_ref": "indicator--1ff4bf52-db9a-4a6e-8cf4-f411cb4b5628", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829acdbb-8fa9-4e58-8861-5f99c862ebe3", "sighting_of_ref": "indicator--cbd12bac-908b-4c42-bde2-bb8359bace8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f54241-2610-4584-a36b-82553a2b6711", "sighting_of_ref": "indicator--80a733a5-7ad2-4dda-ac36-7c23e80d5881", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3295ddc9-0928-4f2d-a4e7-ffab00b549cc", "sighting_of_ref": "indicator--5510ea9e-821a-4304-b3be-bd0afba0aa1f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef52d3e4-c0e2-4502-b3d7-6fc8a17e1e95", "sighting_of_ref": "indicator--5510ea9e-821a-4304-b3be-bd0afba0aa1f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfd46e4-3179-4c44-b19c-b2b9073f82c0", "sighting_of_ref": "indicator--3b0c54c0-d8e3-4816-bafb-d4f52f16c7ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ff0635-a753-4128-b335-205ed665ce55", "sighting_of_ref": "indicator--da047f16-4986-4cd3-bf39-ec031efc40e3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfc6a99-6c2e-4274-aa49-885a22ff1e21", "sighting_of_ref": "indicator--da047f16-4986-4cd3-bf39-ec031efc40e3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a86b1f-9c4c-4da3-a9e6-74ec82a5363c", "sighting_of_ref": "indicator--8fac93cc-a1be-4b9c-bc81-4458ebb7601e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bad2b83-bb54-4cc8-9a91-923771e9b330", "sighting_of_ref": "indicator--45f54f91-b1b4-42ad-9612-8502b591fe78", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643cba09-6cbd-4008-85d5-91fef0caa418", "sighting_of_ref": "indicator--8865a35b-4512-4f3b-ab21-e6c15e567df0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540a2547-1e4b-4a88-800a-77ec3349d56c", "sighting_of_ref": "indicator--db82abfb-f18e-4ff6-a646-1cd415b4a232", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a15175-05fd-4ba7-9ec3-ea744bd0cc4e", "sighting_of_ref": "indicator--a5883227-ba0e-454c-9424-58983c126757", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685290af-2404-41b1-951c-471d4331cc3a", "sighting_of_ref": "indicator--412994c1-e013-4cfe-ac42-262f2ff7564a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf530f4-978c-4e00-a3b0-074446a4ad4f", "sighting_of_ref": "indicator--7b77e945-b9f2-4999-8303-9d68f26f87e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244f6bc6-440e-468c-8771-f85d794bb11a", "sighting_of_ref": "indicator--3d504ab0-fb21-4fcb-8bce-2156459775b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f814644b-bfe3-4bc0-8abc-1603c0e39db2", "sighting_of_ref": "indicator--37f86108-c7ad-4eef-b2ff-23bb01a71449", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ad2745-a287-45bd-86c5-984b4aa0d304", "sighting_of_ref": "indicator--8bfede68-6277-4caa-8624-9b1895ecec1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0620cccf-bcc7-4b80-97f3-4cc57f962569", "sighting_of_ref": "indicator--0da5f124-24ee-46cc-a421-c413a4f4d709", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c223ad30-5b3d-410a-8bc9-08d7b9a67f37", "sighting_of_ref": "indicator--0a8fb6f1-4b64-4e9e-bdd4-2d67ddd48aaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03750fa1-9b2b-40fc-8df0-7258b682c0f4", "sighting_of_ref": "indicator--06a86af2-b41d-4c70-9833-1b3d0d864356", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424a24c3-d812-45a1-9c60-50b17d8252da", "sighting_of_ref": "indicator--41d12eb3-1d7a-4131-96a1-54cca05e0942", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afa5ef2-1371-46b1-a978-89d7ac171276", "sighting_of_ref": "indicator--80c44edc-1a1b-4126-b213-e0f8b10526b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb630d0-d6b6-4ee5-8722-247092d1b197", "sighting_of_ref": "indicator--91d27da0-99e5-4853-9c9a-fb556ebf30d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ec012c-ab65-409f-83a2-df5227b07bae", "sighting_of_ref": "indicator--b6d736ee-889a-49d9-9c87-24f746a99535", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f22f768-4f18-408b-a817-f878e511d806", "sighting_of_ref": "indicator--89bb9db4-832a-42d6-82ea-4058320e06c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad58d68f-a63b-4ad6-886d-613ef234216a", "sighting_of_ref": "indicator--5c67ad9b-3ca5-4cbe-95b8-db181a031c37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c736d7cf-03bc-48ff-b275-59ae6b51c69a", "sighting_of_ref": "indicator--1f943185-778c-4f6d-9ab0-a0f1339a566e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dcdb48-31ef-45d8-9cf8-b40f108b6883", "sighting_of_ref": "indicator--e676f249-df98-4b26-b3d5-ee5993687b57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2a0631-4a79-46b2-815a-e7c63f043114", "sighting_of_ref": "indicator--da381186-9be2-4cf1-818d-aa44c73636b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605cd0fd-b22d-467b-a839-73e4e01377ed", "sighting_of_ref": "indicator--6f25c722-6e6e-43bd-a8c8-4a3be79c1a31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a00a453-f5f2-490e-af9e-7cd155ac27e5", "sighting_of_ref": "indicator--b37b839b-bd70-4e44-921f-ec16a979cdf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae59f783-c700-40aa-82f6-2f2888691000", "sighting_of_ref": "indicator--1181827e-22d5-4413-b01f-4ee0ea90089e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c29b74-7c9c-4052-a580-3809b7143fcc", "sighting_of_ref": "indicator--e39e74da-59c3-420b-a944-72e8afd1fe1a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c8f321-3022-4c4c-97ae-68d87ed7cb3c", "sighting_of_ref": "indicator--e39e74da-59c3-420b-a944-72e8afd1fe1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89745eb8-e23c-4f14-a0fa-a4507531bba4", "sighting_of_ref": "indicator--932e3160-e425-448d-8c36-79471a3c340d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c8384f-4bb3-46ae-91fd-d2f199888969", "sighting_of_ref": "indicator--932e3160-e425-448d-8c36-79471a3c340d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df78f57-41b9-4919-be4f-bb4b14b417be", "sighting_of_ref": "indicator--face0d3c-8da4-4c46-a093-ca2888d16c3b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bc028c-6f93-4a13-b06a-9abde0233d80", "sighting_of_ref": "indicator--face0d3c-8da4-4c46-a093-ca2888d16c3b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118295e6-b7d1-4596-9fbc-dd6ad61d1704", "sighting_of_ref": "indicator--92c9b873-0af0-48b3-a9b5-d4a2c39b2bc0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8deb8c9-043d-4fbc-8354-544fcf270f89", "sighting_of_ref": "indicator--92c9b873-0af0-48b3-a9b5-d4a2c39b2bc0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7922ad1a-1dec-4901-aac2-7db23571fe75", "sighting_of_ref": "indicator--92c9b873-0af0-48b3-a9b5-d4a2c39b2bc0", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45e73e2-3d7c-4bd2-b402-a0a0797ffbda", "sighting_of_ref": "indicator--3ef962fb-9a3a-4324-992c-8ea6b4a24b84", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353c6609-4faa-4e30-9578-e51711e73fe7", "sighting_of_ref": "indicator--5f07d0da-06c3-421d-a710-b96649a92c2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2b383a-1a39-413a-b631-ce8277cbb9f1", "sighting_of_ref": "indicator--5f07d0da-06c3-421d-a710-b96649a92c2d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fcb9c6-6085-4183-b5ee-377040a5aacd", "sighting_of_ref": "indicator--0613f0e4-1b4e-46f2-9a89-ada1a4d947b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3b2d30-d59b-4b3a-99a3-14ef2c7d7179", "sighting_of_ref": "indicator--0613f0e4-1b4e-46f2-9a89-ada1a4d947b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9d2529-a8e1-4e62-9fcd-182bf8373c6e", "sighting_of_ref": "indicator--47a603d5-05aa-4047-b5ad-4773f93a74a9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ae0335-b5d1-480d-8dbb-56501b45d042", "sighting_of_ref": "indicator--26fc1efe-f24f-457f-beed-874b1120a907", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e0aeb3-4d1e-4009-82ef-0da2abd2fa69", "sighting_of_ref": "indicator--72a7defa-20e3-4073-b8e4-512dead5cb36", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef12339a-2af4-415a-9d94-753a6290dd70", "sighting_of_ref": "indicator--fe4c8839-4aa8-40fb-980b-572013e9f71c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef844a9f-cced-4ce8-8c7f-2ed7f41ee42a", "sighting_of_ref": "indicator--a3800244-a1f2-43c0-8314-0ca5a332269d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a284c9-bd9d-4b7e-a404-62d612461ab6", "sighting_of_ref": "indicator--ae97aa8b-bfdc-451a-ab52-3e2515be95f6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf035b6-4ae7-4a64-b436-214751aa5b63", "sighting_of_ref": "indicator--ae97aa8b-bfdc-451a-ab52-3e2515be95f6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a044ab2-32a1-4165-a150-0ec3151195cb", "sighting_of_ref": "indicator--76381873-e40d-4190-ad1f-1ffa8b49d787", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609bf19c-6c08-4b88-b8cb-10304d1024f9", "sighting_of_ref": "indicator--76381873-e40d-4190-ad1f-1ffa8b49d787", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3fade2-4902-43b4-8562-53140fcd2e11", "sighting_of_ref": "indicator--e28242e7-cbf5-447c-93c6-9895f509a284", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b90196-e57c-4b26-aaee-d9b989d1bfa4", "sighting_of_ref": "indicator--407830a3-c9b5-429e-844f-89cf84fd0f05", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c4c53a-3cd3-4776-a9a6-2e80bb257e0f", "sighting_of_ref": "indicator--407830a3-c9b5-429e-844f-89cf84fd0f05", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988c6bba-7314-44a3-8c89-c7bea93a193b", "sighting_of_ref": "indicator--bf3097ca-8f9c-49d7-a030-0bcb189b26d9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3db4b1-4467-4ac3-975d-54810e29acce", "sighting_of_ref": "indicator--b357efbc-ca2d-4a01-91b0-d5f66d90a1ab", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c2e11a-31e4-4f8f-b0c0-193a657bbccd", "sighting_of_ref": "indicator--b357efbc-ca2d-4a01-91b0-d5f66d90a1ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2dc7b3-9cef-4432-8501-85ca5ff7965d", "sighting_of_ref": "indicator--b7c8ca3f-e914-4fba-9f9d-88df41bbfe2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b85e2b-bee6-465e-8206-537f8940dda4", "sighting_of_ref": "indicator--0773bf94-fdcf-4c0a-abd6-caa963fc72f0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74f9709-90d9-4bfe-9d12-661c5718be29", "sighting_of_ref": "indicator--06c5ecb8-e641-4da7-94d9-fcea934c9cf2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c7fd5c-b31d-4720-b8f3-8b2da2776bbb", "sighting_of_ref": "indicator--1db76bda-70c6-4593-ab72-9293c16602f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ceefea-e56d-476d-bc26-4d044aa88caf", "sighting_of_ref": "indicator--663f50a5-5d4b-4c4a-b126-8e7eba7fcd54", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000c7acc-0603-48c1-a7a1-ca162aa71864", "sighting_of_ref": "indicator--1d8e1006-dff9-4b6a-a863-0de443257c94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f064e4-eedb-438d-86ca-1f6fffccb722", "sighting_of_ref": "indicator--869a4779-9181-43f3-8c69-ed98ffff6c1b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cc4fa4-d7b8-49aa-8dfb-e058c09e01e4", "sighting_of_ref": "indicator--349ee183-2ee6-4b6f-a6e6-b07e5aac0315", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25122be-d607-4aa2-a188-cc049df00112", "sighting_of_ref": "indicator--d6f055c1-061e-459a-b69c-5476a40ae7a3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faf12fb-7e91-481b-801f-d626e2ad4a16", "sighting_of_ref": "indicator--ca73a08d-9136-4801-ab26-611a5bbc8b16", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2992c26-a348-4a0d-ace4-b9e50d328c5a", "sighting_of_ref": "indicator--bf7c3fbd-bfaa-4f41-80e3-dfd6900f9af1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aed5c2-ba1b-4b4a-9c9e-f28f504c7e6e", "sighting_of_ref": "indicator--be917a82-e6a3-4d75-8108-5a37ab01e3aa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756b1468-8743-45a9-a59d-3d81babbd4ca", "sighting_of_ref": "indicator--3b0ba2b0-ac72-4a4b-b8cd-38e8a7cf7a71", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbed7cc2-425f-4938-bbd4-b0699f3c4ec7", "sighting_of_ref": "indicator--77f5c935-252b-4487-8448-63a73f20c345", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42914ed5-7653-4a5d-9550-9acecb590384", "sighting_of_ref": "indicator--77f5c935-252b-4487-8448-63a73f20c345", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91826ba-dd9e-4aca-91d8-5640efe2cac7", "sighting_of_ref": "indicator--27124d43-9d77-4b69-b8a3-2be8b79f8274", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588d1011-b39f-4bc7-b585-c892c2b2190a", "sighting_of_ref": "indicator--27124d43-9d77-4b69-b8a3-2be8b79f8274", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b5ab1f-9ef5-423b-b0ec-4ea241f87be6", "sighting_of_ref": "indicator--15909025-53c3-4bc4-8876-1a8b2f41482e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0aee67-63e0-4626-9c81-41104cd9121d", "sighting_of_ref": "indicator--15909025-53c3-4bc4-8876-1a8b2f41482e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad9ac53-3f73-4e21-9a93-cc07aaf297b9", "sighting_of_ref": "indicator--c9624067-ea11-4245-8423-d2c17394cd3f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42054df2-2a5a-463f-bfe0-33eda1b61d1f", "sighting_of_ref": "indicator--c9624067-ea11-4245-8423-d2c17394cd3f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d63fe74-7841-4b2e-930f-8617721b2cd5", "sighting_of_ref": "indicator--2867142c-ad76-4b40-a42f-66007b0422cc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7e4369-36e2-46aa-8ee4-21e5a17ae36c", "sighting_of_ref": "indicator--64c60115-6ca3-4b6f-aa08-69121e6fcabf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cb1d26-fa2b-4845-b9a2-d777c63e3570", "sighting_of_ref": "indicator--3eff9fae-a173-4f6d-b0d1-ac04957c65ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278918bb-3783-4da6-b190-9d123665c15f", "sighting_of_ref": "indicator--fc592c55-b6c3-463a-b9f4-ac1d051412d4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1303e3-9d58-49b6-be59-88c173f33020", "sighting_of_ref": "indicator--d4824fd2-c61c-48e2-8127-9c68ce221e82", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6b39c8-c842-4f19-bc14-b9485ca9f9c6", "sighting_of_ref": "indicator--d4824fd2-c61c-48e2-8127-9c68ce221e82", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67096bc-45c3-48ea-a74a-ae2dd2a229eb", "sighting_of_ref": "indicator--aa0fdd07-f482-4135-ae6c-8c78ee7debc3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007980f1-8995-4657-a220-25bb1221f513", "sighting_of_ref": "indicator--202235fd-4749-4b5b-8321-8882c2a90ca9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff7ba49-ee3f-4b95-a44b-5f9e4843f712", "sighting_of_ref": "indicator--17bc5bd9-6209-4f1d-89d7-3c5da902631b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd267fa-c237-4131-8d6b-786bd66791df", "sighting_of_ref": "indicator--038db5b9-6f2a-457e-8750-5e4533c057b4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82250897-8dee-4a3e-8f0b-55e685e7e875", "sighting_of_ref": "indicator--0d4e1784-b5f7-4d17-b689-8550f29941af", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56df6e6e-c98b-452b-848f-5e646f09dbb0", "sighting_of_ref": "indicator--f94b82fa-b672-4b8b-9a0f-8087b8a244b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e491be9e-de1b-4468-a3b0-6b6bec206251", "sighting_of_ref": "indicator--2c150392-e0ac-455d-ad85-1986e869c635", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1720bd90-196b-45cd-b57f-ec752be020b9", "sighting_of_ref": "indicator--ede56215-acbf-4a1e-b48a-e4b61dffe50b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb02332-ffbf-43cf-a392-b00f058dc9f1", "sighting_of_ref": "indicator--ede56215-acbf-4a1e-b48a-e4b61dffe50b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423f466b-6087-4874-bc58-3a561ee59d19", "sighting_of_ref": "indicator--1e516496-14c9-4d3d-9c48-f74c75a22ba9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4097b6f-1021-432f-ba0d-9c170f071762", "sighting_of_ref": "indicator--1632b09d-ce69-4471-819b-e2dd8a94f5a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630b5e2c-95c0-492d-a2cf-3760c1fe3672", "sighting_of_ref": "indicator--79f53a9f-f1e9-4d58-9a77-6de2a16a4a83", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabe03b5-40de-42eb-9a5b-ec2b533ffc4b", "sighting_of_ref": "indicator--2bcb3448-eff1-4932-a24c-e0e49514b7b0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9bf3f5-4912-48cd-aaf9-c1df38209b0f", "sighting_of_ref": "indicator--6e379d60-6ce5-45c8-981f-97e483b68652", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540fdb68-62e9-43bc-bfee-c24066580c74", "sighting_of_ref": "indicator--2514f084-d493-4a19-b976-331bf7e0e6ad", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd421f96-50ec-429c-b0cc-fa78ced4929d", "sighting_of_ref": "indicator--66f2e7ee-226c-4361-87ae-018742af2772", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b428f6ff-2d8c-41e2-a4b1-dc3d56b1ba4b", "sighting_of_ref": "indicator--a83fa49a-f29f-416a-a921-b9d79ca5a72d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc44c2f7-a970-4518-9897-51a13fa0eb36", "sighting_of_ref": "indicator--16993da4-e69b-4cff-91d6-aa99751d8a41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9b869d-08df-4f6a-a55d-3d8bff350d58", "sighting_of_ref": "indicator--fd3a803e-04b7-4aed-a859-d7d6b575d640", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c659c3-936b-4736-9383-5087b2b560c0", "sighting_of_ref": "indicator--b673f761-367f-441b-8302-453c4d4c6b0e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce40631-272b-4c23-a5fd-3a2ac3414d39", "sighting_of_ref": "indicator--b673f761-367f-441b-8302-453c4d4c6b0e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1beeba3a-d66a-46e7-9fd0-248ec433e759", "sighting_of_ref": "indicator--c6f325d3-a9da-41f4-a9b3-8c9b86537c15", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ca5091-349f-41c1-a31f-12e00a52b3dc", "sighting_of_ref": "indicator--115c6d2c-88db-4e2e-9b41-c0feeecd511a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e666d76-4911-4b09-ae7e-52a59f5c3bd4", "sighting_of_ref": "indicator--58eaac70-ade5-49f9-8642-d7298353c298", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b3d13a-4093-4f60-8216-881036fea148", "sighting_of_ref": "indicator--58eaac70-ade5-49f9-8642-d7298353c298", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de11dac4-ee57-41cb-b75a-c2ec8e366dd4", "sighting_of_ref": "indicator--194b61fd-4f9e-49aa-8516-69ea533ff5b6", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3080e9e7-7d25-4bd8-bfda-4c54d016ed21", "sighting_of_ref": "indicator--4a26b39f-0b0e-4791-aaf3-11c8c877d994", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03aa513-7944-48d6-bdc7-bb93d1d8efd2", "sighting_of_ref": "indicator--1027352f-cae1-49aa-986d-cbaa6709e97f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd56d00d-2496-4b91-a9c2-c6242154dd8f", "sighting_of_ref": "indicator--01bf05e4-a654-4b51-bdd7-47b2366cfdd7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f821a0fc-ee56-4102-9f3d-f9ba14882fae", "sighting_of_ref": "indicator--01bf05e4-a654-4b51-bdd7-47b2366cfdd7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f44fea-549f-47de-a549-8a7134c01071", "sighting_of_ref": "indicator--81d68c53-3ffb-4530-9e9d-48c69c26be02", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87da0c03-637b-4190-883b-eb8359bde473", "sighting_of_ref": "indicator--81d68c53-3ffb-4530-9e9d-48c69c26be02", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee1b32e-de76-4414-aa3c-7d76150053d2", "sighting_of_ref": "indicator--d460ae3d-2c06-4774-97a1-fa8fd15e0c06", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8489f013-5cd8-45d5-85e3-cdb90d63a6df", "sighting_of_ref": "indicator--3060f6c6-5998-4c43-ba5e-09062e4bcd04", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b0f1b0-7819-4cb6-98b0-22ec699f8913", "sighting_of_ref": "indicator--3060f6c6-5998-4c43-ba5e-09062e4bcd04", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957647cf-d781-4ccb-b821-1dfef2fc8f4f", "sighting_of_ref": "indicator--041c307c-33ac-4b54-93f3-fc0803f89018", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5139d9-27fd-4d7c-b1c8-4913cf608ef1", "sighting_of_ref": "indicator--041c307c-33ac-4b54-93f3-fc0803f89018", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d02d92-1e8e-40be-8654-3eb33957c0c7", "sighting_of_ref": "indicator--77639441-e319-41f8-9e3e-770c1f849cf7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64949fd1-2e37-4697-8a9f-0953e8e9a6eb", "sighting_of_ref": "indicator--c753600d-8256-4a9d-a1b4-11aaee2a03cf", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2357550-38fc-49fa-aea2-247ad8572b5e", "sighting_of_ref": "indicator--7bf2d1c6-431c-4935-9640-a90b70c92bf5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80a087c-e8d3-4b1c-a28e-06c5377a74cc", "sighting_of_ref": "indicator--7bf2d1c6-431c-4935-9640-a90b70c92bf5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc45f64-d59a-45f9-a252-4049bb740f09", "sighting_of_ref": "indicator--7b42994b-5d2d-4d33-8707-992b01daeefa", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfacde8-7ee9-40bd-89db-1a29e75785c2", "sighting_of_ref": "indicator--7b42994b-5d2d-4d33-8707-992b01daeefa", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3455ebe-6a80-4e09-8a0e-862c4af39bfe", "sighting_of_ref": "indicator--ee887aaf-8215-42c1-9610-3b42606384f9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f08ae1-173d-4363-8f7b-83aa54805c23", "sighting_of_ref": "indicator--ee887aaf-8215-42c1-9610-3b42606384f9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653ad1d0-5c3d-4753-8570-4f22bf50b36c", "sighting_of_ref": "indicator--001a1858-130d-44f2-88ce-a3ca51db16b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeb28f5-36a1-4710-b66c-13ffa02d34ee", "sighting_of_ref": "indicator--43f21385-b997-4976-85d4-d94e2be92f30", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe269faa-51b2-4e83-ab51-46f639af057a", "sighting_of_ref": "indicator--c651c293-aaa4-43ff-bfb2-a3c44caf91a4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6fd8f0-e98c-42e3-8ef8-447a878cd968", "sighting_of_ref": "indicator--8ae4013b-a271-46da-ae8e-f0a831661474", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d10b07f-1d61-4f0d-af8f-a14299dd8f7d", "sighting_of_ref": "indicator--5cb522ad-b8b5-464c-b67a-996331bcc278", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96086e39-9530-4230-a756-c463b75e1941", "sighting_of_ref": "indicator--38c2ac1d-a778-49c7-af36-3f019b349fe5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93873077-590f-45d0-8337-f1c7fb35e4c5", "sighting_of_ref": "indicator--b631de89-5533-4691-97ee-34b99a0e58b2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d388007-1ccc-4398-967f-bbc8cd614efd", "sighting_of_ref": "indicator--516cc79a-610b-4a96-a128-d4629d4915a8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec93dd9-b168-4077-b369-f5aa06d29898", "sighting_of_ref": "indicator--ef0d0605-5272-4a68-a4df-0aeffd78ca6a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff4d0ed-b25b-4ee8-a6f0-20d54494b66a", "sighting_of_ref": "indicator--ef0d0605-5272-4a68-a4df-0aeffd78ca6a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cc242c-2435-4dc6-ad71-8daf37a346ee", "sighting_of_ref": "indicator--5933b116-100e-4d8d-a0bd-a051ec196876", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37825174-0528-4f48-8d00-63f916d5cbfa", "sighting_of_ref": "indicator--5933b116-100e-4d8d-a0bd-a051ec196876", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936d3a18-16ef-4e15-84da-05cec716e4ba", "sighting_of_ref": "indicator--70e8972f-48f7-4bb5-ae12-de5bfdde1901", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92ab9ad-166d-47f8-b4b8-5273672c03b5", "sighting_of_ref": "indicator--70e8972f-48f7-4bb5-ae12-de5bfdde1901", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc057c99-88be-4835-abad-c5e8f1fc0fd4", "sighting_of_ref": "indicator--8e25add2-7e9c-4edc-a3a5-63af1da957de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9fbf5c-aca7-4a43-85a7-087fe5468fed", "sighting_of_ref": "indicator--8e25add2-7e9c-4edc-a3a5-63af1da957de", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9618bf-1767-444d-abf6-0067957f8648", "sighting_of_ref": "indicator--e92bf839-3757-4177-a07c-b1ebfde94006", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc85d295-e15e-462e-9de7-10a74c8ea97b", "sighting_of_ref": "indicator--c88f6721-fbeb-48d7-94cb-050882a3f787", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f83dffa-885c-4f19-9caa-a71230cfa4b6", "sighting_of_ref": "indicator--979939e0-8c72-4fec-a169-d05991b41fa3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a1116f-427c-4807-bf31-beeaa4246c38", "sighting_of_ref": "indicator--979939e0-8c72-4fec-a169-d05991b41fa3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b38dcc-78be-4d93-a564-bc2a9ebad50e", "sighting_of_ref": "indicator--bdd81405-d099-4401-9d81-44be1475dff1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f0028b-e8a7-4872-8b08-04535039d780", "sighting_of_ref": "indicator--bdd81405-d099-4401-9d81-44be1475dff1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8cccc4-034a-4d44-9fed-7ffafa685a4d", "sighting_of_ref": "indicator--ecce2ad5-184b-4a2e-9928-d58cdda408e1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf26b79-c649-4371-b478-d3151355ead4", "sighting_of_ref": "indicator--ecce2ad5-184b-4a2e-9928-d58cdda408e1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313c233f-5723-4650-8adf-aee1fd00fc94", "sighting_of_ref": "indicator--0400d0c6-e307-49fb-8a4d-70b8d2bd27d0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b3c429-71e9-4f74-ad1e-cb8522f8eaa3", "sighting_of_ref": "indicator--869b4b48-b71a-49e2-adde-cd4d4ae04bcc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ed8aca-caa0-4363-bb45-7dbde6bbe978", "sighting_of_ref": "indicator--869b4b48-b71a-49e2-adde-cd4d4ae04bcc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceceb601-4577-412b-845f-d23a431509b4", "sighting_of_ref": "indicator--d6bb3532-aa05-4772-9903-a481c9eea52a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c884ac-ca61-458a-8d30-860178516126", "sighting_of_ref": "indicator--d6bb3532-aa05-4772-9903-a481c9eea52a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d0ccf5-ff3d-4d39-bea5-c87022c8efc4", "sighting_of_ref": "indicator--396834a9-f605-4bef-b9e0-010d91893075", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896877ab-c214-4758-b9d3-d8fcab4958b5", "sighting_of_ref": "indicator--aaa9f4a6-bfb4-43cf-88c5-c22b4f4a3fe9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6105e7-aa74-4d37-aaf1-c90f6af36f12", "sighting_of_ref": "indicator--ce90627c-6d3b-46fc-be90-3bbff07c5e16", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685d6f12-190f-4d29-beae-8e540e0f86c6", "sighting_of_ref": "indicator--0a72fa95-abd8-44d2-a194-e4f972955c01", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272e27e0-c07b-40fa-b563-3ca40c1cbd13", "sighting_of_ref": "indicator--152f138e-1279-47a6-8f73-249737d440db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6e2149-ad4a-471d-bea2-6cd97470b287", "sighting_of_ref": "indicator--152f138e-1279-47a6-8f73-249737d440db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f82c0-a9b8-4567-928a-e38c4c33730f", "sighting_of_ref": "indicator--c521806b-570c-4ce3-8ca2-ab8828080bfb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a9db32-40f8-4f85-8507-f6a29a083cbf", "sighting_of_ref": "indicator--b0855244-4361-482d-a31c-5a1fb97026b1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00461141-95da-4bc2-8dc0-19752e990b05", "sighting_of_ref": "indicator--b0855244-4361-482d-a31c-5a1fb97026b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa04cbe2-57ba-4429-8385-f169ea401a1a", "sighting_of_ref": "indicator--2e7f0afc-f555-459c-89f2-6f3782d5e9e6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00038525-bd2a-432a-944c-97f599ce014b", "sighting_of_ref": "indicator--b9d04052-8f1e-4804-8b6e-1dce4ed5428b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4831229b-e75e-476c-906d-dccc5967c3bd", "sighting_of_ref": "indicator--6c10f7a2-f61d-49bc-b8ce-c0e9a74c7bb4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc4d2cc-2485-4fa0-94c9-242a01868f15", "sighting_of_ref": "indicator--eb0bd99a-0e3b-4566-b547-4a671e535430", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457ecac5-58ca-4c88-bdf4-d01620b59a1b", "sighting_of_ref": "indicator--55a99fce-37e9-4979-aad3-627bd00e1965", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7db067-42f1-4deb-977d-735e98ed8250", "sighting_of_ref": "indicator--55a99fce-37e9-4979-aad3-627bd00e1965", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a18285d-21a5-4fea-a55a-cc4340b24a19", "sighting_of_ref": "indicator--58b23c55-3b44-4713-ac55-c11774cffa3f", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfa07e6-1459-458f-9b4e-520e7eff6320", "sighting_of_ref": "indicator--826e13f9-0a86-45f8-adb3-26bdc9bba978", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76281ed0-1172-49f6-ab09-6c72da944d50", "sighting_of_ref": "indicator--8b396f45-cfb9-4f29-9b73-0e5f8a0cc7e6", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0df1e3-7a5f-4804-ac8f-33e512dc75cb", "sighting_of_ref": "indicator--f00019a6-2fa4-4447-a472-49c801d926c1", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2478fa41-da05-4907-a623-474771b48894", "sighting_of_ref": "indicator--e36bb7d1-a34b-40d0-9156-e14152e1fef5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7a4609-9842-4556-aab2-aba2404b3802", "sighting_of_ref": "indicator--e36bb7d1-a34b-40d0-9156-e14152e1fef5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85c8a0c-dc4e-4de0-b820-e7cc5e8688c0", "sighting_of_ref": "indicator--49dbaa74-c200-4abc-9295-7edb545f1cc9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e448a3c-105f-4da5-8e11-dc3f81a10261", "sighting_of_ref": "indicator--49dbaa74-c200-4abc-9295-7edb545f1cc9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fea04ae-ee09-45d7-8471-5084a6251a3f", "sighting_of_ref": "indicator--95b53df6-5ecb-43bf-8642-16694fa1b73b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffcc5d2-98af-4460-a36a-c1990e70a4fb", "sighting_of_ref": "indicator--95b53df6-5ecb-43bf-8642-16694fa1b73b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ba3c12-6de5-404a-81fd-7b792bb41eef", "sighting_of_ref": "indicator--d0fc257e-4576-4290-9597-f3d2fe2efead", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c0c2cb-15e3-4fd2-b28a-b473d66c2f80", "sighting_of_ref": "indicator--d0fc257e-4576-4290-9597-f3d2fe2efead", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f44c1b-721d-4df1-b1fc-177274d500b3", "sighting_of_ref": "indicator--f7d11c2b-3dd6-4b88-bd5d-f74a9c43d3db", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1280944b-3698-49b2-a4e5-d99335692b0f", "sighting_of_ref": "indicator--f7d11c2b-3dd6-4b88-bd5d-f74a9c43d3db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa508fe8-ca37-4f09-94c1-e4675c5b3af3", "sighting_of_ref": "indicator--8811df19-350c-4687-9093-3a2138df94f4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee8f6f-2d96-4130-8d24-7999cf28709f", "sighting_of_ref": "indicator--8811df19-350c-4687-9093-3a2138df94f4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff590891-dfe9-4733-9ea3-edee95c8d6f8", "sighting_of_ref": "indicator--fe37ee21-21f9-4f3c-8c28-ad8aee41c517", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381b1b79-f30a-488f-ab8b-a1590c8da6d3", "sighting_of_ref": "indicator--e3aad739-e19d-4267-9fdd-2fcc4d572e9a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ea9cea-686f-4043-b064-3b51be5ddc87", "sighting_of_ref": "indicator--e3aad739-e19d-4267-9fdd-2fcc4d572e9a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb02f07-ec9c-40f2-9861-ded601305cb8", "sighting_of_ref": "indicator--2ce788b0-9a9d-49bd-bfda-eb47d1e595d7", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e43de01-0b32-42c9-bdbb-72f013b83b38", "sighting_of_ref": "indicator--2ce788b0-9a9d-49bd-bfda-eb47d1e595d7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77440128-e5bf-43d4-8c7f-ddbd2f38de3b", "sighting_of_ref": "indicator--70e3fefd-b824-487a-86c2-776a2a2e0cb2", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdeb7f4-4c5c-4e1c-bde1-756c945a43ea", "sighting_of_ref": "indicator--01e2dc54-e6cc-41d6-9531-b85520c4de46", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62784529-f273-4368-83b2-5cd3c52d346a", "sighting_of_ref": "indicator--a09ec056-9ebb-4edf-8784-1734c321d464", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e438d8-5471-453f-9cb9-cf045588aa11", "sighting_of_ref": "indicator--15688547-f8d7-4f8f-ba3c-11e3d4593528", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8604379c-d89e-4ab0-8282-031d4b8a8cba", "sighting_of_ref": "indicator--1d418011-834a-43d2-b168-639490b04d3b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec71267-3ee6-45ea-abc9-7934ac56788f", "sighting_of_ref": "indicator--1e1f5d08-6e55-4c15-bb59-4bb5e00a6f31", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eef887-742b-4d73-a62d-8d42c9ad617f", "sighting_of_ref": "indicator--3657c967-0662-4f80-9dc0-8e8df4ce36ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f816cd80-3ba0-4316-b385-57bdf1d98a80", "sighting_of_ref": "indicator--457e9e96-b8fa-4521-94ab-3a26b9076b82", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbed645-dc28-455c-b5c1-66fe45448924", "sighting_of_ref": "indicator--457e9e96-b8fa-4521-94ab-3a26b9076b82", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59627c38-91aa-4ea8-8a46-fddc1ec4ba63", "sighting_of_ref": "indicator--20fa761a-13d6-42a7-a974-ede6a11fd09d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c37ccba-a915-45be-a71b-f280076f4857", "sighting_of_ref": "indicator--584ce82e-8fae-4b4a-a38e-519646462334", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78eb8152-de9d-4bc8-9613-a139ba5d7a57", "sighting_of_ref": "indicator--584ce82e-8fae-4b4a-a38e-519646462334", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068d0f97-7f90-4a82-a3ab-e2f99f40d083", "sighting_of_ref": "indicator--584270ab-695d-4e0a-9787-632524f8f550", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30bb42a-cefa-4b35-92d3-137a4058b828", "sighting_of_ref": "indicator--e512d999-1c3a-4985-b721-3c497d251426", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94a2f7d-164f-4bb3-9e2a-ef5869f8c3b2", "sighting_of_ref": "indicator--e512d999-1c3a-4985-b721-3c497d251426", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba27413d-9c87-4f7f-869a-f4c6ffd7e647", "sighting_of_ref": "indicator--4340908b-b360-42c6-838c-7f7a8a2bcb93", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063f9246-7970-4362-a8f1-1028a496b3e6", "sighting_of_ref": "indicator--4340908b-b360-42c6-838c-7f7a8a2bcb93", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b18b36-7add-4563-b5cd-8bdb9346585a", "sighting_of_ref": "indicator--1b7c01d5-c2e8-4667-87c9-23b11807e057", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837a97cf-7ccb-4ade-8c05-a0be3c673a5c", "sighting_of_ref": "indicator--1b7c01d5-c2e8-4667-87c9-23b11807e057", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887938b5-fedd-482d-8b5e-b5afa5c6392c", "sighting_of_ref": "indicator--d37a75df-2e64-4afe-b800-e89c853f525d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fd5899-bf79-4cb7-8ebf-81588e40cc4e", "sighting_of_ref": "indicator--9eb3d18d-8a3c-486d-8d63-e89d9c9a741e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd8ab4e-4126-4f76-ba3f-0cef37d180b1", "sighting_of_ref": "indicator--dc47d045-4050-4a0e-938f-8cd71d105645", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e46c4a4-387b-484d-b355-f98c1981345f", "sighting_of_ref": "indicator--b392add4-d3f7-424c-95dc-f76a1c2ab730", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee90bed-6055-4281-a7d2-83f4a52e52c9", "sighting_of_ref": "indicator--102cc71a-c1de-4a0b-a953-8362ef572363", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601708dc-b2a4-499c-b536-6d3949a5eb7c", "sighting_of_ref": "indicator--45190b2b-de27-4273-865d-c185c4208a5b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434addc9-9aea-449f-8f3d-0e644ed93cf1", "sighting_of_ref": "indicator--739ae16a-1c1b-4e20-a917-102575a17822", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31eabd52-87dd-4952-b172-d15e095ffae5", "sighting_of_ref": "indicator--6774481f-17f4-4be6-b686-ddcdd39b62b1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8be227-afa5-4811-8edf-49ad6db19c56", "sighting_of_ref": "indicator--3d09f098-aecc-4feb-a807-4f638f1e7bf2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46fa209-155a-47db-bf3e-c4baead2855b", "sighting_of_ref": "indicator--ac3679b9-98d2-4a06-9b2d-245513d69874", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b96ed0-fec8-4af1-95f9-05abfbbbd24e", "sighting_of_ref": "indicator--207e421a-f864-49d9-8e55-bc0790a842c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51f3395-a3b1-4cf2-b67b-2ff17b59deb3", "sighting_of_ref": "indicator--6bd8c9e3-2e9c-418b-a9f4-a9658e49b3a7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d061edf-fbaf-402f-90b5-0b024ab374b7", "sighting_of_ref": "indicator--e2b1963e-dd35-4758-bd7c-03f084bf6c64", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8be027c-e40d-40dc-b2ca-19541b8467ac", "sighting_of_ref": "indicator--f23296e1-50ab-4eaa-b483-82b1dae2ff8a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db548a37-6b9e-4d97-9155-aab1ae199e03", "sighting_of_ref": "indicator--b89dcbf2-9d0f-4287-ba65-9bd4cacdbc58", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468ab78c-4125-4803-82fc-d3445196261b", "sighting_of_ref": "indicator--0b467e3b-f767-498e-afd1-dd1745d18087", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e95a1d-160a-4fde-9d6c-28505854abe9", "sighting_of_ref": "indicator--fdbbae81-44f9-43d2-87c3-914aa62f9431", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20413062-de47-4712-ba0d-049aa226fc05", "sighting_of_ref": "indicator--f7dcf704-80fb-4e6b-b204-1b52bdffe8dd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566aae65-bf40-4d1f-a6d4-23e691df221f", "sighting_of_ref": "indicator--15c1c067-e212-4a54-b1bc-309aac936803", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98817d69-46c7-4f68-9472-62d8d0392b7a", "sighting_of_ref": "indicator--6e61092a-a5f3-43ce-ab66-64ef67a5eb4c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4aab97-21bc-43ef-9e26-a72e04b950f1", "sighting_of_ref": "indicator--75701b38-7e35-42ec-81cd-c018bf904d1d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4042b4-db1a-4239-9aba-1781342be1c1", "sighting_of_ref": "indicator--5ffe4d7b-0e95-47d1-973b-77a62cbe9bb5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c917be2-ade8-4137-aef1-2ab42d483c9b", "sighting_of_ref": "indicator--17d41d02-2a3b-4c45-b0c6-b59a0f35abd5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda5428a-4dcd-4a6a-8c52-c734c506367f", "sighting_of_ref": "indicator--11819011-94d9-4d7c-8c76-6f743064edbb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4746168-10a8-465b-af2f-7926cad028db", "sighting_of_ref": "indicator--75f2f6a6-4867-4c8f-b0ad-9097c25c8721", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307ccb2f-730b-4f14-a4af-ecf686460311", "sighting_of_ref": "indicator--b81ec322-8efb-4d30-becf-c723b335ee07", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71bc6e6-2afa-4418-a24f-f9e35814fdb6", "sighting_of_ref": "indicator--c7c4b833-15f2-4fda-9c58-334b3240abef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac049666-f7c8-4d5a-a41e-d7164902a18b", "sighting_of_ref": "indicator--b26f743c-8750-4118-b63f-dec7092849a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d429b4ac-1858-47ea-9e65-27b7e3b6d25a", "sighting_of_ref": "indicator--59b00995-12d1-4448-a164-ac7244204ed6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b34536-ce8f-409c-b86b-770fb724d7cb", "sighting_of_ref": "indicator--67d32ca9-53a9-4e65-bfe4-e7c493450083", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42684783-a840-4140-b0da-fd2f905ea34c", "sighting_of_ref": "indicator--a8c7288d-b2e4-42a1-b038-c4c2aee2f114", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3d6d17-e561-4da2-b54b-a6073e4a9bbd", "sighting_of_ref": "indicator--d784a1b4-1749-4bcc-9e1d-e14f7a8fa0d9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc0168f-de06-409d-93fa-5c109d23f710", "sighting_of_ref": "indicator--039df432-64b4-467a-ab4a-cafb4ce88b75", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902bd32d-aa8a-4779-bb84-219b05c29d99", "sighting_of_ref": "indicator--373dcc28-da61-495e-9abc-c9bb4a835616", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9377ffd2-59b3-4142-b417-778c21bf2aee", "sighting_of_ref": "indicator--373dcc28-da61-495e-9abc-c9bb4a835616", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbfab0f-cb8a-47a6-a355-66fd0ad84e95", "sighting_of_ref": "indicator--5a23a0f4-e64b-4b18-ab0b-3e2f41722886", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcc4e07-68c3-4b69-a0a8-bccc84e42f5f", "sighting_of_ref": "indicator--80af4639-c089-46a4-92a5-268de624f21f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe186ace-1c49-41a1-a490-4ebc402e753d", "sighting_of_ref": "indicator--6d2f4dfb-7ace-4d99-b2b4-386fe2e070ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f08d6a-a811-43c1-b72a-c7038098721b", "sighting_of_ref": "indicator--78f987df-14dc-4c96-9fb8-7ed7586ab65e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0847a0-b5a8-4f93-b0ee-31fb0d0f562b", "sighting_of_ref": "indicator--78f987df-14dc-4c96-9fb8-7ed7586ab65e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418a1787-0cc0-44ea-beb6-4c4ca04fd840", "sighting_of_ref": "indicator--51309962-6874-415b-92ee-f894414fe873", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a91619-c701-4adc-839d-f4aa1be30031", "sighting_of_ref": "indicator--51309962-6874-415b-92ee-f894414fe873", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc18734-186a-4823-83b5-14dc2a61da8b", "sighting_of_ref": "indicator--07326451-74ee-4902-b469-e9147bc9df22", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a930ae4-04fc-46dd-87a9-d5011ea34c20", "sighting_of_ref": "indicator--722094d5-8f9d-433b-890a-98c45681234e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278ae42e-4abf-48a5-a9bb-ed520f5f3a8c", "sighting_of_ref": "indicator--722094d5-8f9d-433b-890a-98c45681234e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873b925d-4dc8-40d0-9cb7-bec81e27cd5b", "sighting_of_ref": "indicator--509c3845-0aa7-4765-a997-2d3ed9a8cdd3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823ca8c4-c9d9-4642-81a2-cc09107e957e", "sighting_of_ref": "indicator--1d320b62-22bd-4e14-a7c6-9bd034633276", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed36b5ed-db87-4016-a62a-984f892889a9", "sighting_of_ref": "indicator--2331ba69-9c65-4096-9825-b980dacda1a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fb3906-6d0e-4d57-85f8-b142429cf535", "sighting_of_ref": "indicator--2fe680d6-25bd-4503-99da-0f31491306f7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcf1414-6538-45e0-9342-034e6889fb9a", "sighting_of_ref": "indicator--a20ab0f7-fdfd-47db-a0cf-3cd46f4f0e2e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83c4641-0c47-43d7-8635-b03673ab6803", "sighting_of_ref": "indicator--937e9e4e-b244-4d72-9f51-be9955fbc723", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a951225-35ff-44b9-af72-57ce9e3362b5", "sighting_of_ref": "indicator--ab6f04e4-676b-4716-b862-bd5bf6e62f8b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef69127-3eeb-4ff9-825b-adf3d66a5638", "sighting_of_ref": "indicator--e71d21e8-af7d-4bc0-bd72-5eb9e3fe7388", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dd34df-f0c4-49c8-9be0-f64af3aa9bd1", "sighting_of_ref": "indicator--3f464ef4-f32b-4497-86bb-46686453967b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b5758a-f743-4e5b-8cb4-ba1b9181da59", "sighting_of_ref": "indicator--ed8403be-52fe-49a0-a2fb-b76e7e625c94", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e18c6e7-54ee-4d79-b6d2-b588866c31c4", "sighting_of_ref": "indicator--82e081d5-31d2-4157-bcf0-5c0a7252308f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbde060-89ba-4f43-91e6-364693af75dc", "sighting_of_ref": "indicator--dfac032a-fa86-460b-9ce5-365d5282fc8c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a5c971-a6fc-4da9-b4ba-4c7ce90d182d", "sighting_of_ref": "indicator--806c8021-ae7d-45b0-b7d0-dbb9d45faed0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1405ebd2-4bff-4050-bb67-86b28765654f", "sighting_of_ref": "indicator--2e66ecc0-dba0-48c7-9971-e2f1a7991c33", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9115c287-a380-4d64-9fbc-98afba424c30", "sighting_of_ref": "indicator--1c28d324-ad81-4d19-9282-60a6be64f85e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20cd37b-e08f-4575-8560-e8595399ae25", "sighting_of_ref": "indicator--2ef4bef2-6b90-4029-8ff7-680897e02b4c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab40040-714f-4358-8c9a-170b67386db6", "sighting_of_ref": "indicator--0e5a64e8-541e-478c-839e-b3fcdf200cdd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cc70ed-bfb3-4203-9d95-1d957e167fd6", "sighting_of_ref": "indicator--b43f0e20-eacb-4ba4-809c-d8bd82c3d213", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87a4009-4cc6-4593-9362-ec05fb1e67db", "sighting_of_ref": "indicator--9613b7e0-a765-49ad-a2a8-97a8b512c745", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109caf5b-91d7-45a0-8bc4-51624ea588f6", "sighting_of_ref": "indicator--8b69b9a0-4d15-4c3a-ba45-395df86cffb3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fed3613-5c27-46e3-b2cf-775fd13d34d1", "sighting_of_ref": "indicator--8b69b9a0-4d15-4c3a-ba45-395df86cffb3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd1bc9d-8bb2-4a39-a354-ea1a0548d5ac", "sighting_of_ref": "indicator--efb6b490-851e-4a32-952a-766bbcee80c0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7399fa6f-5a39-484e-b9b7-3c9d0bfd17e7", "sighting_of_ref": "indicator--41ad1edf-933c-46ac-95f8-ff9d8d3202fb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f4e9ca-c712-49fd-81d0-6e81adae684f", "sighting_of_ref": "indicator--e2db4f11-25ae-4b54-85e7-65800e3736dc", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec506ff0-6191-43ab-a522-0fc033014b1f", "sighting_of_ref": "indicator--040b4d42-6593-4b1f-8db3-bfa4a8dba518", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8157277-f41b-4202-8488-44259d48c18d", "sighting_of_ref": "indicator--9c8810e7-a729-419d-af37-cd4dd718bc30", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4907f9b-c9d7-4b64-84f4-713cf40d99a1", "sighting_of_ref": "indicator--d6934816-05cc-44a6-8af6-7729948e046b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3b06d0-639a-4583-a34b-30f7d7fb6457", "sighting_of_ref": "indicator--0fbd982c-d5bb-4245-8a59-3cca57361705", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45b7d7d-11ad-486a-80c4-fa5f574e58ff", "sighting_of_ref": "indicator--d30012f3-ba22-4b68-b290-2eaa3e5dac7e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85ee63d-f9c9-4d89-9a43-a00c8cea9606", "sighting_of_ref": "indicator--70daefa8-c3c0-4ea9-8997-90917ac648c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e969e986-d21c-4d07-9818-5c5fecba6842", "sighting_of_ref": "indicator--834c3d08-18ca-4d2c-b627-a2a63340e6e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f711f5d3-71bc-4763-85ec-f18eb8740c97", "sighting_of_ref": "indicator--ba7a1644-3f07-448c-82d5-58f6a3119950", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05dea8f-1e68-4ddb-a5bf-6ada78ffebb4", "sighting_of_ref": "indicator--ad27d312-f62a-4565-be5e-18816116415e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887e7ea5-120d-47b8-91d9-eed147e60f6f", "sighting_of_ref": "indicator--e4dfb890-af49-46ff-8569-11ba8fa191ab", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7938d1b1-f2b2-43e1-9126-221fdfecd5d2", "sighting_of_ref": "indicator--34812526-a94f-4d67-ad71-bb6ee32d6519", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc3680a-eb36-43cb-a8bd-9c4c8fbe301d", "sighting_of_ref": "indicator--8f7f5f5d-ae76-4412-b0b8-8d32a068b4f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45919d54-857a-4d83-8755-1415144927fb", "sighting_of_ref": "indicator--dfb6ba54-dcf6-4e0e-badc-8484735c3719", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1df9265-b15b-4e63-9c47-6e4a04b3cc17", "sighting_of_ref": "indicator--867bc1b2-022c-4d0e-ba96-c0c1eed1c9ad", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b7f059-e728-4c17-b49d-3577d73db125", "sighting_of_ref": "indicator--8007f8ab-69d9-4a5a-8357-97c44e76bb91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e995af30-4115-4db3-8579-c961b2c13db5", "sighting_of_ref": "indicator--d8afb400-9c94-438f-a420-ba0e822b9d0b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd791d2-b07d-4bf8-98ea-585a4edcf368", "sighting_of_ref": "indicator--02df834e-4a1f-45a3-b329-9666bfd4b02e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b079b80-a368-4190-b592-3b4c0c9a8767", "sighting_of_ref": "indicator--ac86863b-6ecc-492f-86f2-72f2caafc7c3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3871eb4c-7567-474a-b91d-0c1383da6c17", "sighting_of_ref": "indicator--af7d9b90-6db1-4d91-b9b8-97712ec2d44e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6c1fe3-ce85-4ad1-aa17-6d07e67954bc", "sighting_of_ref": "indicator--66d16778-aef7-4c9b-865e-b24b537c688a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a318abd6-dd2c-434e-b5bb-b11f5ab34d45", "sighting_of_ref": "indicator--737f17f7-0974-46c6-8fbc-29e75261446f", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b143049-cf78-4072-a47b-bc873e5a275a", "sighting_of_ref": "indicator--884e0baf-2e87-4235-a81e-02ef1a34533d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15f3df1-d3f1-48db-9219-6ec1e5a96f4c", "sighting_of_ref": "indicator--c1388230-485c-4406-bcac-9b562c8f5b2d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c004e5-af97-451f-8fec-702d576287ae", "sighting_of_ref": "indicator--6b84f5c6-3c3c-495a-81d5-f5be331b9479", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f18a21e-014d-41f7-bcf7-c5edea44a15d", "sighting_of_ref": "indicator--db264933-cbe2-4606-8fb3-416da3cca01d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d8eaa9-dfd2-4cb7-b78e-6e33ce926b47", "sighting_of_ref": "indicator--5d6273e2-7789-4105-ad03-60dc6cffc83a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c60f70e-6e4d-4804-9812-dccf3a0286e2", "sighting_of_ref": "indicator--be7ec6b6-e096-4c73-bb36-4bea347670d6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ec81a6-166d-4365-9431-13aec7ffc4ef", "sighting_of_ref": "indicator--58206f6b-2011-4140-be5a-c33d30c0c846", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b98094d-9309-46c2-9fed-cc036965433c", "sighting_of_ref": "indicator--0bbb7620-447c-42cb-825c-ff91b662cbf3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd02dd1-e322-490c-8884-e8507ddec58e", "sighting_of_ref": "indicator--f86bb434-db91-4cff-bcd9-825725873501", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda2bb46-045e-43bc-b54e-feeb8167c74f", "sighting_of_ref": "indicator--ca3b7ec5-8988-4fb9-9bc0-8067da75888e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923e37b3-0f6b-42bf-b1f5-7fa540318a69", "sighting_of_ref": "indicator--a254847d-0808-49ca-8517-65cc4e2a7d9d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc62aad9-cfe9-4531-ba39-f1f7ff5934ea", "sighting_of_ref": "indicator--e324c857-388c-4f6c-9f8a-74816779754e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f9614c-424c-40f6-81b2-71976b448390", "sighting_of_ref": "indicator--d3766d35-0368-4f0e-88ba-d702fee5030e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92faba40-2afe-4302-a6bd-9b3d5f5f2e9d", "sighting_of_ref": "indicator--3e083b1a-9627-4abe-8a95-069591fc1f4b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808ce01d-7e94-48d9-8619-d54222c84c58", "sighting_of_ref": "indicator--a450ac25-e850-4945-b200-c6938541555e", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf8f384-185e-4c09-8fe4-eaeaf7246aa7", "sighting_of_ref": "indicator--e640bbad-ffb0-4453-bb16-8cb97774b663", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5951ab30-4610-4358-a85f-240ddf881c9b", "sighting_of_ref": "indicator--81d703f4-e6be-47b2-85aa-e9671d5d8145", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ebc3e7-0111-4272-885b-bfdebf8b0cca", "sighting_of_ref": "indicator--a53328e0-805d-4ab9-90a1-230d561586f3", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adee966-47fa-460b-86fa-78e531b00bfc", "sighting_of_ref": "indicator--96d1f543-ff06-46d0-becc-0cba4d2a2445", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4472c64b-f747-4842-a5e1-98734ec62ff0", "sighting_of_ref": "indicator--fa17d23f-769c-423f-bf54-e802c83845ac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4de73c3-8410-4e74-86d3-4d174b21b04d", "sighting_of_ref": "indicator--8aff24d8-4688-47cd-bbe9-85d222dd56de", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31a8a4c-903a-4f7b-9a0e-f48ac1d43601", "sighting_of_ref": "indicator--56a21ed9-56a4-4bac-9d8f-6204b5fa8cd6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48480b90-a923-4c37-87d3-e852a7f80f22", "sighting_of_ref": "indicator--82a765f7-7828-4a78-8d42-9725b1626a88", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a7d36d-af1f-4ff3-99a2-7456c11b8163", "sighting_of_ref": "indicator--855c619f-b92b-4bfc-b8b1-c68f191a36d4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179990b8-03c6-4d1f-bbc7-2b2e96783dc2", "sighting_of_ref": "indicator--99a1fdfd-399f-4c61-841b-b0e2d450f6b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db609e9-367d-4ec1-bd88-bf5e1efd3ece", "sighting_of_ref": "indicator--e54ada83-716e-41a0-adb9-da50793f2f77", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7e19cc-34fc-49dc-9a4f-c7ae21bc3e1d", "sighting_of_ref": "indicator--d6e655dd-5d7f-4072-b0a0-62bf0251c547", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89f58cb-7d62-4fd2-a597-f72d5a316d15", "sighting_of_ref": "indicator--c29d545c-d834-44a2-a256-304b7d301639", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb6e85b-e6c9-424d-b449-7ff67fc2f824", "sighting_of_ref": "indicator--da605901-9777-4054-a4a5-e856f6bcf9bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d8ba91-dd63-479c-89e2-2b1126f594b8", "sighting_of_ref": "indicator--42ba3d7c-8986-4d39-adb1-7722e2077c42", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158af402-cae8-489e-974e-fb9998f5b46c", "sighting_of_ref": "indicator--72ba5349-9121-4216-909f-b0daa7be528a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe335003-98ec-46c0-bb55-965521e1fc83", "sighting_of_ref": "indicator--bf2949d1-a40d-4076-b95f-34973088d41b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8812f4-b791-41e0-8fed-dcca59d68569", "sighting_of_ref": "indicator--ab4412d2-1981-47a4-b33e-5cf4b1c5d0e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a008d3da-fe2c-4d27-91ae-7e8d06441fcb", "sighting_of_ref": "indicator--9097d458-8115-445b-b65a-83042fb21d96", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d809f27c-0173-4a6a-b112-be7c87360319", "sighting_of_ref": "indicator--3bd5b2ca-8402-4bbf-a32b-9354ec5bd115", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3418b7-9f69-4ada-84d6-6751804220ff", "sighting_of_ref": "indicator--edf35e15-87a6-4a0e-bfa3-02cb7e6cf64a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3c1210-50b8-4c96-96d6-e22e90468091", "sighting_of_ref": "indicator--e89f20ff-183b-4398-9cd6-c3a2205ae85d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebc8b93-26fc-43b8-8bc3-8d7adabe4e8f", "sighting_of_ref": "indicator--cefdbf51-4790-4053-9221-3f7ef74a88a6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49192aa8-251f-4e57-b0c8-5bb7cd2ef5d4", "sighting_of_ref": "indicator--a00f1c92-91de-491e-9405-bb13aa36ec4d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04e67df-f2c8-4278-b5eb-6b65299fa4f2", "sighting_of_ref": "indicator--f0b93946-ad24-45c5-8c4a-fbdd0c6b93c9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb452543-d947-4647-9533-eb36bfddbf44", "sighting_of_ref": "indicator--e76afe97-f3f7-40fc-b7d4-e85c8790e358", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ec0fa9-f620-4b51-8bca-b5af3c878df5", "sighting_of_ref": "indicator--e4bf7ad1-c458-49cd-afc9-e89372c5f746", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0287b431-4c56-4135-b8de-47311ff80572", "sighting_of_ref": "indicator--e4bf7ad1-c458-49cd-afc9-e89372c5f746", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f23905-a27b-4545-9e17-f253dd08b8d2", "sighting_of_ref": "indicator--c30dbc35-a267-4b00-a7a6-21377601e0ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd90c51-ba2f-4ad4-bb59-539e44b9d5c9", "sighting_of_ref": "indicator--8b22b1f5-de45-4566-84c4-dc16458892a2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ef3070-1c2e-44d0-a712-76f4693a5955", "sighting_of_ref": "indicator--80c5ad9a-7276-464e-bc8f-fbfac5d08912", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8ddc0e-3d35-49c6-ac21-0e62353a1434", "sighting_of_ref": "indicator--a314cd36-85de-4704-bc3a-2aaa2a66c9c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b2cfa0-73f3-4136-b000-433ae1000c97", "sighting_of_ref": "indicator--1a976deb-fd0c-40ff-8f0d-2c445ae398be", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b402eb-e81b-4886-9d22-14eacf948cae", "sighting_of_ref": "indicator--e740ca9e-86ac-48ce-b325-4fd6adc0037b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643dc479-057d-458a-92ac-45c674c55321", "sighting_of_ref": "indicator--4d917655-e566-4773-b9d5-b338a5c1bf21", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeef649-8332-4f4b-b5ce-91f9cde240e7", "sighting_of_ref": "indicator--8a05e2ce-5a8a-41b2-89fe-32236f68a3bc", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef8cdaf-84a4-4728-8087-1e8da1e3d21d", "sighting_of_ref": "indicator--71727624-61c0-4460-81cb-cc643d249ebb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbe6cdc-ffed-4ccb-ac20-f13fa7e4948c", "sighting_of_ref": "indicator--73398abc-3451-4225-ab2e-9995720b2c74", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ac465d-f2b5-496b-a893-017076ab2181", "sighting_of_ref": "indicator--4e623308-a82a-4a36-ae70-82d4a23c95ec", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b450878-09cb-4e0c-93f4-3f412fdf49e7", "sighting_of_ref": "indicator--97f66870-5c16-4419-afd0-120546c736f5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349e5fd0-b152-4c94-bbb9-20f087f55f6f", "sighting_of_ref": "indicator--78c27be9-e455-426e-94d4-886e8d6e70ae", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221437b8-c2a1-4aba-837d-9e92779dcdac", "sighting_of_ref": "indicator--28ffff8b-22cb-4111-81ad-45a1e1c1ed34", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0122cc16-4179-4410-8439-7deab0ec3d94", "sighting_of_ref": "indicator--cacb440b-faeb-4bb7-9157-671ace00a85f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1a9dcf-72a5-467f-84c7-d6646260c77f", "sighting_of_ref": "indicator--eb350355-4c15-4f50-8ed8-31fcec1dea44", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dcef88-a17f-429c-8fc1-20a0f2245524", "sighting_of_ref": "indicator--9f80efd0-2a38-49eb-9c69-56d44eb1e29c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62365c6b-f4aa-4b33-bf8d-d0365689d95b", "sighting_of_ref": "indicator--9d95ac8c-604b-48c9-8a79-ac0d102ea4d5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753c06a0-9cec-405f-935d-6cf12cb14c05", "sighting_of_ref": "indicator--d2ae2e80-30ff-4725-86d5-971af9c93433", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4c0b12-01bd-4bfd-9fea-1ff30e0773f5", "sighting_of_ref": "indicator--12efbb69-09ee-4566-ac96-b4834e7f7872", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408c0ab9-749b-43c3-9624-d511f69c3f14", "sighting_of_ref": "indicator--c625fbe8-32b5-4777-b51b-9b9497a62210", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eabc591-ddf1-4e9f-8d9d-728af53a726a", "sighting_of_ref": "indicator--aa3b17cd-713e-406d-a698-76d8e3d83dd2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191bb0bf-76bd-4d39-b5b7-9ffe27b8b607", "sighting_of_ref": "indicator--f517e23d-49d9-4d0d-8352-8a1737a28836", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13ac077-c198-4fa9-920e-6fb20adf83fb", "sighting_of_ref": "indicator--9f153a14-78ef-41cb-a1a5-8a43272a1179", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c683bd-7222-4734-abf7-3fec2e451c80", "sighting_of_ref": "indicator--ab143460-672f-4a7d-a8d8-330147b13768", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17a4bfb-3355-4613-a8de-8ee72e53f49b", "sighting_of_ref": "indicator--6143406b-17dd-475c-ad29-d0c713188761", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3977c2ae-5d07-4fc6-b4b7-5882adb24808", "sighting_of_ref": "indicator--1882b868-26ee-4cf8-87b3-f10d9ca83cb4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627b5880-25af-4df1-9031-d655999254ff", "sighting_of_ref": "indicator--51440b18-e95f-4627-b666-210f66e236c0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affdf851-6d23-4e9f-a065-e457eff2c286", "sighting_of_ref": "indicator--fdf778db-4c12-4fd3-a128-84dac77ae51d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d13c8f-a466-4a37-b0c7-2d9cdae68022", "sighting_of_ref": "indicator--63362259-b2a6-4cab-aaee-f0b7e2c9276c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ad350b-8e8a-41dc-95fc-ece720cc33c0", "sighting_of_ref": "indicator--cc32ffba-1f33-48e7-beb5-12ae5da54a18", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff395a0c-c258-4099-bb33-754cf65456c7", "sighting_of_ref": "indicator--dbfc1513-ea2a-4b0b-b87c-d2f95a31af45", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d259468e-c9ec-488b-9ba0-99e3daaf112a", "sighting_of_ref": "indicator--9b41aaf6-862c-4de9-ab98-0b0c28ff5c14", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca51180-dd34-4285-902e-f8e87bd7cb76", "sighting_of_ref": "indicator--43bb5d91-e4f8-47ad-a47d-48e9c1c17f3b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82301d1b-85df-418e-82d4-6172bc91bdd6", "sighting_of_ref": "indicator--3f874d11-27cf-4509-95a4-8f9bdd207849", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b76bc7-32e5-4e94-8cd9-f0d8b4e0209b", "sighting_of_ref": "indicator--96adb104-0f30-454f-b2d0-80d9bde38328", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742cc42c-e576-4549-9528-069aa8f0ccf5", "sighting_of_ref": "indicator--12feb736-5393-4c0e-9206-7be4c70cbf5d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae74fff-f2eb-4c42-a1d1-dc117dabb823", "sighting_of_ref": "indicator--82eb6fd5-329c-4ca8-998c-37d79945563d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd14023-1c3f-472b-9580-32ec566fa949", "sighting_of_ref": "indicator--87f74d04-deac-4152-b0c9-5afe878832ac", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1c601a-115b-49fe-9131-dafd840272ff", "sighting_of_ref": "indicator--428a87d2-426e-471e-87bd-811cfad149e4", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79aa7e6-ba19-4367-ba0d-192312b53c15", "sighting_of_ref": "indicator--428a87d2-426e-471e-87bd-811cfad149e4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6605dd57-4f73-47ca-90e9-1666f29be96a", "sighting_of_ref": "indicator--a8d3ddef-c6f5-420e-bdff-f07ee74c3c66", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4e5ed5-dc0c-4e49-a009-196ed47e92ca", "sighting_of_ref": "indicator--2c550dd2-3f0c-4e27-87bc-684a390c23c5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade27901-b906-4e0c-9770-025cf70d5390", "sighting_of_ref": "indicator--d660f56c-7fb3-4c06-bf3e-ca0a3144fa41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49eb6e1c-2e16-426b-a098-284dcfa768d2", "sighting_of_ref": "indicator--684199f0-bb4f-4956-a646-834a6f9237f1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2389a70c-b3c8-450b-bd9b-c904c3f1d689", "sighting_of_ref": "indicator--cf32d312-e62d-4e73-b31c-1075f432cfeb", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d131c748-eb4c-4acb-ade4-bf6798dfed78", "sighting_of_ref": "indicator--9d9c4bed-2fe3-4c3d-bc53-0d21d6e2fb43", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a5d5ec-cfca-4003-8be6-d6489c738fb8", "sighting_of_ref": "indicator--eb62c718-50e6-457e-a3ea-8bb8487bd905", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce568800-dd3c-4f35-b4af-db901c45d179", "sighting_of_ref": "indicator--359d3f86-8f03-4a24-b99f-4ffd0bc17094", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d0d3f5-2714-46fd-9494-f35ff5252955", "sighting_of_ref": "indicator--25b1181e-2a73-4f80-a18b-39c7c5a1f748", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1601c7c-04d3-46ff-8bf9-78c98a390216", "sighting_of_ref": "indicator--e8f5c178-14e9-46a0-b0c9-1dc722e89da5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951ced40-f53c-41cb-b538-c84141e1b180", "sighting_of_ref": "indicator--5edb44f9-1758-4b22-9a23-d8b6f86fe154", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ddf1c6-ea7a-468d-ab7b-29a0d5804ed6", "sighting_of_ref": "indicator--4c52d5de-4681-46c4-b0a0-9ede544afa6f", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c652ebf-1499-453a-9c87-f1962b6fe10e", "sighting_of_ref": "indicator--c60a81b2-8fce-432b-9dd7-ecd8d91896db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28c59ee-c339-4215-aa31-ec34fbeda7a0", "sighting_of_ref": "indicator--62dc1d20-2902-47d3-a474-8ae75d4459b7", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25950a40-7722-4aa0-81b6-3df5850e0cc1", "sighting_of_ref": "indicator--54632dd5-0307-4473-806f-8bfcb6e9e543", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758ca362-69ab-468d-a792-299c871c4db4", "sighting_of_ref": "indicator--5355ea9c-4968-413e-91d0-2e3a6102e16c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9f461b-eac5-4890-b923-4d3d87f4f72c", "sighting_of_ref": "indicator--2baca30b-4696-44dd-a022-7380534f1802", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbd6774-0f68-4c94-83bc-f43afee43606", "sighting_of_ref": "indicator--cbf304fc-53ef-4660-90b3-a7e5967e9160", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f661aa-78d1-4d10-9da2-cd2242566829", "sighting_of_ref": "indicator--b9807c21-052e-4d62-9c3e-e87b52fafc75", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3233298a-ab46-4927-9f61-0a12aa0f0183", "sighting_of_ref": "indicator--e1d11240-8a6a-4a01-8d2e-c786b64cea1a", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea57ba1f-8190-4670-ae54-c408491d3fe9", "sighting_of_ref": "indicator--a9929f79-857f-42c3-95e0-347b6b4e187c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8810675-dff7-4211-be2a-33658106fa3a", "sighting_of_ref": "indicator--b02c60e1-8aa7-4caf-bce0-5eb32771f13b", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7866cd59-1b7d-45da-bc6c-30fd9b688499", "sighting_of_ref": "indicator--6d271c92-edfc-4d1b-bf69-2bbc84de83f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785d46d3-d5a9-4c69-a9f0-9d91250a42a3", "sighting_of_ref": "indicator--84b6522c-54fe-4a4d-a5db-6473621456ef", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bca61b-60a8-41ba-9571-4b8b377d383a", "sighting_of_ref": "indicator--c8fc301e-3ee6-496f-97eb-1090e57d14a1", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c908f19b-5833-4413-935e-d42668ad3a5f", "sighting_of_ref": "indicator--ffeec50e-2309-4128-95eb-1972330cbf8d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744f6900-bc77-48b7-8e4c-aab00c0bcb93", "sighting_of_ref": "indicator--ffeec50e-2309-4128-95eb-1972330cbf8d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465f35fa-663a-41f7-b633-bb744d7c16b9", "sighting_of_ref": "indicator--e558658f-2ec3-47bc-a069-e90e8704cdff", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3079f69f-1b70-42ed-8dae-1cc769027bdb", "sighting_of_ref": "indicator--e558658f-2ec3-47bc-a069-e90e8704cdff", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f49c82-8ad9-4c09-a950-b6a08f858ede", "sighting_of_ref": "indicator--594c9acb-bf7c-443b-a546-5f83068da6bd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af43af9-d160-41ae-a562-f2358b2e33ed", "sighting_of_ref": "indicator--594c9acb-bf7c-443b-a546-5f83068da6bd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa5a252-b7b7-403c-8e62-8739377de2db", "sighting_of_ref": "indicator--594c9acb-bf7c-443b-a546-5f83068da6bd", "where_sighted_refs": ["location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdacc72-439d-49f7-a320-3891b3bc870a", "sighting_of_ref": "indicator--ae2ab66f-0ca5-4c1f-97d9-ec063633b5ed", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975e819d-a783-40cf-a2ed-32971d312f3e", "sighting_of_ref": "indicator--ae2ab66f-0ca5-4c1f-97d9-ec063633b5ed", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb132df0-0ec1-4042-8391-18ae7cf54bc8", "sighting_of_ref": "indicator--a0ed24f3-60bb-4669-bc45-a7270ff94061", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e461936-9727-4dc9-a47e-843eedf990ff", "sighting_of_ref": "indicator--2603b483-5968-427b-8461-42eb00804cb8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046077e1-a9b1-42af-988c-44bc487b9356", "sighting_of_ref": "indicator--472a2cc7-9389-4268-ad5e-c6e4ee0e45de", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98330d8-7458-435f-a120-18b3b58def61", "sighting_of_ref": "indicator--472a2cc7-9389-4268-ad5e-c6e4ee0e45de", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e58f9f-ba78-446b-8bae-3d3dac346893", "sighting_of_ref": "indicator--7d7413f6-43ac-4b28-9910-7eff0575577d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319f9317-3a82-4570-be5c-78e0f72d7f70", "sighting_of_ref": "indicator--1ae3c946-b6eb-4243-9475-ddbb799d8986", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eea1daf-cdaf-4600-8005-0797e8bb9c45", "sighting_of_ref": "indicator--1ae3c946-b6eb-4243-9475-ddbb799d8986", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9487e12-eee2-4ec1-a3f3-b60c99090e8d", "sighting_of_ref": "indicator--bb0f4643-20e9-4fd5-9078-f2655fa3cd8c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a0141a-69a3-424a-a258-7a7877b51892", "sighting_of_ref": "indicator--999189a5-9e4d-4922-963a-cbe2fb628640", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c533482-3902-4637-af71-5c7445ddffaf", "sighting_of_ref": "indicator--62948265-9817-4722-be4a-17bfd4808850", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8228c25e-dd67-4972-b74f-169f52516c31", "sighting_of_ref": "indicator--62948265-9817-4722-be4a-17bfd4808850", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2850ce00-9aaa-4d85-9299-6b6fd83f0e80", "sighting_of_ref": "indicator--e8fc78b6-8302-44c1-8f5d-811ec86372cd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e94626-4da3-4b51-b5c2-b3a8d0378897", "sighting_of_ref": "indicator--e8fc78b6-8302-44c1-8f5d-811ec86372cd", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9cbd02-ccfc-4843-8bcb-3bc4c997cca4", "sighting_of_ref": "indicator--7fdf4773-7402-4975-8234-6f96f21268b5", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514fdafe-ef33-408b-97f3-bf3b74690bb7", "sighting_of_ref": "indicator--76860b77-63a2-4dce-b02a-690bebc7af42", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a230bcc9-5bf7-4d9f-80f3-9b9511e23b10", "sighting_of_ref": "indicator--a369847c-aa07-4473-837a-38d898cc4c54", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cacf35-4f61-4434-bf16-10a94ad1c4a6", "sighting_of_ref": "indicator--8c5260e8-f25c-4cb3-9a13-834317d95341", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803f76c1-1a16-4f04-b404-cc27f98482c7", "sighting_of_ref": "indicator--cccacddf-3e56-48e1-81df-0e40efdf20b8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ab58d6-ae35-4c42-9f82-1e932e1aaad9", "sighting_of_ref": "indicator--fda620dd-72ce-4b46-ab07-1c97e76ff4b9", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd43c6b9-b652-4173-9a9d-bd5e750e1dee", "sighting_of_ref": "indicator--3177fd19-f6ad-407c-8d72-78b2715cd31c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4dd7fb-0ca5-4150-91b5-41e7a971cb11", "sighting_of_ref": "indicator--b409038a-4803-4b3b-b933-62ee0d81fdae", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463dd896-51f1-4a65-a427-b5368277f3b5", "sighting_of_ref": "indicator--f2cfe358-a4e8-4320-adde-f5f87445f46d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60690a9f-e54c-40a7-87fb-cdc4894e37f5", "sighting_of_ref": "indicator--0b0bcbd2-41de-4932-a942-dd7ddb692514", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68e655a-1e7b-466f-8678-a6c92e95bc38", "sighting_of_ref": "indicator--d0026d7f-b6e0-4f5d-b212-7cd35beb1917", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2100ba5a-38e7-43a1-b2dd-9dda1a66a95d", "sighting_of_ref": "indicator--54483059-e6f9-43cf-9686-ef50070a87f0", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afcbd53-b087-4eac-8e7b-5476c6491ab6", "sighting_of_ref": "indicator--ccdd913c-0c45-4a88-8b22-64318db8e243", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f68b9e-a3d7-4d64-898c-55d62b7b43fd", "sighting_of_ref": "indicator--4dc42b89-a88a-4e1b-82b2-5dcc499a94d0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48c8ffe-ff04-4657-925a-7cf58a037a91", "sighting_of_ref": "indicator--02b26426-cef3-4cb6-88ec-92b8d32ad952", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2df3d2-5be8-4263-8aa9-9b484dbaf508", "sighting_of_ref": "indicator--d05e7479-b494-4a36-8d0e-6e79cac8a263", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d349e5-0a3d-4b43-93bc-3fe20e1da91f", "sighting_of_ref": "indicator--d643aa22-aa63-4384-8462-79b7b4e60754", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feae94fa-3cc8-40b3-a98d-714132c666e8", "sighting_of_ref": "indicator--b4774f7a-15a0-4601-baa6-7521d59c900e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288b75d7-adda-4e46-85ad-ac173882e563", "sighting_of_ref": "indicator--57addc37-33f4-4384-b97f-68bbadb36d0d", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5efa950-fa51-4aac-9e62-cc6494266bb3", "sighting_of_ref": "indicator--f0a5aa1b-4163-455c-91a7-7513f74ab3c6", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b10cfd2-5f97-43f5-b81f-11fd4bca663f", "sighting_of_ref": "indicator--f1f2a58d-35e9-4f9d-989e-f8edfbbcac91", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398e9521-642a-4029-acab-a3ac2b09dc49", "sighting_of_ref": "indicator--68565466-0137-4979-978b-dbbf67e52b9b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4634af-8bdf-41d2-84a7-7861415d7d9c", "sighting_of_ref": "indicator--2b376540-0f4e-4dc2-bb45-c0f549447b5a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfdc505-a941-40d0-89e9-6926459cbab0", "sighting_of_ref": "indicator--14df65a4-34d7-4969-86cc-17f87fd60cf9", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f666332c-aa38-454c-8535-996a2226fdfa", "sighting_of_ref": "indicator--bdeabb5c-0cdb-4880-b0ca-b052cd0e3ca9", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6378ec6a-2609-4781-9c90-4fabb0d07bdf", "sighting_of_ref": "indicator--bad55dc8-91a8-41f6-bf9f-af1b1481067c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9c22d3-a55c-4a8c-ac34-602984fb894c", "sighting_of_ref": "indicator--a911ff3e-96b2-4c7c-bb9c-eff38f8e5947", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbefa2dc-b946-4d15-aeaa-1dfd1110b499", "sighting_of_ref": "indicator--f42ae623-e645-47c5-ad66-8628cfa0944d", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdbf302-53da-4da8-a6a7-dd1c6e6ebb77", "sighting_of_ref": "indicator--42759ba9-9d98-48b4-af01-01c6b1b76bb0", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098167a7-aced-4c3d-b3ff-357f0a23b0a9", "sighting_of_ref": "indicator--ad50957c-1bee-4427-9f5c-e812b9972bc8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd2f2a3-0524-4afe-aa7a-a2439b2ac752", "sighting_of_ref": "indicator--ad50957c-1bee-4427-9f5c-e812b9972bc8", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bdc03a-f0f9-45f3-b2da-9001d1baf1be", "sighting_of_ref": "indicator--10e32044-6567-437b-a127-708325f634ca", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1168bb-6711-4aef-9f27-c6228019225a", "sighting_of_ref": "indicator--10e32044-6567-437b-a127-708325f634ca", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038db893-5f53-4bdb-a5b2-cc3414b33b7f", "sighting_of_ref": "indicator--0c45a624-176d-49e2-9d98-b53d097e15c7", "where_sighted_refs": ["location--4d09f7d9-f833-453f-be0a-a14ca49f18f5"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fbc44b-d438-48e3-9b7d-d1cbec42165a", "sighting_of_ref": "indicator--da081e24-e91c-4c5a-8907-76ad7595e236", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e11d1f-d71e-4e7d-a49e-32062791dd09", "sighting_of_ref": "indicator--20b0dc25-93da-45e2-8ee3-87123aeae436", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ef92da-9ae7-4e61-8c15-c48938d49d92", "sighting_of_ref": "indicator--20b0dc25-93da-45e2-8ee3-87123aeae436", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d708c8f1-e85c-42a4-be8c-1dfc618baec4", "sighting_of_ref": "indicator--a9d76f5b-fdf8-4bdf-9eae-d551790de889", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694c40d1-3bb1-449f-99f7-a049fdc136dd", "sighting_of_ref": "indicator--a9d76f5b-fdf8-4bdf-9eae-d551790de889", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d2f678-e69b-410b-90c5-b7a15cc5d4a4", "sighting_of_ref": "indicator--89a8393d-36d0-4537-8d28-c236d95e04db", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabaf788-f611-43f9-a188-f3cc8ab36ad0", "sighting_of_ref": "indicator--d1e5d30d-87ed-4029-9429-7d9d3c02ca1b", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350f0a19-0f47-4328-b00c-11b9b3a233fc", "sighting_of_ref": "indicator--8010faec-2ccb-496e-9f8c-3cb0fc9197f2", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d8fd96-b1f8-4dcd-8869-28d7bd1d0c63", "sighting_of_ref": "indicator--c7c6f72f-1399-4ba0-90a8-57254ab41423", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5971c500-5746-47ab-9609-8e309b91c74b", "sighting_of_ref": "indicator--8a8f451d-a25c-4750-93ee-ae7d930d6853", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaa64ef-4d22-46f1-9c6e-862b24518968", "sighting_of_ref": "indicator--1abda654-c892-4992-9d15-e2f703816392", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8d3b0f-0472-4796-9bcf-2f2b55781e5c", "sighting_of_ref": "indicator--5ad727a8-8e99-43be-98ea-0cc24c499c22", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e726498f-da68-440e-86bf-af75cdec07d7", "sighting_of_ref": "indicator--3f95dc54-205f-4342-bca2-c060f576acf8", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9dd896-67ab-4992-8591-97c4123867a8", "sighting_of_ref": "indicator--e686d476-da0b-4d65-989f-2d1724bdc6d5", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb1b066-2bb1-47f3-a129-243114646907", "sighting_of_ref": "indicator--6d482b01-8942-4bb1-bc98-0abe98ccc794", "where_sighted_refs": ["location--085ed28e-a91f-4f6a-810f-edf915c10851"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b999eb1-7c2e-4712-83b0-0b98c83b70f7", "sighting_of_ref": "indicator--9fea6724-795e-4568-a929-30d3e6d3b2bb", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c436e0e3-daa9-4294-bde7-71d07a2a8e00", "sighting_of_ref": "indicator--23e24b42-7d38-4229-add8-ec609299edce", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beea59ef-5b90-4efc-9309-a423675e3760", "sighting_of_ref": "indicator--d4c351ae-048f-4f4c-bef0-69249f842b48", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa603ca-ec05-4205-9766-a18568dfe717", "sighting_of_ref": "indicator--fff4a99d-9d63-4fbf-804a-75b73a513d5e", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff44636-f892-4aaf-8042-d5b24ffbcf0d", "sighting_of_ref": "indicator--58a260c5-2f82-4777-813f-2cddc5969c41", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56338c47-4506-47f8-84f8-de5e35100930", "sighting_of_ref": "indicator--58a260c5-2f82-4777-813f-2cddc5969c41", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a53008-8945-4fc8-a45b-d440ec0dc141", "sighting_of_ref": "indicator--18270735-8666-4e45-816c-f295ed77669a", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff129f2-7151-445f-b885-a59c63b51ec3", "sighting_of_ref": "indicator--6626569c-53a7-4b78-bcbd-fa5ba55696f3", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40509314-e69e-4a4e-8be3-3a8c1bfe9dbf", "sighting_of_ref": "indicator--1a0e2d8a-831a-4e3b-9e5c-55b7e180bdbd", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435cd8e8-6c75-4a9a-8ad7-b744a0cd6a96", "sighting_of_ref": "indicator--6e19ba6e-204b-431d-8c7e-4d800e381514", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed658e3-82fb-4ace-a21c-6e634863d2ce", "sighting_of_ref": "indicator--84ef5791-2c6f-4f27-8b54-251fea916a06", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc884e12-3939-4929-b5ad-1e599df23b79", "sighting_of_ref": "indicator--84ef5791-2c6f-4f27-8b54-251fea916a06", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec9957d-2dcc-490a-ba1a-d1bbebc6903e", "sighting_of_ref": "indicator--d136230a-76fe-4579-a267-07ead7851f83", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417ef7d7-91af-406f-98af-58e82dace9a0", "sighting_of_ref": "indicator--33c83acd-9b1c-4df4-a888-d9e9b7f0c2c4", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62014c01-9818-4c16-89bc-76c66e12ba02", "sighting_of_ref": "indicator--556c2fcd-2a0a-470c-94e9-bc38bb16e674", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4319f6-15bb-446c-94fa-67c7b11ccfe6", "sighting_of_ref": "indicator--09ae4f92-3122-4fcf-92fe-d294175e80ba", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e41e0b5-492c-4773-8f37-443dcf99a379", "sighting_of_ref": "indicator--aa3061f8-0571-4b28-a4f8-d3c9507cf882", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9057c546-1ada-429c-8c03-9852bae211ff", "sighting_of_ref": "indicator--aa3061f8-0571-4b28-a4f8-d3c9507cf882", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62643f7f-b862-4d2b-8a0b-02f7488b359c", "sighting_of_ref": "indicator--0c656182-f7e2-4e61-b171-c0727691d73c", "where_sighted_refs": ["location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996279cc-299f-47a1-9055-97e980d5a722", "sighting_of_ref": "indicator--0c656182-f7e2-4e61-b171-c0727691d73c", "where_sighted_refs": ["location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a"], "first_seen": "2026-06-03T00:00:00.000Z", "last_seen": "2026-06-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--0f37eeff-9444-40b8-94a8-2943f9d90880", "name": "Threat Report for 2026-06-03", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-04T11:00:02.207Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--5dd07fb8-43bf-4718-8fc4-8d04f7f56d42", "location--085ed28e-a91f-4f6a-810f-edf915c10851", "location--a07b6c81-e9cc-4e8b-9b48-76ddcaa4fc3a", "location--4d09f7d9-f833-453f-be0a-a14ca49f18f5", "location--15cb7c19-8e4f-4ae5-8352-6e9df1c74832", "infrastructure--7bb755cc-4909-40c5-a849-c15a007666d2", "infrastructure--a3426867-bad8-4602-90d1-15b25c998990", "relationship--fea7f521-cf40-4eae-981d-8faa068cf59d", "infrastructure--0eac5c76-8cdb-4908-a675-08a634d5fa9c", "relationship--e01e0ccf-2816-4133-a213-f9b30f2ad45d", "infrastructure--ce31f175-508e-4e99-9048-a2106b9c266e", "infrastructure--b25b50f9-5a6e-404b-9776-364c2f8b1445", "relationship--4359a66d-487c-4120-b79e-b7c33b203b59", "infrastructure--f583d80f-d38b-4c14-a642-18c6e6cdc2f0", "relationship--c5b4effd-a4cb-4d2b-90a8-77ba582120d6", "infrastructure--419392ce-f152-4835-979e-f654af5026b6", "relationship--fe54fb7f-9091-4e9e-a80c-cf6bfc8ce4c3", "vulnerability--a8ac0b2e-517d-46dc-b147-52122c9eff5f", "vulnerability--2efe2558-81ad-46e4-b75d-1084cb911660", "vulnerability--aea727db-892b-48fa-9748-7045eb52004b", "vulnerability--476ae9a6-3d8d-4ed6-960c-7a6ba87e9e22", "indicator--1f5b62af-9e3e-40c2-a3e8-0ca8a472c9bf", "indicator--cce3b58b-acfe-4969-8b72-f0a951ddd56e", "indicator--b20af7f5-2850-4883-836b-062f56a3c1fb", "indicator--60e370ba-54ee-4abd-b40a-7fba4787ba06", "indicator--48825735-c81d-4fc2-a33a-39f93611196d", "indicator--88fb8881-43a0-4ecd-9409-e53256d3e48c", "indicator--02efd33a-3798-49e9-9694-546806511931", "indicator--a1c66be5-1647-47f2-bad5-5fcd7e3882da", "indicator--d3af70c2-2b41-4851-9313-80b8279468cb", "indicator--c3c1a9b6-be3e-4e3c-bf3d-0201d0e9dbd9", "indicator--885af9cd-2939-4d6b-b7ab-22eabb48ef18", "indicator--6e947a39-83d8-4a6f-87be-9051c78b0f41", "indicator--5015dc81-aee0-491a-90b2-94f5b69ad8f6", "indicator--9acf3c85-2080-4374-aab3-c474a1d34752", "indicator--8cb41b9a-a600-44a6-b8b8-047e9330b7cc", "indicator--7eb1b881-565f-462f-9966-ef40d5937960", "indicator--7a04f267-a7cb-4646-a8b3-0d8fe3a27676", "indicator--0c9c24f3-af06-4727-a54d-a49b43f18479", "indicator--6d449318-c2df-4cd7-9ce6-6b63c2415e7a", "indicator--8a88e1ba-647d-44af-8082-b48809d2ec7d", "indicator--2e498110-aa48-4fc3-9dbe-da655280bc19", "indicator--024016e1-56b4-4a11-897a-cd0b72dd8827", "indicator--8da77f43-1cd7-4666-953e-5bdf850a2adc", "indicator--ac2f68e7-944e-4bb1-b684-d686ab2f1011", "indicator--067c9f13-1207-46c4-b69a-b0e6b9da9db2", "indicator--61e714e3-0c2f-4f12-8e4b-47b691fdfb0c", "indicator--9d160c9c-2ba8-4184-88da-18002497c6a9", "indicator--95940b39-0528-43e0-9bee-4ff945570883", "indicator--207061d2-af4c-444d-a554-d40b85f35ddd", "indicator--ec2332ed-da62-4385-afab-023a94916e5e", "indicator--60ef8353-916a-4c39-b503-b840d67371f3", "indicator--31df25c9-4856-4111-a44a-adf59f2f7934", "indicator--b19ec401-a7c1-4335-8783-9c02ef7627f7", "indicator--75403637-61d2-4b6b-83f1-0088d07f0717", "indicator--ca6ab4b1-3fe2-40c7-933b-2a132d3116c8", "indicator--109ec750-6c8f-4655-aec2-58621e2477a4", "indicator--898c1bab-747e-4cfe-a64e-c65931679b78", "indicator--32f28988-f681-40d1-bc17-98248621c769", "indicator--10960d3d-0fd8-4d49-9ca3-a986bcde5c36", "indicator--87d292ce-99aa-4568-8033-b4abb5fd73f6", "indicator--11736b95-51a2-4c04-bb88-b8b67a7b7f5e", "indicator--5a953e10-e01d-4273-a50a-b20b274001e8", "indicator--14c64cab-c2a8-4738-b88f-5faa7b837bfe", "indicator--21adbfdd-d2a7-4e6f-8d65-a6dc399af464", "indicator--5c50a74d-bd4e-49e3-aa68-46c6e74306e5", "indicator--e3b649be-3d25-4fc5-9c2e-daa892fab229", "indicator--2bcc79bf-fc8a-4c42-a148-2c5446ce707b", "indicator--b3e54736-ffe4-4911-b555-3a6100d30d2c", "indicator--079f32dd-9c30-47f1-b7c8-4276ae8af9f4", "indicator--b0e26ca5-f835-4192-aac7-8c4eccbc2648", "indicator--bd290e71-05db-483f-b6d1-c7c7c74b1ccb", "indicator--0dbc3942-e5c3-4aa4-a7d5-9fbaca821af5", "indicator--39642f0d-e963-44b0-a1a0-5ad5bc399a08", "indicator--ed3978c3-6ebc-49ca-8350-281f0ab2493b", "indicator--c3f0bd1b-8894-46a9-9907-5a277ca7aab6", "indicator--bf3aec91-a75e-4bc3-96da-5747f5f94367", "indicator--9f8a1b19-7082-4747-9c46-e60514845792", "indicator--54827892-2e1a-40d9-9b46-cee3680af516", "indicator--e81b1ff9-a7fa-4f73-923f-cdc5282789a8", "indicator--d9f647db-dea7-43ae-930c-8f96e6a491e7", "indicator--e52fa47a-b584-48fb-ba65-fff55ff8622c", "indicator--552e6055-d78f-45e6-a3c6-0f51e079781b", "indicator--62326363-29b6-4cf3-be77-f0fbf73a2e1b", "indicator--79614625-2f22-40dd-9c10-796f0f5fb1af", "indicator--81cd2aaa-697a-4ec0-8dde-ad06edd81200", "indicator--5052bdfe-f8c2-45ac-8f05-ab8544078348", "indicator--f3146c29-7271-4010-b33a-1722b5824404", "indicator--23d0da4f-fa4b-4e1e-8371-622cb2b01b26", "indicator--dcff5069-d17d-4749-8993-71948829ef40", "indicator--5f4995c3-552e-48de-bb8f-28162881379e", "indicator--6db091bf-9c31-468b-9f03-a295c669e264", "indicator--603f2188-6d18-4fec-9dc6-18ac1b8f61bc", "indicator--ae103eb0-d45d-4ca7-8d34-22a3c8353762", "indicator--8ca8861e-a9ed-452c-a511-87ead7571b85", "indicator--48c9fdc0-0b25-4a27-9eea-2bcc338a402b", "indicator--954beb98-75e2-4510-99c9-8291750f8b72", "indicator--6f828ab4-39b7-4740-b778-8e33784094b2", "indicator--387adfc1-c847-413e-8874-1ea0d1c7b9eb", "indicator--87d61a9a-a0ad-4a66-9d55-5538c24868a6", "indicator--1c5e21bc-9bf4-4f1f-b8b1-525ffe68a769", "indicator--81d25ac3-4bf2-42cd-ad39-d7148d8fa59a", "indicator--af0c96b1-74be-4b03-9984-c2bb339f803c", "indicator--580f95a5-d6df-47e7-a8b2-bbba7110d3b2", "indicator--bbfe71f2-4d95-4c9d-9718-bf6df26e5c3a", "indicator--714ca27f-d39c-4621-bb38-96705e41757a", "indicator--e42ee0c7-131e-4e2f-8a91-b38909d82578", "indicator--ae015279-a0fb-423d-b527-a7571fbe9db1", "indicator--fdfc1910-bacc-4ac5-8cec-431d71906d5d", "indicator--66b94a38-7e4e-40ea-966b-d9a8cde57f25", "indicator--0784132f-e3fd-4ce7-933d-c8745063ba8c", "indicator--5b834f17-75b9-4da9-b7b9-dfdc1a7202c7", "indicator--5c54dc20-8059-43ab-baad-3c4665e209e0", "indicator--10ee5be0-0723-4d78-830f-2aa233f148b8", "indicator--630bd0c1-be0b-4165-9830-eebc913f18e1", "indicator--ac26772d-a691-442f-b693-463e5261a706", "indicator--c4341621-1958-4134-b1e7-9ad407d44b44", "indicator--c4417cd1-e9ef-4a4c-b090-d12497d555ec", "indicator--2fef1277-f5a6-4baf-a403-aa193a743475", "indicator--a08ab556-8bb7-4ee6-b5d9-d09736120831", "indicator--0dadbda0-8181-479a-8398-5a14d7452d33", "indicator--d4370383-bbb1-488d-af3d-d5fb08e20f70", "indicator--7bfb2943-5ef9-4b32-9438-9ff3ada3496f", "indicator--1e563095-ca8c-43da-b361-4c70bae4083c", "indicator--8f0ef7dc-a1e2-4c8b-82d5-990d4ea611ef", "indicator--8aef8a7e-9bf0-43b7-ab6a-3712f53c180d", "indicator--5156c96f-5dc5-4431-b1e9-b2b437ff8b1d", "indicator--248a70ae-61ab-4bc3-ad70-34994d47e917", "indicator--2a1d70f5-521f-45b2-98bd-e0af7946d79f", "indicator--bc9174e4-e6f9-4260-b215-114e3a50694d", "indicator--52915e8d-ab2d-49ff-998e-107b6a4a6dd5", "indicator--c7839a18-88a3-402b-9ae6-d1a7b3d8c7e8", "indicator--34758151-5709-418b-b172-e4274c24e1a6", "indicator--87393caa-c516-4ebc-b734-7e4baa5e0fb0", "indicator--1d2a180e-1e29-466a-a628-9ae342f805f6", "indicator--58199363-8f25-4e97-b81b-f23798f14bcd", "indicator--2841f5f3-2a41-45ed-b42a-2da0dd9681d4", "indicator--890bb91e-a1bf-4ed6-b063-c31003357f55", "indicator--7db2b215-13f2-47cb-bf75-ef5a7470112a", "indicator--30d7a326-7b41-4da8-8cc2-0c692271064b", "indicator--2eb95aa4-40bd-42f4-928a-a9e0274b7f02", "indicator--26919667-5ce0-43e8-8904-9786eb165250", "indicator--b4b9bf4a-3f30-49c4-bb93-7ccfb36bf915", "indicator--a0f3bd58-55ed-46b3-800b-4090926eff46", "indicator--63a94f50-6035-4e0e-be4a-7ae8d4bb9b47", "indicator--81ed22f0-6215-4413-976b-673efa87ab17", "indicator--2a0ce0a8-f4c9-43d9-9384-f3a4fe7201e9", "indicator--c5e76527-dcd1-4b1c-8369-56ed477d851b", "indicator--c2546909-aa6c-4d49-95ef-0505f5893d4c", "indicator--aedcd99d-d4c5-4289-9fa1-1bdc61b2361c", "indicator--96fcf3b9-7b5d-400e-9932-2626e18fc666", "indicator--8d42cd8e-ae3a-44f4-8f91-91b6ed8ef709", "indicator--7b05309e-e57c-4718-9b82-80931215279a", "indicator--cf07f45d-a24f-4f51-9544-778f2fcfb863", "indicator--511c852b-a58b-4087-94af-7fb0b6094089", "indicator--11f13f79-23bc-4ce3-bbd4-07cbb0ab0734", "indicator--c31fa668-02e0-4303-ac09-79a2dbe4bede", "indicator--91bd9cd3-7784-4d8a-9cf5-a5b5827dc22a", "indicator--a3998840-12e3-413d-8f45-f2f75c6228a3", "indicator--c58878e6-e59b-492e-a24b-0665b5dee94c", "indicator--8a2643e8-d3e7-438e-becb-cc235ee12a9d", "indicator--4c95ff9a-ceab-4f15-91dc-31dec3cb6387", "indicator--ac188c07-67a5-48f8-aacf-5e8bac7be9af", "indicator--36aceaf0-64a3-49cb-95b0-d173e7613e2b", "indicator--be5d066d-973c-486d-8dad-b204981ef2da", "indicator--9b711333-8cd9-4abc-a9dd-902eefdea073", "indicator--456056b6-bc9a-4d91-978b-f8672874d429", "indicator--2ac139cc-22bd-40c8-8d29-17cc858c446d", "indicator--b44d9517-b5ab-419a-8525-0b1af3fc7720", "indicator--ed5897c9-fabf-499a-8889-b7b725c3f52c", "indicator--54905a76-8247-42cc-87ff-e0cde1b4c305", "indicator--971e7c1b-00ef-4d36-9f63-1473f436858e", "indicator--0e44a82b-e5b8-44e8-9465-0b8f9e8d7baf", "indicator--d441bf29-1e8b-4953-9e43-ee3de59dbc9d", "indicator--154d36e1-366b-4ecc-926f-599c7a66a696", "indicator--ce0670d9-ef2e-4a83-94c0-7aca42ef0184", "indicator--8ab7cc8e-2aa2-42c0-84de-51b142f98568", "indicator--ccee1e34-ef44-438f-ae74-d9926d046b69", "indicator--c58828e0-4acc-4949-902a-dd5527149649", "indicator--ab0137af-5372-4741-859c-c2c8c6433883", "indicator--04b66008-aca8-4fb8-8740-1bb548a20499", "indicator--e8b1e2c8-9c91-4235-a9a2-0ee0d86fe0ad", "indicator--90892ef3-5d6e-4bad-9d21-cddd6697b08b", "indicator--d582d58a-2955-4a32-a197-a0e4a910ace3", "indicator--08276bc9-28fd-4ae8-810d-cbe2ecbff5a6", "indicator--fbcf3f23-a283-406f-8e32-4c85152999b2", "indicator--cfd7b08d-7c99-4e37-99ee-36747a565467", "indicator--4fd9a13a-4e1f-4b21-8326-ecc306ba5638", "indicator--9d88dd5c-eba6-4e6f-8ba5-a2e42b4c77ba", "indicator--0bc29a4b-378c-450b-a623-cea3c6cd4da2", "indicator--cc70f395-ac24-442a-a34a-6aa89342d73b", "indicator--9466f541-fba9-4425-a282-a05116d662a3", "indicator--aed45d79-3019-4b58-941e-504472e092b1", "indicator--4a1ce4e8-054e-4835-af26-56261821d54e", "indicator--ff59ba76-aa3c-4ccb-967c-af6cfe3fc3b6", "indicator--a803d0f3-eb1a-400a-a9b7-acee25577d4a", "indicator--88719571-355a-47e0-9417-e73aa98635ae", "indicator--ddd05654-78da-4118-9f9f-374f08618520", "indicator--1fc75544-6813-4153-a034-0aa4346d22db", "indicator--fbcaad6b-5d95-416e-a13b-70c54c7684f8", "indicator--20061fdc-b35e-42c2-9127-50f64183f11a", "indicator--5b7bf799-2797-403a-9990-5af65960365a", "indicator--b1b149bd-d30e-4abc-9c18-2a770e8fdb88", "indicator--abc550ea-2b26-458e-9205-83b91a98bd7a", "indicator--dbfc6f61-5927-4e8c-ad5c-a24678c586b0", "indicator--f75d9b4b-1214-4032-8c49-dcf0f97490bb", "indicator--cde0788d-6dab-4307-8808-a8b489b735be", "indicator--18da43bd-3908-420e-8a9a-8ecad10caec6", "indicator--f959a514-5a44-497e-a61c-1310308d1750", "indicator--e466992a-509e-45b8-a94e-a7a40bf59378", "indicator--fbc134b9-4b57-4031-8645-2cabfc776949", "indicator--f83fab07-ae56-4001-900a-d918b5c91334", "indicator--8e6a3f29-890b-4b50-a6bd-faf7a0c511c4", "indicator--1cdde7d1-d44f-46ba-87fb-b51b3cdcf7c7", "indicator--3893e4a1-5191-42af-ae2a-9ed2cc5eb281", "indicator--0b5fd461-8448-446a-8c87-b579c47f96be", "indicator--0b8a75a2-d410-4102-810f-73bfd9a53734", "indicator--07c0dfc4-0931-4d3b-8cb2-5047d945c768", "indicator--ca01814a-1702-4887-92c9-eec93e80bcf5", "indicator--235a6e40-e229-49a2-a066-b05501c11d98", "indicator--8ccc0580-50a8-45cf-a3e3-5129e6c89069", "indicator--dd80eb7f-9f13-45da-8474-53b3e158f841", "indicator--2bb48f26-c637-4fce-9947-d79f84b9bff0", "indicator--f559111a-13e9-419a-8817-5d9cd1a493b6", "indicator--6ab8702f-3305-4b47-af51-4d8a849ed3c3", "indicator--4b4207ec-4eb4-49ac-86ea-a605636a2ee0", "indicator--61a8b3f5-7a73-472c-a707-ca8ce5533063", "indicator--7589d9ac-6e3f-4e36-a25e-b8e0a1122277", "indicator--55630e07-8108-45d0-83b9-544fc4ddfd97", "indicator--e02c5ccf-e402-4d40-9597-cb4497753a18", "indicator--a8cdbcc2-1865-4b49-bf68-b559faac53ba", "indicator--78a0a2ae-1364-4205-8000-5b0e8a29ac8b", "indicator--e34dbfc9-9222-481b-9105-1840a2d538cc", "indicator--b0d47b87-af85-46b8-9aeb-4b981f6a3084", "indicator--7e147ae8-10f3-41bd-ac72-c18b0dca2144", "indicator--49e54811-a6bc-42b2-a031-4b94db290ac4", "indicator--9f1e984d-dd55-4fdc-aef7-e0a154f402b4", "indicator--d3f265e5-bfe0-412b-9b8f-bb391d75c510", "indicator--29f9666c-dab4-4e50-93de-e67a472ddbe2", "indicator--a0a43bb7-40cc-4979-90c8-8149163e27f1", "indicator--fc81bff7-29d8-4adb-8daa-e11298b4a163", "indicator--cc606949-e4e8-44dd-8cad-bdd57bf2fe16", "indicator--96cbfa6c-5462-4c3d-a673-184350465ab4", "indicator--1aaf4452-8d22-49c7-83fd-a3d61c38935e", "indicator--b0f3274f-90f6-4d73-954d-60d7ad4c758a", "indicator--3f5f998f-2c05-4a98-a430-23bd7ee1c971", "indicator--e48f5c5d-098f-48f8-984c-9f8e374b6197", "indicator--04c33fad-2109-44d5-97af-aa610b44913c", "indicator--a9ebd1df-b10c-4f8b-9bfd-da1ee339c1a3", "indicator--90210f83-f9a0-4fe5-8168-012e18bd67c9", "indicator--07e3c596-605f-484a-9c2b-2d3470e0e387", "indicator--a858c7b3-d70f-46f1-b033-8642eb06cbd2", "indicator--be6e21d6-661e-4fb5-a91d-7c325efdec51", "indicator--4b57d172-f911-4f43-87de-4b5c1794db63", "indicator--2795ce44-b526-45ec-a574-8949d201319e", "indicator--eae8b080-df74-4e5d-9c39-eb8898a5f992", "indicator--451f1864-2930-4da9-b292-581e5f8060bb", "indicator--6eed0ed0-ce03-4613-9763-9b053d0ba7ea", "indicator--0ea5c64f-dfaa-45b7-a7d5-4341de73a6d4", "indicator--324b2693-83c3-42b1-9630-17c39ecf3d62", "indicator--b0bc6b0c-1701-49bf-ab7d-86dd44e2f27d", "indicator--d52259f7-ed6c-48cf-a99b-a26e977488ae", "indicator--e7bbb3fd-63bd-4ee9-be0e-e4100536d9f3", "indicator--9d2f8531-b5e4-4ca7-a994-b49c470d6c0a", "indicator--67b9075c-d730-4e44-8bf6-f0b6921b133a", "indicator--32c11267-5c36-45de-8522-c126de29a254", "indicator--ade14ec7-afd6-4d50-a0b4-0d1b8f4a22ba", "indicator--96e9716a-29ff-4757-82f1-ef6ab60ba39c", "indicator--fb31ad18-d99c-4a71-914d-9f4f7fd3b4c8", "indicator--98f45a96-1dac-4b8d-bf33-49141b7037d8", "indicator--dea6e943-2a49-4a8d-a01d-4a3cdc7fd160", "indicator--6dcb937e-ad33-41fb-b352-708fd76cd20c", "indicator--b8ee2512-446a-4f2b-9c85-33219b29d0c2", "indicator--1fd5719c-b2eb-43a2-b162-7c196556598e", "indicator--92c6c299-fa97-419c-a284-d2c6f74055c2", "indicator--e018b5f5-1c1f-40f2-928d-e698b188c2ee", "indicator--06d4199d-c4c7-4a30-945f-a60d05ff957a", "indicator--5daf7114-113d-44a5-aeea-5b3e55d745b7", "indicator--fdd693d1-16be-4c52-9d36-0155d1f6087c", "indicator--87f9523d-c914-47c5-b2ff-1e8962a27209", "indicator--520895eb-b787-4ae0-bc83-ed760ecf0fb8", "indicator--d9c37afb-05ea-4c34-9e25-ca1d9db1a841", "indicator--6747ed17-825a-4649-8dbc-86f58de591b6", "indicator--6b426eac-1e7e-45a5-b02a-a4112762e732", "indicator--e5d32dc0-71ec-444a-a964-9043099bce36", "indicator--01666153-3346-493f-a6ba-d2dad2663ea7", "indicator--53916004-3bcd-4da5-8c77-9bc6bb6ab94b", "indicator--720b37cc-d54d-483e-9b0f-20026fae61e4", "indicator--4365b07d-b971-4bf3-88fe-2c2efa5772ea", "indicator--31220226-a140-4ec1-8d0a-7f51a76617c7", "indicator--d9ae2e75-9db0-4c0d-a51b-6dfa7fed7906", "indicator--e514bac3-9533-4ad7-b943-c308505c32e0", "indicator--537a6711-4370-43bb-87d5-d217aa2842f9", "indicator--93b4d16f-670d-4b5f-9aae-708e1bbf349f", "indicator--e5146a43-2aa5-44bc-8528-d83958e21f63", "indicator--db3444a0-50a3-4119-b4b7-ab330e7ae6e3", "indicator--21e5756b-da2b-4e6b-86ff-7ac2ad6ca5dc", "indicator--a3d7023a-7800-4004-bd0a-39970665b3fc", "indicator--df684f88-745d-4389-a2af-98770e3a8773", "indicator--961e0921-60cf-44c3-923d-faa2d7f017c4", "indicator--bf93dd16-0adb-4b88-8035-4546193929c6", "indicator--a61ef9c1-33f6-4b6a-b7bc-49080d7a2d3b", "indicator--fc3408e6-c2ff-4b4b-b475-37c621f2117f", "indicator--1e57b1db-ef35-4a4a-9ca4-38454c5addac", "indicator--8d1669f3-9dcb-48e3-9463-caf9040c17ec", "indicator--4679da88-e245-44c9-b926-c160d2a8e2e5", "indicator--1987cd04-250b-4e63-9f3b-5e80f4cf5bdb", "indicator--97bec1ef-2c82-42c0-b6a1-4764fdbc8ff1", "indicator--153d8e63-f744-4d00-968b-cb6446c1e7aa", "indicator--7158f150-0759-4bc4-82c2-36331791ee25", "indicator--29b3daca-bb12-4154-98d2-b9b170ca36fe", "indicator--b1d2ecea-77e2-4ca4-9da8-6bb6b01d8684", "indicator--8a3ae64c-e436-40cd-b23b-0dd9dc361b68", "indicator--60410551-7f74-45f5-8270-df2fe15a3764", "indicator--660e8959-8ec3-49f4-8df8-76750387d144", "indicator--369ef73c-b1e6-49db-9a38-5e465d09c1fa", "indicator--d77372dd-3ac2-4a05-8e07-c6035964a1d0", "indicator--ad2f940f-7521-4f7e-a3c5-168224c68d19", "indicator--f56d25d7-56ee-40b6-a389-4f479914ea96", "indicator--371dda67-fe1d-4d46-a5b9-82f2aefc8491", "indicator--8a463762-fb00-47e1-bb62-55950a62231a", "indicator--4e136940-02e6-443f-b935-9ddece2e04dd", "indicator--5aa89516-c4ef-41b9-ae74-4e9b5991b51f", "indicator--851828f6-2815-4dad-9356-0de7cc7cda53", "indicator--76d454df-52d7-4d95-9f46-afcd39360f07", "indicator--fbd81f46-e7f1-4032-bc6d-445576ed9d05", "indicator--f0caa365-2996-46b9-8b12-1c200f32d8a2", "indicator--35657bf0-7571-44bd-afb7-330439b6adba", "indicator--1c635954-138a-4a3d-8aca-b07a23cd7598", "indicator--1d7f57a6-763e-4cff-98f2-929df0e58fe1", "indicator--c125c6a5-03d6-424e-b0a2-74738b6e0630", "indicator--cb315909-e847-4aed-847c-ad564b69fd2e", "indicator--ad75b46b-0b18-4c9e-92ad-04b8c65d2c53", "indicator--2dfebae2-c2cc-4627-a716-0e6b3a3bb6d3", "indicator--f4b7a159-7270-461a-9471-cb844feacb4e", "indicator--94e4dc26-0ecd-42a5-ac1d-c6856ffeeb01", "indicator--f11114e1-2c1d-471c-bff7-f0a42443dfaf", "indicator--457a6bb2-8e55-432c-b3e9-77cea4a07123", "indicator--233bf244-cb4c-4517-a1d7-77a0ee06d5d8", "indicator--625a60b2-b939-4dbc-9ed4-7b147d4bf2a7", "indicator--17c6d743-4fb7-4aa5-a643-8fb258133ac2", "indicator--c63c460c-8621-4323-b2a4-eb76b6b1bf6f", "indicator--8ae57f67-d292-43bf-8ea3-e293d3866e8d", "indicator--f3b96d31-e49b-4530-b583-2785015a6690", "indicator--a06a45f1-aa39-4a17-aedf-21dba82fd6de", "indicator--fbc2e237-027a-4513-b33c-6545112e74e3", "indicator--a5d49d40-4380-451d-8a8d-5b37e33818ae", "indicator--4f0a5084-d05d-454e-bae0-2eccb25048cb", "indicator--405a2ed5-76b8-43a0-98ad-40726c75b88d", "indicator--36bf5547-1ec0-4c15-bc7e-6d9bcea79f99", "indicator--05342b69-8493-4f2f-b04c-a13041ccaadd", "indicator--8ae8f4e6-a3e5-4ed9-8d07-554f263b3b4e", "indicator--88ecb151-1967-4662-b4c5-7d3ea4d9b053", "indicator--3446b83d-0efe-4c9c-8088-5b12537a7677", "indicator--3cece743-d540-42cd-98f9-2fbe0dfd4d17", "indicator--e7e1f707-3822-4aee-b42a-0eec23e1ac9a", "indicator--724d1917-85be-4f26-b905-6cd4d73cf4d2", "indicator--a3e37361-f170-4014-9347-ba80e72e35fe", "indicator--bf4740a7-c39c-488d-bd6b-4743ac962316", "indicator--b33dafa6-be3b-4904-a99a-b5dfd6691e2f", "indicator--0b13ff6f-5099-4361-adbb-00d210b1dd0b", "indicator--1d0091b6-fe24-4094-97b0-393bea1dfbfe", "indicator--9263eb1c-be55-40db-a15f-aa8759cb95ce", "indicator--1892ee53-4c42-44e3-aa1d-5480346c9e0d", "indicator--235a7ad9-2136-4506-9831-f0320601ac5e", "indicator--07cc7f43-2860-488d-b416-b3c7199b9583", "indicator--09c5bcfc-1fb1-40a0-9624-0a5dc102703b", "indicator--75f7a140-7a3c-488f-9a8a-a8f0e1220900", "indicator--96746794-82c6-44fe-8f7d-dbf5cee5ff44", "indicator--f45876d0-c2bd-4799-9d6f-06831de37bb9", "indicator--e973b9c7-0c8c-4acf-a76d-5372224dd0a2", "indicator--d5ec34c8-2325-4215-a988-0b4918737b36", "indicator--91a2b529-297d-4d65-8d00-462f9ce5b86a", "indicator--ec4be4df-55bb-453c-ac17-c4e6668fb8fd", "indicator--0c0dc52d-5af8-4e4a-a72f-bd4f04b0db10", "indicator--7ea35601-ebb5-4a08-9851-e1d58c93dc92", "indicator--1ff6e742-c017-497f-89b1-43b0466e5659", "indicator--7c4110cb-6c1b-44a6-ba5e-4e45bf046574", "indicator--3796bed8-b024-411c-b39c-f89365e80622", "indicator--adb41753-e02b-4e48-8c26-c3b30a526081", "indicator--7d42611c-9cea-407e-8026-a44db0f587ff", "indicator--f6bf0507-1c4d-4e58-b867-fd9e3206a2a2", "indicator--fc9da3ed-cbd7-489c-9eee-6252927a6106", "indicator--c484bd8f-f581-4675-b4ae-793d14288913", "indicator--7f5bcf53-50d2-4233-afb3-a9f7282f083a", "indicator--cf77cb1b-3c41-4494-beaf-13ec86dd5954", "indicator--dc648cb6-0244-45bc-a569-ca657cf48ced", "indicator--60fe9cef-0a0e-444c-9ab1-29031a0a5d4a", "indicator--0a58d6d1-dacd-45fa-8962-e6c5f1df4058", "indicator--7f4dc2e9-0c7b-434d-9e83-04b48dbe9f18", "indicator--d78a1ccc-a61d-483a-beff-c393442139bd", "indicator--96d200f5-c94f-486e-a729-c25969ab7105", "indicator--bbfac6e9-295a-4c79-80bd-00f94ac71910", "indicator--7241b274-30d1-49bb-9dc9-2ef0f3e3703c", "indicator--5d5afc1a-f0c0-4801-a935-5e85e78596a6", "indicator--2ec14afd-07d6-469e-ae3a-f5481cb753e7", "indicator--2a8730df-1ca3-413b-92dc-a501dd8fe2c5", "indicator--a5e29150-27e4-4ac8-9586-0ca2289ce223", "indicator--711e7b41-cb3d-4958-b9c1-476712463f9f", "indicator--cd6bd208-6903-44ec-a162-042b57f65907", "indicator--14943cfa-d8c7-4859-9d0d-2f1d8256a70d", "indicator--87725899-1a08-4cde-ac3b-d191abcaaa77", "indicator--11f10598-167d-48ec-925d-76ae58c7995f", "indicator--65cbbafa-92c5-43ff-a8d8-31486ea03360", "indicator--4a24c165-5680-400c-ab1b-59f68c8980f9", "indicator--ce2a8989-adf2-4a61-be77-d3040a79d753", "indicator--04d9071d-3e0f-4574-8dd6-5efe27226da0", "indicator--9d5677fa-530f-47fa-903e-8b1980fbf78f", "indicator--4f55c13b-60c8-4686-a2d2-a08f29aebf54", "indicator--c0e5ffb3-97f0-474b-8361-0207b3cbeaae", "indicator--055f970d-e699-464b-b9b0-d3ee062a8df7", "indicator--ea0c22e2-030f-4317-8a0b-7d2c371b638d", "indicator--66052d62-dfe0-4506-b2ab-afe55b9a3536", "indicator--32b04c26-cb8c-4985-9b3e-2e5c47d8851e", "indicator--2c27e348-467f-46c2-9b5c-5f7c94f2724b", "indicator--cb83efd1-361f-4683-9387-8d3880a73cdf", "indicator--6841eddf-6b17-42ce-9bd6-ddd07d761032", "indicator--2170fd3d-3cf0-4b2a-aea6-c06dbdcd9377", "indicator--fa065006-4f70-4a0a-b808-5739008e402e", "indicator--19281fdb-794f-441d-b046-1ccb2b63481f", "indicator--0f343fda-b5e1-40c7-9301-504745bdf7e1", "indicator--a1377b77-c3a1-49ba-b034-96f7e6bf4302", "indicator--4b9de3a0-fe2c-416e-9217-9409d9b80fcf", "indicator--ea372b16-2c8b-4b66-8d84-d46262192dbb", "indicator--8973ec1c-aa5c-4e4f-90db-0c181a1e74a0", "indicator--67f9a7b1-60b5-43b4-b6f0-9859a3da73b2", "indicator--7af009e4-fa58-4ddb-9b4e-d0c133a7d14d", "indicator--3ab9093a-4933-432d-b048-5b9fc052f6dd", "indicator--7b53b74b-e051-4d33-89b2-0a4455853f74", "indicator--8052da3c-08b4-4ea6-94da-e2e4e9dc1949", "indicator--98169d9e-91d7-4fac-af53-942e513d0c19", "indicator--6f0e830c-0737-4ecb-a554-df9e863cb368", "indicator--6486834c-3a3c-4e4d-a684-a07e97471b86", "indicator--3ff92a9d-40e8-4a57-90d8-050863c1944f", "indicator--41a650e8-8c9f-4795-9b6d-5fb28f384113", "indicator--2f370aec-0cb7-4246-be4c-b83e569186a5", "indicator--08c306b6-fe44-4af4-9f14-247d65bcdc27", "indicator--c9da0353-d1e7-4f36-8675-2b4cb037e9ec", "indicator--70489782-3bd2-49a7-b335-119034a19c4f", "indicator--c3156974-643a-45aa-9704-e84970e9137c", "indicator--a85745a3-4ef7-4713-a9d9-0b11f8442495", "indicator--b0f6606b-35fe-4b9f-8587-2ca47c677f68", "indicator--991dd1d0-a65f-4305-b7cc-f0f0f768f958", "indicator--23fe3044-59fb-4d14-9d77-ca015a96a051", "indicator--1e13fbf9-ba97-4e1c-8c7c-67e7b8dc0b46", "indicator--1d47e390-ef48-442d-ba2b-3367129b53ce", "indicator--24c525f9-b76c-42b4-b624-eaac30e2cf79", "indicator--fb301601-67a7-411e-a6fb-853a26edfdf0", "indicator--b8a60f3c-f431-48e1-afb5-dd270913a6b7", "indicator--836e9074-14b2-4b6c-8f50-065b1c09b7bf", "indicator--f0a67da3-f4d6-4167-aac6-3a5f24f69392", "indicator--c6449074-643b-4e56-8d1e-9ab995c619f1", "indicator--90d34b98-52cf-4ec9-b175-4526375c4384", "indicator--c0489e92-2c7e-454c-a0f5-8d561149b1d9", "indicator--37caa7a4-0fe3-4b74-807c-4da202f10b75", "indicator--869ce96c-f1dd-4357-8c38-a1d5d3421cfb", "indicator--efacd84c-479d-4b42-965e-5de9a9a1e9ab", "indicator--bb9c79eb-5fa8-42df-acbe-e4eb38412a87", "indicator--9259aa82-7b00-45b9-8cce-efe1ef6d8b68", "indicator--9616e7cb-8cca-45d6-a6ad-244479cec338", "indicator--b1e39127-36e8-4a53-abf3-1b750cbc1c67", "indicator--10f17662-2b2c-4715-933f-af5d07b5d742", "indicator--d59941bb-a861-4284-87e2-5deefc5cae2e", "indicator--f33191f1-9bb9-4f5a-857d-95a1f93d8be2", "indicator--38d5df19-e595-4169-af39-7ac92dbe6824", "indicator--e84cb64c-0685-4e1b-ab27-7aa8123e42f7", "indicator--714de926-3611-4275-a3d0-b8ae99831742", "indicator--d376528a-3a0a-4688-9f70-e72763ed37ff", "indicator--9de79164-ca0a-4a7a-b36e-a8cd0708fc7c", "indicator--2d286bca-3c5c-4a10-b9ae-f54a7a997b93", "indicator--bcfeeb69-4cf7-4c8e-b409-a2120547c004", "indicator--c1590b26-5c1f-4119-8291-a5d2200298ed", "indicator--86d08770-ceee-4229-ab89-585d86e3453a", "indicator--9321b806-bf58-4bee-8e07-c8aafee16c71", "indicator--0a7e3b54-819d-4614-98d9-02baabd597f3", "indicator--c05ad601-09f2-4dbb-b22b-15dae732df84", "indicator--d223b675-5067-4ca6-a4b9-779922fcf8cf", "indicator--c1f641f5-4ae6-4334-8b46-94501d9cebcd", "indicator--5cdec89e-ca16-42a4-a9d7-27cff099d7f5", "indicator--52097330-403f-4723-9c55-0f2b26d7fe2e", "indicator--b7d4893f-3e16-4ab6-bf68-5797fec5fca7", "indicator--b3bdcd0d-0065-4c61-bfcc-a0ed26a21832", "indicator--80cfb437-d67a-4a00-9086-6fc2b7ae5423", "indicator--2767ec92-e808-4aed-a780-4529f73868d7", "indicator--086680d4-ebda-4fbb-8ae7-1293c8360757", "indicator--3b4fe199-1852-489b-aa9a-bfa946ce26cb", "indicator--47e007a0-715f-4803-ac62-23c8e4de5570", "indicator--0d32d456-49f6-4ccd-92cc-d4af0d4e0457", "indicator--9eaff2b3-81ca-47d0-b1a5-ca92d04fdf04", "indicator--4b5897b4-94ec-4979-97bc-61f3533016e5", "indicator--e2d8fa67-f985-48b0-8edc-fa33f108383a", "indicator--dfdd7af1-e357-4ebd-962b-f09ce1b92336", "indicator--f3e79dad-f497-4c7d-a6cb-179f94189f91", "indicator--eb8c1724-d6e0-4cbd-9024-1c414dfe2afc", "indicator--8eeb2b84-c604-4698-96a6-94bac4554ad2", "indicator--7f904230-dcbd-4ca8-8636-8c64ba0262ee", "indicator--edb9063c-7112-496e-929e-8442e00888c0", "indicator--c57390da-19f4-428f-a558-c07db34117e3", "indicator--1927e458-b019-4cca-8956-5c1c31748942", "indicator--0bdaef35-ed47-4b18-8b1f-1508452a198c", "indicator--d745ec03-5577-4d0a-ae75-22ea3412b1d5", "indicator--39009421-662b-492c-986e-935f09e5c0e1", "indicator--8f2ce32c-d0b0-46a2-b34c-1e0ea2e49426", "indicator--e578a133-c848-4ba3-9d84-95970ef2cf1a", "indicator--6eccf4c4-63ba-45d5-a12f-0b56a2434dd8", "indicator--bfe773ac-b95a-48a3-b322-445a20c3c4ea", "indicator--117b1363-1245-49da-8d22-c06886d88a1a", "indicator--c8feb4ad-d8ec-4e5b-856e-bc41efc5225d", "indicator--2dc2ed42-9839-4cd6-8249-792652140870", "indicator--9cfb08f6-8bdf-42f0-a442-007d5a4809ab", "indicator--deae25f6-a64d-4750-b935-f845f0db070c", "indicator--67df55be-dde1-4023-a633-b909bb2de5b6", "indicator--d58eb3c0-97a8-40f6-a029-f3518efe098a", "indicator--dc957d26-4cc7-48e1-84be-2e19b27c26e6", "indicator--47b59a4a-62d5-43eb-b75a-6433472066a2", "indicator--b4a5ac4e-22e3-4cea-8b02-301f2942549c", "indicator--70b98a1b-b29a-42be-9600-53a4a99de095", "indicator--3f4fb1ff-955c-431c-a7a7-effdd840d3c7", "indicator--f824c254-5961-4c09-875e-7c9122c02b52", "indicator--b1510a46-2b8f-4a14-9c61-94f17603d3fb", "indicator--1c4ffd90-3bf0-4fd9-a4e7-827b5b470b71", "indicator--03785398-4780-46a6-b339-fe09ff4dbde9", "indicator--8ae324f2-09b8-4313-8af8-961c70d46629", "indicator--256ef5be-e5b3-4833-9c28-f612319bc4d7", "indicator--c3fa6179-9a7f-42df-a18e-bee913afd3a9", "indicator--710d2997-f988-4064-9af1-12b3bc349735", "indicator--ae9d43d1-db84-4598-b486-871e0b58f710", "indicator--88bc6fb9-afc9-495d-bd81-d5baf68ee265", "indicator--ae57c1cf-8f87-4976-94a8-bc4bae7e514e", "indicator--3999ee48-6eaf-45cd-86db-4b29147b041f", "indicator--5601ddf9-5a0f-4024-b5fd-ffd50cb32d5a", "indicator--725e4346-c51b-4382-a7df-2f969ae2bf42", "indicator--42022415-d14b-49a5-9183-0c7b217f22a7", "indicator--a1255897-50ad-48d7-81bb-831eef8bcbab", "indicator--1d924b57-09d5-44f2-a1a3-ff0cadbe5a39", "indicator--c23c1ee4-cf6d-4079-87c0-a3bfc232de7f", "indicator--94a6711d-c545-4dbd-a097-7f8e53a786c6", "indicator--4342119b-8faa-417a-9794-016d2175ac97", "indicator--3657e86c-68d3-4c00-93ab-a44fc44b6d96", "indicator--d5130cf5-683c-4208-bb7f-d3ec466d9bb4", "indicator--0ce40817-6826-4de6-89ae-6da0a6de4c6b", "indicator--b34ed270-9d83-4e4a-89f4-bbec2a1e228e", "indicator--2c259c4e-6fef-4860-918f-af254d17fc47", "indicator--47d348e0-bce4-4aee-8a97-9229e6874455", "indicator--6f67e5ca-28ce-4b11-8588-37a29afafe6c", "indicator--f85f3ea5-d05e-43f3-9c22-6c767f944578", "indicator--6ce5f38a-82c9-426b-8aed-19d2d8597dc4", "indicator--ff6424bc-ee7b-4fc3-8852-f2f48e55bee6", "indicator--533e8cbb-b5de-4a4f-845d-076a18df5c64", "indicator--75a339fb-9d2a-4848-8181-62bed6c81485", "indicator--160baa7f-eae9-4dd4-bfe2-6b23dd0cdbdd", "indicator--018942c6-c3ea-42d7-a7d3-bbd6d738c663", "indicator--75abe6a3-24bb-4b61-a1dd-1b4ea35aaea9", "indicator--bac53072-825c-49fe-947e-260822adb303", "indicator--fd2e0f37-93da-48c5-8b9b-e365759eebf8", "indicator--e3e025c1-0173-4f9e-a09e-c1bf7b16d3f0", "indicator--370beca9-29f6-4d69-89e6-408fb5b3906e", "indicator--a71a9156-a3cb-4ee0-a16f-93acf2717b65", "indicator--c10b836b-e387-4d16-924b-c9fbe3e6d67e", "indicator--01e64c0b-8bd3-4a9d-a1a7-547b4432734c", "indicator--53a4ea40-1711-4960-940c-1c1c061d9fdc", "indicator--b7a8e92a-82d5-4f39-bf15-7910f4ea0bc9", "indicator--8ffeb0ea-c517-416a-bf1f-79363fcc1a18", "indicator--bd9c395f-2257-4df2-b35c-8c6777b1ebf3", "indicator--2069838c-1015-4724-98a1-688b58b32d85", "indicator--84f1f91d-6ad0-4123-abf2-21e9b8215038", "indicator--a16347b1-6a4f-43d7-bb6a-2e9a9317402c", "indicator--4f48fef6-71a5-4453-96d7-af8441fae07f", "indicator--66f2011b-3bcb-43aa-8732-1d7c53a32632", "indicator--fec54da4-d167-44fc-928a-1793ff2175db", "indicator--73b64337-9c93-446e-97ac-4974990091aa", "indicator--3534bb9c-1836-482c-b15b-fd57efb445eb", "indicator--c38dafb9-e054-441f-9611-10a3be1b3cd8", "indicator--8f43cb99-5875-45a4-8f77-65db019fcbc8", "indicator--02a3c55b-6719-4505-a416-1ecfd2301e86", "indicator--fd1b0db6-6fa4-4072-b555-031df5293951", "indicator--399686f0-3893-4443-b325-bcf41aabe8e3", "indicator--eb2a3ad0-1da2-4b76-a5ba-dc04a8e1cb08", "indicator--c085d0d8-7ff0-4cb4-8aed-7a809e446358", "indicator--e388010a-3bf4-44da-8dcc-cec42486aa10", "indicator--ffe9e496-0423-4b33-9c9f-a266a07e027d", "indicator--0b321984-8247-48f8-ae30-7a6f3c7b06fe", "indicator--4e5fa421-8a12-44c6-a323-759d0e279800", "indicator--c7710a8c-34b7-4627-9389-abe73be6bc27", "indicator--cc816ab0-6d45-4c98-9ce9-0b4041d3ed47", "indicator--7d1e8880-b7fb-42ea-877d-3018164098ee", "indicator--636385f3-6f83-4af9-8b7c-0d2c71e5693e", "indicator--23bf81e1-3764-44cf-9d5e-2a8768a2fc96", "indicator--4b50e608-dd5e-4ee0-ae45-6c0ba7eddaab", "indicator--0cbc4508-2b50-447a-b971-b1b176ee46cc", "indicator--b42938e8-c007-4871-a177-d0e542f502f4", "indicator--614bd20b-1ff9-43e7-81fd-2cf969c9a946", "indicator--f46c0091-12af-4785-863c-15264163a962", "indicator--f210c889-8e80-487d-83cb-89af95a1bc4f", "indicator--86c4a4ae-4893-4ba8-b832-b00e2b2fe919", "indicator--20da6c50-95e5-481a-914b-90078ac55cc6", "indicator--e2bb4c75-e541-47b2-91cb-0e7cc5f5b334", "indicator--7fcc4a0e-c138-48f3-bd7c-d330c6c97694", "indicator--8fedeebf-e1bf-45c0-a957-0d94df524ef3", "indicator--58e1267f-d0b8-4a0d-a5a4-41027ecd1eb1", "indicator--da9356e4-144b-413c-8ac0-0136f687f375", "indicator--63ad50e9-ce46-417f-80f4-e3e70a102f8e", "indicator--4f9a0829-3d1a-473a-9ffa-e4a88295ad46", "indicator--ef39a5b6-555c-4a12-973c-c01a7caf12fe", "indicator--05eb56df-7da7-41c5-8b85-337ea2d56959", "indicator--713f529b-086d-47f3-808e-3629729c7241", "indicator--54766f36-9172-4121-9f23-b159c214b2cd", "indicator--fe8164c1-ee6b-4b8a-a0d6-f3c849f2ec40", "indicator--f81bd635-39c8-4611-989d-a687f39daf48", "indicator--269515ab-ea34-4435-af74-13de869c625d", "indicator--1a280a3d-98dd-4a9d-af3e-aef97a59acd8", "indicator--0853832a-9ba3-482d-a070-e1f7517e5900", "indicator--257f0b8e-76b8-4e22-9beb-cbbfed65da44", "indicator--ac3002db-a127-48d8-92c9-6353b34549db", "indicator--e1eb156f-cf6a-4850-b058-b589988e0562", "indicator--f78e6b34-b41f-4263-a0c8-5982907c6656", "indicator--328d4f72-8b96-4881-b8d8-c7e4197a3b05", "indicator--e7d79497-cad8-4743-b3c4-06ba343f5bca", "indicator--ae5b3ce0-c33c-4d52-a0a6-a1bc205042c0", "indicator--8ded22de-a8c9-47db-a5f4-a1495f6c0679", "indicator--93a07c30-1752-4e23-9b5d-d9fe08732daf", "indicator--010d24ae-1597-4206-a311-f172f1d36625", "indicator--b479fa1f-f634-4dbe-9eea-80b0c5f1d0ed", "indicator--789bbcb7-9d9b-48aa-87fd-1b4eedb03902", "indicator--eaa95ef1-abcf-414d-8bcd-8ef34c1dfc2a", "indicator--df8b60ae-b985-4c8b-bcb1-f00ec7cee6e9", "indicator--649f8080-ef7c-4775-b37b-975b36c9b902", "indicator--6356cebc-f6ba-4702-86d5-ae4a64d14419", "indicator--101276b7-b31f-4bef-acec-44bce509ad9e", "indicator--5073a83e-0532-42ea-9493-6b527b6d45a0", "indicator--db77f317-21b2-401c-8463-3aac4e2153fa", "indicator--028807c6-f53e-4ddf-a54c-1a0a22e9faee", "indicator--d63faa99-2858-4cdb-8a04-04a2c2f9eedc", "indicator--b9c43b10-607c-4411-b651-a6b08c086b8e", "indicator--71ce63f9-52a5-479a-9efb-a9c266db1784", "indicator--b836a2dc-1578-486b-9e05-2494a84f064a", "indicator--f3894863-fafb-4373-9bf5-6b1940279dd9", "indicator--7fc0649e-2748-4ae5-9a8c-76e7afcdf811", "indicator--fd7ac3e5-ef48-4bf2-8cbb-d8caefaa90d4", "indicator--7e883714-8f38-4c57-84f6-fe4bd46d15dd", "indicator--45638662-777b-4bfb-a7b5-9e331f25c4b5", "indicator--30d89e81-4cda-4e0d-8650-4bd9b9aabb50", "indicator--f357266d-716a-4254-94ef-4ecd6547c391", "indicator--1cca757d-94ef-402a-8da1-d38f1ea05edf", "indicator--21e9dac3-1159-42c2-a56a-ca89a00d4e1a", "indicator--fcb73e7e-d4a4-43f1-a951-393807606038", "indicator--79cf3e96-8756-4738-b51c-0f14b8796de9", "indicator--0f109b5d-3281-441d-a7a8-f665c07432a7", "indicator--7f4abdc5-e43b-40d4-9921-44f28da0b948", "indicator--0620630f-9a9e-4724-8f07-f2cae0587ea9", "indicator--962e9b9c-e710-4fb0-a425-97d6e5633880", "indicator--7bae2fdd-8c6c-4fe2-96c8-ac874ed381e0", "indicator--9d19556b-365c-4bbd-b476-f0cc48c52034", "indicator--93d02575-ea06-457b-8495-4cb152135820", "indicator--5a0b01f3-dc24-4c10-9096-10378f9b8e08", "indicator--e965b60b-d750-4ada-bf98-15ab71677cf6", "indicator--60d5670f-f48e-480f-822f-67a1fa8e9a11", "indicator--2e84b4ac-fd91-41ab-9001-f0ff04caa38e", "indicator--b13e03be-87a4-4b11-8388-9eda06a5419a", "indicator--037d4656-52b8-40b1-b52d-b695b81b9873", "indicator--9f2f4beb-2cb3-4786-b3b7-0c7ce46e7ecb", "indicator--2d983c83-7d80-47c4-9fd8-6ffade27d9a0", "indicator--57340c68-e43f-4ba7-a2f6-41d5063a6df6", "indicator--2c7f0711-fc35-47bb-8850-25ed523aadb3", "indicator--0ac9f7b8-104b-4726-bdb3-b7ae402224a8", "indicator--80dd73e3-039f-4004-a729-1293c061787f", "indicator--f96d7fc3-1b7e-4862-844d-0e0173c34c3a", "indicator--2ea4e6e0-4917-47ab-b3f5-d4deec21a74e", "indicator--ddb6d2d4-58c0-464b-a141-52803182018a", "indicator--9b396665-c850-4b58-81b4-36de6f437f43", "indicator--490ee41e-7798-49d8-86aa-651086a4dc5b", "indicator--d0875f15-91d1-4ef2-9824-3b4e776b559e", "indicator--f830fa89-76bd-41f9-974d-7476b25dff5f", "indicator--6eb16d80-3d85-4258-a711-51dc66ed3f16", "indicator--058eb705-8c1e-4ef7-9c9e-41b1e9f301fd", "indicator--17308ac3-dfaf-4379-85a4-674359244736", "indicator--ba5e46a4-6df0-4eab-9721-1dadfe7202b3", "indicator--e9be2496-f789-4dec-b8b1-a6c252923709", "indicator--56606083-42de-4f5b-b297-16b701855243", "indicator--5019a6da-9416-43a7-ac34-b8e6acabb0a1", "indicator--5b5b821a-bfe2-4d6c-9dfb-2e200afaf16a", "indicator--6f0f206e-6705-4ede-a01e-0aec0b1044de", "indicator--29529284-7964-459d-a245-c3c5ffed2ca8", "indicator--2935c14d-eaa7-4524-a5af-a7a903093ab7", "indicator--936751c0-ca76-4dc1-9d40-17bd7e199449", "indicator--9f15450c-b21b-47e3-88fa-8baf3c6b27c7", "indicator--9bdbf8b5-0b9e-41e4-812f-5a7041410dec", "indicator--4618c0d8-7d70-4159-a270-926750341556", "indicator--9d489637-2c90-43db-8f0c-5fa23409b6f9", "indicator--9689fad0-2be9-47f2-a384-66d1387f0b03", "indicator--15dc1e71-ba06-4644-a87d-7fcc6b4a5788", "indicator--9512a8fc-ac73-4d05-a349-b7a139d78a99", "indicator--b7df3574-103f-444d-9dd7-135e42dd837f", "indicator--e1f84541-6e7e-4ff3-9ae8-5f23fb0077c1", "indicator--f6fc64dd-535c-4db6-8ddc-57d8f2368b31", "indicator--513b6745-f7b7-4243-a2b6-ae6c59cf3790", "indicator--efbf1f98-3efc-48a9-b3dc-d1932059cc40", "indicator--fabb2946-c4d3-446b-9baf-e71cee65263e", "indicator--276f68e2-71be-4717-bca5-b1b3a84e41f9", "indicator--83d701e8-317d-445a-a437-3c9c50f5b74b", "indicator--655997ee-eba0-43f9-9981-674f3af10f85", "indicator--386dc165-0823-4566-8c79-544c0bfc9af9", "indicator--4b115cc9-638e-48b1-9359-845e123ce3ba", "indicator--9d965056-962b-44fa-ae99-f83ef627b59c", "indicator--2226fecf-f951-47a2-a103-56643f561edc", "indicator--363267c3-d74f-4c43-8a13-744f8a1e2a57", "indicator--7ad9409c-74ea-4f67-836f-e3435431be16", "indicator--c0da9318-900f-483f-ba63-a823af9505c6", "indicator--6c64e95a-6d40-45da-be0d-349a420c3ed4", "indicator--1172ff18-2b88-4932-958b-d1a1188f0ec4", "indicator--f2b2ecf2-4c39-4b22-bc84-4ec1f513d701", "indicator--2361dc5a-57a7-4d3b-8d7b-06c27eb67a29", "indicator--a800b2ae-8a6f-490a-be3d-4f5c3da1e536", "indicator--09e173cf-9403-4adf-acf5-543b6c734efd", "indicator--911a3819-6f91-452f-8340-fc4e15a4384e", "indicator--a3829133-108f-41de-8cd2-96cc727a2f88", "indicator--4f69b7c8-4949-4f2d-a290-b56e3f162a60", "indicator--249ee162-45af-48e2-8507-304d9e1100ed", "indicator--f53c2dc6-be32-4bec-a0df-0f1568992df8", "indicator--8a62dbd6-aa03-443d-b601-39c085e71727", "indicator--bd694f6a-dfa2-42ca-ab24-919fe956500e", "indicator--d5e4f49d-897c-451d-bf63-acef0e637192", "indicator--0090e7ee-c6a6-44b4-9786-6bb37a2ecd51", "indicator--568bbb00-5046-437c-a82a-c95567c234eb", "indicator--7127a595-76d1-42de-a38a-c45299aa5a14", "indicator--9f13d1f1-1dce-4b58-80a3-4ed4b2e7e81e", "indicator--7cb6bfd2-1870-4066-a89d-063941fd7547", "indicator--c63be2ba-fc3b-4a94-b873-7e18ddab6ec9", "indicator--c420f509-8cce-4c9c-bbf3-c16a4f9ea7cc", "indicator--5eaaaa79-d8ce-4d15-89fb-d649c77d3c86", "indicator--634d7ab9-bc03-4ebe-827a-5f4d273128df", "indicator--ea827b75-632c-49e3-b36c-85dd41f613e1", "indicator--fcaccb27-ca81-46f2-bfc0-15b0971199b5", "indicator--ebf2d128-2461-43cc-9d6a-1f607c1863e9", "indicator--7d019c7a-2a91-414d-8c9c-210c50a35941", "indicator--4ac6aa8f-6049-46db-aab2-bca42ffc24ae", "indicator--9f621544-9a8e-489f-ba2d-28f5b00eba4e", "indicator--00deda04-5db9-408f-967f-91e851a0470d", "indicator--a33febc7-051e-4286-a853-acd99afa502c", "indicator--0682d92a-f576-4971-ab82-070d7d63c46c", "indicator--1ddb66c8-dd49-4b60-97e2-297c4b082789", "indicator--b5f3da93-ffa8-446e-ad40-699ff2e387aa", "indicator--32a99e84-dc99-4414-99ac-784e24cb3da7", "indicator--8fd7373f-3bc4-4ca6-951d-9b8efcb6aa9e", "indicator--17d25bda-1a59-4cee-8c4b-b82dc56ca463", "indicator--177a94f9-5894-4b6b-a3a0-46e02598c0a1", "indicator--17b06c42-a045-45a3-ae3e-afe917e3ba2f", "indicator--f0f494fe-0709-4b53-8472-96c0d17f6160", "indicator--9fd2fc44-1825-4356-903b-6ee24f7ba456", "indicator--6d9796cb-084a-49b9-98d1-a94e79749754", "indicator--78edbba3-96f3-4860-b793-eafb825e79fd", "indicator--6dc3152a-5f51-48b2-849e-503562b16719", "indicator--305b52f2-ae4a-4326-b82a-8a6d2d9f27a9", "indicator--d38f951f-12b1-4d5d-abdd-3c62cebbdc8f", "indicator--19c4d7ee-429b-47de-a7da-1c505bcd6450", "indicator--894ad7ea-0f5b-4196-b2eb-0ad23c22d656", "indicator--81a4c7bb-6306-4862-85ec-b1a13c686492", "indicator--a24096d0-34e9-45da-8470-d47c4df8e7d9", "indicator--8a50d3fe-ada9-47d8-b38a-9fb203f45ce4", "indicator--756bea45-5d58-4988-8073-e712fbb7dc9b", "indicator--933e4a84-9637-485e-8928-b8448c91cb9d", "indicator--3ece0dfb-13fa-4922-aa8c-c2aeaadbdb46", "indicator--74930b0b-0bb4-4407-a701-4e98183da9a3", "indicator--a3d52380-2b22-49dc-a4da-08090d9cb745", "indicator--67174f6c-ac29-458f-89ed-56cf02a52681", "indicator--720cf360-d1ca-43ce-8ab4-d606d3dd897c", "indicator--25de97e7-4d96-4706-ac97-8af5fd22de43", "indicator--3b81c235-94b0-47e1-8e5c-74b7ec7ad061", "indicator--b8909139-eb5a-47fb-988c-34d95860050c", "indicator--20487454-1b85-48ec-9562-bc5d0fe79148", "indicator--e8c7631c-1fc6-4bb2-a0de-c32544464df1", "indicator--383ad881-ea41-44eb-8521-fc2d7669c95c", "indicator--ed979d51-e968-4dac-8156-8acdeec725f6", "indicator--1efb7c34-f390-4904-96f0-135ebfce1a3b", "indicator--49dd558e-2ecd-40bf-bfc4-b6caff31efe4", "indicator--bd9b9e26-411c-47e8-a040-2a6932ee2758", "indicator--5607d097-b25a-420a-8b74-e6a4e9724fa7", "indicator--04689fb2-9f7c-44d6-8f02-d7f02543575b", "indicator--da1c9b35-2fba-457a-9360-bb8f950b20e6", "indicator--04ad87ae-76ca-4de4-983d-58a74cd02937", "indicator--223dfd31-9734-404d-836c-96b4936fe89a", "indicator--9e8dbacd-b8c8-431c-8bac-c7bedc6aa3f8", "indicator--5c3cd87f-cfd5-416a-b0f0-01272bcb4d76", "indicator--4c9bcbdb-4edf-41b1-85a6-281f074469c8", "indicator--beddd500-9034-4a15-9ef4-9d9c6c61c027", "indicator--aa2cc667-9800-4d92-9321-6eea38dd0e2a", "indicator--fe50492e-215b-40b5-90d7-ec1bba8e2970", "indicator--a2895929-05d6-45f7-9d62-15d67a177c85", "indicator--654374aa-4151-464e-b041-8ee5523498a0", "indicator--5dea951b-80e2-45e1-a3bd-dac0d1ec4257", "indicator--ac8c635e-20f7-4268-93c0-6ca830fe3dd2", "indicator--a6bb1b93-d436-4c82-b99b-1bd2cf09336f", "indicator--4594d939-83b1-4e9b-abdd-4be82f3fbb0d", "indicator--6d9c2a10-b694-4a28-855a-9b30b501392e", "indicator--7ef06e0a-33a5-4f67-9f43-d051a9211d54", "indicator--69b02ab3-de5f-4854-b951-dedc7fa2c43c", "indicator--d74820e3-436c-4538-9eaf-714c796295a2", "indicator--82193214-4129-408f-aa6a-45d820abed43", "indicator--6cce60e0-3c51-475b-80c4-e6aa6cc10c5f", "indicator--4a593e3d-8872-4376-a63a-844c1d5792d4", "indicator--c061b18a-6c87-4082-b7b6-046b1effe776", "indicator--966c8cdb-b050-44e9-a622-ac9aa8ece512", "indicator--ac739772-16b8-4b86-b8db-0d7fcf3bb749", "indicator--8d4af5f8-0dc1-4844-9ae1-b5b2e1ac6211", "indicator--74af6320-10ab-4c48-b7e2-6b2001ff91e1", "indicator--33d0b142-0d62-49f1-9d62-60b417e40b0f", "indicator--859e87b7-e369-42f7-a632-9f4ab0f5c13d", "indicator--d5d44063-19b5-4021-8f71-32040383e5f8", "indicator--ae060aa6-9c5b-4cfd-941c-c5413f70d9cc", "indicator--fd1dd3b9-1fb4-4ee0-b03a-db08890a801d", "indicator--169f973f-eee5-435b-9e6b-95d0151e25e9", "indicator--42bee604-1a72-4d6a-8c81-6493d980d774", "indicator--5ad38ac8-4583-44e1-8df3-df66e73c7cbd", "indicator--bf67ce37-479d-48ce-8dcc-069c2d44dfb6", "indicator--104cc10d-d462-47dd-817b-9937d8f9b2bd", "indicator--bf57d64b-25fe-482d-9b4a-66912a01ad85", "indicator--76c2d1d2-7af7-430d-913e-a343816083f7", "indicator--b1044875-847d-4323-819e-33f09279049c", "indicator--9c29e204-6167-4818-bc3e-fda8175d661e", "indicator--35f78852-b8ca-4c8d-a3ec-0ec07e05b3f9", "indicator--c52bd5f3-0bdd-4cfc-b465-071c5b470b50", "indicator--c2e0cb55-5ecd-4447-9350-0aed47a48f53", "indicator--5d7259eb-b06c-46fb-8e40-64589d097e1e", "indicator--0bf750ce-31f3-4dab-a502-ed3d7df5c27a", "indicator--848a35d4-639f-41e1-98d4-297ce8c16cea", "indicator--dc788347-3637-4b83-99b8-a31bdcb2cae1", "indicator--380cc156-75c7-4572-b203-705460975d7f", "indicator--7b21ed2d-9e20-42b2-9b02-ca1c54dbf468", "indicator--af8f00c3-3ef1-4773-bd99-e995ebbca58c", "indicator--cfc261c7-9201-4869-b018-c2f9c6d9cb3e", "indicator--8775ab6d-16f6-4b53-b7e6-edfe1c59a173", "indicator--5a23732d-38cd-4795-96a3-1941ebdeea57", "indicator--de5c6314-f5dc-4f6a-ba03-b400e8127c76", "indicator--4ebf6605-5bcd-4bd6-9446-a294cfecd581", "indicator--ec89296c-c3bf-4bc3-9a09-b34a138fa84b", "indicator--48a21cc2-fe7f-4b2c-a3af-ec1e97b29f2f", "indicator--e9bcda7b-51ab-42ef-ae3a-ce00d336c6a2", "indicator--71911d94-8080-4888-ab98-227654ab0f13", "indicator--ddc04338-6cf3-4f99-82a3-71c2d2163bf2", "indicator--b7775b9a-038b-44fb-894b-1ac72d97ac8c", "indicator--189815c1-88e8-4daf-93d3-ab2f1a64a50b", "indicator--f954f927-9a50-4b75-b5e9-092025794ba3", "indicator--d4b1c3fc-b92b-4b19-81df-f0de51966552", "indicator--b11cc3b3-281c-4a09-95e1-f9da96cd2376", "indicator--e07af827-29c6-4459-b6e0-57ec72f4a442", "indicator--05c94739-9391-43a4-ab93-f5f84ec83ee0", "indicator--db4f5e05-7906-4c23-8fd7-2f54929f6f19", "indicator--088c55a3-69ff-4e85-91b2-c621cbc5e4a6", "indicator--6d8cdf98-dc70-4935-a419-dd099be99ea5", "indicator--df63a89f-7e95-4746-8de4-eafc2e3e6004", "indicator--5b9845a4-5639-4540-b3b6-bf33f0a060b5", "indicator--10f278b5-b0c6-44f9-b82a-fa1f766eedcc", "indicator--e771729b-b6e4-4995-9a34-c766ea0a0670", "indicator--9e3ba57f-5b2c-4d76-b3fe-fb4126c9ce93", "indicator--34c80483-bc76-41ab-84f7-a77a4e458b42", "indicator--3a9a638b-09cf-4308-ae3d-31472666be9b", "indicator--1216c55f-4428-4b6a-9e4c-d01198573f54", "indicator--0da4ef04-4931-49ae-bd96-c1f8bba8b870", "indicator--ce170099-62e6-46a2-924d-81829c830808", "indicator--f30ee336-4389-438f-b657-0f0b33dae81a", "indicator--70d896b4-657b-4834-8583-34903d50a817", "indicator--e415b27b-175b-47fa-b2c5-0324e7a923ea", "indicator--29c5c593-55ee-414f-b4af-d342e8c912fa", "indicator--48a1fb38-662f-4dfd-90f4-5adc802bc3c2", "indicator--20841336-17cc-4cf3-8970-8839d7733b7f", "indicator--ed4ad67f-c691-4d40-ad1d-af33fccf3026", "indicator--dccb1a4a-8e06-4a5f-b188-93c9526119a8", "indicator--2996b5d8-ce9a-42ca-b96d-b5908bd2c95d", "indicator--481bef6f-fc2a-4abe-af8e-b772b9b4cdb0", "indicator--0d6ed6d4-82c4-4e83-a775-ebcc54337ed7", "indicator--3e1892af-72da-4d68-afdd-22eb80fc5604", "indicator--219b1e91-7a5a-4e4b-a282-13d843ada813", "indicator--8d064a17-0807-4138-a7a8-9f658a1344d0", "indicator--79c8bc4c-e40e-4c9b-894d-82818ba11b36", "indicator--2d1b2c6c-c5ec-42f8-889e-0c647a7369aa", "indicator--c127cbaf-ac11-417a-a4c0-849d65cd46ec", "indicator--1c91bafc-a0e7-4409-9166-715884ea0448", "indicator--97e71032-8aa4-466c-a89c-a6dddd92991a", "indicator--e752edef-0473-4afa-9a00-048e0f28b1d8", "indicator--f70fe88d-0589-4fbe-8204-916ca4304955", "indicator--451020d8-f056-4395-a900-f3c52ef2b91b", "indicator--db7b84f9-9c86-42a5-a746-9a6e3e1d8628", "indicator--c7e58d56-c5e2-4eb3-bd03-404043ad2dab", "indicator--5e54b066-9bbf-4d05-988c-ee1382ab305a", "indicator--b59d11f2-785b-4c92-8800-a4baff61add3", "indicator--7e798983-368a-4a49-85ea-fe98261dd569", "indicator--479b602e-f95a-4c4c-9a65-65ea6cc30e90", "indicator--47c47d29-7141-41f9-b487-57022982064a", "indicator--0f9d5ad3-3ae7-40f3-a1c2-2a0a24f21452", "indicator--cd4b2d74-e583-41b5-9ca9-14856ae21a44", "indicator--7fcb7d7d-aac2-4dc2-b13b-58ee0dd1d19e", "indicator--116771a8-2240-4090-8750-82b1bec6486c", "indicator--90cd3153-cdc4-4da6-accc-4229b10e74bb", "indicator--0aa73bf6-f7eb-4a71-aead-46337345f184", "indicator--9d5f9a3b-8392-4528-a32e-f3c42d34accf", "indicator--459e511e-7248-4c06-9080-f4521e6ddb2a", "indicator--54b878c7-e35c-487e-bdd7-2345a66d8796", "indicator--6759666d-f6fe-4279-a941-e781b6cd2963", "indicator--dc6c9eb2-008c-4041-a4d9-121c4d42b585", "indicator--5755d311-430f-47f7-a2cb-58336981b856", "indicator--6009b88d-d46f-40d2-97e9-ac1318ee1f65", "indicator--b52af5ae-dbf6-48c0-965b-990693c26cc2", "indicator--e8262d6f-528c-4d26-b655-1e1db5534914", "indicator--bcbff163-93b7-4547-a50f-9caffd7ba612", "indicator--ea3751de-b836-4612-b140-af2ba0ec52b2", "indicator--fdab908c-003e-4327-9882-3ab2a48f4738", "indicator--fb104edb-0f0e-45ca-b3d8-d954196a9526", "indicator--59f27e6d-7ee4-4edc-972c-c853283ccb2d", "indicator--d8b1b10e-6e72-4973-b504-cd071a5ffebe", "indicator--5e6b80e3-8141-4cb5-86dc-b22a0af6e1ca", "indicator--9af0eabc-e3b9-4dd7-b823-68f6dadabf58", "indicator--dc358ef7-3541-4104-8e22-805b0aca77b5", "indicator--fef3f0f0-6de3-4d16-8690-f44e65aa1a32", "indicator--213013f9-917e-4b59-b4e1-c3f5d2f99e94", "indicator--eba78a1a-d898-4e6c-adb5-a1b9e8013e1a", "indicator--b6fb251a-f397-4c92-b5a2-827d388fb399", "indicator--d4dc7640-71cb-480f-90bf-1dc83096d466", "indicator--27a26159-dfd7-45b0-94a7-bd09763173bb", "indicator--199e347c-aa4d-466e-b6d0-1f59bd3aaa25", "indicator--7c128ba8-d227-45bb-95d9-e8c203eaac00", "indicator--258d4dbd-ea88-43e0-a715-b36c574712ca", "indicator--781c3f6b-25a4-404d-bc84-17f6fc83f9e3", "indicator--cbfd01e0-0dcd-4beb-a3e7-e44a0a1597c5", "indicator--bbe1ba3a-2604-4816-9893-d7eb35f1a867", "indicator--8163f605-1968-456a-be91-e8b40d15117b", "indicator--053765d4-a242-4b8b-b969-7b24d2163218", "indicator--5bb2bfaf-b0ce-4660-b929-7fe873eb6a2d", "indicator--9de0bae1-e1d8-46e1-a1d6-83f95a0c1d1b", "indicator--520cfe4d-1eae-40a0-8d68-9170df6429cf", "indicator--f30f117a-f43d-41cf-9712-34273633e23d", "indicator--1dbbe098-14b2-408d-917f-a797ea6c4dc4", "indicator--8829b308-1b23-47ab-9418-c0e44f2e5541", "indicator--bae3930d-aa70-4efa-9fe6-c6ccc9aa74a4", "indicator--874daa48-a879-4c19-91ed-31216f91c568", "indicator--9048bf2c-263c-4822-b680-82556e994c85", "indicator--24a78721-1d98-4d97-a62a-3b85c13fe9c6", "indicator--f7ffcb4d-1f9d-486e-a911-49d33cf24189", "indicator--c5318016-6127-44aa-b423-626c60a0cfdd", "indicator--d3258d7d-486b-4956-8d69-e63104b14a2c", "indicator--d1854d73-87e7-46a9-ae74-b7f30a035c53", "indicator--e9d68d13-7e44-4294-b9aa-996e02aacd77", "indicator--a3a5b5f1-ebd1-46dc-97b2-5e15af1a5eed", "indicator--60a79b6c-e0b7-41b0-b9b9-d8fd3f60b703", "indicator--33939da0-1c65-4090-8341-01ca6400070c", "indicator--402e3c78-3d4c-4d30-a6c4-24ea9e71d1d4", "indicator--ef26d42e-a1bc-443e-890f-782f50239fc6", "indicator--a63daea9-2a80-4422-9f20-4e5221dcb482", "indicator--5b18d9be-ecc5-492e-a890-fb3b78540698", "indicator--5c7eca95-6740-4156-8025-068920af6bb5", "indicator--1e8cd9cb-d479-4ccd-a8f0-84ca976c2afb", "indicator--b9ab2b26-6322-4b6a-a213-4cef6ad7abb3", "indicator--846019b9-e8ea-4c2a-be49-b786390f8870", "indicator--a3219509-8f7d-4a1d-95b4-360eaea155d6", "indicator--9ad0a374-2853-4646-8ddb-cfe827be103c", "indicator--d9d6d310-c8b2-4398-b012-e1173f9c50d7", "indicator--aedafb7e-ae86-470a-9c92-4e9c594be16c", "indicator--b7cf6065-c0b2-404f-ac26-12dac9c6264c", "indicator--7619f7c0-ac31-4e73-8832-46ec2019f718", "indicator--d82e8422-4193-42b0-9644-ee6f636db09d", "indicator--782663eb-ad71-4858-98b5-8f003b42e261", "indicator--517b200b-9ac4-4fa9-b691-9cfde411ae18", "indicator--64cb840b-d652-4615-828e-bf0dc27bf6c1", "indicator--1a9da563-e5f7-4908-9f58-6cabf47ca3cf", "indicator--d60a9853-4283-4d8f-b1c2-1aa62cc76292", "indicator--a8e102a6-7346-4d0b-9b76-659d9d55e60c", "indicator--58ebd95c-c039-4bb3-9d52-c6a370d8754c", "indicator--905970d2-fdff-4269-b646-d77cca452e84", "indicator--18e2cb73-b2a1-4ae9-a387-612b1f28e3e6", "indicator--5842359e-876e-4213-8666-5cbf64989e8d", "indicator--de139d88-473d-4a73-b6dd-b925398f4219", "indicator--4696c72d-5539-42c5-9b25-aa2cad1df505", "indicator--bfec02e5-6714-4568-8fb2-677dd04ffa72", "indicator--3b2c89e3-888c-43b9-8baa-b825b185c4b8", "indicator--e0b5ba19-12cc-4c01-8ca2-50605e4b5c03", "indicator--bae0837a-98f3-4387-9729-7d08745750c0", "indicator--c88e2651-9bc9-43b4-a11f-6a83b3c909ca", "indicator--0bd2803b-fbb9-4fa0-a75c-2279ecc3f391", "indicator--eb04f6a6-0950-4de2-8f5e-5ef47b0eaf13", "indicator--2e8df533-da94-4bac-b920-3a14937e8bae", "indicator--f02c86ce-03f8-4e40-aa48-e9350b8399a1", "indicator--3a9e665c-6dbd-461d-9091-eb19e9cedf39", "indicator--7dfb6dda-e393-4bab-b238-d69129c4a836", "indicator--6a3c223f-0022-4c7e-9510-9ddea7d96d42", "indicator--551509bb-1722-4d6c-8120-51e8c601522e", "indicator--fee12fa3-99e5-4e09-bb73-3d806583aff5", "indicator--8a536517-24c5-4749-84ce-9730cf9a4ada", "indicator--d2a4fd37-410a-419c-9bc9-d7bd57cd9566", "indicator--48599767-dd4a-44b6-b47c-67c61339c0a5", "indicator--5754a996-fbf5-4a1e-927e-6830d0160643", "indicator--cae966d4-2430-4811-b206-d333322d0908", "indicator--56080eca-475d-4454-b14a-615280620997", "indicator--99712048-ea49-487b-9b83-5aa649bd3c59", "indicator--74a25a8e-8d83-4a46-ad15-dcf95b3d9b85", "indicator--d11fac90-8313-44cd-8c86-5f7cf416dafc", "indicator--c6b7014a-11ff-4f24-8d2f-f485a261bc8e", "indicator--cc3dbe97-7cea-4b58-841d-234c6223d02f", "indicator--fdc52428-0c77-42d9-9fdd-0a333f3c56bb", "indicator--cef71ef0-6c43-4b3b-8045-92c3a1564eba", "indicator--45a932e2-db2d-45e5-a564-352b75f61172", "indicator--18054840-381f-47de-a35f-89e97716a76d", "indicator--60e596d5-c382-4b78-aa91-6be5528179d5", "indicator--9152199a-79b3-46c9-9c4e-72b33f080919", "indicator--96b123c3-6e1a-46ac-80bf-5fb5d7973ea9", "indicator--80f94ccd-ec35-4f60-890c-857b194a5a1b", "indicator--a97bebb7-a42e-4e6f-9e46-01ca5f9a30e5", "indicator--34d9518d-f6b6-468c-882b-e2383d876cc8", "indicator--fbb23105-ff7d-4b9b-aadd-22681b8752c6", "indicator--a8da38a9-3af7-4877-a36f-a04112b066b3", "indicator--308be8da-0590-4f81-83a6-c5a18b799242", "indicator--90acfa08-9f2b-4e3a-8527-e8a973d74692", "indicator--fa392011-c9e7-4a15-9532-ac06e7ce2630", "indicator--7d7c099a-4665-4299-8ae2-e521e10584db", "indicator--135e4dcc-ccb4-4a1d-837c-aeaa6cdf0a90", "indicator--a654092f-cb28-4f1e-99a2-cd9c9236a069", "indicator--8d894659-13ea-4a6d-899b-b5cc5452aac3", "indicator--ddafcc8e-cd6a-48fc-9838-05a72f77c690", "indicator--713271f4-2220-4a31-ae2b-5c820d2829b3", "indicator--cac62db5-ca95-4e68-ba03-06e2140ffa92", "indicator--d67d9a69-9686-4165-9ee8-aa362fb5b6ff", "indicator--67832604-da1b-4304-86c4-b5e8a07973ca", "indicator--9fc4dc4a-c20c-4f4f-bfa1-0c4fc41a0fac", "indicator--226fb765-67eb-4b1b-af54-28953599832a", "indicator--67e5b4d1-679d-49f4-a242-15baaa463d6e", "indicator--94e27027-9aff-4dc8-bd8f-f8818d3f0c14", "indicator--40dba079-0274-4b25-aa31-91b910a3ab58", "indicator--85e12ef4-bac2-4483-9d8c-6b006397c930", "indicator--e9f4ed89-d686-404a-a0ce-01af308e5355", "indicator--10497657-c114-4b58-a403-d9af85f99635", "indicator--c2480e6a-cc57-4463-87b8-4b3a11bae517", "indicator--650db530-5e55-4a2d-9978-b2439539774a", "indicator--27174d51-9a54-494b-acf4-b355311a5973", "indicator--9a9abee8-0ec3-4ef8-8e3b-61f81da1921e", "indicator--071c4e2e-28ce-4434-8c06-672c7049a6cb", "indicator--a3077358-9322-478e-8e35-cd2edb39abf0", "indicator--519a5b8e-e20a-47c1-aeb2-622b78fcfcf0", "indicator--32e84d8e-716c-405a-989e-8c690e1a25f0", "indicator--191bcc2d-faf7-488f-870d-735cd6d62124", "indicator--fcf95eeb-5c62-4a40-8b52-dd893ddbdd57", "indicator--80474be9-6c19-4b7a-802c-e6c94811f35a", "indicator--1d2c9e06-956b-4a76-b2b1-2f125ac0f89e", "indicator--15ffe8c7-16e1-4db7-8c8e-589cbe668777", "indicator--bf667a68-3940-483d-b238-7d821b442ffb", "indicator--69cf3fc3-128e-4d94-b1c8-3a3dfef791e4", "indicator--c19b28a6-5e59-49d7-8b8c-aa33c1ab3dae", "indicator--4884facd-3493-45a4-aa88-d9ceb10e2625", "indicator--804cdee9-bdb3-4753-9d75-777d68e36d54", "indicator--26e4d93f-6f78-4f63-8e2c-dac490fb1399", "indicator--793da670-f262-4e92-9983-4ba028b5234b", "indicator--3f544d7f-4f2d-4752-8b8f-3dbba4219f09", "indicator--471e99ea-6b50-4e66-aec1-5e8b2a4ed2aa", "indicator--d9c5ff1b-d9b2-42f6-8c75-64f31986d8a1", "indicator--faebb0ee-765b-4f86-bcb9-bcb5d38fc7d2", "indicator--0f3097d2-5a49-4ea4-bf8f-2f19e00cb18a", "indicator--1d823043-4d4b-4333-8e2e-e3bc6eefe1e6", "indicator--56c45cc8-e22c-40c4-ba35-2b1386e47331", "indicator--458067d7-8f8d-4582-b4c9-5fc016bedb77", "indicator--efbf6c0d-ac7c-4997-a60b-42d15bf3850c", "indicator--8b18cabf-ebb0-4b98-bb2b-d0189173bfd1", "indicator--624885f8-04ae-4e53-853d-854883eaec53", "indicator--75a1f292-fc47-42ed-a496-349a70ef0b84", "indicator--26380de1-f247-4b12-a9fc-0c41c435742d", "indicator--ed076b85-0b1c-4670-99d7-66518146fab1", "indicator--7b398ff6-d58d-4ac9-90b9-11d6d5fdfa9d", "indicator--40131604-f846-4fd8-9543-05c180b934b5", "indicator--d7009d8c-52d4-4ead-84e7-6b0ce908cfeb", "indicator--787d5274-d820-406a-9aed-a6b300cb1df5", "indicator--b600c97a-36e8-4a7b-925a-a7edcd81e85a", "indicator--3b1ad3d9-3301-4214-8a4c-391e185e0419", "indicator--62d577fd-be39-40b4-9da9-59c3d3f48d90", "indicator--3618ee1e-8d8a-4bc6-af68-2dc8e99a07e4", "indicator--4298e2a4-f25d-433f-bab3-92aa8dde3b9b", "indicator--bbdfbd02-9a1a-4b84-be5c-fd1a42506211", "indicator--c02588f0-cccf-4873-86b8-4d19821f734b", "indicator--c9f26ad8-d515-4e23-bdf1-8e0a09f9dbdc", "indicator--79dad501-da44-4c96-9491-a87440852f95", "indicator--f7371be1-c5ac-4df3-947e-b2668e40f7a1", "indicator--3e579547-fa11-4ad7-a3b9-807aff831584", "indicator--1a30e832-be90-45b1-ad6f-cbeba92ec02f", "indicator--046eed86-3177-4b6a-978e-0dea5d28bbae", "indicator--6c115427-77c7-4d49-97a2-f2bd8752d81a", "indicator--619db3c1-a46a-4ab1-98c9-dbb1e1e5dd9f", "indicator--ad290589-581d-4c0d-a0a4-cb9054ef7ac7", "indicator--2c0ec183-1846-4ccb-a752-6cc4b65379c1", "indicator--5352ad6e-6cf7-4809-bd34-f5f3cdd25413", "indicator--a3a69c46-1d6f-4284-b551-1c9af05188e6", "indicator--2b91af2c-9451-437e-b48c-cc07d62fe842", "indicator--54365082-158b-4935-8014-b0f8b1bb6446", "indicator--4a05571a-aeff-48f5-b819-634255f27438", "indicator--977763e6-2135-463d-8fc2-db9e142dbf98", "indicator--28fd80dd-63fa-41f2-aaf4-cc3aa38e208b", "indicator--5c31e57f-984a-4bef-950b-66d8657f6b88", "indicator--acf60c15-ec75-4f4d-8432-bb2e3689faa9", "indicator--a79a5ef0-7298-4a4f-8978-8e6298307601", "indicator--35513612-c34a-459d-98e1-2e008e1b4430", "indicator--2e8772f2-def4-4c3c-8a31-480c325c73d2", "indicator--a78ec38a-1b4b-4b3c-9d35-aaba21ab638d", "indicator--d02b9a14-a006-49e4-83fe-ed463bea6807", "indicator--0fc22fc9-7c4c-46f5-b4b6-a6ca721879cc", "indicator--509312dd-3c39-4b73-8750-192153652dae", "indicator--d8ce7d80-b37b-41c5-a07a-97cc60ec2de3", "indicator--c528eab6-dac7-47fc-b888-102bb1afdd5e", "indicator--7e8ea2f6-b79e-4b07-9270-1cdcd6ab4746", "indicator--b364a613-4cee-49f8-bafe-708851653157", "indicator--e0d9358f-a1e9-433a-935b-7813a039331b", "indicator--4de3bbe4-b1cb-4666-8763-ed9833674651", "indicator--1b8c2d35-4953-4b1f-8c54-49fc168eac84", "indicator--4cdcbfd1-e49e-4e9d-87e6-549703e5d381", "indicator--2736328a-fd46-4098-812a-c2dd97aff577", "indicator--cf96c244-bf34-4a64-a1d4-97f53e7e45eb", "indicator--1dca45ce-5b92-4c67-9678-b338995331f3", "indicator--289364d8-94f3-40d2-9e5d-de4569fed0ff", "indicator--6495e3a5-f0e4-40b4-b576-86edc07989eb", "indicator--801cc6c4-8ba2-4867-be40-7795c70c2a2d", "indicator--8ae94306-635b-4d4a-9cbe-061d226f4571", "indicator--821ba972-1b1f-4cb6-b9d7-aad9ada99acb", "indicator--d1c8c2a9-d4ba-4e01-b722-95fe5fa010ff", "indicator--369672c9-3b7e-4e2c-b220-a85d65ce0733", "indicator--019684b3-beb1-4760-9edf-eff29b651fd7", "indicator--ce7ccad1-4ab5-4bbd-ab87-5b231f30ea85", "indicator--09ede866-af2a-43c6-91ee-4807b9a4d554", "indicator--3b90c655-dc85-41c1-9b8a-8940faa6bd1e", "indicator--f120108c-650e-404f-a11f-9e7e0336194e", "indicator--bf89a489-8821-41dd-91cf-ebce9e850f57", "indicator--b45e46a5-5399-403e-84a7-ed2c6428708d", "indicator--18ee20b1-0728-4f74-a6db-fa8db0e177ec", "indicator--366726ac-542c-4406-a306-3b4acb0b6f3e", "indicator--db0f4f05-79b6-4580-bd6b-3b04fb3cd7da", "indicator--9b51c9e6-9d43-450d-9b58-ad779d3d6cf0", "indicator--69d3d34a-a6c1-492c-8428-a6273ce4ba28", "indicator--91508e19-c7b1-4c1d-83b0-6387dc3e5c58", "indicator--52620690-c8e8-49b9-a49a-0d2f4f33a63b", "indicator--19a73531-0f5e-4a33-900b-6cde8fd3e98a", "indicator--66c1157f-6b59-4b43-856e-aafb188ae490", "indicator--fa1844ec-f112-49bf-b7aa-b5509e1c5f72", "indicator--18cb3c83-f0b2-478d-8798-a3421c7bb094", "indicator--4782f3e1-45d7-471c-9f87-665257dcc8c6", "indicator--c9435bd1-9c5e-485f-b257-63baa886e7e2", "indicator--302a2e8f-1079-4497-8a6b-4ff0313858df", "indicator--b122554d-9303-4975-a464-c4a667193082", "indicator--af31a6ee-a8d1-48e6-a096-f0947ac72c22", "indicator--2406776d-9c28-4bfc-9780-9a97291097ee", "indicator--41c7e6da-d6d6-41c5-9970-593fddf6947a", "indicator--b5e4aded-7a34-4827-bc9d-b5f58f522c2d", "indicator--8bcb851c-b1a7-4c3f-bb38-4f6639cfb8c8", "indicator--2898075e-7b26-442b-ae39-bd0063474bff", "indicator--a05ec194-4fb1-43ae-9d25-8b784c1100a6", "indicator--8b55ee6c-496a-4e9a-9449-c55bf7ebb68b", "indicator--ac7a0621-ed16-42da-b964-f13b89e70495", "indicator--c35d5d47-b5eb-48ef-9ebe-5d5616c13f12", "indicator--0f69b691-0610-4a19-a580-79d49a17ed9a", "indicator--e8becc1a-6bce-4991-9df9-0f58925bf5f1", "indicator--8d7e0319-0c49-41a3-982e-da173ea3e28c", "indicator--aaf6a96d-90fe-49b9-a19e-558d797a0dbb", "indicator--f4a394c7-9b08-4273-9c82-a333313d67c1", "indicator--7a4a281e-0462-41e7-bd58-e1d05f8f1d6a", "indicator--759a166a-01aa-4986-8b65-2b70c625ab03", "indicator--8c726bcf-80be-4758-99aa-8a93471af141", "indicator--c6e169cf-49e4-42f8-b0dc-8c93a3957e84", "indicator--44518d94-f235-4a65-9316-22fd33e1f743", "indicator--cffe1a0f-a7cf-43e8-9090-cf4b58f460b5", "indicator--142aca48-fe74-4429-b7bc-aaaef749978a", "indicator--79ae3b0c-0980-4218-a1ac-79b3b15af4bf", "indicator--e9e816c3-09d7-4c83-875d-2f7c3bc32081", "indicator--9ce69341-9baf-493c-bc74-f8d180c765ba", "indicator--47766a71-1543-4da6-9329-948864b179c8", "indicator--b3426337-461f-4e4c-8384-b0eb5348a38c", "indicator--c2cc9460-cf67-4c80-b83c-d6e983356cbb", "indicator--40edba59-1bf9-4087-922c-094d5c216d32", "indicator--4a330db1-121e-40f5-b87a-1757203739bd", "indicator--f55e27fc-453c-4fe7-b240-b08ce64958fd", "indicator--a4e73861-e32e-45be-83b5-ce0d5e44040e", "indicator--6c69befa-b3bb-4b8c-8038-3cb868fb16ea", "indicator--5ec00b15-3541-484e-8128-4f06caf8ff1c", "indicator--ce2e7f8a-79d8-4d7a-921a-e33258ef32a3", "indicator--8621d007-4465-44b0-b073-17133f8b2144", "indicator--32236f2d-8faa-404f-9cc4-5f222334f79d", "indicator--98f4b950-bebb-4984-95e0-1248b413693a", "indicator--14bb06c5-dde3-4498-a891-c43995453f73", "indicator--de8ccbc3-3ca6-4f3b-be56-b565fa3845ba", "indicator--edda10ef-48db-441e-9117-6cc6856f1fb2", "indicator--1670af71-8839-41a9-9005-5fd668d2cd34", "indicator--03d2441c-f976-4434-ba05-b13973ae6062", "indicator--55d20795-117c-4423-907b-a0b6841da2c4", "indicator--c32f8999-d369-4020-b3d7-de4bd89beedf", "indicator--95e77e6b-41cb-4eb2-8256-35b6b43d43b9", "indicator--e029a98b-34f5-439a-a788-62118fc46ffe", "indicator--6dc3c501-e2fe-4224-9b22-0fbc05de3180", "indicator--27189ba6-6623-4fad-8a8c-ae6316fc6e20", "indicator--4eb05722-f5db-4109-a1f4-8198cd77c171", "indicator--18cd3ced-7182-418e-a006-0fbe73bab13c", "indicator--c26c334a-26f6-4bce-b7db-47dd509d358d", "indicator--6a0d5814-a321-41cd-b2e1-568e6a835f18", "indicator--c3d79072-f6a8-415e-b841-0043ce624a0c", "indicator--38888698-93c4-438c-a723-98734273324e", "indicator--55aa96ce-bd46-4b51-b54b-10630ff1b87e", "indicator--a86cacbd-c7f6-4fa6-8cd7-fecd25e9a472", "indicator--a542333c-6f72-4e8e-bfd4-591037d1941c", "indicator--7bcd8249-1b73-4918-b0f1-9d8de333da96", "indicator--4ee5b0d8-684d-4bae-9094-1514dbbc5256", "indicator--50e5c1db-6ae4-4178-ad34-2ab37e6fdc8f", "indicator--9b813ef5-5a62-4d24-be55-6c2b55600144", "indicator--a7dc80e9-98b1-488b-a42b-7265609bb512", "indicator--b2594d9a-12eb-4905-b2ec-604558657cda", "indicator--0116f7fe-3443-46e0-936f-4bc95247ff0a", "indicator--c92379a5-804c-4809-b36d-ca603d750a7b", "indicator--92cc99b1-4259-4e12-ad3b-9ad9e76b8763", "indicator--5d77b814-6ae1-48cc-a2a2-7c15e362226e", "indicator--8d6ac7f6-69bd-4642-b86b-0d55d19979df", "indicator--da3d471b-22e3-4d6a-94dc-b4b363f975b6", "indicator--f7128aea-5119-49bb-a2eb-11cbe8431c63", "indicator--49e088c2-1038-4137-9c84-7d5d9092d85e", "indicator--07f5ca4a-fd8e-46ea-9bd1-3d851c02058a", "indicator--51d650a6-353a-45b6-947b-46b2c814fac4", "indicator--452d4731-cddb-4da7-a5a6-ba3303975a2e", "indicator--2a1b2f57-5724-4bf7-afd6-260fc37289d5", "indicator--5ba1f11f-b3ae-41e7-a149-976b56662ee8", "indicator--c76fb9c5-9179-4597-b124-793d1fa01ace", "indicator--4584b986-a88a-4ef5-9a36-88783fefc2df", "indicator--65abb4ce-0f45-410b-82c1-c0071d3188b0", "indicator--06f00710-930c-4265-a6fb-2bad04ac2293", "indicator--3b1c90b8-d005-4eec-8291-99c1fa88997a", "indicator--b8a61198-9688-4384-8651-d896a3756d02", "indicator--736eb1e7-6d60-48bb-b181-f2f1b492e689", "indicator--bf68c678-3745-48c0-94cf-017acf687e98", "indicator--f2dab766-b2af-4c67-b2f7-83b6fb51044b", "indicator--d49b0ab2-8e28-4f5f-8e2f-725798a39774", "indicator--849193d3-03f2-4db8-a426-5b5f50c5381e", "indicator--3f45da3d-5511-4797-bcab-dbcb02911d86", "indicator--5251093f-939b-44a7-9bc5-312dad4c5795", "indicator--aad47172-6048-41d7-a791-fa3afec17b9a", "indicator--a9eb76de-ab56-4ba8-a8b6-5e527a3a3de1", "indicator--e4df9a36-381c-4771-a672-1ffe54709d1a", "indicator--a1f05ebd-b0cd-463f-b4aa-6c03c8098abf", "indicator--6e1c5edc-5c23-4748-aa70-e2ef2cd2e13e", "indicator--27bcd398-327e-4b63-b7db-8290100d6971", "indicator--6edd8043-b572-4567-8215-0ee02218fd8f", "indicator--f99240a5-04cb-4e2d-ba8d-5654889e3852", "indicator--ba07940d-d6e7-40ae-81d5-2035a306625b", "indicator--dab7b779-76b0-4424-b17f-939b7b204284", "indicator--0f9796bc-f3ad-4eda-86ee-f95dd7cfef2a", "indicator--6eb14808-3f1f-4b59-8188-3b61fc9823cd", "indicator--a4a685ea-ceb8-403c-a0ff-2ad203971fc8", "indicator--a4464e1f-bf03-4289-b755-11689794478f", "indicator--092a3235-f24e-4a0b-ba72-d58285890498", "indicator--a86a40d0-c628-497d-b877-94c5521ddac0", "indicator--4984ec3b-9b7f-4704-8bfa-b8e74d1e4925", "indicator--1bdbed2b-871c-486d-af6c-08087d71298f", "indicator--69df78cc-8abd-486e-a44f-1abe8dee4152", "indicator--0cc6ffc6-9d7d-46a5-94ce-a5356abf984d", "indicator--523fd8ca-8512-4610-a518-93cd0dc96050", "indicator--f4cddb2d-b6b5-41ba-a70a-0b937f5ba743", "indicator--c1cfee90-d3ef-4a7a-bd21-c504b53d0af8", "indicator--c2c21535-226b-46fe-96af-37ace667b289", "indicator--4b652b3b-34fd-439a-aac8-e292f804de6f", "indicator--270ad08b-5044-456a-9047-02b3aadff1c1", "indicator--921e79dd-969d-4985-9955-eea913ba3731", "indicator--f94711dd-73d9-4c5c-b054-fb9bc48fc7d8", "indicator--c71b7a29-0319-40d3-b7f9-ef46ccd64bfe", "indicator--6c0de28a-9481-4195-8171-943c2a1024e3", "indicator--226d08ed-4d5b-4eb2-937c-1b74b97c22a1", "indicator--15fbb836-dbeb-494c-bb00-10e0489c2941", "indicator--cab7e2f1-8c6f-4b98-b06f-6c20df75427e", "indicator--34caf326-43d1-4715-9f78-7debdfcb822c", "indicator--d8e2f8c7-c700-44f9-9bea-719579d6be77", "indicator--e4a3310f-9df9-41bf-80e4-730bc9060077", "indicator--2c662149-80ca-4962-8c31-a0a398ab9b5e", "indicator--34b5ceba-06f1-4c70-9827-cba77b806a2b", "indicator--29f34557-9d76-4191-918a-514bd45c1d07", "indicator--eef06090-cb98-455a-9f05-dd0d368de7fe", "indicator--0984bd71-5636-4019-8920-004bf0b80d5c", "indicator--01b713f8-2243-44af-b05e-460ba5136424", "indicator--a733477d-ce86-48c2-9776-98522c772d41", "indicator--89dc09c0-a624-4561-9eab-e4b63dd1ebc7", "indicator--f8bf19fe-d6d4-4b31-a884-807686a777c7", "indicator--28f86bf0-e891-45f1-996b-69be236c29b4", "indicator--0367a3b1-63a8-4ed5-a2e9-ef3135abc98a", "indicator--b8ccfca2-976d-49e5-be04-a324b28a8a6d", "indicator--e9323ff6-d5b2-4b64-8bf1-5fca01f1838a", "indicator--e29a9ae8-4e15-4993-b3bd-7d3890c061a1", "indicator--020e5578-d55b-4dbe-9dfc-ccfdad33ba11", "indicator--a7392607-5fb0-4e2e-b3a6-ece49b8fd24c", "indicator--31135724-547e-402c-91c1-728b61efdfe7", "indicator--e4d8f77f-8064-434e-a757-7553d1eb0e46", "indicator--2af63ee1-64a2-477e-a84e-d15bdeb8c10d", "indicator--37be02f8-4967-448a-8e4a-d95e61edd454", "indicator--490422d2-a391-4205-9f21-3d312e6b61a5", "indicator--77d9610f-4e84-4d13-a49c-7c7dd2483e58", "indicator--c78b4dd0-6f9a-478e-8876-86ca41e0261e", "indicator--8c7b707f-b388-451a-bf0f-845885213ca7", "indicator--46aaa42d-2420-4f11-a426-99b5b02f83eb", "indicator--19f52b6c-2c41-452c-a0f9-be333b0e23f9", "indicator--16ccc581-2bc6-4fa4-ab47-e49033c684b5", "indicator--04e1f532-906b-47b8-8242-127199c8e190", "indicator--8796c168-dbe2-4f0e-9e83-dfd761606c8b", "indicator--691b7276-1c94-4cbb-b1a2-13dd05956d1b", "indicator--526e4cad-e384-48b5-af97-f2669ccc991c", "indicator--7ad63aca-4192-453d-a70f-c2de713b3450", "indicator--93393e1d-fb50-4ebb-bded-5e4358f647ff", "indicator--03bfc8d5-9a7c-41dd-bcae-60bd1f58d99d", "indicator--67a135f7-aaa5-4e58-85fd-53915c25aac8", "indicator--78d54a3a-2e9d-4a41-8089-836112a2a74d", "indicator--6dd3e531-aa11-4762-b576-3ce2558f0b91", "indicator--d7b3f828-319b-4b28-bedb-f35330263b52", "indicator--ac17226d-529b-49e6-82f4-f69cf463a43b", "indicator--3ea991b4-91d6-4050-b237-6d215a8f8a99", "indicator--6891062e-f5ba-45c0-a00c-b0029b54b671", "indicator--e6fe915b-225f-4a03-9e21-5e0c73f97b46", "indicator--444bc9d1-0f61-40cf-aee0-9d8124341b8a", "indicator--1112a201-0dba-4c93-bb25-827c1e45ba79", "indicator--e9f480b7-6595-4a3e-b2f8-2b476be2b543", "indicator--e0d0b755-d358-4650-991f-1532deae5574", "indicator--0e5cc6c5-93cb-40e6-9aec-f4646ecc21b4", "indicator--af616239-45ca-46c4-ba63-0d5f22cb2d91", "indicator--dd4d7e21-3378-430d-9139-8df778a79cbd", "indicator--3fea99b7-91ef-4ec2-9f67-7a15b13ac045", "indicator--df7520d9-cb83-4ec3-848b-102d40080fd8", "indicator--39f1807d-6b97-4b21-914b-deeb7dce9bb5", "indicator--f51ec2be-5702-4b09-98eb-aaa4a8ed66df", "indicator--82e67858-3378-4bc5-9ea3-cba401c2bfdb", "indicator--489a2b8e-f839-45ac-9336-9554b73581dd", "indicator--50da90d4-de76-486b-9ca6-d5032665ad48", "indicator--e1f2b7d3-bc9d-4cd2-8e35-d5039dfa5e2b", "indicator--1cbd6aa3-09a3-44df-a078-6d9451184d67", "indicator--2a5f34e6-c21b-42fc-8452-9964830c702f", "indicator--830246ae-a313-4475-a81b-611246f21788", "indicator--f0c44afd-35ab-41af-9c32-cb6aaa2a4a13", "indicator--9f65db09-9f15-4ee1-8a1d-9660affd8287", "indicator--be46bf2c-a44a-44ed-90e5-525a1caee571", "indicator--64b9c630-cc62-4a1f-bf84-b8a708751e4e", "indicator--6c15cdb2-a584-4456-8bba-cba0c7cd15a5", "indicator--3a5d3340-1d7b-4378-bc39-1334ca0060d6", "indicator--5012652f-9c37-4038-b0e2-e162fee11daa", "indicator--3f63806e-6531-4b51-9238-265c589b13b7", "indicator--0decac13-f69b-4271-a56a-2ccd4f56c5d8", "indicator--55749e1c-9c0c-40ee-aeb5-8dea39fbe272", "indicator--432a1a31-55a3-4956-b50c-34e2423cd0a7", "indicator--24e18855-a23e-4a2d-9b34-38d5fba966b9", "indicator--c52b8265-aebb-4922-a7ff-ee1fddf2675e", "indicator--80c0f596-9abb-456a-af3f-223111b777f9", "indicator--40584739-d4ca-41b6-83fe-d0ddd1092461", "indicator--941ab5d6-bc84-462c-8025-73505b9bcb50", "indicator--3dd2290b-f85e-41f2-be75-20af5be47cfc", "indicator--9830c701-e0ee-4ed9-a5af-8c096fc0fb77", "indicator--f4484895-5a43-4e63-9c29-cee4230e478b", "indicator--6d4be766-6063-48a5-b2ef-832df544472f", "indicator--de2f05cb-2ed3-4546-830d-166b9337377e", "indicator--b419104a-b786-48b6-ab89-89e400430e76", "indicator--782dc386-2981-4ca4-83a3-02a2301e0e38", "indicator--cd76b39c-27d0-4b53-8866-daef0466b702", "indicator--ac506ee8-c378-41e8-84c2-4f758e1e8699", "indicator--a1391407-9da1-4b27-9ab8-ca33a5a2eb6a", "indicator--64df6813-82a6-4014-abee-dbb057905c62", "indicator--5a661390-5e8d-46b1-ac19-6b161fba64f2", "indicator--5ab12860-f38d-4039-b926-23df95c7dfab", "indicator--7d296074-8c53-4934-95ed-ed57ea325964", "indicator--41484126-f458-49ed-bdad-31726d4adfd6", "indicator--d049258e-f666-46fa-926f-9b799a17b10c", "indicator--1ff132d0-4f91-49be-9d9b-e3324b33fdbd", "indicator--394afbc8-7701-4117-9df2-b2af5d57b30e", "indicator--73e030a6-00b5-4410-b85a-534e1a7b0fa1", "indicator--974d8388-2104-4b04-8124-2b7562492632", "indicator--bb805bd1-d7f5-4c26-8bf2-c6a92d38daf8", "indicator--af89cf74-6c64-4a4c-a803-8c802d004056", "indicator--1be41e14-b7f9-4674-8629-573571edc19c", "indicator--65be9681-fdd5-4779-a3fe-ee4810fa5235", "indicator--23bb0e00-d127-4ffb-b35e-93b78abbd4c5", "indicator--7925e0cf-da6b-42ac-8845-c031f1741fcb", "indicator--7cec6d2f-3be8-494a-9863-b0a3c6e0277e", "indicator--d1ae4b8c-8bff-423d-99f5-0c3c25e0d99a", "indicator--c8562b69-ecdd-42e9-8383-353da7be7e86", "indicator--9b6a0f1c-ad25-4857-b0bf-e6e267287673", "indicator--c9002e68-6426-4b1f-9ed9-6655e5ccfffd", "indicator--5433f84a-ecb1-44dc-83be-8a34e166e275", "indicator--44a5f3d7-162a-4f48-9a47-ee870604420f", "indicator--18742246-98ab-4719-b36d-6090eb2d02a5", "indicator--8df27742-712d-4a11-b9b7-d7bebbe9eb59", "indicator--1f4b50e3-df2b-4971-b45e-0d0209a52bda", "indicator--c552c106-068f-4e86-9e48-6bb39a8bc288", "indicator--d7167817-da9a-4293-a3ee-0fc34440cda5", "indicator--065496bd-a9fe-4bbd-9f99-e55972228853", "indicator--23ca9606-2bbb-46f3-975a-e7ec5f472e43", "indicator--d781495b-51fa-4afd-ab8c-6652985ffb4b", "indicator--8289a87e-2c49-47e1-beff-b7d05276c4cd", "indicator--461f71b2-b5ba-4fe1-b6ce-456198f17255", "indicator--cd82ec38-b079-4f48-bcde-7deecca3a8ec", "indicator--df05d349-3629-4e38-892f-3a122aa8107f", "indicator--f178fe8b-687e-48e7-a9a9-5284b88563ed", "indicator--5cfea2b1-c58c-4f92-9d40-d6b4171318fe", "indicator--aee10912-a55d-4074-93f8-c9f868ce76f3", "indicator--927f3115-f09e-4782-866d-3e5f4d533fc2", "indicator--df322751-b077-4969-824c-4449d4440a6d", "indicator--a6a6607f-a350-4c29-85de-59cb76164058", "indicator--c8d375d9-91e4-404e-99e0-514b0e135b9d", "indicator--8a42d631-c0f9-4f02-b8a0-fae307fdc9e1", "indicator--ac23fbae-7a2b-40ec-a21f-d113d7df4950", "indicator--a8af9bf2-b427-4108-82e6-c6cf7c156aa4", "indicator--bdcf740d-3512-4776-89d9-5d4260503392", "indicator--2ec85ce5-e115-4036-b1d1-9dc621f4bbe2", "indicator--04327356-b549-4018-8a14-54882764aae7", "indicator--b543043c-adbb-450b-a09e-38e59d067aec", "indicator--0e18b9e4-b061-40c2-9f1c-8ad849fbb6a3", "indicator--ce6b7a96-cf88-484e-a280-b763855a437b", "indicator--bcb47d96-0fed-46ae-a3c0-2fa34a5ee4b4", "indicator--00af0233-fc24-4b0c-a6c8-91cba89992a1", "indicator--4b099bd9-2167-45c1-a5a5-f0bcf18872e0", "indicator--25b66116-7250-4eae-91a5-d9eb367eb726", "indicator--e7c26650-c74a-4c6b-bdd1-f94bb0907795", "indicator--eb61388a-368e-421c-9ba0-9935e9f4533a", "indicator--d66fa469-0e5f-4b10-8d73-ca6ea83d0857", "indicator--4e308379-a87f-48a6-81b0-9e7f1efbb0b7", "indicator--5024f3d3-75d1-4b8a-ab1d-8a5a7ef57502", "indicator--76b8d522-e8c0-4225-8075-5db96384c862", "indicator--2cea25ae-5810-440b-a443-e46d0a4a6481", "indicator--b4fd7268-9078-4f99-89bd-4812f7c43adc", "indicator--547899c6-b1bb-4c35-9067-173f52009fc8", "indicator--e13ea905-7acf-4392-ac5f-79420f40fb1a", "indicator--bc622bfe-4e47-4c63-a206-b5ce133a05cc", "indicator--7e92e305-6d27-4a1f-811a-fee75ac04b61", "indicator--e75c917b-97f5-4f65-9005-0794af5e5079", "indicator--df18fb5b-8dfa-419c-b84c-e9b3e53b0bf9", "indicator--a0b17694-59c4-468a-beb0-293839f12cef", "indicator--f135e476-907d-4fc9-9334-a82e4c177884", "indicator--12c733c7-0ade-4c48-a01c-a9084169d79e", "indicator--09e25a29-1ed4-412e-98f9-5e075576e2ec", "indicator--5bc766b8-564a-4f7b-bfa5-4019ea6c7842", "indicator--b2e700a4-5eb2-48f0-b60c-0dc3237b7f19", "indicator--5d36b6b7-f0b7-45ed-a390-b155c113ad49", "indicator--6146bf21-6c37-40fb-adbb-2ccea9dd81f8", "indicator--98cbcbdd-63e1-44a2-99bb-a9ca8954ceee", "indicator--1d6f7fb3-ea44-43ad-8632-f50787009a0d", "indicator--bbd94651-e27d-437a-9d9d-05a969000a55", "indicator--beebc60f-73bc-4a83-96b4-a5ad6910de5c", "indicator--1d4286f7-b23f-48c3-9a86-f369b1e4db13", "indicator--57bb95dd-7a83-4d54-9b99-e256e98773f3", "indicator--85d34e42-0ab1-4fce-ab9e-7d004c2eb1fe", "indicator--ca657bb4-9ad0-49b9-b719-871abc29640e", "indicator--eeea7fa0-5037-4e80-9f28-466ee48f41d7", "indicator--cf41972f-93f9-477c-a4f7-5afc57ba6929", "indicator--f5fa92a1-f578-4b38-8c06-50c735139114", "indicator--073d6bf2-6b8e-4202-ab7f-707b9da30b98", "indicator--f79312cb-bfae-4dbd-9e76-6b72d5e98939", "indicator--9704704d-257f-4870-9b9f-277269a11b00", "indicator--047dfd96-bf7c-426f-90c4-e124a1d6e781", "indicator--b95ac0f1-73df-413a-9f39-2eff90766923", "indicator--16789bdb-0da3-420f-aebd-7d2f35dc48b8", "indicator--15ff0699-9bf2-42c6-9f72-15e02c827e65", "indicator--d72a095a-f7a6-4abd-8c59-f1baa476b5d3", "indicator--cd526b4d-268c-41d8-bd08-85128ebe0219", "indicator--42cbe5cd-a645-4783-ba16-23f2396fc843", "indicator--f5816e6e-d2b8-4bcc-a000-120fadcf8907", "indicator--3f6b22a7-498f-4c98-a3ba-62b4e0e6f6cc", "indicator--ce854090-099d-451c-8202-7f5a399a9991", "indicator--0543b2f6-49b2-4378-8c25-b87e919d1341", "indicator--314f7caa-84ac-4695-b180-5db715e280d3", "indicator--e2541c12-efe6-429b-a654-029a8647f77d", "indicator--0ace0847-ced1-4622-b1fc-4be4807087f8", "indicator--c636edea-7f34-4eeb-a8b5-e8981ee993ba", "indicator--4a913991-fbaa-44c3-888e-ddab7cb049bb", "indicator--e98411d2-40b3-4619-841f-c9ea073c85f8", "indicator--0ec22b8a-9401-49e1-b6d3-3c634c2516be", "indicator--ab80e0a2-9401-4ccb-837c-fac1a14e2950", "indicator--5422a1c3-25a9-45af-a272-d0461ff0256b", "indicator--a9f78796-c41e-4210-a99a-331d2905e94b", "indicator--39a0b854-776e-4a00-a68c-11fc88196843", "indicator--8e0d1124-d1f6-4834-80e8-a1b9f3833350", "indicator--99fe60ec-9a20-49a8-8422-8d901e47cab0", "indicator--fc6b628d-70b5-41a1-a583-d886e7e706ab", "indicator--2a9bea40-b0c1-4846-977a-7d80a5da08b3", "indicator--b39488a5-267c-44ff-b5ff-6463cf141194", "indicator--dea0f3d9-43ea-4fae-94e2-a2f32e94d1ed", "indicator--a09a1485-583b-41b8-879e-a2d54d4daee3", "indicator--d05fa6e8-9d47-4809-82e2-276a1680d772", "indicator--386ba358-3a3c-4687-abf8-d1569f9a87da", "indicator--ddbf76c9-1308-48cd-945a-1dfb3fe10f27", "indicator--904ee0a0-5a44-4c79-8fba-5e1a44940419", "indicator--7823f390-6f6b-4c8a-99a4-dad34e09291e", "indicator--1b85d00e-73c6-46ac-8be4-3400bb8a4be4", "indicator--7785743e-1f5d-41a0-8e60-e6d0338d7082", "indicator--373a8642-d63a-4cb8-a9c3-6685dc78afa8", "indicator--381999ec-82f8-4b64-a82a-e5a90bad6c79", "indicator--ee7f9541-db4a-4e11-bf69-bb466618d21f", "indicator--6f5b615d-8995-4d9f-9ea7-1a5f6f9024fe", "indicator--f7701617-d0bf-40de-a89f-c57374ee6e67", "indicator--0f1ba02e-6b5f-4804-bf51-a5fdf77cbfc1", "indicator--c2743f7b-9f83-466c-ae3d-440a865fe74e", "indicator--0775ecd0-ad73-41b5-9b4c-c753c509c64b", "indicator--e4450d4f-9f4c-4379-89ae-710fafe3067e", "indicator--6dd8d828-6228-40f9-a3fb-d0dfbcf88be6", "indicator--ae636c6d-6080-482f-9f5a-75ce68b996e3", "indicator--ea075639-8ef8-4ea3-9a80-811bed478c63", "indicator--ff8a1922-ab53-467a-9169-bb3428c346f2", "indicator--d04bac2a-61de-45ea-8adb-9660363515b5", "indicator--adfa0044-7ec9-439d-83e7-4d40aba49d3d", "indicator--9d2df1a3-9abc-4a46-8dde-228b4e01e5a2", "indicator--5898d785-e7f5-43a2-9f98-7fa495db6c91", "indicator--1f701ec8-2a6f-4169-b8d0-9e1822ca1f7f", "indicator--c89138e2-2293-46eb-a822-d836ba041790", "indicator--ba3ec1fe-2a69-4896-a0fb-d671d97792aa", "indicator--dc4c00c6-68e0-414f-a6e5-ac2cad4d9fd4", "indicator--694f4785-e75c-490b-8f67-2952323b39cd", "indicator--1bc15a54-153a-4276-ab9b-185d3539b769", "indicator--8ee70ad3-cfd4-4219-82b1-1afd383106df", "indicator--6a965cd6-d252-46f7-a379-0b31f812ae8e", "indicator--0a95646d-410a-43d9-8390-230f716f370a", "indicator--91fd923e-904c-447e-8467-c953fde284bb", "indicator--ebb821d6-7595-474d-9632-8381060952bd", "indicator--bbe03acc-e7f7-4610-a0c4-36effe189ff8", "indicator--73557c63-cbfb-43ab-b191-18b035d6973a", "indicator--cb939d5e-0d3b-4db6-9dd9-c5c0b32469d3", "indicator--9b5556c3-6881-4b7b-9716-49e83f137588", "indicator--98e03b19-b6b8-43c4-b4f3-98d7527cecd8", "indicator--4317f7f8-363f-4d23-b0c4-ef444c9bcb59", "indicator--90226b89-7d25-40cd-970e-18d7fcf5d97f", "indicator--6048fb05-d5c9-48b8-9de2-0c3b4869dcff", "indicator--be6d5528-ca2f-4a53-b03b-8a1150830909", "indicator--2d998f67-7db5-49b7-bea5-85a8e3b2dde5", "indicator--0e98a9c1-7c0a-4b58-a1dd-9ea8d4931741", "indicator--bad539eb-aee7-4e92-8705-013a0ce49159", "indicator--113b3989-774c-4634-9755-b34c9cf9faa6", "indicator--a70d10d7-65e4-41f8-b43b-db725327824e", "indicator--5995aa15-40f5-4a00-84c7-5a2ab5c964e5", "indicator--1699e3e2-cd0d-4332-8a8e-f0fc53cc3817", "indicator--bbeddd03-cd45-4879-aabb-8d3e21f6ecf9", "indicator--8039ba19-07e8-4e33-aa46-75b7306c1bb4", "indicator--7d5936f6-b11c-45a6-bfd5-f0e65dd704cd", "indicator--bdb6147d-c752-4c00-84d4-7604ed9fdcab", "indicator--8f058c1a-2cfb-470e-b0aa-1bd975bfce2c", "indicator--5b7bd4f2-d3a6-406e-9256-dc85e3527999", "indicator--8a080022-11ad-4fde-9bea-8d625f7fd1a2", "indicator--501f2132-1f45-4d90-bd7b-7f564356b558", "indicator--1659106e-9f0e-4db9-9dd7-484cb69e032e", "indicator--f352d178-69e1-4a59-b03f-47e5f7e08601", "indicator--45188a97-ec30-4a32-b3e0-1823ef0754f2", "indicator--f08dc898-d6bf-444e-9696-7abfd872ad1d", "indicator--2fb9969a-3a11-4e7b-8b57-9338a0ca6348", "indicator--9478d375-cdaf-4dc5-802b-e5ea37ef9b38", "indicator--fa21fa07-5fe2-47b6-8d29-7b78fba149a6", "indicator--e579e4de-788b-488f-b749-c0f751f99e2f", "indicator--9831de82-f50c-4947-93a5-781264419303", "indicator--5f98c41b-5a90-43d3-900c-6512a27328c4", "indicator--8a06feb9-b28e-4699-af8e-793f31ef92b3", "indicator--d4c59220-6e17-408d-80ab-28deca9b420f", "indicator--179b20e4-3efa-4813-8e95-93360f32b794", "indicator--017640f4-5d9b-4c8f-85bb-3bc72f4458e9", "indicator--2eab5ad2-0008-4c3c-96b7-c7f19fb69477", "indicator--acccbc3f-c3ae-4c6e-824f-d18d37f99b3a", "indicator--d8e2e15b-2f8d-47af-8653-9c9216a5117a", "indicator--95830d41-db92-4707-b4d9-d209862c1077", "indicator--ec7241d8-8552-40a1-b3dd-21aef325ac60", "indicator--57b95546-1188-422f-a068-68e234781ccc", "indicator--1866d4c3-b271-4e0d-9eda-3e3a1249c725", "indicator--413ad9fc-23e3-4979-b6d2-c939bb082300", "indicator--5104a47d-47cb-4833-86a6-8679b3fac08a", "indicator--00761966-15dd-4fa1-9f89-876cabc21029", "indicator--35198955-fcd8-4262-97d3-39cefea1b606", "indicator--660fcbbe-8ad5-414e-a66b-e823a2ed56fc", "indicator--487548b3-4795-47d2-b089-98751a23890f", "indicator--53b565e9-ce03-4501-8b9d-8da7398bde18", "indicator--701fdaa2-efdd-49c6-bc10-200248044946", "indicator--05fec1cb-bef5-4462-82ba-547f1636823e", "indicator--063b67c9-fe8d-40d3-aa14-28da2425c0fe", "indicator--85eb5e77-abb4-437d-90f7-9ba33ed03a03", "indicator--d1f7fac4-37c5-452c-87f5-e9102d87354b", "indicator--5b92c70d-a0c1-42ce-b7d7-d5559febaf43", "indicator--36468051-b4b8-4ce3-a337-0529c3a982ef", "indicator--97154e7d-e0d3-4c3f-a013-cd04f65e0e02", "indicator--a3465322-8645-43f8-93ce-6e9b7c8a7609", "indicator--791d08bb-23a6-4059-828e-e8286bf379d6", "indicator--f10bb0ba-4bcc-4af2-9f1d-37f9fcb25b8d", "indicator--1cefdb9a-abad-44de-a636-22cf32d82346", "indicator--ba4599a6-01ff-4596-92fa-81bce829e7e7", "indicator--d9974cdf-a3bf-47b4-a638-3615f70ea07b", "indicator--d00b10e5-d9ad-4b97-a160-2786519f286d", "indicator--0515a9f1-513f-4e0b-a0bb-540d1222fdb9", "indicator--555e53b3-b478-4361-a6d6-8d19aca8ec41", "indicator--0c19dab5-2e0c-4574-b815-bca522ade099", "indicator--9d011901-e5ad-407a-8372-44afe3b70f3e", "indicator--339cf0a7-47df-4f38-87e1-6be1f968247d", "indicator--4b8d0069-c09c-4302-a81a-8ef81885f974", "indicator--626f95b4-2d15-4e59-94bf-d79aeed5b747", "indicator--1578e3da-7585-45b6-b017-5d3efb4fa895", "indicator--81bcc900-d24b-43e6-94a7-c697e5f8b8cd", "indicator--1f534bd9-b4fe-4799-82e7-43fce650fddb", "indicator--5175cc91-4829-4e18-a6c4-7ebcef8fa0dc", "indicator--b0a9e908-80e2-4def-b6ff-6b9c138d606f", "indicator--6a323eb9-3743-4005-9c72-c318b0a3b434", "indicator--88974c1e-7881-4fc4-85b5-536f06977a9d", "indicator--68dc911c-628f-4701-b057-bca3ee8c4adb", "indicator--2226deec-2abb-4237-ba99-b1d6c620187d", "indicator--80d3fc41-cd49-4c47-901b-5275880044ac", "indicator--78761fe8-dce2-4848-bff5-85d9f1ad0f5e", "indicator--35a2fe6a-3ae9-45e3-a351-3783a0c2c8e1", "indicator--c6a87aae-b3a8-4653-bf56-0ae9fa0bf359", "indicator--9ebd3f23-5d97-4aec-b311-d7257688fda0", "indicator--6640a422-7b36-4f82-a0e7-642eefb3a80d", "indicator--8c809c5d-393b-4498-88e0-87180311695e", "indicator--eecfcdd2-b639-482e-8483-98d5c3d23aa0", "indicator--90a8b208-3f7b-41ce-b1d8-38c3ef1f9ebd", "indicator--4cd4efa7-6f28-4734-be0f-5de5a0b593c8", "indicator--f299b497-d5f2-4d49-b13b-583886c0d0a6", "indicator--30ea835e-a826-4754-8931-f83513760b7b", "indicator--0ef8a210-79b8-4301-9701-b14334404dc1", "indicator--ec2d94a1-ea23-4a95-b700-716ef048b62d", "indicator--ff66fd79-5212-48cc-8ad8-fd89454f7217", "indicator--e5e35100-3033-4f6a-87b2-2d3fa467bf6f", "indicator--0e72de14-7af9-4143-a353-0f5cf8f4c8e3", "indicator--f4e4cbf0-2595-4dd8-888f-941772f9a659", "indicator--2447b4c6-acdb-462b-8648-cc55b04d4dbd", "indicator--5051eddc-aafc-4ed4-adc7-4b60860ca6b5", "indicator--78fc5466-6962-4758-a09e-f03b0302eb7f", "indicator--76335ecc-1511-40d7-8b98-c759e3151fcb", "indicator--5f6cc570-8c50-48ad-9543-e60045defa4f", "indicator--4edf385c-df53-437f-94a0-917ba9af99de", "indicator--09894800-7aa7-4c4e-b2a6-2ca4a84c54f5", "indicator--acc56c10-3dcc-48b8-99bf-457d80fb8bde", "indicator--3c0833b7-8264-4982-872c-ae4ceefcc719", "indicator--1f3b1dca-e981-4f32-bf4e-7ef815ca3ae4", "indicator--ebdeb270-6c34-4626-97e7-050b46e59e24", "indicator--b99d5c8a-3164-4a5a-96bf-cc94fc8c4248", "indicator--ca8bdb44-4aa5-4282-afb2-2b7bd89ca048", "indicator--4e5552ef-3b59-4bf9-9634-42fe39cd0ce9", "indicator--792a3dc6-6501-4f81-b61b-380f47fc08e1", "indicator--39c0777f-b639-44b2-a187-5480044527f1", "indicator--627937cf-17cf-4c31-98b7-ba441add39f5", "indicator--842a5f15-b760-471b-8cb0-7e267c24fd86", "indicator--40331807-5457-4272-9037-5516ca116ab4", "indicator--675d2070-f832-4fcb-94e3-5517d0f7093e", "indicator--5beed2b2-8fe3-447b-9c13-da9e75d291bc", "indicator--89225e28-d243-49ff-825d-e80ae630c3d0", "indicator--b90457ec-7a0d-4868-9dbf-42fb9dfed15a", "indicator--3bd7d203-afeb-4ce6-bfe7-cb069231f775", "indicator--f263591a-e328-4fd0-bdae-8dc8ebd5d1f8", "indicator--af9a0c62-2119-488b-8a72-8c9f4a38e416", "indicator--1e16be3f-032d-44a7-b941-793c7b4234a6", "indicator--ea950b45-3338-4a1a-b34d-67a24737118d", "indicator--9ac11afc-14d4-4957-8f27-e8b0d92b5d67", "indicator--3724b264-2e3d-40e5-bf0d-5e3013b760c0", "indicator--ed1d6636-5847-4191-aab7-e458d1856873", "indicator--0b4d77a3-d9f3-467b-8aec-5720fc474549", "indicator--86cf2d53-6c6e-4dee-bbaf-abe45ba98b75", "indicator--e98acf4e-d5fb-4957-b3f7-58d2b30c419b", "indicator--500cd14d-e1f8-4662-96c2-178b39739c44", "indicator--df59085f-ef44-4fec-9718-e48bda633008", "indicator--e1b7a53a-d307-4394-a841-14792031e6ff", "indicator--ceed330c-8cf8-40d1-bd53-838939cc0eac", "indicator--0926922b-5e39-4c81-a7a2-39aeefeb68fd", "indicator--768623e8-10a1-43a0-bca6-e43ccba48770", "indicator--3a928e11-0330-441b-a133-c3a13eefb0dc", "indicator--0257cf90-86ae-4e25-830b-2466c4ad56b2", "indicator--c9215a71-ac60-4413-a3ba-3cd08461ecdf", "indicator--0dccd5af-a722-4acd-bfa5-3c1cb5c3d46d", "indicator--3ff03d93-47fb-44d2-ae13-b4a22eaff0d5", "indicator--5705748e-59b7-4e2d-bd26-eb513cb863c5", "indicator--b6824b06-cd09-46af-a3b0-9660ac46fe2c", "indicator--241fe7c5-fcb4-4071-888e-132010ea286b", "indicator--8d6fea02-c1c8-418d-8d57-35e8ff3ca5eb", "indicator--45d7977f-aed6-4bc0-abfe-cfaea0cdf6fa", "indicator--0cd9518e-8072-49a6-b64e-6b6268a9d5ac", "indicator--a15c1b68-e18c-4fee-b3eb-8e5fe1c1803e", "indicator--989427d0-d678-4531-9b0f-6d997682deca", "indicator--2ceeb165-fa6e-46b9-ac75-ca0f4d71226d", "indicator--36f22fd3-0d21-40db-9bb1-4ee81c157cc8", "indicator--ce6fbada-5493-4a31-b666-05ea1b161c88", "indicator--4594a031-1b5c-4ba5-98a8-5e3bc7ad9d11", "indicator--006af4c1-eb5d-443a-92ee-f460aee15daa", "indicator--6bfd1b35-76e2-4cc9-a77c-b317cc855054", "indicator--c4dfd5e2-27fa-48af-b446-f9901298e11e", "indicator--6b540389-618d-4796-8371-3852b0edd7e9", "indicator--890a6186-41f3-4512-bae1-435254e9c890", "indicator--ee444f05-dda5-4290-a857-68e6e69ea997", "indicator--6958c448-8cd2-493b-9b86-cbd79b734c91", "indicator--803ddc13-6ba3-4f7c-8acd-3c682242bb0a", "indicator--692c8d59-7a7c-4979-b9df-8d25087f3026", "indicator--bfbbaf7e-1750-4b32-a9bf-73ef6610cb94", "indicator--e7ac2de6-0e2a-4ec3-ab01-2e23045b03e7", "indicator--6aa8464c-39dd-4496-b80f-9dd36c0559fc", "indicator--130c8942-20b3-498a-8fed-7debce50bc24", "indicator--64eb0091-ea7e-4c8c-a780-44ae59d02a9b", "indicator--201212b6-8b0b-470d-9168-b55704e61dfb", "indicator--58f0a10d-9239-428c-92da-875a1181bb89", "indicator--33a821f9-a765-4d6a-a418-2721fbc530cd", "indicator--0ebdc9ed-47ec-441e-b115-fd876bce20ce", "indicator--01ffea2d-ffe7-4190-a06f-ae2f7cd77365", "indicator--2d103019-8af4-4539-8502-03857f6b108b", "indicator--55e1e380-32a0-443b-94be-f7223ed65da7", "indicator--6da2101e-86a1-46e0-b579-b94d7b977da9", "indicator--d96a9668-f8df-4cf3-ab73-0fe5a2fab4dc", "indicator--c1b1bef7-12bd-44a3-be12-d4b927bae1a8", "indicator--6d0ec2d1-22a1-4d5d-a624-5654aa5f836f", "indicator--2475d0d3-74b3-4467-b606-2548e7bbc4f9", "indicator--c0ae2288-02ce-41d0-b116-839c8f90e2f0", "indicator--6b776c3c-08bd-49b9-a014-ea82e57b99f8", "indicator--43575e50-fe73-4eee-93fa-76bdc6579d5a", "indicator--63f254d2-892a-451d-bc87-2212ca11cab7", "indicator--e3a411e4-c314-497c-8bf1-7754576a8f5d", "indicator--849f4487-a600-4cd7-89be-5eda5b53368a", "indicator--6021ba9d-fc3e-41b5-b38a-a58753743a91", "indicator--f404aece-8371-4be6-9f0f-a9ee75564a56", "indicator--5a29eca3-6371-4dc9-93c0-e27453bcddd1", "indicator--184bae49-6745-4b1d-a6fc-3ff9019f21ab", "indicator--9199496f-bb8f-4ab6-af85-61f8637e0b63", "indicator--9b0dc490-1e19-4678-9c90-57ab77daae8a", "indicator--c1abf17c-bb32-4bfe-a739-d4ec837da1d0", "indicator--b10b6152-7ee1-49f7-b7b0-4aa80c2018de", "indicator--3f02547e-2a29-4b88-bc4e-5ad09741cde4", "indicator--055ac15e-8514-46f8-b0b1-8c436a7d467c", "indicator--66c7cd1e-4213-492f-b186-de90e257f40b", "indicator--16270d41-0d71-420e-9eb5-5fb22758739d", "indicator--15425b7d-e5a9-4ee8-ace0-b804a81aea6b", "indicator--2e46467f-8b19-417c-a6a8-3a1cf343571c", "indicator--bcabada5-fb98-4ca0-bf92-16bc6f71ef33", "indicator--ddac8b97-2cde-4bd5-a537-6b5e3a1a24f2", "indicator--75484e95-66ae-4b40-8464-c9af7c9995a8", "indicator--638c5e0a-b064-4427-a839-d50bbadee707", "indicator--06bd7aee-1e64-48a0-a90c-8a7479bdf189", "indicator--6eb1a595-ded2-4965-8831-5639d4b4d946", "indicator--fac4915d-225a-4fd2-92e8-354e4459cd82", "indicator--ef38d2a2-f4b0-4a1a-9257-d87a025720e4", "indicator--0e4eab06-e793-4aad-b06f-4c15c840d99e", "indicator--77d0fae5-30e8-47d9-8b6d-81da0dc2ffd7", "indicator--54736a5f-cf95-4e2b-899f-3028e55efc97", "indicator--4bd49487-c4a3-4320-bfa9-b76182ff39fc", "indicator--c0461eab-e327-4b10-a201-a02f57f364aa", "indicator--69e7900f-f009-4cba-9a4d-f4ac6209bf34", "indicator--0937c174-54a5-462e-aa80-3bed376e63ed", "indicator--ecb23952-c9c2-401d-b2fb-fd42e904aad2", "indicator--333b7f97-01bf-4c02-829a-370f99c21c6a", "indicator--3dca0fde-3b90-48f2-86a2-e999dca98316", "indicator--f2ff0881-a3c6-433e-a0ae-42206a1f3ebe", "indicator--7857f9db-cb71-47c0-97c0-c3527735db7a", "indicator--6adfb511-1ad1-4b12-9e53-a6872aea6a81", "indicator--e0fb69f1-38f3-4532-a58b-c02ba3b3b2d1", "indicator--a064aef2-7306-4c3f-9154-e737c5e8019a", "indicator--1278198e-057a-40eb-96ad-4ec3e4d79be3", "indicator--0272b342-7355-41e9-b050-0cf624341e9f", "indicator--87042fc4-3e2f-4a72-a48f-8025f2d2101c", "indicator--151e33b4-d6d7-4dfe-8ae4-16527190e96c", "indicator--4ad5b8b9-4913-44cc-a809-4602f36fc6ba", "indicator--f6a922c9-e71f-46b1-a423-40ae9b107c3f", "indicator--4493b38d-3e0d-4cc0-baee-d75308daf843", "indicator--0ddb3543-ddda-4313-a9d6-febc78b78e3a", "indicator--9e7d4823-1c8d-43b0-b033-a25bf4bc9757", "indicator--724e0dab-d976-4218-93f5-4258fb946fe9", "indicator--ad41f926-d57a-4b0f-bedb-2a14b418b38d", "indicator--ae0b1066-7f2b-4505-84ca-24e59856defb", "indicator--d4fd03a2-86dd-4704-b4d3-604323eb5b7b", "indicator--f59eec32-0ce1-425e-b486-0602fa7527c6", "indicator--93459ea7-036d-4ac5-9553-f59aa9cd5420", "indicator--6b20cd90-d515-49a3-9845-a812cc095638", "indicator--bd5b9572-f025-412c-8768-3a0970bd6228", "indicator--63d5a9a3-5053-41b7-b3f7-986eb9b330b4", "indicator--308fd7bd-26da-45e1-87a5-beba7707f90e", "indicator--e93d1837-0f08-46eb-8ac2-e4ad9aeee7c8", "indicator--c5a1301a-2d81-43ae-9b12-90997be525a9", "indicator--eff2fa4d-2826-4e0b-83f5-50e6f5ed2611", "indicator--1848c282-83b3-4c4a-8a01-7b14c1823391", "indicator--229809a6-35c6-4e1e-82ff-ba279e3f7fcc", "indicator--d04f64c5-c8b0-49f5-b7ff-780335a55be4", "indicator--f8548670-2a49-48b5-8127-973cfccea93b", "indicator--90dc4981-eb5f-4999-8a3d-6cbf2efca49d", "indicator--97134266-944a-4a77-a9a5-26e52568e7e6", "indicator--5922e7cc-6a6e-4abe-be88-8d2f7ea03cf3", "indicator--802ac3c5-a19e-44b6-803e-689d1a64468d", "indicator--1e113c89-055e-45ca-94a6-42c6ced21853", "indicator--4997cf48-f9ca-4e9f-a275-0b74713c2859", "indicator--4aab0550-0b57-43c2-8c1d-6670a3f2c342", "indicator--02bf219b-86a5-48b2-88ef-1646c4930721", "indicator--8642749b-a7f2-415b-935f-afd12ab5d4d6", "indicator--f0938e65-398c-488e-a787-e669381ea14d", "indicator--b198c319-957b-42f5-bdf9-33a7ea534573", "indicator--0425b4c3-be06-4a0f-811e-227644012c1b", "indicator--95c52600-db73-4b8e-87b3-07ef85a44f48", "indicator--86e2da3e-e1fa-42b4-8bc9-0a337215751f", "indicator--f9ebdcb5-5821-4bf0-9213-d8ccdfd71e11", "indicator--f20bad3b-8027-47ce-b03c-7ead9e0e9e83", "indicator--08b41aa6-b969-4d49-b357-36ed1a44d8d1", "indicator--5d4c142d-1f21-468f-abb5-d01e2e84969c", "indicator--e5191e2d-5fd0-469e-baae-8412068a6c37", "indicator--9659b053-bded-4a96-9ce3-9923eac77087", "indicator--752f0973-6e48-4173-91d9-4cea2c4ea5f5", "indicator--5824ae6c-fd3d-448b-a491-67711855c436", "indicator--0997980c-7d98-4802-9919-befb8a59d991", "indicator--e054f851-966d-4b93-97fb-cf1374acd7de", "indicator--dfc01170-95f9-4618-81d9-0c8ef55313e3", "indicator--def12020-501f-4264-8019-c57b412b6bd2", "indicator--4db14640-97e1-4530-8b7e-a044ae1edd53", "indicator--495c9be6-879c-4445-91eb-1db1c34f64f4", "indicator--4166d437-13da-4360-bf14-9658ae11254b", "indicator--e9665b7e-bd7c-4759-903a-058616e45ab7", "indicator--655443d9-4698-4027-853a-4c6efefc5f81", "indicator--3f52a2f3-83e3-471d-a25e-01714cb202cd", "indicator--b0e33c63-80e7-481f-b972-e14fdf49bb2d", "indicator--38a42e96-5814-46e2-a5b4-d2efe870549e", "indicator--bf6d564f-d2a4-4eea-a860-1fa41559a1f7", "indicator--30f55b25-381d-4088-9b1c-0c24fbb735f0", "indicator--f0be9208-b64c-449c-b00e-11dbaab08be7", "indicator--7d7d6ed7-6d3d-4a6e-bfec-e839d01b568a", "indicator--527f28a7-6158-4499-b11b-f9b3b1c741f6", "indicator--e9bb9e10-796e-4eb2-b4ea-9100a8adf581", "indicator--900fb623-cd86-4fbd-983b-6d537c9370d1", "indicator--a291fd43-b5a9-4262-92e3-9720db711a97", "indicator--51567c4e-5df1-4e5c-b9e6-0b93436c9aaf", "indicator--84c894c4-5b45-45e3-a50b-3d457b66d341", "indicator--28148674-9523-4da0-abef-605f1d9a524f", "indicator--def0b14e-143b-4a22-ad57-af5233e2b4ff", "indicator--b133c043-3b0e-47ef-b063-424aaaba3c82", "indicator--9d1eeabc-f72d-469e-b9cc-0b285d0f85d5", "indicator--de477f2c-7bb7-4751-a235-43c6c6ecc66b", "indicator--4b97ba5b-88df-493c-9bda-1fcbe1866db0", "indicator--27522279-7b4b-4fe5-bf1c-6c73714a8245", "indicator--68e6cd66-8809-4517-8293-b340dd874e78", "indicator--ae52ec38-6d61-415f-aee1-0ca0e5eb14a0", "indicator--62f9eb25-7eb4-4108-89f5-7a754eae115a", "indicator--d3367a60-f06d-4e9a-89af-fedfb95cd62e", "indicator--994a518e-5042-4211-8727-969c86e2f6c0", "indicator--01ebeb7a-8994-40d7-b8ca-0fb6926976c0", "indicator--cf9f9c46-bb5a-4979-9a3e-857d232f11d8", "indicator--4b62d630-bf77-4757-8ac1-7d32b217b5ea", "indicator--2ef753f5-6ab7-4069-924e-e2d0cd415c9e", "indicator--ebe30e20-0963-4576-953c-65a3d81106c3", "indicator--025189d7-da8e-4852-a064-dbf56c15a857", "indicator--ae74a3d8-255d-43c0-9acc-0a69e4ccfab6", "indicator--e1a642bf-cb1c-43e5-bf43-5ce12b372e76", "indicator--f0e27d8e-2996-4c1b-b04b-bbc1c6c72a03", "indicator--97b8ad96-f056-49d3-bc53-c11be19c5133", "indicator--cc568d8f-31a0-4d98-8cf2-cc0d74a02d9d", "indicator--90d799cb-3819-4834-a439-deea331629f0", "indicator--dd73a2e5-9fe1-45ad-b4fd-825b64d43edd", "indicator--2b621711-3b71-4ab9-a091-efad5d0ddc23", "indicator--4afa1136-4cc8-4d97-98b8-847b48a2052f", "indicator--a274d51f-6d4c-4762-a3b5-38329579a1dd", "indicator--93108ac3-e2b4-4677-8d8a-4b9585f0a9bb", "indicator--9e395172-81e2-4e0a-a331-f81bce09a9a4", "indicator--c302e6ec-ae47-4261-ae44-c0b374b15169", "indicator--7bfa2fec-b14f-494d-b1e5-6998c8bbb124", "indicator--2b2e38a9-8568-4b73-8267-2f6dcdef473f", "indicator--0e075d4f-a996-4e57-8c5d-d93528434f2a", "indicator--eaed0ac9-7650-4e9a-9624-2eb28507bbeb", "indicator--54565a33-79cc-4134-9696-751da7b3ece8", "indicator--b9203cae-4e10-47eb-a65e-46800c91d304", "indicator--e73e4260-de93-4f58-a0c5-c2c39b404410", "indicator--71e47ff2-498f-4acd-9004-56db64a82c49", "indicator--3a202918-1873-4e07-bc02-23e6b2fa4f76", "indicator--43039b7e-b88c-4b3d-834d-1ce0cc8c8c68", "indicator--08b54aba-d469-40d9-a347-3390496a3037", "indicator--222ad803-db86-4d76-bb7a-0a5d85d2d5c4", "indicator--e9812c55-0a18-410c-8b01-8ce74107c20a", "indicator--0b5a7da5-5c7e-4bab-8626-cb8b945f4ff1", "indicator--e2bf65a6-f161-4e46-ad6d-2d2fbaedd74c", "indicator--6bdfe354-4b7f-4d55-9717-4cc551cd332c", "indicator--221bb832-fd38-4c2f-b3d8-3736269894c5", "indicator--03942d4e-450a-4d29-bffe-3995d54974f9", "indicator--62322a49-8d1b-4763-98af-405b4a7723ef", "indicator--09bc75c1-b40b-4d5d-a5aa-ad1f523fbd17", "indicator--ef877177-c179-42ba-b431-6d77f5f785e2", "indicator--5f27f7cd-dccf-4540-baf3-c60b0b3d983c", "indicator--17c05100-d2e3-403e-ac6c-2c4a6b38a509", "indicator--047a75db-d1d7-418c-96ed-87a1cc320ab9", "indicator--c412bc5f-9bb8-49c1-ad8a-70dafeacc470", "indicator--d29a268d-0a14-4f66-8e88-9d17239fda26", "indicator--70e9a9c8-9c58-4fc5-9b03-42d41b17a0e5", "indicator--636507ea-32c5-42a4-8513-5a0096ec0788", "indicator--935f67ff-3b50-424a-aa62-a65a8b3c5ac0", "indicator--6639d1b5-2620-49f7-8396-8ebf0a7429d8", "indicator--46f044f6-0f4e-4f30-b45b-bb99610f1a5b", "indicator--8e27aecf-206a-4588-87a4-d051995f871d", "indicator--100dc13a-92bb-4b2e-accd-646b3254ec36", "indicator--e152a569-64be-4861-b890-6a53bc702fe2", "indicator--1dd32dbc-a91d-4e57-a336-7173ce8fbee8", "indicator--0bc26561-6cb2-4767-af57-34754dc0de66", "indicator--75c4dbbf-11f8-4fa9-8112-c55d22cce899", "indicator--02615482-a06c-48c9-985c-ed543b612408", "indicator--54b3af1d-fe58-4137-8957-c284274de8d8", "indicator--199ee4b0-d703-44c2-ae97-2d00e366dd3c", "indicator--92d6ecb7-ca91-4876-ae00-7dfee7f07ad1", "indicator--422af69c-0b7c-403b-aee2-70c051cb9945", "indicator--5acedcf7-8a12-4164-9813-773fc15acd17", "indicator--41ff4b30-6db6-4a4a-b1a1-86ef9b489df7", "indicator--d2e047c1-4aa4-4feb-b250-a9d60f91f90a", "indicator--66aa591f-49fd-4940-8f36-eebc8fefa67a", "indicator--cec4a3a4-f9e5-4783-b370-a7fbbd30ef95", "indicator--91175d50-f1d2-4eca-ade5-31ae486d8b45", "indicator--32c5a5f7-8533-4d93-8fa0-e77955c45ca4", "indicator--a10a2071-2041-461a-a644-7c8223c5447f", "indicator--5bbb0e9f-0c29-46d8-b0d2-ae676c15bb57", "indicator--23b580a1-ba6e-45fa-836a-25e7a51e34f6", "indicator--5a20a9eb-e34f-49d1-a2fb-4dc5c3b4ee3b", "indicator--e3ffd4b9-1d36-4347-a80f-f4ec5436ce95", "indicator--12cf03b0-1fd8-46fa-adfc-a22be3dad553", "indicator--45358634-8410-4786-a72d-9a8270d18d6b", "indicator--310d1ebe-616d-4b27-ba79-f85aca533f53", "indicator--73b08a17-b8f3-48b7-97f4-f500d17c1cb6", "indicator--9a6c3f7c-7011-4701-9f24-6c97adcff284", "indicator--03177bc9-835e-4949-b4ac-7fd46ba89c09", "indicator--e4874b63-58a8-4cb4-a83a-30acf18b6957", "indicator--9b1d44ba-f5d6-44cb-9fe9-73afbbc25b34", "indicator--2fe52a02-b135-4873-83f1-81da05a6f4cf", "indicator--8891639e-0e71-4b2b-98c0-2f9d730e961c", "indicator--b14d1482-273a-4866-ba5e-ebab25778510", "indicator--8768d39b-93df-4a34-967a-892a76cde394", "indicator--516ee850-46aa-4721-9b07-e6bbab01f820", "indicator--8c2b0c5c-1c96-4c56-b2c2-6199a711e078", "indicator--795a4f75-639f-4635-be05-fb16b4133129", "indicator--5e6bc59b-e60a-4b2a-be1b-6603b23ce3cc", "indicator--a3fc2f76-5bfc-4f3f-ba10-502e14bf9eff", "indicator--b3b90983-9668-4128-a51b-ed8509d0300e", "indicator--9cc78156-710a-4d01-96d8-efae033648ec", "indicator--c004a047-a4fa-4dfd-b735-38fd9e5e4b56", "indicator--d7e947ad-c758-41a0-bd43-4d34acd40315", "indicator--c51e71df-1c17-4e81-88c3-1e7826e312c3", "indicator--82c8ad68-7c78-48d9-a0cd-5400cf6b4258", "indicator--c5016704-fccd-4410-97eb-cd3caa8e6465", "indicator--f83cfca4-0a1c-4e97-bbb3-1faf18a18f26", "indicator--c0adb398-8cb8-4ef7-b7f2-99f582ff4228", "indicator--5ed5e06f-fb70-482a-a1a5-04f599e00985", "indicator--13af1c7a-436b-4248-a149-77410c50a0a4", "indicator--30ee91ad-974b-4f1f-93f3-bb2ce27acb5c", "indicator--2768432a-0167-4a1f-a533-5e82985793f0", "indicator--2bf8acd3-e111-4d5f-8d64-021743c263e0", "indicator--6d3ce087-e7d3-49da-9f80-cf2ab4248e81", "indicator--097cc8fc-5548-46f2-a5b7-ae91879a2459", "indicator--3d3290de-61e8-4189-bbab-50c659db4de3", "indicator--f7078307-2f9a-48ad-bef2-6f0afc49722e", "indicator--05945c62-4d8b-47c9-98e3-4ff84dab4099", "indicator--34f8cd35-32fe-4c91-91cd-9b67da3ac6a6", "indicator--a635e3ba-1bf4-44cc-8e4e-9bc4467d72ad", "indicator--9b60446d-2a81-4c1d-909c-b776e7d80075", "indicator--59c83f5b-1738-49ab-93ff-de377b0bbb3c", "indicator--3660af8f-5fd6-4714-bc30-0b1dfc0132ce", "indicator--847c7c7b-a75e-4465-88f4-d5d671ac1d40", "indicator--ac5c6cb8-81ea-42d3-bbad-508efda24bc3", "indicator--1c35bdbc-8e0f-4228-965f-43b81b8df405", "indicator--8e571122-0d01-4ac6-8465-df8f7ae647c3", "indicator--8e08a579-bbde-4b77-8580-d88110e9b9ae", "indicator--6aef8373-7a7c-4ebf-b772-ab4994a91ced", "indicator--c686b324-2d3d-46b5-bc3d-6d968ac1a0e2", "indicator--a71f6cf1-b74d-41b5-8c83-88bdbd95ef88", "indicator--967fc3f7-acc6-40d4-9400-a1378c4c9d9a", "indicator--9ca54d0d-7b54-4299-abc6-8689b4cbe4e7", "indicator--29f59e90-c9b0-4f6e-bbd2-f889fe8dec71", "indicator--8c82e472-7f59-4ae3-ba73-1e87a796d941", "indicator--669d836e-2dd1-4d93-8ff7-23e64dd8589e", "indicator--86db5eef-19b3-4c14-baea-f6c68ec5d763", "indicator--08b11487-753e-487c-93ff-57e25d311a59", "indicator--08780cd9-8ba4-4958-9777-ea8693fb292e", "indicator--7819a4c6-c5ad-4c2c-a75a-706523627187", "indicator--d8661a54-6e28-469e-9dd4-0a6daf06fe4d", "indicator--a808e129-2643-452d-9f20-6c46b8ae4c9c", "indicator--e7e79541-7f0f-41df-93da-36fdf9f1346d", "indicator--bd0f4c45-b539-47a2-8f9c-3f8eaecd2a6e", "indicator--28d13a5a-e56b-4003-a70f-f37c28f7443c", "indicator--83b1c39f-a760-499e-ad68-02aa41d5c020", "indicator--fd0d499b-f9e5-4be0-b1db-debcad464b5a", "indicator--4fac3364-4de9-4b5d-84d0-4d03a2bd95d4", "indicator--76567143-74c0-4277-b34a-cd0647b49a17", "indicator--8b8dee41-50e8-4c48-b9af-f5c868babfe5", "indicator--12663fc0-60ee-48b0-a318-638c20938e92", "indicator--b663434f-a962-4757-b315-2f817c67f758", "indicator--4d08e418-618a-4e47-be67-5a4df465c371", "indicator--70f629ad-eae6-49bb-ad75-6dd0bbece165", "indicator--1bf7cc48-b975-4f6d-b6f4-05ac1308e2d7", "indicator--8aa39ae1-3a04-4b69-a0e9-c9e348e89855", "indicator--08694830-37fa-48c1-acbf-c57e9489936e", "indicator--f3ca945a-efc1-492e-bc4d-5cb4fa01e40a", "indicator--36db19ca-3214-4c3f-80b6-04f5aaf22eff", "indicator--b7259327-3497-424a-b30a-805d4784d237", "indicator--b80e52b2-d014-4c6e-aa9b-1c26f56dc4f0", "indicator--88edec79-922e-4d5b-952a-0898bda9798d", "indicator--d1877c9e-9b65-4275-8ba7-c911d1d10375", "indicator--4942c933-d519-4311-95c8-0b79af5e38e5", "indicator--ef49d3f9-ee57-4cc1-b620-07f2778e68fd", "indicator--46881386-3465-47ef-a189-77f8b31182a2", "indicator--c5857f69-bd7b-4939-bde2-83900cd09207", "indicator--fdfa78de-6d83-4d11-8bf5-9176744d1ed2", "indicator--10dbd244-4aa1-465e-ba99-0a38f1cc9d46", "indicator--cc06f758-ca3b-4849-8a68-2dcddfdb7f5a", "indicator--fe457272-a730-45a0-9fc0-026edb1e3414", "indicator--ac5f96c6-c3aa-4d59-95c8-76dc48eb27d4", "indicator--9ad494a6-05f9-4f13-8eb5-dd43a1ea7919", "indicator--380aa04f-04cb-4f51-beb0-20448d0131ca", "indicator--a3f149ab-1849-4ea4-bac7-345123390f62", "indicator--49f33d1f-a5e4-419a-bb61-7a4096b46f92", "indicator--8b4ebb04-44e6-490c-8102-88d48c5ef235", "indicator--4ab2e5a4-5ef7-4de0-bd97-9d3edec7d72b", "indicator--330bc1bb-478a-4d23-ae60-6fb0cd8a8f5c", "indicator--0d8ebf11-ed73-43c9-adbd-7a7104ded5c9", "indicator--6cf93b00-e10e-4f4e-92eb-ba38a5186c9c", "indicator--1827b953-dd96-4a19-9fd6-b54459010886", "indicator--254faeb3-8583-4901-8d22-d4cc471654c0", "indicator--b82141f7-b20b-4984-964a-f5b2352f360f", "indicator--0c4c8672-aa9e-40d4-92b3-4b70e3ec0bf6", "indicator--7fe005d8-d944-4567-b7c4-cbe8082a42bd", "indicator--0b6508a6-8e07-438d-8e62-c12a5b7fd3c6", "indicator--73306af8-0f35-4399-b428-bc1d36c974fe", "indicator--808981cb-be1c-4f9c-b688-17208ce677ba", "indicator--fadd0531-fa12-4f92-8624-16cfcb41a266", "indicator--46aab10a-b4e7-475c-883a-1436c7b92b2c", "indicator--8dfbe6ff-6f06-4e7a-8498-4ce0404aa8c4", "indicator--3171b4c3-df8c-44db-be79-13e0d902f564", "indicator--c431fa65-3e3e-4ae6-87a8-d2b09a67b180", "indicator--d38bb628-d798-4f75-9c30-f4e6d7d6fd0b", "indicator--fa546083-c477-4a45-8e50-63f8a20ef87f", "indicator--31926ab8-1ff1-4f49-b7c4-0b42dee6f4a6", "indicator--5091271c-b2fe-49bc-af9a-3f0746c2465f", "indicator--ccc9ba58-0bb9-4c08-b48b-e208acca78f3", "indicator--c260a5e1-a4b0-4ac9-97dd-ddff80127d4e", "indicator--1dcf4e49-9cc8-4489-b768-b3cb6f675de3", "indicator--16c5ef87-123b-4271-a800-270989ff4ce0", "indicator--bd78d1c5-c74a-43e1-979a-c3f3a2b61218", "indicator--d4d90f6a-071b-4d2e-8dcc-0830b5696d45", "indicator--3c1bf166-4cb4-44cc-bdb1-6309cfd374d7", "indicator--442bd5ec-b640-47d3-a6e0-b00ec56e3506", "indicator--9d904d88-0cbe-4035-8582-66fee074e796", "indicator--2a2d15c6-a69f-4d1a-95c7-2dda78eca47c", "indicator--ae8831f2-56d7-4aa3-85eb-05daba2eab0b", "indicator--b305ace5-b658-4626-b9bc-43b7c72881b9", "indicator--a2e4c672-c6b2-45eb-b1f9-ed7068cba460", "indicator--0008c017-081f-4bab-a0d3-1b577f8a2792", "indicator--a59f2eac-703e-46c4-8a98-81276167a966", "indicator--62726c7d-b742-40ad-8f9c-f014a99a227a", "indicator--41585d4b-30af-4fe2-897b-b515e2a31d2c", "indicator--a807ef26-c987-4ae2-b377-102bf9d455dc", "indicator--76b360d9-dcb2-4326-ba89-bb812dc5374c", "indicator--e0b1e2db-de37-4b2d-bdfb-759a9927c4c5", "indicator--e6019d8f-8898-423e-b173-8ec07bfbed9b", "indicator--6c6023e7-fe8b-4200-a231-63e3a1cf976d", "indicator--7728492b-3716-408f-b482-568ff61dd620", "indicator--46355dba-6043-4465-9aa1-30fe6940d75f", "indicator--6efa5add-4e58-484a-87b4-2d64972e4f8b", "indicator--e8e7d7da-0b51-4cd2-805e-932db4c6b65c", "indicator--6d16cd40-64c5-4295-8779-098c34f025fd", "indicator--cf760dbf-f8a6-421a-9864-5eb5e354a169", "indicator--9938b839-17cb-4536-b98e-55d2bcb1f13d", "indicator--f0d46e39-a8af-46f3-8947-6682ab2d8994", "indicator--1b6cfa7b-b7f2-4850-bda7-ca5545221aa1", "indicator--c4182c6a-a360-4b28-8b7d-23455c8030f2", "indicator--0c494c6b-236d-4320-b393-11a2492f402e", "indicator--739a1357-11d4-411e-beb8-acc37c540d88", "indicator--b4d30d34-b38c-4090-87c0-4e8304f6fc7d", "indicator--47d0d510-92dc-4bbb-9248-105be7810cb4", "indicator--2fec7f7b-3f83-488e-8fb3-6d8a4a4a8963", "indicator--fe31c7eb-ada3-4e54-b347-1a5148bfa87e", "indicator--f6414851-7adf-4485-a364-9fa6e8665c51", "indicator--0f68c482-c972-41bd-9f17-1c5bdb829078", "indicator--de67ee6e-3351-4e7d-9ddd-d00524c18754", "indicator--2c3fd557-1f0c-4e52-b078-a992a7b38e6e", "indicator--1c6fc44d-91ae-40e8-91eb-6e7f00fcb019", "indicator--06cee10d-b68b-4d97-b73c-d524a8be088a", "indicator--482d2cf3-db3d-45e9-a8e2-da4239feb18c", "indicator--8b5a0192-e2b2-4f6e-ba54-95a0725d8bbd", "indicator--5f87566c-09a2-4201-b814-166ba994fd04", "indicator--13197717-b35f-47bf-8d5b-7ea2df094373", "indicator--3348da3b-a1ec-41e0-9315-72c680773b0a", "indicator--629ed80c-47c3-46f4-ae0d-9d12166128b8", "indicator--cf9a6cc5-2696-4162-947b-31ec90dcc293", "indicator--8c0cdcfe-cd4d-44ae-8189-ceb27b11d778", "indicator--0cb2e2dd-f3b5-4b54-94ce-c3d9fd37dc69", "indicator--049f988a-b798-4a27-88e1-5c2b4485d39b", "indicator--65a2701e-c59b-424b-b33e-6c217fb11415", "indicator--b548f4cf-4715-4876-9e19-0bdbad3fd677", "indicator--184efcae-acf6-48a6-bafc-f4df15a6fe8b", "indicator--5650aadd-c55b-4d56-a385-35cac8368aac", "indicator--6a5f367a-bf58-4cd9-a7c6-416c7a305ede", "indicator--2fb444df-ab68-452a-9cc2-27f81a789d2a", "indicator--609adb40-76ba-4cb0-8332-d5ecb758d774", "indicator--96d19ee6-608e-45a9-a1f6-b74d1d6dc97f", "indicator--e29298da-f294-4f04-b0f8-d2010638e202", "indicator--0215c3d9-7703-4166-92b1-19fa9cbde4aa", "indicator--2a6db379-dde0-4e4d-ad01-d6a80c28ac7a", "indicator--aa0ce036-1df4-4a55-9693-cd79a93c28b5", "indicator--96564a2a-6942-4d9e-809f-47eae77214b5", "indicator--0a4c8c28-aaec-4bd4-93e7-54da40ab480b", "indicator--67e16d84-3d08-470e-b357-d0159c909330", "indicator--910e9329-ae29-4146-94ea-2b14aa09f3f0", "indicator--7a0f008a-1737-455e-9a4e-20b44c00f873", "indicator--fc60e8d1-8fca-4681-9182-25714fea1ba0", "indicator--09ed4614-b422-4520-9851-3f65b52f66b7", "indicator--4fa01183-b6e0-4103-a4a5-7611d4ec8a30", "indicator--0245ae67-2d27-463a-b530-fff285e06618", "indicator--1f81f392-ed76-4ac3-a4c5-5ec91053863e", "indicator--ca024bec-a33e-4549-9b3d-1ddcd6d095f4", "indicator--b0efe403-6509-4127-a638-acd2e0357857", "indicator--d5d82184-3a53-41e1-9071-db137fffe2e4", "indicator--778aa00f-06e3-4aa1-83a0-7e3059b7d5b7", "indicator--9117b1a1-eb58-4bd6-958b-5383c987e61c", "indicator--6abe88a9-96ea-4bbb-82af-ec0438f009b1", "indicator--5b45099a-4863-4a06-a73f-4316d7544598", "indicator--f363129a-6698-4991-ae3d-6be7e05a5415", "indicator--f78987fc-6824-4c90-97c3-bd2def5b5e23", "indicator--1d156396-a444-4064-8d3b-30bfa978a4f1", "indicator--f36e5d71-95b8-4d89-b393-4755192014f2", "indicator--0b10e05b-268f-4dbf-b109-7a12a28882bd", "indicator--093112b4-bd71-4a00-b1c4-c393e9ef0b7e", "indicator--3ffd296a-42a8-4201-9d96-255cb6baace9", "indicator--dfbc57de-c819-44ad-a34a-621ab91ecbd5", "indicator--4c4a4f94-23c8-4727-a3b0-f766bc222792", "indicator--bd1a83d3-aed0-4ab1-b5f6-58efafab9a31", "indicator--8480332a-5ac0-419f-bdf9-8c8373ab44b0", "indicator--04692ee3-73b0-4918-9c8c-e9231cb0f3e2", "indicator--44e5b9d2-25c4-4593-9290-14d1f696c562", "indicator--8f16a406-737b-42e1-9ad7-69dfc67025b3", "indicator--727ccc15-e047-45ce-a486-2388206bf6bd", "indicator--56ff73c0-a24e-4f9c-b104-dda691444a26", "indicator--2e853545-981f-44d6-8587-6137db5e5136", "indicator--3d1e0db2-762a-44a9-84b5-670c0bd8b37d", "indicator--bcaeacca-4e08-4530-82f2-39851ac0d525", "indicator--2edab40f-3e41-48a8-9190-ab781231c0a1", "indicator--c752a802-d08f-4758-b517-d577b4d4791f", "indicator--bba43038-c8cf-4dc1-bd06-12fbc106b440", "indicator--fd05ba43-3778-4c55-981d-548d27fbb940", "indicator--41c58d6c-b0ec-475e-a8dc-9bd908a9833f", "indicator--25df6ae0-1ffc-42a9-8327-fe5df744c36a", "indicator--2951cdde-7924-4dcd-b19d-4044eacaef05", "indicator--0a2e99da-4eb2-4926-a460-c8b9838cf01f", "indicator--2381132b-d61f-4326-bfc4-53547901c09f", "indicator--3d896456-0d16-4f65-8115-b465ab4584b7", "indicator--d134dfbb-6e23-43a3-b605-b90ac2c63f1f", "indicator--caaa02c0-6287-4ae4-9d52-18826a52f5df", "indicator--c33ec496-1a1a-48f1-b452-8a2c12c0fe37", "indicator--f69cfa7e-53dd-46e1-8e62-7aed185d3671", "indicator--8f154e39-4e4f-4405-9579-cffc53a0c075", "indicator--2c6111d0-945a-4c7e-9b33-ce3490ec6949", "indicator--f8c31eed-3d3b-40f0-b365-7fe452516886", "indicator--b6bd0c77-e137-4b3f-bcd0-a469ce2c786a", "indicator--701a69bf-cefb-4c11-8d1c-2bf0c8a5093c", "indicator--e504bbbf-3e98-49a7-af66-0903d4557fca", "indicator--0ca43a2e-fbc6-47aa-b939-cedb939e7de1", "indicator--a3260222-30d6-48f5-b5bd-d54d799ba1f9", "indicator--2b3e80e0-ebe9-4de7-bf53-5f49ff64e739", "indicator--79635d0d-a8fd-4a39-b087-377632f08ed6", "indicator--c8a3b234-4200-47e1-b700-63b4a3f9c6d6", "indicator--ddf6d280-3b4c-4fc0-8bc9-f4685a7e3a1a", "indicator--f9bbb5c4-387b-4b86-b1cb-40f58f010971", "indicator--94df487d-70ff-4e70-abda-64e61d9d366d", "indicator--ca7f1ee4-2390-44d5-a052-f25f83cee5dc", "indicator--1d1d9763-a8c2-404b-9fe2-5d9a87846de2", "indicator--eb6c09de-e556-48fe-bf83-a68240c69559", "indicator--b81b5e76-c20c-4129-8a7f-3e12c1773e1d", "indicator--6cd3a476-fe73-44ae-b586-89f94c345180", "indicator--2cdd763e-8b07-43fe-a0ce-c35e7b292ee1", "indicator--41ceb011-18d7-419a-89cc-f6f54a1a7bb1", "indicator--de9a2100-a31f-4755-a397-4476125661aa", "indicator--cadce71f-a1d0-4dc6-af79-f5c65c068a9c", "indicator--2edb30c3-ed4e-4e55-b172-7be49635808a", "indicator--59f9b3ab-eab1-4f7a-bcf7-a59af298df10", "indicator--eb95815c-fe1d-4397-8da5-0afe25ae1b31", "indicator--2230e93f-09a0-4668-8fcd-da97882e0d8f", "indicator--24ff51f6-0420-43ef-a77d-e48945a168e4", "indicator--acb88e4e-02e2-47e8-964f-0b7fc59ca6be", "indicator--51d7f00d-98b2-4e0a-b9da-86c63e2886e3", "indicator--b4cb3ca2-30e9-4266-bf0e-1553652a4f18", "indicator--c3439ad4-3d23-47c0-940c-ae03ca92b233", "indicator--dfa280e5-f150-4bcf-a0f1-fab7db0734c6", "indicator--07e29427-48f2-453d-a37f-36e9eec1b73c", "indicator--dc2f7021-26e1-431f-8eb3-f38a35c13de6", "indicator--c348f19a-2b96-49c0-9d5b-d4079198747d", "indicator--6e6d6d2b-dca6-404a-81d0-ff74570ae945", "indicator--39c616bf-43a1-4de0-9317-7edb05b45ee0", "indicator--c5782909-1aa3-45c1-b6e0-2969601e9041", "indicator--3ed61623-3a0b-4772-b2f5-23d9cff47408", "indicator--a9f6c602-b114-4235-b16e-db6e4a7a6c60", "indicator--81f26531-4d5e-4d40-849a-da268f77f47f", "indicator--fea1f472-a915-4940-96b3-9329308d0284", "indicator--cb2bc32e-d82f-4cc5-98eb-1b88d07b2734", "indicator--544f13c8-c269-402d-85d9-9321f46460db", "indicator--09dd2d5c-6471-4c5a-827e-ea220c9c7ea7", "indicator--64873fae-d801-4bcb-85fb-3f295c012164", "indicator--b7ba2266-9aad-4526-857b-d3869890465d", "indicator--39cbb88d-bc01-43b4-8ea2-fb470e2927fb", "indicator--6047ef98-f29f-4282-9bdb-9d29317fcd94", "indicator--c40aaa65-7dfb-4c53-95b1-ac602e2644fa", "indicator--9486033c-f059-4868-86bc-f622abec0739", "indicator--3aa35f84-0165-4821-8898-6598b75c8f17", "indicator--01bb29a1-4dee-4bad-b3b4-8110f3a08653", "indicator--ebe982b2-be8c-40e7-9e3b-c4e120966de0", "indicator--9d550d30-4e87-4017-8aef-e984d5be7eb8", "indicator--8b9abac6-aa56-41e5-bc71-877ddbdff7e6", "indicator--e0340017-0fa7-4c6f-b545-a9e69ba557e4", "indicator--0b164ef4-b7e7-4136-97a5-1a1e02a65fe8", "indicator--5abe6f89-d4e0-41fb-8b6c-f9f1d6c564ba", "indicator--963eb9fa-16e5-493f-9189-1ae20b748d1a", "indicator--22dded68-31f8-4522-be0a-c64c988408d4", "indicator--184ad207-d9bd-4512-bb12-d34531342ea3", "indicator--08365881-4689-4f1f-9a0a-c5b9ddee6998", "indicator--d922294c-c39d-40bf-873b-63db3662aae3", "indicator--e1294438-0de7-43fc-b251-3d106ef78e5a", "indicator--446e1c9f-39a8-4b09-b4c6-392c0b96fd20", "indicator--023d116c-a235-412e-99fb-c57aca928070", "indicator--f730afed-c9e3-43db-95fa-884d44dbf89b", "indicator--9cb3df5a-a4fd-4768-a1de-a30555f0bf69", "indicator--bd6acfe5-fff9-4cae-9c80-6a10f53540a2", "indicator--5e121b64-cb83-467e-a966-4ecdc4643356", "indicator--f58d005c-dca1-4bef-af60-a963a37f301d", "indicator--8250fdbe-618f-47b2-a10c-c9d6dd3fdcc9", "indicator--3224057d-0358-425e-9bcc-308269a21cfe", "indicator--53eda24d-05b5-4451-b1a1-3569043c56c6", "indicator--2e0ac910-0feb-4157-8603-422bc02516b7", "indicator--d3447a24-b0de-45c9-8059-876716133f5c", "indicator--7f7f22b0-79bf-4f65-b530-3b7d8c988fd6", "indicator--403716ba-ff55-46b9-86ef-b42b25298e62", "indicator--7e02e920-db4b-4cd2-8443-bc75cc466e4c", "indicator--e9d7667c-3520-4c7e-9ce2-46e5b29dd10a", "indicator--3bd31d3a-61be-4fef-9004-80cb48a9fe1f", "indicator--8bc907c7-524e-4735-892f-7d11f3f9207d", "indicator--ae9e1269-e4d5-4b6e-a4d7-af62c903e405", "indicator--615ac358-e486-41b6-9fa9-d19c87b5cbf3", "indicator--17970e55-2f76-457e-bc1a-e6a7c33476e6", "indicator--1ed8c0e5-c2a6-43ae-ad8e-929915bf7aa3", "indicator--c405f78c-c214-4eec-bd58-666db54f622f", "indicator--b5df9124-61a6-4203-993b-bafb5be23f80", "indicator--976a4213-135f-4fe6-ab97-764fcbe852b8", "indicator--53ac6e26-3027-4bf9-a343-ea8baf177f0c", "indicator--242e58cc-f029-4ad0-b5f5-d1971aa6ae9d", "indicator--ea0c4cc3-6e5a-4ab8-84c5-8c2e132da7bf", "indicator--7bea8878-225b-4c84-8f5c-9907daa30404", "indicator--432fa8d4-3f5e-42e3-9107-9d944c3a5654", "indicator--0bb48ae1-d8ca-4957-9c91-36ddaf813607", "indicator--4f2bc98e-b268-4e79-9bdd-545cdcc6b6f6", "indicator--d6d3b8a6-0867-4a9c-abe3-6c821245f77a", "indicator--759e611a-0aea-47f0-8125-e4784f6aff54", "indicator--f9a3369c-df2f-4108-b637-d1d445b0199f", "indicator--9bbab942-67e2-44fc-b4a5-21492aab1bbe", "indicator--dff6a90e-24a6-419f-91dd-486ff5a6fb3c", "indicator--f7d4910c-3f70-45c8-ab7e-f8b15d32be76", "indicator--e0a1736c-54ad-40d8-bb0a-593be492c352", "indicator--923512c0-d541-4e34-8a90-e59756441453", "indicator--379aec6b-1aed-44fa-b83e-363addb9ee45", "indicator--09ce9354-1073-4f97-a223-cc0895d3694e", "indicator--957c9ad1-45c4-474a-b0bd-564bfbfe6e80", "indicator--33d6abc1-25a7-421d-baa2-69ecd7c870a9", "indicator--c3f35800-75df-4666-afab-c54525a4a872", "indicator--075566e9-e063-4946-b3c1-12ab7bf07fea", "indicator--bb4b90e9-214e-42ac-8ce8-fe6426640ccb", "indicator--6c8641d7-9dd8-4518-8a99-5c916a50f5d0", "indicator--cb010dfb-c1fb-4037-84bc-73f36d52eab7", "indicator--9594e81d-dece-46b0-8f33-42878b39ddad", "indicator--b46f1f65-81b6-435d-849d-cc0692c4f52f", "indicator--90e8bd4b-c15b-4706-8ab7-38cdd182e382", "indicator--bbf976b4-cc44-46a5-a695-281484fe51f1", "indicator--56bd6d68-4afe-44e9-b22a-6e4fa27b1ad5", "indicator--4c71c332-5d00-452c-abe5-4082c82bf196", "indicator--4895a240-a3df-453d-bcd3-91dca3590054", "indicator--e1c2308c-a0c9-4957-b80b-f0156efab731", "indicator--c99980d9-02db-4b7f-a8b6-963dd1b945bf", "indicator--b41e8612-2135-436c-a8ca-0787f4d396e5", "indicator--80c23d74-faa8-4cdd-b230-594b5425ac73", "indicator--155c42f3-54c8-4c88-a26f-5449fbeb50d8", "indicator--d4935757-6fb8-430d-9686-23f5c8d13c7b", "indicator--ac0797b3-f3cb-4075-bbca-127d3e88a639", "indicator--9ea80cb6-3a23-442e-93de-873695eed3f4", "indicator--1208b29f-d169-411b-905d-71575c5bb77e", "indicator--857d1490-870d-4109-970a-530bf1d9a75b", "indicator--757db0f7-ab38-4819-bb8d-fd470eaf51d5", "indicator--52e29b19-b3da-4951-85a0-3bcf9a21b813", "indicator--bb960cf1-ae61-4b72-8d03-39847df1663a", "indicator--c7f92731-3143-4a9b-b070-73e12cd9b853", "indicator--608d917c-94dd-4c94-93df-293d143dbfb9", "indicator--d0f94b40-5f34-4646-93f6-32ad8f749dbf", "indicator--3d6b43e4-6d77-4794-97c8-922650dd1372", "indicator--403fb575-2821-4844-bf26-90c01f65bc5d", "indicator--6e470bec-f086-4223-bf08-aa796ea29255", "indicator--ab117fd4-af64-45bf-aaa1-f0f452c3f49f", "indicator--faa41dfb-d749-410e-a752-f75f3cd2ad8f", "indicator--3a4d1a01-37f2-4e27-b673-7375a236188c", "indicator--eea770c3-ea6e-4cc1-b745-2cd398907f65", "indicator--7976f08a-3f0a-4212-9d49-18d1e6b33a5a", "indicator--813fc72c-f245-461e-82fe-47a711743bc3", "indicator--36a2dc06-a3af-4baa-b838-3553b6e959e7", "indicator--a6733581-7c6e-45a0-86e6-0f860fd1bfb7", "indicator--fb35b08b-45f6-4b88-9a2c-575aa5e153a6", "indicator--cefcd318-6a08-48f0-96b2-8c6170954736", "indicator--5ddde00e-a750-4c99-a89b-6b5aec9ab9e4", "indicator--72bb8bbe-3317-401b-b28e-d53033789a40", "indicator--30344e9b-72ec-4404-9246-900f0dafcb88", "indicator--94f6bb6d-90cb-433e-9130-e11c2d9b1ad9", "indicator--a408d5f8-785c-4283-97b5-d1593a2d6bb7", "indicator--664c3a3b-2133-42b3-a206-b15aabbd1887", "indicator--2e338d4a-7cd1-4460-9610-6c927e84d1e2", "indicator--4c2ff72f-822c-44e5-aac7-7113efc9bc2b", "indicator--bd9b0164-deff-4dc7-9fc2-38e18cfeb2a4", "indicator--ef4b84d0-281b-42ba-bb8b-0eafe8321cc7", "indicator--440c9c92-c22c-45f7-a9cb-221455354940", "indicator--88d2120a-bea9-47b7-a5d8-088262f5e57c", "indicator--72aed20c-cee8-4639-bf20-6ee41565dfd0", "indicator--910ffcdd-0b08-401c-947d-c2ce7adc81b9", "indicator--30968afd-67a3-4129-bae0-24718fe09b0f", "indicator--dcd195ed-36fa-4ce7-b274-c188f97ffa32", "indicator--f457e4a4-8584-4ed4-9167-983f5458684d", "indicator--173d8168-a734-42b0-ade8-2b76d0526cb9", "indicator--ef0e1421-f04a-4253-9785-a61a0e142c79", "indicator--11a51ec2-1d07-4a3b-b6d2-f3b673c4226b", "indicator--39f73604-e5e1-4965-8e10-697df5b0a98a", "indicator--4acfa45b-373b-4988-91c3-b8b2acf7e100", "indicator--035ddd28-44f9-437f-a7ef-135aff33f6be", "indicator--ec42eb8a-35f7-46c0-afc8-2d0e88a7445a", "indicator--bd2791a6-ed9a-4de5-825d-bcd0f106181d", "indicator--29ba2650-3c3d-4f85-a29a-f2c1aa505b53", "indicator--b543c3db-62dd-4db2-9541-02be3a8c871d", "indicator--1b5569bd-20d5-4581-9fff-2b64209eb07f", "indicator--d3ffabed-802f-4ae8-9e52-7e31eb2e2078", "indicator--14dffca0-496f-49a6-8be5-9d934f177182", "indicator--d2dcb870-e013-48af-ae7e-19021a72200a", "indicator--58c7ca37-c7c7-4857-96f5-c4171de532ea", "indicator--c798347e-ef1c-4f55-930a-53933c836213", "indicator--b077582a-dffb-455b-af3b-9ec4dd77b0c9", "indicator--ac8851eb-986a-4075-af49-5279e3170d84", "indicator--2234d959-3d67-425c-9839-3bc6dc5c394b", "indicator--2015ebe7-8939-4d01-a2c3-03e547298d89", "indicator--76f58d89-7a50-45a4-8603-7c46638125ac", "indicator--caf4de9a-09d2-4029-adb9-36d4219d7caf", "indicator--57601457-9080-44b6-9ae0-c66daf52c0ca", "indicator--7df7be01-484e-42d3-98e0-4f170f03861b", "indicator--c95e2dec-99a9-4c6a-a975-071bfa34afa0", "indicator--a7cea605-f198-4c31-a96c-b09d6fa87766", "indicator--c3492849-44c3-4b55-ad0d-78e88566bdb9", "indicator--6592a919-6e9b-4004-b17c-a5e60cc2562d", "indicator--5c775998-f81c-459c-a622-fad5c1a466e7", "indicator--53db37c3-c87b-404f-b718-27e7582f8a64", "indicator--73ac1618-f02d-4b17-9428-e478327b46b5", "indicator--9c25f446-1910-45d8-ab41-a9ccc7fe6a31", "indicator--00979eca-d24c-47c8-8d1e-601060c8b582", "indicator--53af0b45-c9fa-47ea-9e78-8660d04377c3", "indicator--bbd7635d-21cc-4d0d-9529-32228733461b", "indicator--6b1a1974-e63f-4e13-8545-2d5740e77a58", "indicator--64a7dbe7-998e-483c-be73-7e418654f4fb", "indicator--ec4d296c-d27a-4386-b3de-14647a754b62", "indicator--ae38fe04-5312-4a0e-b960-489e1307231d", "indicator--8f727cce-8669-407c-8bf6-4f95270d748e", "indicator--187d29cb-df25-4a5e-8e78-8724e0cd2f24", "indicator--3cd4f713-1556-44fb-9d39-41fc97a684a2", "indicator--28cc5e89-4531-4dcb-be9b-5a0b8669b695", "indicator--e841ba86-96cc-476b-a4bd-b1e172cf03bc", "indicator--4345e6e9-d800-4c19-aa66-9b40e557bed2", "indicator--a8e87b6b-1e9f-4bfb-8f12-dfb325ff4b8b", "indicator--ef277979-ab94-4bc2-b1f7-669ac2cb3c3e", "indicator--35590eb0-59a0-44c0-8a7e-ca944a9542e2", "indicator--a2b16d2a-8c8d-44e5-a89a-f323002d06ed", "indicator--e2a455c0-c2bf-431d-8cc6-4942992dbbaf", "indicator--e3ba14b9-6b8f-41ef-a3fc-ded0cf0b4905", "indicator--fa71f173-51b4-4f04-93dd-b2bd2ee88e66", "indicator--45ec010d-73e6-4269-8eb6-d8de139fa573", "indicator--7f428ae8-8a2c-4c5c-942e-fa1db0659224", "indicator--b7094eb3-785b-4daa-b621-c816412da925", "indicator--97f0c07b-c548-4f49-863f-ef75cc1a9c23", "indicator--6ceaf084-e177-4787-805f-bf0af58476ac", "indicator--1a8b448d-fae3-4947-8c8b-b46ffecda669", "indicator--07efc8c2-1768-41a8-b290-7d89347405cd", "indicator--6b7b748d-18b1-4eae-a72e-e341755c2e27", "indicator--c7e8d616-c7f3-441b-9602-32dfd15c2f38", "indicator--3a3f28db-0d5c-4a1e-bc07-8f5e53cddbbd", "indicator--532711a7-7301-4dec-983b-0f735f6b0af2", "indicator--4133fef2-fa97-40e3-98e3-aa191d84af89", "indicator--fdc15d91-47b8-4bff-916f-9d4946acb889", "indicator--7fe6e543-65a7-4973-a677-043c3a127f22", "indicator--2cd57613-16d0-4543-8872-74dd6a817eb2", "indicator--f6690ce4-30ae-495c-83e0-bb1e727bb754", "indicator--dce1f3e3-2810-4a66-8768-92c51dd6638a", "indicator--e3c1e00b-10c5-4f1a-9cab-eb8eb2437970", "indicator--773b3440-2d95-4b5d-8e9d-77cdfff9eea5", "indicator--bd463ce1-d098-4ada-a6f7-051ad727a1df", "indicator--b17e616f-fd6b-4313-b36d-c9e0b778e47d", "indicator--45dac05e-529c-43df-9cb3-0a71801ddfba", "indicator--9238fc97-81fd-4644-afc5-9015a951bc6a", "indicator--82cbc1d2-7690-47bc-aad0-f62a3de648db", "indicator--0d0566c6-c1a7-4f73-80d8-ae23407516cc", "indicator--e7c85eaa-136d-4d82-9ad5-e78cdc410b01", "indicator--bab9794b-f16a-4dda-ba83-5edcb5598ae3", "indicator--87c4d196-652b-4413-a817-cacb41c61230", "indicator--e19c20a3-510d-4abc-9545-fd4e69e05764", "indicator--5b0db65a-3693-4a4f-9fe9-b9aa3c772292", "indicator--c868e86c-8594-4dc5-ba25-10e66eaecbd0", "indicator--2a85019c-d126-40f4-985f-3dd9622e060f", "indicator--7e26844e-e73f-42f6-a4b8-e5cb44977e72", "indicator--6e146e74-59a2-46d9-a44a-ce348e4ed39c", "indicator--b3d44f15-0d9b-4a47-8bd1-056b077bbc3a", "indicator--1403e2a4-750a-4c59-bfc0-a7a98e6932c8", "indicator--8e560b74-51c3-45d7-b9d7-4ff9af8e40d8", "indicator--adc4c6a1-ad74-496d-8763-0d0f35682f95", "indicator--c71f7340-0801-4e6d-a427-9b5bb1718667", "indicator--82056c09-f90e-4ec3-bc9d-5c11131b1b37", "indicator--66638fd6-9c52-4c13-be7b-f75caac3eb80", "indicator--0dc81b2a-53ee-4694-9078-80d0365b19a0", "indicator--16b92562-7e54-40e5-8eab-40f1bc2b8f2d", "indicator--d1744272-699b-4a89-b90a-e3449cf0cc13", "indicator--e4b80c67-3efa-451a-9517-c65b34f6cb28", "indicator--d7f1eecf-5f0f-4c3d-a4dd-09e02a897b61", "indicator--552faa28-6a91-46fd-8440-2226ec9c5212", "indicator--2914b0e8-f6f0-4490-9d69-36c9e251253e", "indicator--05ef5a40-fb85-4f4c-ba31-85128607e4ee", "indicator--e5d2b4f1-9597-4407-aba1-a644eff11be1", "indicator--8dd184df-fdbd-491d-8659-0d35ae74358a", "indicator--b2eda376-af96-4193-8840-c7dd17c58517", "indicator--223a724f-2db2-41e2-8f1d-d431929d2f92", "indicator--f2439c35-bc7a-4231-a676-12c4d2326c7b", "indicator--55e9b57f-afa7-4afa-8d1d-992737b18926", "indicator--a8a513e9-fbb8-4a65-97f2-ce85342b7d25", "indicator--0f210d4b-39dc-4a47-a668-95cc1eddc500", "indicator--3b5ea7ee-f9cd-4564-acc2-fef8aa049ec5", "indicator--5dab38f9-6ace-42cc-92b7-b27aa5922d9c", "indicator--8e9071d2-3736-45e0-9e7d-cf1e2806685a", "indicator--61c29d86-d50b-4f0b-a399-c3a790a78dc3", "indicator--312a0c68-d8c9-4e3b-9cb0-eb9b3741b49e", "indicator--64490e0d-28da-4c62-a98a-c7ee8c7bcea7", "indicator--4895e57f-c1bf-4c8c-969f-e40337db8e28", "indicator--b1d9d9ba-2591-4dac-8212-fcac55a418af", "indicator--9f6cabcb-5300-4c12-a8c6-37e324ffabe2", "indicator--a219ddc4-ba43-48ac-ad6f-759cdef86e34", "indicator--f3cdaee2-cdef-4ccc-aab0-5e19a940ecd0", "indicator--0e0f5ac8-4c92-4981-9475-6e335b07e17a", "indicator--c51ecc8c-189e-4ae3-8dad-ea8dfc2bae9c", "indicator--d26e7224-bdc7-4e45-9496-a2bf8eab8e49", "indicator--1b7b5734-6765-4131-85a0-968d2751e58b", "indicator--3e6db43c-6f6c-47cb-9ee7-ecf79886b07f", "indicator--5d220469-a81e-49dd-991d-a60839df3013", "indicator--108f3e70-d5df-4dea-a23e-a21e290e6037", "indicator--ab3c6eb9-291a-4ede-b89c-2e0a4f02eab0", "indicator--4cb32a46-d0cb-4fc0-bc51-43badacc9ab4", "indicator--f3eec945-82ae-4367-9cb1-81788eca5da9", "indicator--4c0a6d73-1b33-4517-b462-68222148b5c8", "indicator--d4d6f30f-d821-4937-adf1-ab080b9dbbe3", "indicator--8ab799e2-b385-4d3d-b810-5426cd69eed8", "indicator--9d66e4f0-051b-41b5-a139-9affb5fb5fd8", "indicator--f6593504-af03-4cb4-b052-85647ca6e70f", "indicator--cc998d80-0b9f-4584-b80e-5427f026c4ae", "indicator--d6d53371-c332-44be-a127-818501897507", "indicator--cfd50e2d-7c2f-497b-933a-42a200a3f8aa", "indicator--92cf6784-25dd-4bb9-881d-6f2fbed6da49", "indicator--81500eab-4fd2-4218-8b45-9277bfc5beee", "indicator--42d47e67-8a72-4582-8d53-ced174e65bf1", "indicator--a18ccae8-1477-4d4a-a3eb-d6a42774736c", "indicator--970c9775-3e3b-42db-b730-1508706ba500", "indicator--6f6625dc-962f-4d0a-a319-6dc421609b61", "indicator--cf8d9f11-cf65-489e-95c2-c723b0ae8798", "indicator--0b76f01a-6ad2-408e-a043-8cb2e07ff97a", "indicator--f8406c01-9871-404f-b0c9-9cfac873ebdb", "indicator--b90e4810-6108-481d-927d-490885d96b7f", "indicator--a1d523cb-3b80-4732-b75d-710c3aba04ab", "indicator--1958caf6-1a8b-4a34-9074-88166ebd29fc", "indicator--a2e57b2e-2f79-4c37-b8dc-4c672cb088a0", "indicator--9a75a881-b306-4cf9-b309-b66872b73e76", "indicator--83a9f460-9602-428d-b9dc-6286e15c72e4", "indicator--afecab52-da8e-4106-8033-1daa46d2e509", "indicator--8b115705-9a3c-4b11-898e-9102d338c9f8", "indicator--eb3f1809-b53f-4334-aaf4-358f211b9d81", "indicator--ab258676-07a1-4c8e-8915-949ac2d48ec0", "indicator--bf31a911-5da7-4da2-b644-c903f5c4668a", "indicator--f1bfb250-d080-4fdf-94a5-2d17deeb27db", "indicator--4983531e-b296-4c61-8fdb-acfb9ef6fae6", "indicator--1d50396d-d542-4ca5-9033-d39da6c75b54", "indicator--dbd93daf-3629-4098-8aa4-02026ada6371", "indicator--756cda9f-61ca-4be1-b91b-60d29358de03", "indicator--147386d6-4ccb-4e9f-80e3-c95025a147b6", "indicator--24addb91-ad5e-4bcc-81a0-da10f483d6bc", "indicator--671bb588-0971-4c58-9906-bd39fa61eee8", "indicator--391376c1-daec-492e-ba51-9df73a431a03", "indicator--69e74842-1a8e-495a-a8e8-d3fa5ed44057", "indicator--1f734157-e2a8-4722-aa98-81d3e8eaa1c1", "indicator--e2b376fb-e144-416b-b079-8e813242c0d9", "indicator--67cc50f8-c34a-4cac-ae86-90176a5750ef", "indicator--a2badb9a-faec-453d-abad-fc48cf7db60d", "indicator--5bc23e5e-e142-41ed-b84a-0f826e82a266", "indicator--7463fe2f-68ce-4539-aab2-23dffa985059", "indicator--28f5a4ff-5c07-4437-886d-ceac250f8d38", "indicator--f51edb04-096c-46c6-82b9-4b645326e056", "indicator--5b9376e9-79a5-43a8-b247-6f0a51ad04ea", "indicator--78950420-b9ed-417a-9be6-2f527fff413f", "indicator--e9de1221-9967-4d9c-a5b5-16b9808cc182", "indicator--8d91290a-4303-4ff8-a2c0-6b7a40b2d517", "indicator--22fd6898-1143-4026-9f19-179cadc37d4f", "indicator--be0c4ca3-cc66-43d3-afe7-c9dc71aad812", "indicator--5014cd5e-a4f6-4902-a921-eb763f31b196", "indicator--e8ab5b51-9558-4641-afca-33559606bf07", "indicator--be4735bf-123b-4280-82c3-f898bb2895df", "indicator--ca7ce8d8-d931-414e-9609-0c0ac50aa333", "indicator--6cca4931-a0c3-40b8-a50a-428ff5ca776c", "indicator--5f5e87b4-2c0a-4ffd-963b-57190b22760f", "indicator--97d98d9b-7af1-427a-a238-f585f75d6a5f", "indicator--62f58c62-783a-4006-8561-95313839f584", "indicator--8290d21a-b1ba-4220-9553-8f305e75b242", "indicator--6dca2c29-9a01-4c8e-9c89-d5202c806b73", "indicator--a6dbc341-765d-409f-b3f6-fcd9b47b4975", "indicator--355d935a-efdf-45cb-bca7-95ba7ba6bf4f", "indicator--c77a27ef-4240-428b-9c4e-17b512f0918a", "indicator--c7920e07-84bb-4397-9c7f-1bda11b9489d", "indicator--a55a3721-abd5-4004-9249-b974f3698626", "indicator--c0b08339-c8df-4a77-a637-51c7dc27a8cb", "indicator--c467cec1-2a88-41f0-a2b7-1a99526347ae", "indicator--05c8ecbf-f645-4fb8-badd-45f5fb3ab096", "indicator--42069d12-cb8e-4658-b5b1-de1153495e37", "indicator--cbcda19e-4cda-45bc-a278-0bb32bf29bef", "indicator--d1c8c70e-6208-4cdb-a03b-eb6d2c76610f", "indicator--fe56b86c-4dfb-4410-8965-d0d712fe3df1", "indicator--444cf72a-52d0-40ce-b174-eb9d496492a1", "indicator--9ee436a3-2dd7-4239-9849-f74e8dbba282", "indicator--8d4377b2-893f-4cc3-b48a-acb0eb961cd9", "indicator--a84ee9f0-73a9-476f-98fa-e7656aed02e2", "indicator--f2490121-2307-4fa2-90ec-a10989a71a11", "indicator--85efd071-4f2e-4f16-b059-3b3669d154fb", "indicator--5d67982c-11b9-4bc3-893c-a157b3540919", "indicator--d79b9c06-20e8-4921-ae0c-a60475594826", "indicator--f92bec08-4f76-4ae2-b15c-a396471f1309", "indicator--4d07386e-ebe0-4b36-8f6e-cfd47e957801", "indicator--0b0a9e6a-213f-4bb5-a896-435b0b08790a", "indicator--63cc9dd2-27c2-44e1-b6ec-2e0ebe401ca4", "indicator--d280edd3-c1d3-4b95-9678-3803b6de27bf", "indicator--0207eeed-2acf-4b56-b4a7-7b88bdf94bc0", "indicator--e262625f-d25d-49ca-87f1-1dee1eb9b058", "indicator--8c1605c7-b7af-47cf-810e-377ce433f647", "indicator--cfd32ae0-3ca6-4430-964d-ea29e991fa63", "indicator--c05b8f9a-4594-40ea-a092-a8c9c680b86f", "indicator--1ebb9c5a-13a9-4e40-9e0e-f6cb91f7573c", "indicator--b256e6d2-3c42-49ac-ae17-7f18043ab408", "indicator--131de8b9-46ba-42d8-878b-049b66c87bd9", "indicator--fad935ed-06b4-4afc-8ac5-da3c46bef94a", "indicator--9e73d496-277d-4cb1-86c5-81796a2c3156", "indicator--23f9e5d2-e463-4cff-b060-47e49f88f569", "indicator--3889962b-0be3-45f3-b3dd-49b696b00d7d", "indicator--9f3cd513-e170-4d8d-83e0-c3a272a499e0", "indicator--b45e773b-1c1d-4040-96d2-a8e984748296", "indicator--eb4354fc-ca61-4f96-ac84-637f62efdb10", "indicator--495e0fe3-3d98-413b-b96b-af076264c42e", "indicator--6872b053-f6fe-42d3-b8c1-c4da9f28b5bc", "indicator--b56c9d48-dcba-4355-a15b-abe327ded55a", "indicator--28563ba5-5bfc-440b-8f2a-31c9142ede4b", "indicator--1be33279-7f52-40aa-9cb2-402e82087f78", "indicator--6a1f2483-8d17-45a1-acfc-aa460b28fffb", "indicator--3e8379e4-de6c-4341-bf45-2e5b73386d84", "indicator--d0024d0b-9007-45c5-9d57-5ec5ee9b6098", "indicator--97c6e692-8414-4609-bce1-c8322375035e", "indicator--f119867b-d487-456c-bcf9-e28921842e86", "indicator--ebb475f7-0588-415c-aa6d-81beb296c0b9", "indicator--e968ce06-f193-4b1c-99cc-9773a18f6b76", "indicator--977d1390-444e-443a-9e73-ac8d6ed1c91b", "indicator--793934d6-8c6d-447d-abed-786c4aa5e59d", "indicator--30767948-cc5f-44dc-9809-de4156fe17e1", "indicator--b4cfc843-4f99-454a-82eb-84bafb7484ad", "indicator--c4ef69fe-6f04-419b-9364-0b583aa6b851", "indicator--f7f7a878-f64e-4d37-a6e3-11ebadafce98", "indicator--cc88add9-288e-49e7-b2e9-5fffc35cc4cc", "indicator--e1c68961-44a7-46be-b066-3405fd77f178", "indicator--06dfd6bb-710a-4e9c-97e8-f067c9168058", "indicator--adce7fd2-2018-48e7-84fc-ff367e4673d2", "indicator--486bfae3-e047-4408-be09-ff08b3d1118c", "indicator--52612c92-22c5-46e2-b188-fc2dc2154b1b", "indicator--310fc29f-a775-4d91-a314-3861ef455485", "indicator--690be8a8-dfe7-4cb7-8305-07b2bd6a37d9", "indicator--c91d41c6-10a9-458b-b2b3-9f6f17a3a718", "indicator--d22e2715-6ca5-4969-b9ec-14d3c1492221", "indicator--b6e01388-1647-4e72-afdb-4f0cce2255a5", "indicator--7a51efff-adf4-4cc2-85b7-19a54ad6cac2", "indicator--1e34c384-b620-4fca-9ca6-a0ca0989cccf", "indicator--c25d6695-a976-4cbc-8efd-3c557eb72dad", "indicator--73a6df45-d367-4e4d-ba57-e38c4d8091ef", "indicator--c1898776-6745-4c6d-b6b6-d4f6fb1de9b2", "indicator--a45ca813-a49a-438a-837e-a7852030dd7d", "indicator--21901111-a24e-4fde-8672-04e087085aaa", "indicator--647d743a-0ad7-4869-aae3-3e53a98a00ca", "indicator--49e17da0-a068-4b80-a74f-89ebd3b14058", "indicator--f45ccd71-c10d-4760-8e1d-348701f4c652", "indicator--d83b3199-5b62-425e-ba1d-d846f03c07fb", "indicator--47f7acf4-d878-41b2-b5f5-8b2c77e00773", "indicator--aff48081-e219-48ae-85fc-41fbe393d829", "indicator--9fb32e93-3d99-4259-8a92-0d7dec24c6ae", "indicator--91ee1dee-3b8f-46a5-a0c7-e25094e9eb51", "indicator--14e22589-d3ee-4c9a-bcfc-ff3f2e7023ae", "indicator--e3554778-8bd6-4bb5-a2b9-302b59da8ded", "indicator--000948f1-939d-48b9-b345-6f6f4a7a72db", "indicator--9fcc0d0e-176a-4223-b9df-0ac994d92539", "indicator--bc6d4f55-1e48-4b53-9a00-072eac958f1c", "indicator--b175a8e3-7255-4c51-ad25-5311e84b373d", "indicator--35856984-b421-468b-82b2-708299a716f2", "indicator--b7d9f9dd-546c-48c0-9b6e-8d345edcecc5", "indicator--6cfa19cd-bd69-43ba-8eba-746e8b6c7db8", "indicator--eb498a35-711e-4afd-b63a-e4c35f42c035", "indicator--5a19b89a-d91c-4af0-8eaf-6d74ad33b073", "indicator--aadc1dc3-7921-443e-8be8-1f11244242a8", "indicator--126ff514-f4b7-4d93-88ff-bc32b5fc7596", "indicator--ef9eee1d-fbfd-4cb9-ba24-8fbea7896b23", "indicator--98ad573d-63a7-4f75-a1f9-e2e4c26769dd", "indicator--c8d3cc3a-062e-46f9-bcf3-6b57898907d0", "indicator--b645868c-3043-409f-a8ec-095ec4ee910a", "indicator--0b9d63eb-396b-41b2-9cf5-ac4e0094af0c", "indicator--6745791b-3534-430f-9ae4-027c589771d4", "indicator--80c0f7cb-438a-4930-a32a-12dfb70478a5", "indicator--7ebb9bed-f5b7-4070-93fa-2ee079ce632a", "indicator--4772f839-b62a-4aad-8fa7-cdf14f8091c6", "indicator--6cf884bb-960c-4908-bf40-8235606ee9f6", "indicator--38366acd-7907-46d2-8866-7e74be286aaa", "indicator--7a3cb899-9169-4568-bf9c-e7fa83bf2bae", "indicator--cff1b7d1-2428-42e4-9937-a276d9b7ae73", "indicator--9c455dbe-524f-4991-85ac-e4c420bd43cd", "indicator--329dae2e-cc29-426f-8f09-037b61d827c0", "indicator--f7093412-f516-4b5e-8db0-b600523099c6", "indicator--c36a54ee-be72-411b-8b18-a437e4cbb7d2", "indicator--ab6f175d-857d-4bda-ac6a-09e842503e10", "indicator--a47cfeaf-acce-4925-8f5b-c0bbea685ba1", "indicator--8683e7cf-0fc1-4079-9d85-1c5056c13d19", "indicator--d79ef40e-7852-4301-9b27-25c0a491ae76", "indicator--8c685eeb-9daf-441e-943c-8b513edbb581", "indicator--aecc24f5-adc7-443a-908d-760e55418365", "indicator--3dc3ad10-4b11-4aae-b4f6-32ab2105d8a8", "indicator--b8ffc73b-3b88-4e2f-8a96-a1a1c022ddde", "indicator--f2bb86f5-64a9-4793-b007-e8a776b5cfd7", "indicator--37e95af3-3188-4d2a-9b9b-8ae26f36e987", "indicator--dd56ec17-4841-4965-9227-80221a7384b1", "indicator--c39a6bf4-2c26-4d90-8161-8d6cae64b31e", "indicator--3b60400e-b09a-4195-8bbf-868e59bb361a", "indicator--65d9a9f8-1b38-4ecd-832f-3e5281a2ce98", "indicator--1eddef46-1171-4b41-9077-754066198b2e", "indicator--35834d27-8381-40b4-82a4-bdb897b0bc79", "indicator--42dc1d24-6e3b-40c2-bd5a-b8e6a6592f59", "indicator--92178a63-6ac0-492f-813c-52420f1bcbec", "indicator--6b5739db-801e-4266-8723-af1a9ff79233", "indicator--29d3d816-4259-47b9-8eea-1b89de600392", "indicator--8481500b-1db5-4d35-a6db-46a3ae594573", "indicator--df2dd67b-74e4-45a8-b7d3-bbc4035713e1", "indicator--85565e40-dcdd-4bf2-b192-a5e6d358024a", "indicator--80036c79-86a0-4eb6-a418-89c52fb1685e", "indicator--3eca0fbd-62db-4334-9907-7fdeeedf5db2", "indicator--5adfc901-cbd8-41bf-bb34-a2446dddf9a5", "indicator--c0ea2208-59c5-4ea1-90ab-b53954240e9f", "indicator--e1104bf2-3663-436e-ae91-6cc93d09c4a5", "indicator--eca2fc9b-106b-4bb0-9b01-59c3c2a63c47", "indicator--f1d95631-84ac-4a4d-be25-2081d80be2f6", "indicator--e7a4747a-2bb1-4ac1-a619-b00892012ae8", "indicator--4fa684bb-b968-4da5-bc72-ac4603423cb2", "indicator--cb6a32b7-c1c8-492a-af6f-fa73e2b40b37", "indicator--abf61f57-1234-481d-8bdb-83a89228faeb", "indicator--a3ca5637-53ef-4386-8114-e8f305b5be7b", "indicator--9049f985-12f0-44f9-8b27-d4fe8bdb3b79", "indicator--72d3c0bd-6026-4bad-a599-d71d371fed50", "indicator--1a889948-36b4-45ac-ac95-d5da6013c3b9", "indicator--e6f9e96e-bb86-44d2-ac4f-7089f73912b5", "indicator--8eaa7116-19a9-454e-9f30-89d4626c3394", "indicator--4859af9c-2f20-485b-91d3-1f439abca9a4", "indicator--8535d5b1-86b3-41ba-acdc-b9b42853d3d8", "indicator--1e98b202-c830-4b8c-b110-36af324592ef", "indicator--49e4bee1-0381-4785-a83c-220fac45c8a0", "indicator--83c8dc3a-511e-481c-a9b8-0c81082e2ac4", "indicator--9482ab6f-935a-4bcf-9b06-cd0df964c146", "indicator--cc73bfc0-f68e-4f8e-b61a-1adde70af966", "indicator--1ea411b3-da3b-4263-9137-272a93edff47", "indicator--d776e0d9-bdcb-4fa4-bf5c-93fa2c1386e9", "indicator--1b95762a-69f1-4c08-b7fd-a8827a570d79", "indicator--b70234eb-b994-4845-829e-d7ce44928dff", "indicator--3681e0de-654c-4749-8360-8a179e978a8e", "indicator--337a4bc3-b2d8-493c-9d24-03e4013041b7", "indicator--c17b00c3-a822-4a16-a898-eab7f17efaa8", "indicator--28509856-cbd7-4b9a-84de-7bafc546f6dd", "indicator--ab4f5b0b-6afd-4031-a864-5c932aef806b", "indicator--55bdbf77-cf47-4634-950c-3bc0498c9506", "indicator--998d8ca0-5f18-4ba9-809d-2b4cabd77958", "indicator--50807b5c-3bb2-4281-a887-c39bdb66275a", "indicator--1d119161-6e25-4800-b49c-acac280edc3f", "indicator--f4ffd611-e3ea-4f83-830c-8f3885e44deb", "indicator--3deb213c-3fc1-4ffb-ac16-e45234d1deb3", "indicator--aa8732ff-5bbd-4413-a501-500aa5cf0155", "indicator--c31f986f-6152-49ce-9b6a-38f2c7b149b5", "indicator--b66c7a7e-67a8-425d-bae7-ffb6d5812593", "indicator--a61adf27-4fd2-48b7-a344-2af92401de08", "indicator--1d32989a-61d7-4f50-817b-1a3d7f3cdc78", "indicator--43714875-8602-4e03-bfb2-a917e6cc775d", "indicator--8085e887-e4fa-4c63-a2ec-0bd3e4513d41", "indicator--d5a4c73d-54af-4e11-a038-9e417ca3ea4d", "indicator--c1c4014a-77d0-4062-a82d-c52ebff5c752", "indicator--1b545145-ba25-4ad7-a458-6311acadd1a9", "indicator--099716c1-4f37-442e-ba41-42e8aea63857", "indicator--83f43379-1a72-46ed-ba04-8ee30ab4e907", "indicator--daf3a901-48aa-4c58-b90d-d9c8d69ad4de", "indicator--45527cad-0acf-4ad3-8eea-798a0f277945", "indicator--8dab15b0-1772-4720-96d2-9566d16b90c9", "indicator--439bd1c2-f139-47aa-88f5-68ffe29f7a3a", "indicator--dae1cd5a-dfce-4e10-834d-5f249af438b9", "indicator--09e8320a-f036-4621-9dd2-5795fe5c3173", "indicator--0485b2b7-59b7-42ca-8407-a9fbb046f97c", "indicator--b430f41d-aa9b-480f-8025-74ca14d6a433", "indicator--6bb6b827-b8f9-4308-bfaf-e36a192b00ea", "indicator--3135b45e-b7f1-4f98-ae2d-3a48f2c0dd31", "indicator--af08479a-596d-4af8-98b5-4b992f85404c", "indicator--ff6a8175-b811-4e5d-9233-ea5e93179bc7", "indicator--336b2647-97ed-4e0c-83c2-481116f04ff5", "indicator--06a6a08c-6463-4c19-9405-1bda81b97f13", "indicator--ab7c8795-2597-49d2-868f-fb9f23df8f1c", "indicator--daf15d7b-52ef-4905-bb08-4774e355e4a8", "indicator--c16da5f7-16c4-4806-a321-d95f086e1510", "indicator--f9996384-cfb2-4bad-95c5-c61819899d4a", "indicator--f2ae0481-91a9-4df9-b66f-9defb283cd75", "indicator--68fd7142-184d-4eb6-9cc5-15a5ec10d7b6", "indicator--63f6fa3f-8e2d-41b3-b647-799f8dbcd7f0", "indicator--61f855f7-38c6-4f67-8460-02b20b4ef040", "indicator--748465ca-9ed4-447a-945b-9464881cd7c9", "indicator--b59a93cf-092f-4385-b0ce-418acc0fc9e9", "indicator--cadffeb5-617f-4ac4-8ce5-7e7ed5a969b2", "indicator--e2c3b32d-811e-4b8c-aabc-0e2bc1439d61", "indicator--86c4c74d-98af-40dd-87b7-a32ec7a601cb", "indicator--c4025c37-d37a-4de2-aa98-5f0f7b63e852", "indicator--5ed2e913-cafb-449b-b1cb-b8291dc9c39e", "indicator--acc7a917-46f2-4d1d-968e-a3102feb0930", "indicator--31fc26a7-5428-486c-8756-3d8f7822cf3d", "indicator--5fa0c736-9c7b-4ac1-8bdc-d55bd5225021", "indicator--3737d8a9-27a4-4646-836d-5fd436d48671", "indicator--4ee7f66c-7059-4817-bbe1-0a1346a7be70", "indicator--afb56758-2704-481b-96f6-5500e4b235cb", "indicator--27a883c4-2058-442b-910f-76981a2eb9de", "indicator--c6b7a1bd-f2ed-47c9-ae4d-7cd462ad80dc", "indicator--a2332e56-2da0-4ac5-a83f-348b87490b14", "indicator--bb0a133b-9cb4-4fff-95e4-5f12d1b060e5", "indicator--fcf4ad0a-ee48-4056-bbf0-fd0e55d29dc1", "indicator--ce4ed8d2-5e1a-46a0-9f12-5f5ee41c2d67", "indicator--842c5628-db35-4413-9dda-b74808bec121", "indicator--73d99381-c0ef-49e7-9298-97158fcf6be3", "indicator--53fd2c22-6c7e-4a1e-94df-5508b3d43c38", "indicator--b017d935-595f-4528-9996-763356134369", "indicator--e53627a9-6d1e-4513-b1ce-9b8ddc46000c", "indicator--0f085b2d-513a-4ef2-9179-b0b37665729a", "indicator--7e2f12e9-b16c-46b6-acf2-bc598e15d069", "indicator--d38d3602-685f-4d51-9deb-cfb54a74737b", "indicator--d23b6c3f-54c5-4b16-a72e-1bbaa9de9c0a", "indicator--19f7514f-2a4f-43aa-8d34-d39de35b5be5", "indicator--115df1bb-b701-4c85-863e-3e68da9a93c4", "indicator--de9810fd-6f87-43c8-96c6-141d9cf3ea79", "indicator--8f188c7f-8be8-4302-b69d-fcc379011b33", "indicator--4ecdad6f-9d44-4cc0-81f4-669501a34c07", "indicator--a25face4-b7aa-4692-abd0-b1f12911b789", "indicator--0d39dbcf-3cf8-456a-ae5a-d289070a70da", "indicator--6fa7a06d-20aa-45b9-8289-d59cd856890d", "indicator--3e26f2e0-07b6-403d-8212-886bccf7f3da", "indicator--f1d99701-1969-4ab0-af54-27d0c4b495ba", "indicator--cd2cd9c8-1174-479d-bf23-c47c37a9be76", "indicator--725b415f-83b8-410d-9ddc-826411a7c355", "indicator--70f79f28-1833-4a4e-bd1b-f536a295cee3", "indicator--16000d1b-e7d2-4634-9968-fc8f8ea546b2", "indicator--81265b1a-4c1a-43f3-bbcf-cfd0861febeb", "indicator--7bcf0a51-250e-4610-95b0-89586faaccf9", "indicator--73a8cb29-fcd9-4231-b849-534d542fbcaa", "indicator--202f42c9-cf45-47f3-88ba-e5d7d02370fc", "indicator--202edc15-f8a0-4136-9acd-e9eade275cf8", "indicator--818f8a43-635d-4ef7-a194-6db889ff1ef8", "indicator--dd68a367-86aa-4658-aaa7-67313b6adee8", "indicator--0f1e483d-9fc0-4f40-8d1b-5bfc206f88ef", "indicator--201999db-7afa-462f-99fe-bbbbf315e512", "indicator--3629b9a9-07f0-4023-89a7-d501c89ae4a7", "indicator--30bba97d-5464-4b35-98b9-019fd116e6cd", "indicator--00021496-e735-4b15-8966-2eb0ec062d98", "indicator--228d78d4-833f-452f-82f4-94970c0424fd", "indicator--6530842d-0f97-4eb3-9e25-740a8420c0c7", "indicator--2aa3e8ce-f00e-4514-8a2a-ccad14c91bc8", "indicator--bf20a044-a3dd-474f-857b-77320abf6c2f", "indicator--2a2b9a93-95fb-4b38-98af-4b1440d1d35e", "indicator--b3d72325-4827-4481-92dc-b391ffa70180", "indicator--918a402b-caf7-43b9-b399-47ba4de7f7ff", "indicator--354fdc1c-7f81-4df3-9e75-5e21eefd3f3a", "indicator--39849b51-8abc-4614-81f6-4d9ec1e6dddb", "indicator--2071576f-e15d-4699-8eb0-0ac78c9b4a61", "indicator--a1db1e37-58a3-4eda-9e36-92642461f5ea", "indicator--f8d31cb9-3f2b-4690-8b4a-48f93d5f6ed2", "indicator--b7de3544-0fc2-4d3e-821f-88757980dc3e", "indicator--5115514d-9477-4c7e-a221-00ba91866457", "indicator--e944340b-5938-4e7d-a8d6-58dc59f3da88", "indicator--794455ee-5c56-4330-b5b2-52a274a93fc9", "indicator--be94b1d5-dfa5-418e-ad90-0c42816f28e9", "indicator--20700ccb-c0c1-4e52-8aa7-94f1ddb8dbbf", "indicator--803a2b8b-1505-4558-974d-2f74a8ac274a", "indicator--78616f3b-0365-4910-9d39-52d1f8cd7713", "indicator--a3a53084-c51b-4c67-a0cf-b194ab8add10", "indicator--4df7c31a-e4b7-4ce8-90d5-ee859984fe77", "indicator--794967c9-c480-4723-85ca-b3f374df13de", "indicator--979273e5-e25b-4f7e-b9ac-61a762af2fe9", "indicator--c19515dd-670f-4416-8f05-e1c463c38d32", "indicator--9632cecf-219b-4bc1-beb3-6771e39956e1", "indicator--ff41726f-fe60-4dbb-a7b3-73226f7e7c4e", "indicator--6d859508-6a45-41d5-917c-fb1ddf7c9790", "indicator--29019a08-ddf3-4685-beb4-685579c44a1c", "indicator--ad7d35de-dc18-48d7-ab7a-651dab5f94c4", "indicator--af361cb6-e292-4744-bccb-385b2a8a7d21", "indicator--2e3fef06-993f-44a7-a2dc-7c2c94539841", "indicator--32c7e2be-3999-4c2b-b08b-e8ed56f48f25", "indicator--b5ce8d7b-f5b3-47ee-b50c-b59327485ec9", "indicator--db2d4d57-1a04-4037-ba71-658eba850ef9", "indicator--4504b502-7542-4b93-bc9e-c8a3461b8dc0", "indicator--adc3acaf-bdc9-47b3-b0d4-473b4ecb69db", "indicator--07ed24c3-c55d-446e-918c-c444aff1aceb", "indicator--7a0780d9-398b-44e7-befa-a19f91ded81a", "indicator--6cb1b0c1-88d0-4ab8-915f-be4b7d5381eb", "indicator--20d5ba64-c3ff-4585-8dcf-4e543305f4fe", "indicator--4980302d-3269-4d12-bfbb-4e1a5ddf41ca", "indicator--ead4befc-fb32-48f4-bd43-6cd0ecaa1524", "indicator--4a60e6fe-2ae3-49bb-829f-0ef53625ef77", "indicator--733b7017-dbc5-4a89-96b0-b85385ceadb2", "indicator--1d9ff7d6-4a6c-4224-a507-ba807edff454", "indicator--b8606f7c-775e-4573-8759-b8ef0c2c13da", "indicator--6707eeb2-14f8-4f48-b31d-4e786c77cd6d", "indicator--7d0ebe95-08a1-496c-9c39-15016757615b", "indicator--2411e62a-f5a2-4eb0-ba33-82bc9c5c10e3", "indicator--b07e2e12-c3c4-42c7-af6c-7c77dc949494", "indicator--c893a61c-d035-4a31-a45a-b9983edeb5c2", "indicator--1233cced-8af6-4b2a-a692-43ae8e0605b0", "indicator--5c83e4fc-ddfd-4904-81f1-a192368d46b1", "indicator--b525dc1e-9d6b-4599-a3ff-d78dee4bdda1", "indicator--88b3454c-735b-4f48-b1c9-a271c8eb09c3", "indicator--ec0a2fc2-ca73-46ad-91ce-b1cf49fd1b65", "indicator--5f6ff0db-0c81-4ae7-b346-a91eb6a3b819", "indicator--6ad673e2-89fd-4859-bcd5-d61261b8ddc9", "indicator--2b75c547-cd4b-4e5d-a7d6-8341ed1cf9b8", "indicator--7cfe6f81-e78a-4e52-88fb-8efc7f6dc193", "indicator--2c133599-2153-4ad3-831b-3b7ed79e809d", "indicator--5c11c382-621e-460d-a873-c4c2cf4c42ba", "indicator--8baa2bf2-4c1f-4463-a9fe-e8fb0492cd09", "indicator--f4ea82fc-f1cf-445c-a47b-197d79129734", "indicator--3b179ada-9767-42b6-a3db-e6d685587f10", "indicator--639b0fce-2b67-4924-b864-aed77a716acc", "indicator--7f8d5bed-9a7e-49c4-9a97-89af9be9f075", "indicator--aee1f6cf-dec6-4a2a-b17c-e21e0b1a8fb2", "indicator--fa21b220-9e01-4eec-ad1b-4ac422ea35f1", "indicator--9baacdf0-9f19-49aa-a4c2-a5523f6ef566", "indicator--6ecd4d21-18af-43a2-a5ee-7a9eac88e4ee", "indicator--4997eb88-d7c8-4e67-aa0e-7651c09091d9", "indicator--26b8b7d5-0ab3-4e95-821e-9009138cd845", "indicator--c7b5bdf8-924e-4277-83c1-e0583e7468d8", "indicator--9ec2134d-d9f1-4079-9dc3-c3449da8f0a7", "indicator--17510939-9c73-4582-b404-e76191d79ecf", "indicator--d7612d7d-101d-4381-be70-161f0a5dfaaf", "indicator--5845b3d0-2d65-481e-93a1-c1e9788c5b63", "indicator--e8a3897f-b311-4641-8570-7d0586a4c681", "indicator--c44273f4-2b5c-4ee1-9dad-e53a010fe5e3", "indicator--1383758a-7c53-43f8-94ad-ae1d201168d7", "indicator--d89e7100-3572-44c4-8832-af41fafac548", "indicator--a22607c0-9416-4219-ac02-07cbb2023073", "indicator--9f69cdd6-fcab-411b-bcef-30a6a0896da8", "indicator--478e8163-9a54-4772-885d-e24b8c87c393", "indicator--e6f04ae7-acf9-44fe-b56d-49d23d35abf8", "indicator--3ce3e322-5efd-42a6-a337-66b57a631ee2", "indicator--6734b157-febd-4ec1-99cc-bdb2520f8717", "indicator--7647c75a-dcb0-42f8-9f23-e9ddedf7cef4", "indicator--f99ddbee-cc56-4e55-a931-c3b528ae22f1", "indicator--6fc58947-aa5d-4bfc-ab38-e216f04749d6", "indicator--fc5a460c-c943-478e-a323-5161f31144ae", "indicator--ec802f32-3715-46f7-bf3c-dbcf7c16cfde", "indicator--61edbf22-5734-4a34-8d00-7ba0d2c005cf", "indicator--abb43f3d-abfa-4cce-a97a-efaeda6b7c2d", "indicator--f4445b75-b727-4bef-964a-96e9db51a5c8", "indicator--d7bf59fb-4c05-4d76-b83f-9853bd0319bd", "indicator--4ec0cf2d-792b-464f-8b9b-05f55135a7b4", "indicator--d8022ea5-0769-4304-a6cd-45a4b6f6146f", "indicator--32a467bf-53e1-419a-9f4b-b2d69ffbc288", "indicator--3533354e-f337-4e33-9581-de7c757c38e4", "indicator--0e5f95ef-3915-43d1-95e9-5213d7f2d6e6", "indicator--bf794e1b-2867-480a-936b-231f5f07e193", "indicator--f5f385c4-22d2-4ba3-8aee-7163e1b8dc39", "indicator--a91b9c1c-78f7-43b9-9606-75e285a6281f", "indicator--08ecd0ad-3c2a-4c7f-9541-f48532139eb7", "indicator--fd360627-e9ee-4ba3-bf84-e8f95fbba480", "indicator--dc8e9bb6-928b-437d-9729-acb3ebdd5bf2", "indicator--4c77651e-2a97-4988-8f04-c0a37d2937af", "indicator--b730be28-5b50-4eae-a02a-1764bcf4f856", "indicator--d1d70892-c509-4d2c-b20c-a67c6cc81e2e", "indicator--1ddfb46f-5db1-44d9-9c7a-6d09ed3ea7ae", "indicator--4dac4c8d-4c5a-4726-a128-a69ad3f43a59", "indicator--5dad64eb-9d71-48cd-8e5a-1e029817387e", "indicator--8b999b0f-34b7-4a67-a586-6d5528060c81", "indicator--779358e8-a9d6-46b9-bb29-81d2d39d449c", "indicator--8f8f2720-4b24-481a-9a20-60cbed7329a2", "indicator--be3d9c26-ca0e-485c-bc43-81c21828bd6f", "indicator--61dab720-df18-4a4c-a8a5-179ea13c015a", "indicator--7c1015d0-69a9-4dd9-a5ed-924948687968", "indicator--a76162d6-0fa7-4475-869a-1e6e8e029b05", "indicator--aa80bc6f-d152-4856-b087-12727de51a79", "indicator--25560bdd-c212-4f78-846d-ad6fc17b0836", "indicator--14bedfb0-6cfe-4260-8076-f8b788041d6e", "indicator--85548efd-0e25-4931-93f4-5a3070c71f03", "indicator--062017d1-c29c-4439-a60b-e7b876e8d4dd", "indicator--a11a968c-13f9-4fea-b47c-fe034a790bf1", "indicator--52aeb615-f025-4879-ad30-7d4d14bfa583", "indicator--6ed60956-bc5b-468d-bff3-ee21265d4c1e", "indicator--9d41037d-6875-44f4-afb8-c65b0d04bbf7", "indicator--e0fb0958-0865-48e7-b0c2-ce87f673a671", "indicator--6d82836c-a37b-4adc-9d69-663a5100e990", "indicator--29f18100-4c39-42bf-a5eb-a282b84cbaf8", "indicator--b7186790-a6ed-4754-8de3-86be812f3858", "indicator--a401f5ef-bd2b-47e6-b7d2-083088a9f374", "indicator--927f4332-0b20-49a8-a7c5-f66b1eea4cc4", "indicator--d84f6e97-ea81-4377-a74c-2cec78391492", "indicator--68761963-0547-4246-8fe8-4623303a05c9", "indicator--8ee361c5-fbbf-4f09-ad6c-716afbeecd9e", "indicator--1f47886a-3ddd-4454-bfc1-2c7ebf574202", "indicator--737d9346-9597-498b-94f8-97d5deb4b0f5", "indicator--03d9f593-d243-4c13-b251-c384ac9c6c3e", "indicator--8ce67cb0-511e-47b8-b5b2-1a15f15542f2", "indicator--857767fb-9e3e-4f38-957b-557788dd12ef", "indicator--2df8d9c9-ed92-4f3f-993d-e168790cbb21", "indicator--4beba2a1-90cf-40cf-bd64-a1e2bacafa7e", "indicator--f2ec853d-b652-4f62-9009-fca907daf838", "indicator--3dd41282-b1bb-4ba2-bf21-2f909bc790a7", "indicator--492006c5-2586-4f4c-bfbd-b49e6a2aea8a", "indicator--873e4615-1bd9-46fc-aead-597c4d221908", "indicator--343b948f-4ae8-4596-afdf-6276edf16fde", "indicator--9f47c4bc-8472-4526-9446-b5ea206a18fe", "indicator--29f5215f-a404-4db0-b1d9-746bcfd0ff4f", "indicator--7337bed8-093d-49c3-916c-5a16af37dbda", "indicator--1d35b382-ac5a-435f-9a6b-98603cfafab6", "indicator--208f9ccc-52ad-4859-9078-f91818838df8", "indicator--5bc63f83-c5cb-4bd1-b7e2-7973c7ea8656", "indicator--795107f0-ec11-40bf-9b07-fec77e84d803", "indicator--8d8b214b-8a01-43d5-8549-9e7260923a98", "indicator--648da328-8771-45ef-a4ba-5c18d20d44fd", "indicator--a143fe3e-9cab-44c3-9abf-56edb699783c", "indicator--efb9a14e-2f6d-4b64-90da-ec3341e25948", "indicator--c9fb34ba-15ec-4773-acec-a475ba52f487", "indicator--ef03e8a6-5877-45e7-b48c-453bf86ac974", "indicator--b95dfd69-f8af-46f4-93e7-86aee8f9039d", "indicator--02e2579e-0dbd-4d90-b060-9b4f03509a9f", "indicator--ef86802c-bf8c-4870-8ac2-a5403e8d70d3", "indicator--4bb886b6-7092-4f98-8d88-d98d9ced7827", "indicator--80a8812f-95f2-4311-8b81-956698c0eb3c", "indicator--f6d0a860-27aa-4ad5-9565-bda22a70b1f7", "indicator--0e0c2a89-0163-47b2-98f3-4108216e3236", "indicator--e5069ec0-bf1c-4d15-9781-62f82debb95b", "indicator--249beede-1b77-4c47-a695-651297830f06", "indicator--1b203a8d-b5e0-4ead-999f-812c4df280cd", "indicator--b736f746-1e5b-4f16-b0ac-71cc7aba493c", "indicator--5741278a-bc0d-40a1-8e4a-7f10a4f5cb6a", "indicator--83d000a4-9964-4e8f-801e-44a00925fb54", "indicator--2016c51e-3e07-48f8-962a-8fbc62578786", "indicator--4a62670c-c2f5-42cb-af7c-987fa29982d4", "indicator--07f4f7d0-f4df-4a3d-a3c0-2767f8c1d83f", "indicator--a4617ac7-7b0a-4c5f-8bd9-11dd6d5d9047", "indicator--1e9306b8-a46f-48dc-bf30-d4afe7f49254", "indicator--fce2d718-c4dc-40b9-a6e6-9fae232f8095", "indicator--e9c34fe8-4745-4201-805c-b3267e3bdfee", "indicator--9f1ec6ad-e024-4b15-8180-e992f3c5f789", "indicator--ead8c942-7827-499e-907f-0c43273c0f25", "indicator--500add69-e009-408c-a3ed-7b5cd44058a2", "indicator--f3af087e-4885-4723-8beb-151d513932e8", "indicator--8db51126-85c1-4552-8b38-95edd9b97537", "indicator--c3883fff-f454-4c6a-b43c-528d5438eb72", "indicator--2ed13730-8b23-416d-b56d-347b182ce7cf", "indicator--3cb252ba-1921-4b6a-8114-2dbafbca61cc", "indicator--49722fb1-d9c5-4e95-8ef3-19033c8fb815", "indicator--8dbcc697-640a-4e47-b390-63c3ceb3e876", "indicator--7a198c88-385e-4dec-bccd-294baa06e8e4", "indicator--2d926361-790d-4128-ab22-854fd7328249", "indicator--9e90e0ee-1850-47ef-9258-f52088338a70", "indicator--63962d8e-89ae-4541-a868-de7dc4638a78", "indicator--72775972-6d3a-426e-af2d-106ac8ce5977", "indicator--5f85e390-f067-4b11-a5bb-a37de50246a1", "indicator--75b24a3a-125f-477b-88eb-21a07ff1d86b", "indicator--8810c44b-77b1-467b-b587-7b5112feacde", "indicator--c8368797-45d8-4125-abc2-756735668147", "indicator--82282006-229e-4417-9bcb-0b8a99e3851f", "indicator--2435cb7a-e068-4f47-a141-e44fa40f9614", "indicator--11eb94f7-38d2-4f61-a4b2-66b2c7bee898", "indicator--51da98d4-c4cb-4449-88aa-47c6827cf56f", "indicator--608852e0-5e04-4b32-a0e7-6218418da5cc", "indicator--efa2b195-4f2a-48c8-964e-4eceede4c1e7", "indicator--300d7085-c1b1-4abc-bb88-1d61fb9fc6b0", "indicator--e5fa77ba-ad9f-4e0d-9b65-0ac0e2ecbce8", "indicator--622f4781-d550-42a6-aa6f-3b1627c1a6fa", "indicator--01394751-8aab-44dc-b8eb-3a6657ae66bf", "indicator--584e7738-cb77-40b1-b6bc-8f6f0751ea32", "indicator--7643db5a-2a8c-4bb3-9af9-9850814a0212", "indicator--3183eaf5-a134-4bb4-8c53-eaa23b12b8d2", "indicator--0bec921a-90e6-4928-9767-2ec35cc6f2c6", "indicator--88adce57-fe72-4f70-8432-6ae3caad22a4", "indicator--1ed106a3-48be-4bb2-b11c-c1a29454d36f", "indicator--1f476983-18ff-4908-aeb1-e842e4c11281", "indicator--741fea4a-34b5-4507-ae22-0d78def99624", "indicator--7cb789fd-d3c8-4e58-9c31-dee987f69ec2", "indicator--67261df2-7bd2-40e0-98b6-4c3a40782a93", "indicator--382ce9b2-9afe-41d2-abf3-69b82674699d", "indicator--ed5ca164-ad0b-4743-af94-ef2553a73143", "indicator--c104d24e-e36a-48a9-b61a-197f782653a4", "indicator--e5f56de5-5bd2-472e-882b-9a557920ccd5", "indicator--108c8e13-07d0-433c-b669-6eb1b6680e62", "indicator--9096e170-933e-4a91-bcc8-8a41fb3ee5fd", "indicator--4e1c7ffe-6ffb-4d92-8da2-778b9291ff9b", "indicator--76b6a382-7332-4683-9252-94d045a077c0", "indicator--996f81fa-549c-4e3d-995c-8e4c2e220c88", "indicator--093b274b-06ca-4100-9e6b-6fc7cf45d6dc", "indicator--51016bff-fdf1-4770-98dd-a2b32b4293a4", "indicator--c5a8522a-fe55-4576-8a36-6391b90b6a25", "indicator--3c425343-4e1e-4694-9b46-307ff5a187bc", "indicator--d0371261-0e81-4e2a-a67a-8531125ba57d", "indicator--c50803db-8360-42a8-b660-098a670c6f8f", "indicator--d4b978f9-87b3-4db6-a831-2a3d3580a00b", "indicator--c0b57eda-6807-4b7e-95d3-22dcb8a1360c", "indicator--79b33cc7-c0f0-4aa5-913b-b2945ad9daf0", "indicator--f180fd33-aec7-42df-8d75-01044c3d2245", "indicator--72af431b-c4fb-47eb-9efe-7bed80a74dcd", "indicator--49f26d43-96d5-4188-a66f-d3862e3acc2c", "indicator--0ee22b07-07a8-4234-b1a0-d38f0cc1dc05", "indicator--c6ebaef9-4441-4fc2-bcc5-e190e089d8ce", "indicator--85372797-f30d-4054-9833-be3ea85df2f4", "indicator--2dca03f5-312f-43e6-9035-25bc9d19e1a1", "indicator--0dc84bc0-b5c3-4781-adf1-df31faf3cb77", "indicator--62fbd3a0-4bcd-4d52-921c-7b32cb6daa39", "indicator--82e47863-c5e6-4636-a3d5-d63724d00071", "indicator--3599cf03-8e51-4cdc-877d-2501a2262d5a", "indicator--f95c68f1-86a9-4438-8e57-606c826972cd", "indicator--7dee4f21-c9c8-4202-a5ef-533f00e757c8", "indicator--cf5d16b6-058b-436c-be13-a9fc0b476317", "indicator--dc8be242-f9e3-4281-9f6e-e75c99440f8d", "indicator--0a2afa9f-007e-4fb9-9fca-a92f2f4e23de", "indicator--9f803574-34ca-4510-b0ee-3ff4a8440e12", "indicator--dd1f5d1d-5518-4d91-9738-03e9d46d1563", "indicator--150ab2b4-7806-47dd-abca-8afbdfcda6f2", "indicator--8939e2b7-5ad7-4ad8-9d81-8fe1976dda30", "indicator--76e78db9-7a65-41df-b9ff-14cb8aee6724", "indicator--9e5522b6-b00b-4aea-9a1f-d08137d06b02", "indicator--f19bf559-16af-45c2-a0af-71ebbbd7ec75", "indicator--2c726c40-7f66-44b9-915e-0dcca04a38a5", "indicator--207c8850-2073-4ff3-8d1b-bbe14d7e28a6", "indicator--2db0d3ee-d83f-4018-af07-7d2374fe66d3", "indicator--e00e1087-267f-4d12-9f67-4d92c6e36a3c", "indicator--d4db8138-3060-469f-b72e-5806e4a1a289", "indicator--182fd81e-4178-4f80-8b48-2a923db5b061", "indicator--0f75da19-a463-45db-bbcb-750aa43a205c", "indicator--ab374126-72c2-4453-827c-4996401d8903", "indicator--84946237-e257-4a04-b5e5-e78447258954", "indicator--af598a25-554d-494e-bc6c-ef469f23df39", "indicator--489001f8-1c05-4554-b804-87a81fb0b073", "indicator--f1601aa7-caed-44dd-9b54-79c02f9c8e61", "indicator--43049a86-50d6-4c1d-b301-71a62b74b150", "indicator--454698ef-371f-4dba-ba1b-1e2cea512f4d", "indicator--c2c5663f-170a-4c82-b47f-7bd0fd4d94e0", "indicator--9b3d4d6d-3f70-4c21-9491-e4f931848328", "indicator--3a201a56-e676-483e-a2dc-f170a283318b", "indicator--733996ee-1db5-4e4b-a9ed-443b29aa2c6e", "indicator--9a8779d4-e780-41ef-a4d2-17bc74295921", "indicator--91b5c1a5-3ec6-4f6f-883c-a3290279ca87", "indicator--24f07436-8470-47ab-b0f3-343d63b8305e", "indicator--2c1ab187-f4f3-418d-9bc5-9ed449e6a95f", "indicator--815f8c72-13b8-4967-9810-038d912bf945", "indicator--4611eb0e-e715-496d-b02d-f124ecd83d11", "indicator--6a9b8ba6-846a-464f-8e9e-75c81391fbd0", "indicator--90afdfb4-7d68-4067-9531-0f41d83284b0", "indicator--c31d2f78-3cd3-4ced-90c5-731cc04301a4", "indicator--5caec0f7-d00f-4738-a57b-f8d4504402ff", "indicator--0c633a21-2dab-4b7e-a91a-d319d48c4c49", "indicator--310cbed3-99aa-4afa-8085-752a506ed531", "indicator--9109732f-4b7e-448b-b2b8-d045fc004472", "indicator--4833f243-289d-4737-a172-f3090c32c8e0", "indicator--faf1da83-f6a3-4623-962f-13de219b8913", "indicator--c89fa2ac-92c9-4e35-b91e-a86ce4927e23", "indicator--1e2df7d6-00e9-4a7b-8e4a-139dc0dd08a9", "indicator--01752e31-296b-4636-9228-261ba574f664", "indicator--9be07400-3a49-435e-af1e-62b623672abc", "indicator--30668f64-3f6b-4489-9bb9-da56a2ae4d47", "indicator--5c97063b-7281-4ad8-86b1-3c9e0f21e678", "indicator--6a4dd556-6dee-474e-b70b-bbbdb213c513", "indicator--a1769594-e53a-4ebb-b36e-2776fd920c1e", "indicator--68d96356-d041-480c-998d-cb809abb24ed", "indicator--99c1e9ac-4eeb-4eed-afdd-a946fc21414f", "indicator--4b3ac98d-aa23-4462-91c8-f51edfd8b9a0", "indicator--9a29e916-37df-4db5-bd62-3ad63bcccfe5", "indicator--48f5a186-2a3b-4025-a82e-9ce8682cba36", "indicator--7f778a31-d5a9-430f-bdd2-cccdebc38df1", "indicator--aa6f5fe3-6006-4e59-add8-dce5f61c1bb7", "indicator--959e9283-e3e1-411a-a811-fc4c7a94c8a2", "indicator--2a78412b-e5a3-4c19-87b7-db27a6407751", "indicator--c271f5a2-f9b4-406d-a513-be04efa578fb", "indicator--1fd3d9aa-39b6-432b-83f2-4d0315dc457c", "indicator--cd5a510e-fe41-464e-8ed0-f84b769e4ce8", "indicator--ac7d324f-c518-443a-a361-137d32d1a53b", "indicator--ed5ac99d-9074-42c6-a19d-7be5809f4d80", "indicator--088c28b5-76ed-4422-8292-ab27a698d37a", "indicator--74f776d6-c3f2-4d4e-b631-d35528988bcb", "indicator--f72c7b33-63a7-4872-9c08-fc01c8511a4d", "indicator--fd70de2d-143c-4919-8a88-5ba019f28932", "indicator--0dbdb10c-b5b7-46e7-81cc-993c792235ea", "indicator--d75d0d13-98cb-4174-9cb0-c17f08806527", "indicator--661024ea-74a4-4eb9-88bc-6b4520a9702d", "indicator--34374ec5-13ce-4293-94fc-1f90a140c471", "indicator--017649fb-37be-4711-a5d4-9ca8a2d3feba", "indicator--87516965-0d0e-48c0-987e-ba959d012003", "indicator--2f667151-c103-4272-bece-bf9a17025706", "indicator--b5eeab44-168f-48af-9b64-b5da2b49049b", "indicator--c9575133-57ce-4f08-9226-4a80c5a9fad8", "indicator--44814ca5-1fdf-47ec-8f61-e0e635502970", "indicator--3a9691e6-5f75-467f-9505-50a24ece228c", "indicator--ebfc9cb3-7885-496d-8f88-f746401a47b4", "indicator--a9dca27c-4f02-4c2b-a182-707d3e037b04", "indicator--a5f7ef3d-92d2-4bfd-95d5-e19ea1f77745", "indicator--733c2e37-83b5-41de-acec-7c5b97d4e92e", "indicator--999eaa15-9fec-4203-8082-42adc3159482", "indicator--2a929b3c-3ffc-46f2-b369-4cd8a14725a8", "indicator--5337d76b-98d9-4994-bea1-01f5e9e3ee21", "indicator--404adf62-f651-4a41-92d3-0d413d9409df", "indicator--13843789-2f24-4069-abc0-4e637db9fe7a", "indicator--a9cdf78f-51e2-4925-9e2a-25c491978553", "indicator--fc68886a-2074-43e1-bfd4-cd2cefeac6d8", "indicator--caf7daa4-bead-4259-b14a-44970e0b98bf", "indicator--20adef6c-8031-4257-b291-57b00ff13bb8", "indicator--d6b56190-cf45-4769-852f-fb9c00059df7", "indicator--f240c9b8-f4d9-447e-9830-7f6949e01ecf", "indicator--e15afcff-fc5b-4b2f-bb6d-a5ca0676a4d5", "indicator--684ef466-4e41-436f-8d70-48dcdb3d055d", "indicator--23ccab04-2c1d-4af2-8233-6b9d90993c8d", "indicator--d9265002-5858-47af-81f6-6eabb4e7a987", "indicator--1797ac7e-ba34-420e-a16b-84cc4902093e", "indicator--6563f3a6-7f04-4634-a500-bb17ff4bd214", "indicator--e32b0e47-94d4-4e72-8317-5fac04ce658c", "indicator--c2ab6641-712e-4e47-b3e0-c4da8e32b99b", "indicator--e037814d-ded9-4c18-81a8-31ef812e57c3", "indicator--857aa65e-8a12-4168-8fde-7f58dbf9caa0", "indicator--a33e9519-abc2-4092-b4f5-1e623c33e71d", "indicator--59f04c01-46c4-423e-97a5-f162ccf7c29b", "indicator--d5e7b669-d124-4c56-b0c8-8dd2cb2d02c3", "indicator--1e14a689-0a8b-4243-936f-2e5b19ad706e", "indicator--aa1a965c-6acb-4947-a759-f6b600046281", "indicator--b190b04b-d327-445a-a04d-21bfffc83252", "indicator--2a4ad0c5-ca67-4002-adcd-c814a59a4bb7", "indicator--4a121a21-9c0b-4eb7-9e8d-548bd7770646", "indicator--5f5bd720-fb18-4395-82fb-308b111255da", "indicator--6601fad1-d362-4037-b54e-43ddf5e11040", "indicator--348c62b3-5333-4b92-a42f-f3b72dd5924a", "indicator--4d6521af-ab14-4a86-98b5-9e0a98a99e47", "indicator--878d454f-7d33-4aa5-8c16-bab3300fd6af", "indicator--7c4c3669-6be6-4eda-8275-e1e40802faf8", "indicator--399280ea-3c5f-4036-98d2-f2ba5a90e41f", "indicator--aab09478-ec61-4476-a750-85cac3c1be77", "indicator--e3a7282b-7269-477a-85c2-6918ba2db09b", "indicator--2e3151ef-20cc-44b6-9ca6-ec5314029e88", "indicator--73524101-295a-41b5-9a36-10866f503767", "indicator--3e05f297-f1f6-4970-96bb-87b43a8e2e91", "indicator--176c53d5-ac80-4409-83d4-f824a6215880", "indicator--dd17f38e-2c9d-4e15-bace-5f02007c5373", "indicator--5384cc06-ee25-41e1-b289-a7915324575e", "indicator--ef0f8d49-7146-4e91-b8d4-a580678dc5f1", "indicator--87471032-f697-4a21-bc56-9efa7d0f9ca6", "indicator--06ac99b3-b4da-4225-bd7d-104a7073acb1", "indicator--a7551cfb-6517-4219-a737-b5faa80b985b", "indicator--2edcb403-9ea6-4651-abaf-1cfef8f01d43", "indicator--8bae092c-a6f9-4453-9ca1-25d745ef66c1", "indicator--928f57b2-aca1-44ef-8a2d-ffc6ea761f40", "indicator--f33d9a07-9a31-4ddb-8980-c8a24dd45a37", "indicator--d887a8ac-473c-466f-8106-f683f3c87dfb", "indicator--35d30aa0-dc46-4093-aef3-028840209fb4", "indicator--a0812579-6ebc-4cc5-9e36-aff4d184f5f6", "indicator--318092b7-97aa-46c6-8a14-c612b58bac52", "indicator--cc4ef022-2105-44b4-9244-8fbcbc21e0f5", "indicator--1145abec-bbed-4de1-ad38-463fa6fb11ea", "indicator--71c609cd-8a8d-48be-82ef-0e119e02893e", "indicator--2dec96c1-c4fd-4532-9b3a-d13a0316a79c", "indicator--a14f979c-893c-44cf-8517-63938e230f78", "indicator--da735f8e-a910-4caa-8270-8958867036b9", "indicator--4cfd5670-2d42-4504-a4fc-47168e035281", "indicator--bc92179a-8285-4100-8246-fff760ebcc95", "indicator--87734e08-f43f-48cb-97bf-57e347c1d146", "indicator--73c25108-8292-445b-96d6-bfc82a8b4f86", "indicator--de659d67-3dd8-40b8-a468-97c94600758c", "indicator--8d205781-0b2c-413e-9a50-5110ba9f9660", "indicator--5aa2d3e1-ed0c-4ff6-822c-f4af8281dac8", "indicator--0e8a4142-f4fa-4294-ade7-4268741dc2c1", "indicator--93554501-0999-455d-a48e-6ccae48d5ed8", "indicator--af4e3efa-bf03-439d-9b99-2c11adc7d0c3", "indicator--10acbada-987f-4477-ab85-a0b1b2bdb9b6", "indicator--c79b4b3e-2a59-4f1f-b92f-cb206e5b5108", "indicator--0d48f76b-2d9b-4d1d-b6cf-8803c5f9685d", "indicator--36986ad4-ce52-4b08-a485-42a00d60262a", "indicator--578be165-4e49-49e7-bc45-d8aae9f6d8ed", "indicator--e92b1aa4-f417-48ae-9637-f2fe044214f9", "indicator--b28a8ba7-ef16-4d81-803a-097d154a2624", "indicator--0d0a1f3a-8909-4e58-a5b3-610246488260", "indicator--10c34bdb-3de9-4c84-9af0-653f93c45295", "indicator--009c2134-6c3c-4d48-a9b0-77fb67dbf457", "indicator--2d07eef3-bd45-491a-b50e-403dd7bf5539", "indicator--ced7c041-211b-444c-9c72-1b72fcb47df0", "indicator--8e099eda-8605-4d98-8718-14798a7bb10e", "indicator--d0c54f54-7e63-47d6-b5a6-c3eba674fcce", "indicator--c7d60aab-b356-45fe-bd8a-fa8bcc80512b", "indicator--2b6a5657-e4db-47df-b266-47953662179b", "indicator--c3b51629-bc36-470b-8e6f-6549099240d1", "indicator--dd303265-8879-4afc-ba98-a4007dbf8a7f", "indicator--043bc762-bdab-477a-95da-c695d68700cb", "indicator--df5ab7ae-ecee-48b4-91aa-a8677ace5f30", "indicator--a942a9dc-2601-4977-bafc-e8fe46fd3066", "indicator--7fae803e-398f-4ab9-8555-b345521a4329", "indicator--ca545a5b-4669-4cfa-ba54-0149c6a432f0", "indicator--293a1ea7-aefd-4c4e-b527-5fa71595803b", "indicator--2ef5863a-9fb1-4fa0-bb57-4241cc6829d0", "indicator--fc161d62-1bf6-4971-bad0-c221a77266cf", "indicator--a9728dc0-bc09-4a4c-94b4-bab30737cd2c", "indicator--93bce96b-8e6f-4f29-86d6-f16674110aea", "indicator--eca531ba-f7f3-4c33-a1b1-1f1259809ed6", "indicator--7cbf75b5-31a5-49b8-9bf9-ab6bae64551c", "indicator--2d6a5a9c-6e4c-491e-bd1b-abb31942fbf3", "indicator--2de38f95-27ff-4f20-a16c-776a78b8bdc2", "indicator--b8ca90f8-5a6a-4464-9b07-06359b45e063", "indicator--f399a6f0-cd66-4c69-b00c-0cfe14a536b9", "indicator--501ce717-c178-4ea9-b9b8-695152488ae6", "indicator--f1ac5b95-ca02-4353-bdbe-fbbf021ac347", "indicator--7d3305b5-6ab1-431c-a71c-9d7ef922c273", "indicator--7ed03648-6886-4422-8d1d-79d4b560b9aa", "indicator--1613d9a7-4a3d-4fad-8f5b-3b0eb1e82a05", "indicator--9f9f69c9-c0d7-4697-9b59-e0f897e6916b", "indicator--c29509b4-a413-4622-8bd0-96620779601e", "indicator--84ac937d-0cd3-47f7-ad58-431c64b3c7e4", "indicator--af64abdc-23a3-4147-8a3e-820912f4ab4f", "indicator--933b07a9-0356-4927-afb7-7893dacc54be", "indicator--6e1d30da-8678-438e-9a75-f211532e1891", "indicator--e3780365-e281-4841-8353-0c835ad7d50d", "indicator--3f85976e-0b4d-40bc-bb65-3ec640110068", "indicator--189e776e-c692-493c-aa38-8f9ca2797711", "indicator--e47e9b93-0ccd-4cdb-8a44-9c74abb70369", "indicator--7b7c8c1c-1583-44dc-89be-7772b255e409", "indicator--916f0aee-ecd9-4b10-ac3d-9db10f854707", "indicator--08edd67e-335a-4499-8223-59e654d316e5", "indicator--1d695d43-eda6-48eb-a6f6-06f02cc4c571", "indicator--9c79e97b-6ce1-467f-884f-b80cfbf49123", "indicator--52b83f58-6864-458a-8478-47cf285fa57a", "indicator--c3c1592f-156d-4c2a-8d25-c20ccf3dd4c9", "indicator--36e22a84-7a4d-4032-a6c0-539b4867aafa", "indicator--d4b9060e-fcb5-4c9c-a2ae-d4cdf3df249e", "indicator--dafd59cb-532c-4d4a-8cb2-2419ddf3f6d2", "indicator--51221df7-4447-4bcf-b0a8-de27384dd599", "indicator--d83d6b79-230c-4f0a-a414-30831aa4645d", "indicator--cfdc31cc-a319-4879-9f36-d0225437c633", "indicator--23077e4c-c10e-4c21-b222-4ca3cf1c54bf", "indicator--9569e5c8-ae40-48e2-8321-5fa08aae9463", "indicator--98a4821a-4dc7-46c9-be11-5cf81cb93c32", "indicator--0c5380c9-305b-4ef0-8789-3c8f139e79ff", "indicator--b55de5e3-5623-45da-8025-ddcead4a3cd7", "indicator--ada92f38-17b1-45e5-a51e-67b1d7dca4c4", "indicator--7c501fce-eb82-4c96-8503-16d32713dc28", "indicator--c4643bbe-2c69-4241-8fb9-b5b21d54d86d", "indicator--e400dc7a-69c5-4c0c-923d-ee154cc7767a", "indicator--f8f7a152-863b-46bc-9876-307c7a2ef388", "indicator--25c507dd-2f62-461b-8fc0-805170ca1488", "indicator--6870a73a-741a-4f7c-9b68-2dcb491b610c", "indicator--6d924bf6-ef07-4d44-b3f3-a3e5b5f8d88e", "indicator--fc6b63d8-6739-4f41-96b3-5588e8b94d74", "indicator--e17bccf7-2697-46ca-8568-35ee4e49807a", "indicator--d1b6f3ec-c7fc-4658-8710-bfc0816cc8b0", "indicator--e4b968f2-1ca6-49f9-9778-f5202aa428d9", "indicator--bd30ab3b-274e-4428-aae6-59145c826e51", "indicator--054c9fb6-cdeb-47f1-a94e-ee817d5c1db0", "indicator--41ab67f7-ab88-4ee1-82f1-27ee040995cd", "indicator--abe77600-cc41-4a8e-a8c7-fd962c6d9295", "indicator--7c0512e6-5643-4c60-8cdb-6d2d34c3e656", "indicator--ef1269e4-0601-4edf-8db1-6ff34388b7bd", "indicator--3608b6aa-c03a-402f-a911-61f39bc04e62", "indicator--ba1933f5-2495-4cda-8ddf-e6ace37fd309", "indicator--bfe3dd71-5a5e-43a4-9476-37a5e732ffb0", "indicator--6bd1dd95-1748-4b88-87ee-88851a5af4d1", "indicator--4a1c6304-bdf7-4f4e-bf14-7cabeac69386", "indicator--499739e8-3e0b-4289-9624-ebe8cb726dae", "indicator--0fc93ea2-0531-4e7c-8e9b-84a7c83ae0ab", "indicator--fceac635-511d-4278-b5f3-2741f34be614", "indicator--99326b3f-ad02-4f7e-a7e1-11861926174d", "indicator--72c404f9-282e-4d22-ae2d-bd5006b61066", "indicator--2bed4065-b2c3-4c5b-8349-f6f6f6594223", "indicator--2cb491ef-ef30-48ea-ae55-9d7d4facf160", "indicator--c283994a-6c14-4b2e-a65d-fac8cb351b90", "indicator--13a51d5e-466a-4d57-a32d-2fb1a2f0ffe5", "indicator--73fe783b-d681-4533-bb3b-e45dd336a0c1", "indicator--6a29beee-3b12-46f0-98e5-8a12a38a8d2a", "indicator--2e315204-e9bd-47f9-9905-36ba6825111f", "indicator--2b42c946-5aa9-4f2d-bf31-5f829d4b9036", "indicator--8187858e-48e0-45fa-92c0-092b7843ca06", "indicator--43055fc1-1095-4b9f-b7a8-700753ae80b8", "indicator--f1c6644f-5cf2-4219-9c9a-66d29cf1a080", "indicator--6e8c7f89-7b4b-476b-851f-679b47d43951", "indicator--1ae07744-00f4-4ff2-b377-216c1ac10fa6", "indicator--452f2b12-9385-4e42-affe-43748d37c0f8", "indicator--6fa4f66a-da13-4c92-9294-668a5fc21a77", "indicator--ebb5a432-ba7b-4104-b190-b8899d8eae30", "indicator--12408ede-8881-4955-98d6-852b18755d83", "indicator--4c424298-10af-40c5-82dc-b6604158dbe4", "indicator--4933dcee-2663-4377-ba9b-50dde7c25b35", "indicator--3b34dc92-38cf-4f5a-ab52-048f5de551d4", "indicator--40a3b088-ab7c-40fb-8229-b56f17a29181", "indicator--b8de4fa0-a083-46c2-99a4-ef2d76ddd7e5", "indicator--ede3f08c-b003-4aa4-bab5-53c34fa2d083", "indicator--1af277ea-1d3c-4c64-897e-ac83588dabcc", "indicator--49b51068-04c7-4d8f-8d76-6ab90972b098", "indicator--159ba460-1fc9-4b1d-b871-ab198eb501c4", "indicator--77ae235f-4669-4815-b3c6-27f0df9feab0", "indicator--ae97a140-1f8d-4d42-bae1-9e4f7003e577", "indicator--30cab6db-1795-4abf-a948-27459f4a628b", "indicator--baeb671e-d9b1-4ef1-80e0-40935a8ce3cc", "indicator--5a9b52ec-f8f5-48b1-88bf-f14d595c58c6", "indicator--5b91ffb9-3021-4efe-b752-a6ca03f8dccb", "indicator--4fdd4cc8-40cc-401c-82d5-59b948bc7a67", "indicator--ca5dfea0-a969-4d3e-a29d-be2ef53baeff", "indicator--769b99ba-0447-401b-bd30-6556ff65eb4d", "indicator--7cdc9021-1a1f-48c8-9487-4e3bc10ab1f1", "indicator--593327f9-7951-40e3-bca8-bddb227c36bc", "indicator--ee7829c8-aacc-4857-bfeb-d16b826f6d10", "indicator--7fb434fc-0218-4e79-9df2-d62e9c2c3707", "indicator--e40e2619-79e7-47f8-bd2b-3974d9ec055f", "indicator--c3e8207c-c92a-443a-b735-68214b74c9a8", "indicator--ea73bf92-a249-4283-811d-77ecb21f45d3", "indicator--a28b0877-dcd0-420d-a585-ff72e7465b5f", "indicator--0a8475eb-ba8f-4425-9845-ad8869f087be", "indicator--cfa19197-dbcd-4ba7-8915-8e2ac0b0bf9e", "indicator--96ff8263-7128-4d65-b257-79309cbb8277", "indicator--22489ae3-a55b-4585-9ff1-c7e489b889ae", "indicator--2e77e65d-2f67-4596-b491-eb5764b21a2c", "indicator--54520ff2-f198-4ff1-b98e-8c1f0449ca74", "indicator--78e1449d-f7f5-450e-9df1-236d7a383565", "indicator--062511f3-6e7f-4e36-8742-884fc098cecf", "indicator--a1f35a4c-accc-484e-8715-7f5a7a72321c", "indicator--55b83334-6170-495a-95a0-a53eb11fd1f6", "indicator--a1e3a318-d00c-400f-b3f5-3fe86a4cf711", "indicator--0117f08c-e7e7-4202-a200-d76da91f6d9c", "indicator--1a114a17-01ee-48bb-ac8c-f0eef374c637", "indicator--a96dfd3f-d45f-4de4-834b-c2ff2bb7aef7", "indicator--9eec7b79-c9f6-4d4e-b2ad-fb09f43ba3fe", "indicator--30230d35-4233-412e-908c-1e1126a413b1", "indicator--ec4f54fa-9fc4-4c0e-af3d-2a80deea507a", "indicator--1adb140d-34f8-45c5-906a-1790fede7644", "indicator--95eca2f2-b8ff-427c-be6b-e360b28f7f9c", "indicator--de2725a3-323b-4b78-873f-595408a42979", "indicator--198181c4-798a-4ca6-a207-a1fc8efba1c4", "indicator--deefa144-e216-4ef6-964b-dccaf0397deb", "indicator--1b9e9d2d-27e6-4aaf-9f88-2743d282371f", "indicator--8130449a-c9f6-41ae-afb1-5947b4e35f3e", "indicator--fe8a93b8-fb9e-458b-bd6a-3fac8939adad", "indicator--6f592647-1b9f-4a5f-aa50-13e77f6d0dbc", "indicator--90a35e19-f302-478f-8abb-72230048fc43", "indicator--143a1537-26e7-4bda-adad-765772f1c0db", "indicator--1f044d39-a07c-4b43-9036-9c6ee7acf7c4", "indicator--c204262a-d20c-400f-aa7a-6d1a1004639e", "indicator--86ed7274-163e-4c7a-ab5b-9450ac26cd76", "indicator--ab4621e1-d1f7-4271-9c8f-c913c6ce1076", "indicator--7a50eaae-44c7-4136-bd0e-b24a54a5b3e6", "indicator--83c5ff08-c3e2-4345-8c78-4c4f248399a8", "indicator--3307036a-1369-4d83-9577-de8d74089774", "indicator--e900dba5-0579-4154-8647-387725508847", "indicator--12849905-5693-49f9-83a9-12b7cbabe5b5", "indicator--e776951e-58b1-491c-8145-3e192077507b", "indicator--fc9a6c91-3df9-452e-a7b4-b7eda9c554d9", "indicator--dd3d70e6-98ac-40ce-b00a-a4b056ab57c1", "indicator--6580377a-2a35-4aad-8c79-edad61146500", "indicator--eb50f28f-deb2-48cb-8b92-c643d16632eb", "indicator--f3758198-51d8-4067-b467-18e267a0921a", "indicator--1a0fc4c9-0278-4378-9883-a189a130e589", "indicator--ca8a6fe0-fff5-4c2a-b2bd-edab8e68b778", "indicator--891cc0ca-2e80-4683-b5f1-06381aca49bb", "indicator--62acfa3a-b2a1-4ab9-aeb0-73c358d87db1", "indicator--be282601-2b69-4712-b4ee-59ca3e9355c4", "indicator--2b0d3e2d-e5c4-4c00-9d48-e8724ca09e77", "indicator--da9205b5-6505-48d5-b2c3-5ab43f42ee29", "indicator--5cea9594-15db-4949-9075-b9b8a4f02176", "indicator--8f5f0f0f-dd53-4c2d-abb4-680de175a6da", "indicator--0fc387b8-c18c-434e-82be-3e5f1e1c677b", "indicator--a48740e5-bf71-4a14-87fe-437d8bdfe613", "indicator--5679da14-87b0-45b2-804b-6226584d9a86", "indicator--3a72897b-66ec-4391-ac82-1db2120d5fde", "indicator--77c291a1-2126-4455-b385-db9fd2798e12", "indicator--01bef39e-0f48-4a6a-b244-bd6fcb04871e", "indicator--4bd8ff31-3a6f-4df1-be9e-ab5f0024cc05", "indicator--7b62da73-84ac-4659-8df1-5c715a228257", "indicator--21862968-74be-4c42-b5da-f8dfb47293b8", "indicator--0dff1574-2f0c-4a70-ac51-e3b356afc902", "indicator--8b932f27-0878-4a08-b181-d2c6f9453327", "indicator--98dde17d-15d2-4d65-8e2d-26fc3d8964e6", "indicator--a805435d-2689-47f6-afcd-388d3f6645ba", "indicator--ea68ebec-8033-4a13-90bb-051f4c873a87", "indicator--d6eff3d5-35fc-4414-9858-497a20e2c43c", "indicator--348c4600-495f-4fe4-a2e6-8c12a894d7af", "indicator--ef6ad876-08fe-498c-91ea-c824df5871d4", "indicator--7f538436-64af-41d0-82e1-f0c96edde753", "indicator--cb45c974-5f0d-48fc-a7fa-384725e86fd1", "indicator--e5e208ed-5ea6-457f-8932-a436a6700b99", "indicator--c1d0af29-aeab-49f4-9035-d29b6b2ca306", "indicator--83b88519-a384-4c3c-a056-55f3aabaaee2", "indicator--f279a179-d0a8-4579-aee5-2d955d86be9b", "indicator--67961165-addf-4040-b7e7-b010e0f8f9ff", "indicator--d00c2266-e199-419b-8443-46d750331dd1", "indicator--d67990f4-c5b6-4ff5-ba6d-b96db3dcfd43", "indicator--2af48937-036a-4df7-9691-410fea009766", "indicator--774973e8-b895-4526-8848-f1e5b1f94844", "indicator--e3c94a07-7ef1-47c7-bfd3-8ca1e40f12f8", "indicator--fd4b1370-6f43-4155-9680-e1f4753add13", "indicator--6fa3787d-ab1e-4dab-8173-55731a04a922", "indicator--1c974931-09c7-475e-8f94-0ea2eecb3914", "indicator--1f273be6-45e4-4f0b-a0e8-5f328fa79181", "indicator--0332484a-0f50-4c37-bba6-ce7463087a19", "indicator--d36f9769-e7f7-48d4-87d5-94448c0754f0", "indicator--bd329b68-46bc-474a-b052-cac90fc36612", "indicator--99dd796b-f019-4478-aed2-c912720d8880", "indicator--8b308ca2-b010-49d0-8622-5c92bf365bf0", "indicator--43c58f32-7073-45de-a8be-17a0a22929b3", "indicator--978f2eec-1acc-4fa5-ac53-59a885a70ea8", "indicator--53b93b58-5623-4017-b140-6b0a1a7d2aaf", "indicator--4aea0711-5548-4a0e-9c1d-61325ea62e09", "indicator--58bf7a21-00f3-4bb1-bcf8-ddff9a68bd12", "indicator--ba375cb3-038e-4215-85a1-4f9bd6111703", "indicator--f05057ce-6d9f-4c8d-851c-9c87bce59f52", "indicator--3a467d5f-730c-4d92-accb-79ea9dabb67e", "indicator--561b6276-d374-4a04-b855-a3ba0531e26d", "indicator--b4286ed7-238b-4df1-b41f-02e0244a20c4", "indicator--b01af186-a01f-4297-8988-3cba857bb86c", "indicator--27a820d2-8d8a-4a51-925f-8e949d304f71", "indicator--72197854-f727-4527-9b29-ed11e266bf51", "indicator--61059915-29b4-416f-a72e-2ed0279eb61c", "indicator--f6de00f7-96c1-4d78-8d02-1272334fde9d", "indicator--d7f96ebb-4172-450a-a613-8627cc7630f5", "indicator--cdc2869f-673f-436a-b616-f7f54b58195d", "indicator--c04b54d8-8b18-47e3-9c5f-3df0cc3a0452", "indicator--b7c29c1e-8134-4777-af07-7b5140bd3f20", "indicator--b7f0c67b-3a4c-4400-a29f-84b668fb5f61", "indicator--3d60fb50-3b9a-43a5-9983-3b5d15940f33", "indicator--2b072d44-4c3e-4fe6-bbe6-a0de2bb21723", "indicator--9481c72c-0c30-49c6-8912-22a3b98e3a81", "indicator--da3c9697-ee80-4ec4-b254-7fb5596b51db", "indicator--b43c6c03-3b13-4b6f-bd39-83790bbe58d7", "indicator--4f86733f-2840-4c7f-a132-36500973e8e2", "indicator--41906b29-0b6f-45ba-a780-a72fa10b73ed", "indicator--22b31f59-af26-4d00-b467-3d5594942081", "indicator--dcdb31dc-1d01-4351-b359-16681a3fe709", "indicator--e61918da-63ad-4d4e-ae71-998e4a339ea2", "indicator--ce87c10f-4cb1-4e7d-9974-09f434f6a14d", "indicator--65a5b3d5-5e96-49c3-a524-c984b3bce65c", "indicator--20aebb8a-cb77-46e5-8045-761e2b7af690", "indicator--4b19c800-8963-4ad8-a9b2-af319fabb078", "indicator--e8f3a8a2-0afd-4ebc-9672-f5a9c088d706", "indicator--9ab04fb2-d3e9-4d77-9250-da7269cd1720", "indicator--cf43a28b-2e41-47b0-a8f0-83d0c751c671", "indicator--45c91d55-8572-419e-be84-689c235f47e4", "indicator--e7d7db5d-c609-47e3-8f60-4c4c2fd45070", "indicator--bfbb3ca5-a5aa-44bc-a9cd-0ed7d1bb1f34", "indicator--b466dd72-4a7b-4b9f-99cc-3c1f430af9e6", "indicator--b54432d0-b488-43a9-973c-ae68fedb4b8e", "indicator--41b711ef-0a95-48db-9910-0daf90aa9ffa", "indicator--200fce83-0a47-4a7b-9a97-6a13341ef040", "indicator--8ad81a2e-4c3c-4c32-855e-0dd6ff31cd3c", "indicator--31ccbae2-d2f4-408a-899d-f62bd7cf8072", "indicator--c19e609c-fcee-44eb-8f00-6c83ab05015f", "indicator--4dc5b5fd-1f31-4be4-9e44-dbd4f3f22b1a", "indicator--d575546f-6bca-4d24-bf0f-c7bad71aa5c8", "indicator--ef2d642c-bef1-4ae3-8ba3-7aff10498d57", "indicator--47a7534e-6245-44be-bde1-b6fc0af5466e", "indicator--3c15b779-e8c5-443a-b194-7b2ddbff4a4d", "indicator--ea827f8d-0307-4dd0-bf4d-cf20f0416a6e", "indicator--62cbecda-7e6e-40f9-8ddb-2b99d6200155", "indicator--439755c3-65db-42a3-8940-f62e7c5b4d8e", "indicator--b5cbf290-c4bf-4694-9103-854d70e23b7c", "indicator--af99a13e-5670-4c14-a2b5-92797b715d14", "indicator--23ab8e88-990b-4b93-9263-dcbdd07bfc81", "indicator--8935e7df-3fef-403e-b234-840ba5f8c686", "indicator--e23614d8-722b-4987-9b54-c9a672bf9ce7", "indicator--235306bf-7da3-484f-a7f3-42a49dce4a5d", "indicator--0864c784-03fb-4fc8-9d2c-8ebb0abb3aa0", "indicator--abfc9f6f-fb43-4092-8c1f-3d122f6c8ada", "indicator--ddc8d4a4-ef99-40a1-97d0-69083123ce37", "indicator--ae50b50a-dd8e-48cf-aada-3e78a162f663", "indicator--5e94bdd6-a19d-4106-8c01-d40a376abbe7", "indicator--9f29076b-f46d-4c0c-9531-74685bd19b56", "indicator--74607362-7cf5-440d-9ede-3d026efe680b", "indicator--10609493-454b-49d4-a40f-a5f05d7e7e30", "indicator--bf27fd3e-8690-4113-b186-d807050e4c29", "indicator--281df242-a40d-439a-bf19-d151e07b1726", "indicator--24490d59-0d19-4bdf-90a1-555493798af3", "indicator--d92bc121-1b23-42b4-9071-471bb729a87e", "indicator--2d62af96-e81a-4af4-8634-05ed8ff7a4d7", "indicator--edb64c1b-d8b3-4358-9c2e-6cc757a3a9c6", "indicator--8f48608c-747d-4606-9b4c-21b047ee0345", "indicator--fd598cd1-1ce6-42f3-8597-3c058924d0f1", "indicator--f110abbd-95a9-4f7e-8c0a-971ec5472be9", "indicator--db19acb0-cab4-4fbc-8394-efedb8fba554", "indicator--3a3f293c-f06d-4b10-ae66-d736baf78b6d", "indicator--278a9a7e-7f80-4cd4-8aa4-e88446bccea2", "indicator--cf00c04a-0d96-4a36-8928-03de54b96e04", "indicator--755a6633-c5fa-45dc-8846-9370a0812dbd", "indicator--8ebac0a9-2708-48f9-b77c-b6a6980c9be3", "indicator--46a0fc68-5c45-4264-b0f8-f35424e1a9b3", "indicator--ab72b28c-f5cf-4e42-b7d7-66cc7b067786", "indicator--9a3cac8d-b390-4697-8d83-cdd6e79155de", "indicator--bb6524df-90b9-499c-9bd9-5a1ff9a92514", "indicator--d89a1cd4-e232-4c03-9455-5da496467c0c", "indicator--7d353670-4524-4966-8dc7-1a98ac74c3db", "indicator--db8d8b25-ca2a-44ef-a433-3fe0b7ec7c43", "indicator--bf38a78e-0263-4d7e-a03d-304d9ba94570", "indicator--43735ef6-7a59-4752-bcb8-bd0649c3aa56", "indicator--68fda84b-84a2-4ba7-96d9-0b78791b2eb0", "indicator--461fc041-0508-4ff5-9cdd-800235d7d002", "indicator--0ab7ba97-dd0d-4ecc-91d8-a4ddcbc58703", "indicator--efc14b27-b550-4434-b075-65b7d9bede88", "indicator--8873aaaf-6028-4a34-b3df-a871be0b8d3f", "indicator--945f76c2-0b12-4f0b-b6d1-749c24b59a3c", "indicator--b801711e-0fe3-4873-9976-fb6ca70a1b25", "indicator--66919ed9-11d1-4ba3-b365-6cda5be32164", "indicator--8691e955-e326-468e-906b-2a6bc8db0fdb", "indicator--b659588a-91c3-4666-95dd-5d8f6ba0c279", "indicator--4ff84bcd-aae3-4fed-af76-519951b6b8bf", "indicator--7dcead04-3cd5-4a90-aff1-2bdf18bac66c", "indicator--97478dba-ef67-4150-a35d-a9508f5d3e2b", "indicator--0a9cf8c1-1fb3-46e5-b745-140c3b7942ec", "indicator--aa63c46f-5a28-4cd5-b65b-be02338e5204", "indicator--d81d9dd0-4bff-4b91-9865-75b7ce2597a0", "indicator--738deb6f-d5d7-4a5e-8ed3-8be6e3e453e6", "indicator--b67dbd73-d968-4fc4-aed7-a941d708627b", "indicator--0dee9657-b09e-4a24-8328-7aae7a484ffc", "indicator--2432a3f9-f32e-4a38-b30d-66db5899b2b0", "indicator--7dff106d-6f72-4084-bd0a-644e4b958a2f", "indicator--10134fce-4e32-4326-8bc7-cccafe847d64", "indicator--b8290a59-4da3-4ae3-8364-133f89e135bb", "indicator--77aab1a0-2a7d-4373-9fae-f913ef401918", "indicator--79f0c4b8-367e-44f0-8a11-de34ec5a998f", "indicator--61f5e88e-5c48-45ea-8720-b794bf87bf99", "indicator--7fdbca96-8f7e-4d7a-83e3-d83bb9d1ecd6", "indicator--f71a61fc-0454-4bc4-a322-37ea01c57d51", "indicator--58873101-0f6a-4e5a-a01f-fab289c25081", "indicator--4c0b8082-3146-4a19-9387-bcda4d317099", "indicator--916a9b00-6d58-4d8c-932d-938b0c96eecd", "indicator--56001c9a-a2f2-4e83-b8f8-cabf44fad62f", "indicator--9c1675a0-d9dd-4d3a-8695-11da305b511d", "indicator--93659afa-fe23-4d94-a47f-bae83318b6f5", "indicator--51e491dc-c485-4bc8-b256-bd13b7c189ad", "indicator--1d133518-4b7c-422a-8aa6-a99841a16b1c", "indicator--879d4730-8834-4b42-8f1f-275524ca071b", "indicator--17441344-902f-4fb8-bdb2-d38fe4c9d913", "indicator--8b11256a-91b0-4b58-8bc5-64e10c177955", "indicator--8fb5e165-cb09-4dd3-b823-c5e9cfb2e053", "indicator--8e0fe938-6e91-4436-ac5c-d4e35c03d29d", "indicator--da1cde71-2e3d-4cce-b6bd-0f64012c4582", "indicator--74d7dc2b-d5f4-4435-8285-250473f2cfb0", "indicator--5e89ad34-002b-4516-924a-abdb8308e36d", "indicator--233fa79e-80f2-4bf9-ab99-784773125f0b", "indicator--e4058865-3430-4b2f-ad2a-61dc48b4871f", "indicator--9afdc0eb-ab06-47f4-8a54-cd1a8a3153fa", "indicator--05ee46e6-636f-4d4b-85d0-9c979a765433", "indicator--0ebe516c-60f0-48a0-ab49-717ffbf47f2f", "indicator--77d557d6-aa71-434f-aa53-b7e1b7a069e6", "indicator--02300dcc-31f1-4228-9191-e4226fd2b4e3", "indicator--75442d7d-0005-4911-9bb4-6598b040ff4a", "indicator--fbbd47a4-df3a-43f5-b7cb-887db0db0640", "indicator--46bb8771-ba26-4d38-aeab-b4078756f31a", "indicator--a1acfb1a-cef1-4394-a9ba-d555269e535b", "indicator--429bc5fe-2658-499f-ba76-a8d987ff8bde", "indicator--b9df7d2c-584b-4f69-b375-db199ee91d50", "indicator--8adc88c8-ddbc-4abd-b256-a22e8aa8e9aa", "indicator--39939cb4-28bf-4335-80de-3f96fa7d8534", "indicator--f6689155-e990-464f-a18e-820d738a7596", "indicator--c94c9448-0a0d-4a8f-8868-9f7cac0854c7", "indicator--c012efd6-2590-4b15-8984-b3f3a212b31e", "indicator--2f6efa41-0d85-4c8f-a3c1-c9f634b45f43", "indicator--30f8adde-1ace-47d7-b661-768eb7ddc6de", "indicator--68729097-cb80-42fa-ab45-4a29d9fddd80", "indicator--c3bc763f-317b-4a33-b200-ad6a87850e05", "indicator--61438241-8c98-4ab3-8e3c-f5acf3208ad0", "indicator--50f6a2dd-9420-4e15-ac19-f82600ecf9f5", "indicator--6a98c8ad-bdf9-4b2f-b621-ebd428336f3c", "indicator--e80add18-c3cc-4521-8b37-5c1889808e48", "indicator--db77b751-880b-49c6-afd0-ca32d7e4e6ba", "indicator--76d558fd-7535-45fa-8618-c8a0a34e535f", "indicator--f35d3909-3eb7-4422-81d2-337367f6000a", "indicator--6bcc60bb-7342-45c4-b69e-7b24b72a521e", "indicator--9998dabf-dddd-4b47-9a04-dc3d34ca3634", "indicator--f5f9c114-d915-4f96-93aa-3dcbad81a377", "indicator--b27482da-8de5-4c1e-a792-1dd8ed4f6e22", "indicator--93e0521b-2190-4d5c-8f26-e8d1ff31e111", "indicator--029bdaf6-8f47-4ab7-9a50-6b048bdbe6fa", "indicator--ba4a6df7-21fb-4514-a5ad-b444b87bf1fc", "indicator--fee44fa0-23e4-4b50-afd2-1e9f045641be", "indicator--5572338f-0f0d-4cf4-b9bb-98cdf941f182", "indicator--02f7cc36-94eb-46e1-8fe5-dc391d8bec66", "indicator--e13814a6-a0ce-462e-b60a-aaaf74769535", "indicator--e38fe396-704f-4318-9c31-71e7455a00e9", "indicator--e9361a2c-eb71-4f45-a12d-ff20cdf93d1b", "indicator--4ecac842-5cec-45f6-9f33-4d65c3b996c5", "indicator--9d952f29-878c-4b5f-b32d-ac446a7fd1b3", "indicator--5dab2e88-d175-4565-aa1e-1c103b862121", "indicator--0a707050-f039-4b5c-a442-4f2963eee4fc", "indicator--1a52d0f0-2541-427b-9ff2-b3a802cd1182", "indicator--c538873a-d77a-4d32-be9d-2dc67d7a506b", "indicator--d8ef4dea-2a10-4381-80e5-6a4f24c413d6", "indicator--95c1e31b-531b-4a02-9953-2f5e1a6df79b", "indicator--97ddf74e-ef8e-427b-a8f7-2d589a8c9c2e", "indicator--b62b4f29-fc20-4071-ac50-cf09ab528f90", "indicator--4a5c02b5-d13b-441b-a548-084119211ddd", "indicator--614654d3-2d78-45c9-b5f2-a3d1f9c4bc4a", "indicator--d81da026-9f3d-4719-8dbb-bdffa9b6310e", "indicator--783ba2e1-caa1-4684-afe3-11587594e33f", "indicator--c02da07b-dddd-4a5b-af62-42b03d1816b9", "indicator--8833a363-c877-439d-8fe7-a34aa3f13d9c", "indicator--eedd8ad3-11e6-40e1-8e8a-b394d127839c", "indicator--68b313d3-dec6-4eaf-9cb6-c54592455cb3", "indicator--e1b18e4c-8ea2-4ede-a7d5-3f0a79bc0edc", "indicator--8a32242f-ce1d-445c-9d4c-d860a6f07a5b", "indicator--c5c32b76-becc-45ca-b5e6-6ca1e7732038", "indicator--ea0be21d-517e-4590-99e9-61936c1e31b5", "indicator--e84d14ac-d307-44a8-bdfe-553504bbc2bc", "indicator--376e0c6c-1aa2-4b11-8d84-957d21eb6ead", "indicator--790941e6-9860-4cf7-a237-3c01a9f32d31", "indicator--8c4ed9bf-d49a-40ca-bec1-40840262c49e", "indicator--9bc53f68-cf47-4e15-8808-2fe69d932b77", "indicator--a2909b2f-0350-4b80-96d0-ce6ac4f2e94f", "indicator--cf44cf69-5a0d-40ee-8f40-2fa484b5272c", "indicator--c07cd3dd-bb0b-40a7-8c57-3a4de16e27ee", "indicator--1cceef86-5acc-4e57-af85-1368e9809b2e", "indicator--c013c1e2-583c-4c02-99dd-32a418c0455a", "indicator--d2e7c705-7f03-428a-9780-5a8fb8154b6f", "indicator--ed483574-c0a3-4095-aa6b-9cfab06c5c6b", "indicator--df382e6d-5693-4f08-ae1c-bcf958ad2393", "indicator--cb4b6e7a-d84f-44a0-8250-1845e69cc27d", "indicator--5cd68464-deee-44c5-a7d0-6afcc18ad883", "indicator--25b1686e-6dbb-4d55-ab4f-7e2752aa308b", "indicator--bd412838-c479-431e-bea7-b59fce5f51fc", "indicator--d737bb53-db54-4e54-9ea7-7be069f17bec", "indicator--3aa64df2-fee9-43ce-b14a-46f7a5c6ef73", "indicator--bf624625-bda0-4382-a7cf-09e05911693e", "indicator--c5daff7e-dd88-4e46-9145-78f325bcc815", "indicator--b6227796-2d69-477a-9949-9e3eefe6aeb8", "indicator--97783b58-4086-4c13-893a-b0687db3f680", "indicator--f0c89b12-669c-4944-a6a4-25d82f078485", "indicator--3b0852af-8c69-4a3b-96ed-70e2071dc361", "indicator--4234a5ef-c6f3-48cb-a6a2-15a02dbc0eff", "indicator--674f3e46-7b6e-4389-ad09-609214952b5b", "indicator--b4d2f3ea-a982-46fd-bf37-f5e15545da8e", "indicator--7d112b69-93c0-462b-a41a-1b3cda771921", "indicator--0962523f-28f9-4201-a39b-29dc127bbb07", "indicator--a4dba304-1476-4c6a-90d0-3859bf02f374", "indicator--650e96ac-941e-4e2c-9a24-baa83cb6ea07", "indicator--7720a79e-4c6f-4edb-9cc8-59f1e47f66ff", "indicator--973056c4-9e87-46d8-9708-b36bc4146190", "indicator--bc304247-93ee-44f6-b200-f44c41ee50a8", "indicator--cd060379-0549-42d8-965d-536eaff7e3cd", "indicator--422f644f-16eb-46ec-ba42-f4b2768be9fc", "indicator--feb5fdf7-aaf5-41ea-ae86-be8100ba47d0", "indicator--51ddcba8-2dfe-4641-9536-6a34cfbecad3", "indicator--d0762dcc-1aa2-46d5-9a1a-3be7fa285295", "indicator--e98c09d3-f4df-4071-8b52-b9bfb3fe12cc", "indicator--3504af73-25be-45f8-adfc-f9281d72bfae", "indicator--dd6b6d7a-928e-4cd3-bf6d-6740c15d79c2", "indicator--9f787d0e-beee-48a1-bebb-f3e86b7488e1", "indicator--f9c62df8-fa7f-44b3-93e5-543d3a746e91", "indicator--61401b6d-9df0-44b0-a334-d8e3fd590ef2", "indicator--ace379c5-58fe-412f-ac3d-e83ad207eeb6", "indicator--cb1619a5-5b33-4f5a-8bec-ce39c890fc87", "indicator--c7e39076-a888-4a8c-bce4-8872ef2eb8f3", "indicator--41ffb2df-35f3-43ca-9318-9593cc8de291", "indicator--f4d6c247-0911-45fb-8fca-7af101c32df0", "indicator--fddb9f88-b1ef-4be3-ba03-00cd752450c8", "indicator--ae66dafb-37a5-4aed-8986-b95158087a78", "indicator--3c591091-0861-4fd8-af7e-6aafeddf9e22", "indicator--9a3c6ed4-ef35-49ee-87a6-0ef129654515", "indicator--15eb512a-1f04-489e-a39f-4169c7aef3db", "indicator--348c56ff-f418-4dfe-b71d-3e11b11f0d2c", "indicator--58d3716c-0061-4585-9ac1-dd1d8a24e4f7", "indicator--4b6aa025-0a0d-42c2-884c-6cebbabbe745", "indicator--323f6b7a-6f8f-4e69-9872-9ad55d1837f6", "indicator--94ed6193-fa6a-4cd2-b559-992c1755849b", "indicator--4bef8d4f-088b-4e53-bdf9-5601fcb34d0a", "indicator--c29b52da-b2bb-40a2-9723-8ab038f9cd8e", "indicator--e191e0f0-edc2-4e5d-8b27-6dbd80936ee4", "indicator--ce2502ae-fc71-4d3d-82d5-464edec64453", "indicator--ff700ac9-29aa-4f32-8524-ba6de07c3c93", "indicator--7fd4d12c-5f7e-4f7c-84cc-1ce5cde6b688", "indicator--8f0ae36a-9a32-43fa-af16-68ab943f9255", "indicator--5fb653ba-1b9c-43dc-bb35-780aa04928bf", "indicator--59197232-5569-4715-8842-1a28e9679e04", "indicator--dc71b805-53fc-469b-93c2-d098cf11aad9", "indicator--a6f4df20-0c19-4968-b539-146160fea9fc", "indicator--4fbac544-9498-4504-9a47-d548a7315651", "indicator--7129d8e8-3a88-46ec-8609-0f6842be4f12", "indicator--f36c8198-87d6-4b48-8750-bad297d8c4a5", "indicator--aa63acec-b979-480b-abf3-bc23403d9ee6", "indicator--e28ca4bb-d6df-462e-8ed1-4eb8ccb01c1c", "indicator--f3ec1ac8-af2d-4d3b-b174-0f874adeb38c", "indicator--c8d471e9-5873-4011-b990-a29cf0912f4c", "indicator--18a1561c-4b69-4ae4-a8f3-af41515d77d9", "indicator--e33815b3-38cc-4dff-9d82-30cf5c9de7d1", "indicator--d9684809-424f-4dbe-95b3-4792fc8b22a1", "indicator--c5bf2164-4b56-473f-8694-b937c8e234eb", "indicator--e3a54f37-069d-495c-aae5-275b062c7650", "indicator--5ff1c9ce-7729-44a1-975c-f194b9255825", "indicator--7d78e160-9c65-4b0a-9c2e-6463117d1646", "indicator--4d2ffed1-dd5d-4182-8ffe-291be2557fe3", "indicator--2faa7f18-5aca-447b-9267-5029a01a0c0a", "indicator--7872fd43-c93a-460f-9795-c2360fd385ba", "indicator--dfa7e37b-3cb1-4369-b30e-372078228dc3", "indicator--0a70cbed-99da-45c8-b1be-dcaff6f7e139", "indicator--317d9b89-71f5-4fb5-81e2-f4819137f137", "indicator--2d1377c9-34a9-41ad-a004-57ac6bca7bb9", "indicator--a91c88f5-18c2-42c4-bdcd-ba337e48467a", "indicator--eef5af3f-be4c-4b09-a784-ef2e06c084af", "indicator--583a3b6b-a94b-4037-917b-9a0a414278d7", "indicator--be4eac0b-2193-41cb-a761-8634df2f1b7e", "indicator--1bf99fe9-7191-400f-a344-30df1031d9a9", "indicator--608b140f-3ea8-408e-b3a4-f1ca214d1252", "indicator--5f251ebe-c6fc-481d-95ae-79e871a4bb75", "indicator--ccc0a936-b667-414a-b3f7-b086449e8997", "indicator--945cf5eb-9f19-48af-b59c-d64fceebed90", "indicator--9aaa9eba-5c8d-4fbc-8311-3736d8644062", "indicator--91de4c62-7cf4-49fd-8125-529b6fb853f5", "indicator--7b5f4b79-b7a2-4f92-95ad-e60cddb0d404", "indicator--95bac8e4-69ce-4eb9-9b4c-50f2d3e75740", "indicator--59d33c54-db10-455d-a0a7-2d9f26ad979a", "indicator--2353408d-2e95-4b1f-96c2-ce48872a8660", "indicator--d24e4108-9096-47ce-8522-10334fdf0a3e", "indicator--3a15f934-0603-41ed-b285-2044c560db51", "indicator--8f86b7a5-555f-4ddb-b8bd-447fd36f3c9c", "indicator--16f327ea-4f49-4f45-8e07-244acefc1d94", "indicator--8f3ea38d-83e3-48e9-bc84-e0a5af5abf59", "indicator--bd1ee5c7-90dd-46ab-b3c9-333c06328a15", "indicator--80a6843f-e820-450e-a466-c63548802df5", "indicator--61f4548e-1adc-473d-b6be-f64636afc16e", "indicator--9bab28c2-bc1d-4994-a61c-907505752e5e", "indicator--49132e9a-546f-4b59-b06a-c4e8a9463eb0", "indicator--d9c04d46-d53f-4da8-b51e-c6655747afaa", "indicator--7da83d47-7f7a-4d0b-bc8f-57c634e88e81", "indicator--e67f5c35-3cad-449e-9c21-77f6e025873f", "indicator--3ac695f1-d6a2-473c-964b-684f3a3fff9c", "indicator--a3cfba69-3a03-4866-9cff-2c9f34cbcaa4", "indicator--7e6cb8ee-2ad3-46d4-a192-68eee04f8b6d", "indicator--abfda9ce-183b-406b-98a0-8bf992658bdf", "indicator--7b804dc5-755c-43e0-b85a-3087d700cdb0", "indicator--043dc574-015b-401b-a3f3-96602210bbc3", "indicator--9aca5942-9069-419f-bf5a-4217eb14db07", "indicator--d7fd3499-b59a-4b0f-8308-cd36594747eb", "indicator--82226459-c763-433a-9a3b-df87fc5814a8", "indicator--b0e4d9cc-97f8-4172-aac0-faa9a375e9d2", "indicator--8335abaf-7165-4d25-90d5-311e89d39f57", "indicator--62dfcff6-8259-4264-8763-f053167cb1d6", "indicator--a38ce50b-0b46-43ee-bffb-3155b4120da1", "indicator--9ff68786-4e03-45a3-a219-8ca228aaebdd", "indicator--73e7b945-5d94-4057-8f40-91c0afc57ce8", "indicator--201cb40f-0c0f-4a59-9420-995e3c8e9d31", "indicator--79b3866d-13c7-490f-b361-28bcf8c80ce0", "indicator--da2f8f7c-d7e2-4668-9d5f-310e86d1ea52", "indicator--ffe695f6-b09f-4cd4-80cb-82a8badb477e", "indicator--fd2f9a31-0856-45ab-a5aa-8e5fef1fd29b", "indicator--615a37a5-742b-4b12-8d6f-2b3a62780305", "indicator--cadf724d-ee53-4333-b151-6843943a3aaa", "indicator--5ca5f480-c8e0-4d43-8c47-38e94579114e", "indicator--c566a57f-3c6a-4ed5-907a-5b74a530369d", "indicator--1e61a203-08c9-4cba-8864-fa4bfefd2ea3", "indicator--d0eeaa71-01ba-4bfe-acc5-f1caa471a260", "indicator--6c3a1804-f4af-4266-a482-2cef9c800928", "indicator--59cf1d4b-48f6-4de4-8830-027f291809e2", "indicator--861e42f5-bedb-496b-a2a9-edaeb158fb7b", "indicator--8661bad1-0a52-46f1-9886-732c8fda2897", "indicator--28ffb0cf-8eb6-4fc1-808b-cb613bcd36b6", "indicator--8ce62a73-65bd-4b6d-a12d-9dc6495a44af", "indicator--d8c56e34-1611-4b9f-9df9-7ca0fc756241", "indicator--8c9e7d28-572c-40e5-abab-69fee6e7b7da", "indicator--77966216-6f22-4996-b01d-d5f34c549200", "indicator--91bee647-56cb-4806-a24a-a536826aa7cc", "indicator--01215dcd-00e9-4d1e-a6e1-fee77f81bdc3", "indicator--28c46652-c3d6-4cde-b1c0-bf7c2f2b84ac", "indicator--bdb50752-cc02-48b1-b6f7-e390d7abb1f2", "indicator--436e620e-804b-4430-b83b-029ba01eb95e", "indicator--d0233285-a814-40bf-9ac5-8ad36547abd1", "indicator--a823b4f6-7ff2-4cf9-bdc8-9e3bf96ae321", "indicator--0a9610b5-c8d8-41a2-b64c-80e84bae912e", "indicator--51518cc7-c5d0-4c27-a46c-ae06961bb9a2", "indicator--6304631f-1945-48b2-be13-7b93acac464b", "indicator--4035c887-c2c6-48ad-8ce0-c1aa40dc917c", "indicator--e7d8067e-500d-4ecf-8079-b7f4e3cf8c3d", "indicator--2a088d68-6453-4ba6-b9a9-60ca9d4a99f1", "indicator--c02da579-5019-4fbc-aa62-12ddef736f9a", "indicator--6316b79c-89b4-4bb3-b7a7-2f6e1437fa61", "indicator--185fa76e-d1a7-4549-9823-bc1cd9ea7e45", "indicator--c3d5cb3a-3c70-45b3-bdfe-17c14bd0cc87", "indicator--cb0bc672-4d51-4f68-b5db-98e72e06f708", "indicator--609fd57a-0738-4000-935f-95f8a8d4a2fc", "indicator--4a28499e-a9a6-470f-b7b5-41b070387802", "indicator--2e7d53ec-0954-4c40-9441-5db9a2001556", "indicator--b3b5d385-3f2c-40ee-a1d9-8e10bf566ee1", "indicator--088813fc-0b58-4e8f-ab3d-87cf64573ef9", "indicator--73b8bada-205a-488c-ad12-e0377da91343", "indicator--bffc1fbe-ec7d-440f-9b96-d10e5795af69", "indicator--75979d36-1821-4318-b132-b910ddd78493", "indicator--0b345361-a01b-4bb4-b9ac-4b43ee85f597", "indicator--7c1fdb72-9a84-452f-aaaf-24cebce295ba", "indicator--03b18313-acd6-4b59-be19-849d11420d8b", "indicator--d84dbc56-027c-47c7-96f5-bf0116dc6e3b", "indicator--69cf7aca-b828-439e-a4d7-3e6aec367c86", "indicator--818e5595-6527-4059-bc75-ae01d275db72", "indicator--ca99aa48-113f-4f6f-a323-9cb29d7a8368", "indicator--b4752910-9497-4f1a-8d83-2f850055d65a", "indicator--a55c8365-8b5b-4727-895a-83289287bdd6", "indicator--7be638e3-cd6a-445f-89c0-a39e5e8ff19a", "indicator--ec0e38f6-984d-422e-b13b-829a278ffef0", "indicator--d2c5d76c-26fe-4157-943d-e6a3a2adff0d", "indicator--196ddff8-b906-4c0f-8351-eedf9ce07a9f", "indicator--40641c4c-53d1-481c-aa02-64e7a74d05b0", "indicator--0c7aad24-a398-4929-98ff-548d96bcb1a0", "indicator--f104e8f9-ab9f-42a5-88b1-63457c1ff1fc", "indicator--b132111e-8846-4d71-a42c-a2abc1c0fc44", "indicator--98f0fd62-9d52-45eb-b196-01119b7eeb3c", "indicator--85a31817-6291-4d7c-bd41-bf906722f944", "indicator--adb398dd-4137-4f5e-bf6d-dbe3296334d6", "indicator--27e2a5f0-92bd-41ac-a6ce-e92c96a4a845", "indicator--f2de261f-5757-488b-b294-98844b192e7a", "indicator--12d1c5d9-30a7-4117-8f47-f8b213b7120c", "indicator--f08b9b6d-232b-488b-b947-151ddd479e8b", "indicator--4b964389-d13a-4c1e-b9aa-6430749efd8d", "indicator--0a17c9ff-4384-403c-9ff4-fd280244a733", "indicator--830c9a03-5025-462c-964b-1690b1475765", "indicator--b84c2f08-4a14-42e6-97da-7c73b3e12a5a", "indicator--8df4f5bf-94e0-45e7-8889-22cc24d87532", "indicator--5fb907aa-e0e1-4ebe-a436-a3c909d999a9", "indicator--cd6b8cd4-6b48-4849-8ebc-157d9e42ba0e", "indicator--9be75f1f-c5b2-4def-bbe0-a245a482fadb", "indicator--d5aa74f5-aeb1-4fc8-9394-a52e640a04e4", "indicator--f2af3712-05dd-482a-8592-1a310771784c", "indicator--95585951-4d69-4640-b7f1-f2a816029150", "indicator--42e39bd3-2dfc-418b-8db1-5ad2dacd4cfc", "indicator--13c83ab6-58f6-4f1e-83fb-244139bf178f", "indicator--659db234-709e-48e8-9a3e-961caf092a82", "indicator--6279ea67-1b94-4a13-98c7-4a79f9a3f405", "indicator--5087624f-ec0e-4ff1-ad9f-9021be3b00a1", "indicator--0a0b6fc7-991b-4cfa-8f3e-6f1efa2d2e46", "indicator--5799b14e-ec19-4d46-9f3b-bb66a6204a12", "indicator--81a11409-e004-4d40-bd50-6e223841fdbf", "indicator--84b8e493-31b8-4c12-b5ef-441bce6300b9", "indicator--dc5db0a6-44f0-4423-8c30-322868291414", "indicator--1644a9b2-4742-4930-9643-383b5d9208d0", "indicator--811e5ab3-02bc-43fe-aa0e-8ffedc136a46", "indicator--2bb7cff5-a486-4573-b989-628470924db6", "indicator--a604640b-775d-45a9-aaa5-8a3b379c9644", "indicator--173f8764-481b-4581-9c0c-32d0268356b3", "indicator--10c77316-3ba2-4739-8277-a90c411aa4bd", "indicator--3f949ee1-0ff1-4d4a-a888-739f95968c2c", "indicator--0d7a53df-b6e1-40c3-8c82-e76446d6fc41", "indicator--144a54af-bfeb-459a-9369-70e19c898030", "indicator--c2f926ad-2f12-45f4-a4a3-ffb97c6fa9de", "indicator--94f22196-6b6c-4ce7-92d9-13eff060fc0f", "indicator--a005e419-44a8-45e5-8215-eb55976420b9", "indicator--89b4949e-4815-437f-9b74-f3097eb0ccad", "indicator--05964516-7f53-446d-b5e8-aa5a2fec8538", "indicator--c8f44c7d-7745-4318-aef8-2a2bf0df1800", "indicator--4e9c0357-2c41-4026-9c55-d0a1e4231969", "indicator--662e8dfb-02d1-40d6-9e9c-0d0c7a4a1527", "indicator--5051c61f-68fa-43bb-aa57-cf88dff3c095", "indicator--b76bb422-1f26-490a-8cc8-1d2bee3793a1", "indicator--34f691c0-4823-4b99-a40e-6eb9e1784d08", "indicator--b768fdbe-f777-490c-8656-4ef265e3b44f", "indicator--0a771073-0b07-4836-8ef4-f3d21bb9be7a", "indicator--31c79aae-6c40-4e2c-9828-76667465da83", "indicator--6519b359-a8a7-4278-a0cc-7b8360afa17c", "indicator--3d555134-c490-4fcb-abec-98a398d6229e", "indicator--bc22ae31-da58-46b8-811c-d55ac9acea7f", "indicator--0419bdec-8351-485c-bc3a-ccd3ab0c6c75", "indicator--0b7b3067-24f5-4230-8570-e4fccd4437ff", "indicator--2abc92cc-9e2a-45b5-adb5-8ab028472f1c", "indicator--ac0574e6-65b7-457c-8952-af594eb72057", "indicator--44cfcc45-5c5b-491e-b4ea-fe0145f5a0d2", "indicator--32dcf8fd-aa89-486c-a5be-0cbfebfeed41", "indicator--6035faa3-388d-47d5-bb74-0545265bd489", "indicator--a94c7c83-f37e-4196-a007-42e5b2e6348e", "indicator--ca3d8385-0d72-473d-9db1-78d3b217e5ce", "indicator--367b0de9-6992-430a-bc7d-c0ad7fc2fb2d", "indicator--c8797d8a-5443-43b4-b5bc-8f5c5ff679ae", "indicator--01184a39-4dae-498f-b05a-c8d2228e88e2", "indicator--584b8506-4ab4-4fa1-834d-b73494b345be", "indicator--a3d5e1c8-536c-45d4-9ac5-7ae90f06f7db", "indicator--c8879783-c4bc-439c-87df-b824b82365f9", "indicator--89a34791-b240-42d4-8b90-69a164bc7fa0", "indicator--1796fc53-f861-452c-bab3-e74fe6ba2bdf", "indicator--27f1f106-0d75-4e14-b04a-9d41d0cd5edb", "indicator--211e96bc-ef0b-4f43-bf35-d8b029ae3bad", "indicator--b2ed6685-45ec-4f02-b6a5-b7af0e672e0b", "indicator--199d850d-5c13-4b46-8f13-0a80f69c3fb1", "indicator--e5591a74-8c80-458f-ab00-37838680b816", "indicator--8f38ec69-6b5a-44b8-ba6d-2302f2526d7b", "indicator--2df0e288-095c-4aad-87a8-32f4ba2d6113", "indicator--302f60f7-7a6d-40bd-b93c-030864e6b551", "indicator--158bfdcc-1b46-4e83-89a5-a94e47b459d3", "indicator--f51b4044-2d33-4240-91b2-ffbd500f12ad", "indicator--3ae768dc-66d6-4d39-a5f2-c7ca0ee14265", "indicator--8422f8dd-7e65-446d-ae12-268eb7c6db96", "indicator--5a592761-99fc-4449-a3dc-9b3072d58721", "indicator--0cbf381d-e889-4c84-8d79-40c232f4e7d8", "indicator--92f416f9-2d54-41a0-88a5-7812b9c2f6e1", "indicator--a07a5d2b-7fe5-4b4b-a351-a385aceb3f48", "indicator--4819c20d-0375-46c3-9567-232822984967", "indicator--1ba0ff1f-5595-498b-8c41-fd85bd06ce2a", "indicator--5ae2c26e-aabb-4dc2-8aa0-57f6800ebc9a", "indicator--d371ff17-1422-459e-9074-0953a531dc2a", "indicator--2c469a0e-7a12-43bb-93a7-d1f224072de2", "indicator--21e86f54-6506-4928-8f2c-3c6a4644e7fe", "indicator--c2ff4b2a-0721-46c4-b48f-c3ba8e8ad3b4", "indicator--92dfed49-b69b-4650-9da6-e318fcdda227", "indicator--b258e5f8-cd32-4708-9095-fab92b4bb9a8", "indicator--be9e32f0-09bc-47dd-85b2-f0b7925362d7", "indicator--24e8770b-7e4c-4479-a123-84c7ca2c2610", "indicator--e5cc4230-e3b7-48dd-af17-67a27db51775", "indicator--def94e02-8c49-4c80-bbc8-5d5490652564", "indicator--15149639-47c9-450e-affc-f8955d522f3c", "indicator--4cb13643-f0d6-4f76-be1a-b925ac6b52ab", "indicator--5517f701-959f-4a1e-a056-5866e84fd114", "indicator--99f412f9-c9d5-46bb-b3a9-e199486dd6cb", "indicator--09788485-4084-409a-835a-d770bbc65637", "indicator--4d80a654-138c-499b-b913-8304c579f482", "indicator--eb45f187-8cdc-4958-b2a5-3ac21d05c246", "indicator--0c3bbf68-d6ec-4e01-b94f-8a0e4548389a", "indicator--f114601a-d598-4474-8e34-659a45f8acc4", "indicator--9acbb87b-c878-4651-96fa-807a37a63a3e", "indicator--574e8a65-cff6-4f42-b88a-20ca07ad3eea", "indicator--cd018a26-cc55-430e-9421-c22f02f0fc90", "indicator--5be9817b-45f9-4e8a-a489-9d5a45d28721", "indicator--a7193d2c-a46d-45c6-9c0b-9f7b25a3f1b0", "indicator--5c9ce340-70df-4b49-a195-6dfed058c95e", "indicator--1752963a-ae31-4477-a7cd-c32b6b629b29", "indicator--fc6d9b23-b7be-4173-9e41-f7c0d04c8d96", "indicator--1b75abfa-d830-495a-9ac1-99770d5f961c", "indicator--e290f8eb-ff7c-488f-9b84-602eed07c9f3", "indicator--b4ef9eee-31d0-45dc-a69f-dee69dd7c18f", "indicator--06d7933d-c025-43aa-b726-abbd7962b87d", "indicator--09b6cd13-dc13-4280-83a0-1dfcb644cfab", "indicator--8dca79d5-96d6-4d44-90f3-6ac3a5a2edc1", "indicator--c0e3c9a5-d932-4941-97d1-7d57f4a3bbb7", "indicator--9d336fe9-fc00-456d-a46a-fe16a2673e23", "indicator--c30b8013-e966-4144-b42d-768066b2466e", "indicator--9d1b3d11-c060-4217-bff8-bc3b5e405f65", "indicator--e57563ee-5602-4a12-badf-b293f8d8ce24", "indicator--50a3b65e-c955-4668-b2d3-8448eb5252cf", "indicator--90daa2ef-40f4-4a96-a7c8-950bbe192256", "indicator--95a216b2-0011-48d8-a164-f603c58baf4b", "indicator--b491b3c0-be3c-49d2-bdc3-5fa1e541b70e", "indicator--7197bd19-6c6b-4c7e-bde1-ff7b6ace4a8a", "indicator--59e55d21-f87a-4c93-a6f7-fa726cb65c1e", "indicator--cb154fad-0d28-4c00-a1dc-42c5b0959afb", "indicator--6feb0f10-3664-4bbe-a3d9-be3a09336e19", "indicator--dc29a4da-7f9a-471e-8d6a-857a606e5a8a", "indicator--3f5a5807-53fc-4fc5-a317-81ff439cd366", "indicator--0510db1d-6004-4524-8060-90cddb0fa02e", "indicator--f9ea94a6-e06e-4e30-9adf-05e70eeed423", "indicator--609e721a-6847-465b-ad64-846e09c8a85d", "indicator--0ba64040-e81f-4f78-9a65-c71b6aaa29fe", "indicator--6e53ebda-bbe4-41aa-866e-1ca76065ff74", "indicator--cad88b59-eb60-4065-a3a6-9d7094e07757", "indicator--7bd588d0-ba2e-4c4f-b909-fc298cb90ae0", "indicator--e4852ccd-d427-4e45-a8f7-6fff9231e0b7", "indicator--46d0bdf5-b149-4fba-b92f-d34d684b6234", "indicator--a59ea815-d741-45b7-b2d8-958c8f0175d4", "indicator--5db62de2-eff8-442c-8203-7b61489c1f19", "indicator--7399e6ee-3584-4c71-89f5-d6c92c4d11b1", "indicator--7f7548e2-df2a-4cc7-b6e3-a5b502ce156d", "indicator--5cc452b8-c261-4012-bc8e-6d7c9be4defc", "indicator--3697c74f-ee27-41fa-b8fc-c3084bb4e5c2", "indicator--c38022f3-28c2-4c94-a929-21869542fb60", "indicator--28e580f0-d319-42b2-9b3e-60aee60cc6fa", "indicator--221c5c43-488f-4cef-b50e-a700c9ef51ba", "indicator--7bd407ba-207f-4cab-a7dd-1ec01dc92319", "indicator--61142aa1-7397-4bb6-aaa0-6ad2cf718095", "indicator--5c90beee-394d-4e5e-85eb-13de9724baf3", "indicator--e75de174-0488-414d-ba40-4b3dacce0ee0", "indicator--f2dc9c0c-fcce-4c7d-b48e-54f3c9afea4b", "indicator--de5d48a4-898a-4acf-92fe-7d72a4b7d438", "indicator--88a8eb20-d501-499c-b29f-e9b688157d6e", "indicator--8a5b11a0-1452-4313-ae62-fb91d1f13468", "indicator--e2f448e3-4c8f-4517-94a6-619ac0daa8f4", "indicator--5403679c-761e-4d97-a74f-94f7cfbcdd25", "indicator--cd882d38-62a1-4d2d-b325-cb76ef533d07", "indicator--1f6dbf3b-ec9c-4726-b76b-0152ef43f229", "indicator--e58c17ac-d59b-403a-a25c-4afd30e5725f", "indicator--7e997c63-43b9-4309-b9a9-dce6f7a7c217", "indicator--a5e95ddb-0ded-492d-a112-485a23eef963", "indicator--3931dccf-e515-49d8-a788-fbc847ca03e5", "indicator--fabca47e-0c31-45ac-b069-ee38ad6bbd67", "indicator--6ff9aa5e-0cf6-468b-9a93-89dfa0043314", "indicator--fad67c8f-ba96-4515-b9d9-f67d5d3e8c90", "indicator--f8a73fc0-644b-448c-b5c6-19e2fa7f51c6", "indicator--e0f7924e-8c68-43cc-be86-302812d3c0a8", "indicator--aabe5f6a-0dc3-4c38-8305-7e7c33d5d530", "indicator--d94eaf2e-3f66-47bc-80ff-c4c6d292e79a", "indicator--de5d570d-6d82-4e84-b299-a82b0b651369", "indicator--7e7fccab-dd08-416f-bae3-9de3e836a84a", "indicator--8adf7585-2d3c-41b7-a5d8-08eddff91546", "indicator--a9f850de-0328-40db-8894-e61bf3db6662", "indicator--54aed53e-bae8-46d6-ac99-ad10b8c180e4", "indicator--92059479-a76d-4e52-b73f-cfcbd37afeed", "indicator--ccb1f18f-42b0-4915-98a3-0e8df2c04318", "indicator--9aa645b6-74f8-4473-a1fa-81f6a22c4cfa", "indicator--50db23a3-1f5d-46e0-8387-cd87a2dfa1fb", "indicator--7d52be23-1ba0-4811-9be2-c6379bae6294", "indicator--4567417f-5b98-41a4-bec2-696cba567dbd", "indicator--18b70d6c-1f6d-4f6b-9817-a0c9abab5be8", "indicator--375e83b1-7315-4698-b59e-d39ac53e0420", "indicator--cea19a90-22ec-43bd-af4f-0cca7e0f429a", "indicator--5181b567-0e79-4206-9bd9-63ffb16617fa", "indicator--157d7483-80c6-48dd-8976-16e754053917", "indicator--b2d79d2a-877e-4dec-b626-b57f76c0dd03", "indicator--38c39e3e-0fa0-416f-8602-b09c55017199", "indicator--61f0ee93-d6d9-4083-a5e2-685c82b918a7", "indicator--890d91f2-6513-47f1-b1e4-6dfbaceeabd7", "indicator--5ff4ddf5-6a1c-4f56-833e-704c7b1046f3", "indicator--9edc7951-562f-4abc-8125-594e7996c86e", "indicator--fb55e9ea-1c69-4e37-87de-42689a1c0fb0", "indicator--14659970-eaa8-4269-838c-d51412ad7405", "indicator--d52842da-d47b-425a-97d9-866ec54e6dcf", "indicator--8aedf509-4559-425b-be9b-c2202bcf87a0", "indicator--05eb6970-68ab-4f4a-8801-3880f5fca902", "indicator--a4fb0084-e2e6-4595-9778-455efc993fe8", "indicator--2e4e9823-64d3-4b75-a556-c0403c383b1d", "indicator--4e0196d1-b5ed-4d6b-b743-c3e4ef69475a", "indicator--7a13c059-7855-47ce-828d-2375de0d1d57", "indicator--9ce5d4b9-8d4e-4353-b480-a4368bc37146", "indicator--036e8ba5-1753-4ce9-8296-ad6b9261ee7b", "indicator--8e4a6a7d-2e2c-4e94-853b-f5f429c6bac7", "indicator--107257c4-3215-4468-bf05-0b693eac086f", "indicator--45d3e6f7-e950-4381-a448-748e0b6e003c", "indicator--53e4afd0-bbb4-4619-bd24-a3767243dab4", "indicator--08dfcbbf-5ef4-4152-a4bf-8bacff9bd894", "indicator--1e031b1b-e0bc-469f-959b-b64b457b5653", "indicator--a38cf86d-091b-49e0-a5f8-034b457a5632", "indicator--21cb03ea-948d-4b1e-82ac-ed6712847f37", "indicator--d8265a35-b8ec-4e9e-9159-b41227c886e8", "indicator--9b747cdd-afc4-4f64-abd9-d66ed912ef4a", "indicator--ae661f90-4232-4b16-a595-3e37b24c9c6d", "indicator--f21f71cd-308e-4dfa-be73-0ca446af6bae", "indicator--6d41a756-fe72-43cd-b66d-fe1e1f03b910", "indicator--838b5cab-3fd9-460a-878d-37d68ececdea", "indicator--73e7ded9-33f5-4fab-a822-7775f6197de8", "indicator--9cee976a-8616-48b5-a920-00b1242237d3", "indicator--1c777c57-6a62-47ef-85d7-cd48d6d82bc5", "indicator--051a5efe-2778-456d-8324-5d13b24a7182", "indicator--2ed2e2c3-b65d-4a15-9664-2240834a43be", "indicator--8792aa17-6103-4ea1-8cef-507b59f00e1e", "indicator--37f649ee-fcc2-49fd-b5d6-f365530f9d5d", "indicator--747de5e2-ba21-4ff5-8f1c-c99d9ae192f9", "indicator--0b54785c-9250-4642-ab36-a9f1c7c1fe06", "indicator--65bd358f-6b4b-4e11-b63f-dbb6253f9186", "indicator--91ac162b-43ff-4634-9578-ce854ee97445", "indicator--84225d6b-ddc8-4cf3-bcfe-2068a1914759", "indicator--09b7cdcd-1621-400d-a3e0-93bf2b5bc1ca", "indicator--30af7986-b179-4453-a762-82aa1bb8949d", "indicator--ad75b978-214f-4ebb-9e6b-ed313c486282", "indicator--019aa41c-1b31-4b99-96e5-39f2b811ce46", "indicator--d2ddd81c-b7bd-4191-a44a-2740aafd717a", "indicator--0528135e-48d8-4c42-848b-aaf2bb2ddbe9", "indicator--173f43e5-93ed-4444-8d54-f717e9b13ac5", "indicator--2d9eaab5-2d5e-4490-be5f-8dcaaa84e64a", "indicator--ea06018b-9dba-449a-bef4-ba81b352af6b", "indicator--e717dcf5-8e21-4b68-b03c-ddd085031a5d", "indicator--c8422d64-2bdd-4da5-b195-7a5c470074db", "indicator--7ef0c394-64b8-40bb-acba-70fbf798d4b5", "indicator--778483c8-24fa-4323-aa29-58efb24fc552", "indicator--0391f3a0-77f7-4058-9dd9-05dc401dc194", "indicator--3ec39aab-ba0a-4029-9945-9b9a7380fd47", "indicator--894e9dca-b5bc-485e-baed-bb3bcc76c220", "indicator--4b6ec52d-cc55-4aac-8fa8-a2436cb9ce24", "indicator--c5bfdfa2-e681-4722-9e27-ab3d7e031769", "indicator--1cdc9553-8346-4e8d-b244-4051c0ba59b6", "indicator--4f4aba93-32cd-4da1-9d96-3ac8a717d70a", "indicator--7f920a98-e802-4cb5-874c-2ef111b34c6d", "indicator--9f3adf23-d54a-4462-9701-e2d1126f9722", "indicator--39ff5424-2760-45e5-b511-aeb8a40210ad", "indicator--91ca6b1f-f6c9-40dc-9130-93360d0ab23c", "indicator--4cf0ff48-9771-4a17-9738-510c7b8e21f4", "indicator--79290fab-176d-48ea-9cf8-1fc063a3abe1", "indicator--5b3cf845-ef17-4438-b0a0-95f35855cb53", "indicator--1f1e02b5-abbb-4a25-99bb-5b070ef4b93a", "indicator--7282a9c0-9775-4ef2-88b0-99431e0f3373", "indicator--c03bebf8-31c8-471f-969d-403f02a8be08", "indicator--bec9b94f-6a0b-4b46-aa88-813adbf87d1d", "indicator--335da592-2509-4353-99d4-65bf9599feb1", "indicator--0d24e351-ec07-47dc-b3d2-292f2d7f5b1b", "indicator--26270d71-7bab-42a7-ab66-7e4ccf3ff11b", "indicator--91652dbf-f942-4fe2-b96c-22cc37a1f9e5", "indicator--0ca3efe9-63da-44ee-8e28-240f1ae3cdad", "indicator--8bc5156a-d99e-468c-9253-5a7579181a34", "indicator--34930765-1b7a-4569-a92b-239dbc3708c7", "indicator--8d5a6034-5be6-476f-98a3-9bca0bc6b1f9", "indicator--d89bffe7-53d6-4dd5-9b4c-6f521c21efab", "indicator--237eb1c9-677e-4c7d-9264-130b105ce1e7", "indicator--5f0aef18-2f41-4919-a2d8-ecad745057b1", "indicator--7da35657-ec2b-453d-99cf-43c62785dbd3", "indicator--4ea53eb2-f9aa-45f2-a7d9-418dd6d48da0", "indicator--1913cde5-f298-4af8-ba90-18843b979fc2", "indicator--1e0c00d3-3f7e-4e4c-a795-34f521354f55", "indicator--1a7a44f6-19d1-418e-ae3e-b70b69d71a2f", "indicator--e0a2c1cb-db17-417e-952a-8ef31fbc9e75", "indicator--db9186f1-6f39-4e8b-bd38-15210d08ddc5", "indicator--f1dfc9ca-9aec-4b93-8e04-06f3e00f233d", "indicator--67d95c90-6712-49d6-b9a9-c6f9e7ca71b6", "indicator--4157ab46-c3cb-45df-ab6a-10f896ef5da1", "indicator--21748158-550d-440e-96ef-c955c49684ff", "indicator--ec962048-f2e3-4301-995f-15b63f4f6c74", "indicator--ec54caf9-953e-4657-8348-920e70346e04", "indicator--03f58f85-09ea-4cf8-8b39-a2471b13f54b", "indicator--37ce608e-1212-42ad-aec6-84a26e00750f", "indicator--11973d1b-efe2-4d53-9692-80003219af25", "indicator--2027a89a-6202-45a3-8114-88ed66f5230f", "indicator--c96e607f-3d3e-4ba4-85be-676146b77bef", "indicator--fa301178-76ba-4a48-83d1-819aa5df6696", "indicator--5a93525e-b21e-472d-bcdb-90cbdf316faf", "indicator--57c1b8ba-a1eb-4a89-8c4c-728955ae57ae", "indicator--f64600e8-3afb-4332-b4e0-9de3ca6398a2", "indicator--f653d702-176b-4bb2-8a7c-2e519b6692a5", "indicator--9d1f8eb2-25f6-4a91-ab6a-2e6d914dda59", "indicator--a60ef118-7bf7-44ae-bdfe-8a6f89feebd4", "indicator--b4152323-a1e4-440d-9c21-174e299ed95e", "indicator--0eae7338-e727-478a-b994-7f804493c7ad", "indicator--8846cf18-7c4d-4fc3-bc35-e0dbcc095ea4", "indicator--919ed7d8-2149-41b4-b3d0-4cdad1e1b21f", "indicator--a33d8926-872c-422d-9b2b-3427c883829e", "indicator--c5289e07-2da9-49ac-9738-cbd8cd019e10", "indicator--62a38969-deaf-48dd-a5d0-731596def889", "indicator--cc37957c-494f-47c8-aa3f-d646597b408f", "indicator--582302bc-b2ae-4b32-a047-aa3f913e95cc", "indicator--aa30d079-1751-4e25-80d8-54bccd48ce59", "indicator--b63e742c-ed10-461f-9e62-42d975d4e885", "indicator--345efc88-07d8-4e15-9978-a12cfda278ee", "indicator--6a2d4a42-0b04-42ac-b17c-08d1b5618cd3", "indicator--edaef72e-cdbc-4157-91c6-1b9a53cefeeb", "indicator--709b8161-4ad7-4f49-b387-faa18d354a6b", "indicator--4b95138d-035e-43a8-a268-6d8d0a0556f6", "indicator--c61a96d1-5943-47ec-aac8-1e061750c526", "indicator--f094e639-15fa-4bc2-8232-672498f9f530", "indicator--bdf9ce22-1ee7-40db-b16b-af0f55956fc3", "indicator--0db710b9-a0c3-4b84-b13d-eb00799463be", "indicator--f2050105-7504-42d8-8617-66c81f1313d4", "indicator--de58c336-8dbb-4414-a98d-2572c54b5592", "indicator--4fc2aabb-f352-4fb6-a395-53feb42c525d", "indicator--d0c81ff2-6113-4184-87f3-5afe237ebaa4", "indicator--df357a8e-9150-4bf2-9050-a7a69f3fe1f3", "indicator--3c4342af-3dc6-4a5e-896a-88631f7a725a", "indicator--05a959a9-91bf-4137-90aa-70ce638013f1", "indicator--5ab2c270-96c0-4ac1-a517-e2627e1e661e", "indicator--58830b1a-f7d1-44c2-8f83-fe7153605356", "indicator--78d779e9-eb78-47d0-870e-e48887490911", "indicator--f3c80d5c-4fe0-4abc-9b29-697bfdec4d62", "indicator--9a72b95b-172c-484e-90ca-713b7347887b", "indicator--40c0f115-d1bf-4748-ac0e-39558f9e978f", "indicator--b93d055c-72e2-41db-a969-b49e40d12b61", "indicator--82a9a012-86bc-46b4-9b25-7f86e0019533", "indicator--c4c5f0b0-040c-466a-8447-11c309d2ef0e", "indicator--e3b670f8-bbf6-450e-aeac-e6fa13f8f909", "indicator--3cf50755-2f28-4789-83bc-b8798e9f7ab2", "indicator--653efc85-0103-4adf-bb97-72622356fdb1", "indicator--22c7dd26-ebcb-4e54-9c05-cbdf3738d67a", "indicator--c58510bc-7046-4269-af7f-6bcbc2e6fd65", "indicator--6919e3d4-5d87-4b99-85b9-c950633de38d", "indicator--a3b9be5c-40b1-47b4-9ae6-59d19366700a", "indicator--8ace2edf-eab8-4d6c-90e8-8ba5b52dc308", "indicator--a3b84263-b65b-41b1-ac6a-e3212d06faf6", "indicator--0515056a-7066-4543-a545-da7d8381d5e4", "indicator--e3666b44-c4e7-4f12-a591-447aae71d47e", "indicator--f631333c-f9a8-4d9e-bad4-685eae828866", "indicator--fcf2ebbd-75b6-4b0a-b243-f72ec7b799c9", "indicator--1b7fecab-3e81-4e95-9317-59def3811f46", "indicator--b1747aa4-1091-4c08-b9a8-4d398b4dcb81", "indicator--b2ee1de3-e27d-45f3-bf37-e5dc8faa31a5", "indicator--9f530b16-2e8c-40a6-8188-1b0ded131a08", "indicator--223e4aff-8527-44e9-bd1a-b18bbe62ac3b", "indicator--5a2b057e-1445-497f-b1e1-3b2eb052b098", "indicator--2891b42a-aac5-40e1-b510-fd52b0bf2924", "indicator--090a2eca-9da9-4894-b6a1-dbc9e34be4f6", "indicator--71d3fd63-0128-423d-85d5-dc30bad66ef7", "indicator--a2461a95-e32f-4bcb-9bb6-82342155018c", "indicator--b90aceae-56d4-44c1-b57a-0632eb0eee7e", "indicator--98314267-1671-45d6-8a1b-1668d177671e", "indicator--bec36903-d65a-47d0-810b-f38fa84afb27", "indicator--8eb6e7e0-9e6b-410d-b636-109b48ef28df", "indicator--61844322-bbb5-4268-b487-564a7e92d9c0", "indicator--ab0d3ce6-da4a-4f35-adcd-e348daa89464", "indicator--c567c0e3-f397-40ef-8103-37a95b6d89dd", "indicator--ddca39d6-8465-4cb9-875b-4d8a16229585", "indicator--6123678c-1359-4dad-bffa-978f8fc02aae", "indicator--90541d02-412b-4774-b6eb-490f52cc701b", "indicator--40607e52-ec5c-405d-9f89-b6b17af9b4ab", "indicator--e3faf7bc-dfc9-4bda-87da-9b72bc6e34aa", "indicator--f03565a5-e969-44e3-a584-a3034a95b353", "indicator--ebe207bd-6603-486e-86e9-85414d3ef0c3", "indicator--48eb49c1-7476-47bb-8669-9f6348f3cf11", "indicator--143f7446-247f-4886-9050-15bdb6f79d03", "indicator--7f2b248b-f53b-4b7d-a4e5-b3a4b585a3ae", "indicator--6cafb9ca-03cd-412e-8727-ade888dd729f", "indicator--b42ad231-6e53-4a8b-b097-abaf1182fe3b", "indicator--053dcdb8-e9ce-4fa8-a6cf-5c09096c8e9d", "indicator--a152ef43-dbb3-4212-b4e4-85ce67b9ff76", "indicator--8b983fc7-5b0f-4b42-9350-06244a69f163", "indicator--4b862816-0e84-473f-a246-d79d1a13c3fd", "indicator--8e0c006b-9fbf-41db-a9d5-3ea203574008", "indicator--24d23a10-d66f-49b4-8393-8db1633d18e5", "indicator--bdff04fd-2317-4772-8963-faed936606eb", "indicator--d201bdb4-eb40-4904-8765-3bb886e51caf", "indicator--bd3dd1bb-2ab6-4d32-bac6-6f530be6dea8", "indicator--47b6332d-3101-459d-a87c-d81cbc748473", "indicator--232a8900-509c-4eb2-8eb7-7df7416b2289", "indicator--b4f9778d-4eea-416f-8556-686aa1260500", "indicator--31d2a309-f5dc-4499-a35c-9af702081949", "indicator--8b87fc2d-4fcb-4241-8127-25936bdfb0e8", "indicator--11074df6-7966-4572-ae34-ffb48cb6a370", "indicator--38a302ac-af06-4346-a3fd-6157e4f836be", "indicator--c8b3002f-8e75-4337-8fae-a290b4866ecb", "indicator--abcd742d-96c2-41d1-9286-db46165a6a88", "indicator--aec6fe11-ca4e-45fc-88fa-5d80be4a3a6e", "indicator--21ff1592-c19b-4c6a-bd5b-b1c431099170", "indicator--0ae5d0c8-9d38-464e-9cec-7afa81b4f424", "indicator--43a08624-8b03-4f09-8f1a-ddade7d1366b", "indicator--b308b71d-79ea-404e-888c-8af97c4ec1e1", "indicator--f9056e8f-2c9c-4ecb-afeb-d4deacb6bb62", "indicator--5aa62b36-f78a-423f-8c03-ca8050c9ae23", "indicator--5c7c1f55-62f1-4142-94ea-9491733cf495", "indicator--bc0ad954-8da1-45b0-8257-6b9e763ae920", "indicator--c5087ee8-c37f-4e09-8044-80c84d58225c", "indicator--db4742d3-b5e7-482e-aaa7-775e519854da", "indicator--add5071e-0d92-4d56-b762-156f2fbb8a21", "indicator--ef082c01-4209-45ce-9712-1b14d1c20aae", "indicator--e0cd3f45-336d-4a09-b983-2cbd810881af", "indicator--063a9cf7-ac02-44d5-863b-27b41442a744", "indicator--15e5d882-081d-40ae-a19c-abbdc7810953", "indicator--82dbd718-5253-4f2c-95cc-1d9b377311f1", "indicator--8a6a8dc0-58c7-467b-9839-7d61130f06eb", "indicator--5d53b24e-78e1-4778-a33d-305b0dc6b1d8", "indicator--d22db5f1-733c-42ac-a9eb-58b229b4bd6e", "indicator--cc5404be-e436-444d-a944-aada5e558e54", "indicator--c57adb7f-0b3f-47ae-9e53-2e7a47faa13c", "indicator--d41cc838-416d-47ed-8e82-3c77c70ac944", "indicator--6c3599c0-3fa8-4afe-a340-be09afd6ed1a", "indicator--1e95e13b-e4c8-40e8-ac65-a0a706ea9a92", "indicator--05be0a64-2788-4e62-a111-69c4292c99d8", "indicator--4b3f6fdd-03de-414b-92c1-2f11fb996f46", "indicator--698bdf17-81a2-4ed0-9774-164cb3de5926", "indicator--9c1c3ff1-f49c-410b-bb6f-0126e01a9127", "indicator--f96293a5-edf9-4a86-8017-eb8779d03baf", "indicator--1f185314-6c2c-42df-a6d8-d789a405151a", "indicator--1acb646f-ee20-42a6-970b-7782ff9d8196", "indicator--52847645-edd8-4ae3-873d-61fb7f13a6a9", "indicator--96ac087e-7143-480e-b8c5-eab5ce88dc23", "indicator--3e8330e8-959b-4cbd-ada8-0bfbe6792a1a", "indicator--0bb2e240-fafc-4351-a210-27e8b8ec6a79", "indicator--47e3f467-4a8e-477f-8325-448fac0210bf", "indicator--73bb2e1f-8220-4f71-b3b9-131b057d2e6d", "indicator--647b168d-b95a-449d-ba51-3fda99dc7824", "indicator--ec96a227-c605-4b58-b655-baa1ae779e17", "indicator--f0831fed-92d5-4219-8ed0-c1f144fca8c4", "indicator--0753eb15-a500-4c06-9de4-8edf848aaf95", "indicator--1756151b-d306-4d56-be70-0856464c974b", "indicator--a0a590ed-8519-4338-a5d5-69e0a40e6055", "indicator--f2199d4e-ee55-4aad-b014-80bd275690bc", "indicator--e3f1411b-9c93-4322-96e1-2f6911655333", "indicator--6f407e9c-52c5-4f8e-8751-b9b5272057b1", "indicator--246b916b-7b9d-4db0-8f09-79a7612d6535", "indicator--2ca36dac-837d-46c6-a932-764476ed72d0", "indicator--8efd5d21-4464-43a7-b0f4-a40dfb752a2c", "indicator--7f5e2ddf-2648-45fd-9019-443276d5d83f", "indicator--41945058-2028-48a5-bee1-620ee2815a98", "indicator--e9347579-d3ed-4023-b510-e408d7af7487", "indicator--a0afb7b1-14a6-4d22-8500-70fad1aed16e", "indicator--02818711-a795-4338-a4b1-38e6b4d59cd4", "indicator--b324cb76-20ad-484f-b204-af8d3b8e3b4c", "indicator--416fab02-2ef6-4022-842f-e76e1cbe4b9c", "indicator--53352b9d-741f-4211-bc91-f786b7791b56", "indicator--e6e6573a-23d7-47ae-9055-601931eeede2", "indicator--4b93c110-3a5c-4635-88bf-48f73d60d52a", "indicator--ebe8c834-7783-4700-b10a-76a2d157c3f0", "indicator--4b3c5be1-f26e-491f-b8a3-88a24f6fc8ce", "indicator--ea05d723-25fa-4603-ae4c-c150772791cb", "indicator--4ad4d502-7a88-4a44-9df3-d920ed1448de", "indicator--6b286caa-d3b3-4eed-baf2-d86244d0feec", "indicator--3bbf9056-8ec4-47e2-8dab-20eb45ab214a", "indicator--9ddf90de-977b-45ab-a078-be28f3faeff5", "indicator--f19f2726-df02-4de8-8793-7cb62748896c", "indicator--e8195743-068e-477e-8df9-44b22b5c15c8", "indicator--fd8eedfc-5bb9-4e62-a40a-61f5eea70f38", "indicator--da3e4a66-6d9a-4a35-a585-1b4b90340268", "indicator--09c1664b-dc91-46f1-a25c-6d498779fba8", "indicator--d8dc7b4c-c6f8-42a7-adf0-34344f845c94", "indicator--1b487773-c1df-41d1-80f6-4ccbbf87904e", "indicator--954ee49c-3639-4a46-93eb-67af29d1332f", "indicator--cc692abb-b530-4ca0-afc6-2d94ab15a77a", "indicator--75234df9-90e2-4286-986d-39525194f959", "indicator--ea6ce505-15ce-4f74-928c-4825d2f0b0e5", "indicator--7e0a6c6a-7af2-417b-bbe5-873141e53c2e", "indicator--4e3f177c-0b26-4766-872a-0d49418592ec", "indicator--6705173a-9c88-4c55-ad6b-21e3dc31ca51", "indicator--60c07051-e425-4bf7-88b7-6553eb1ab18a", "indicator--ea91eb4a-046e-40c7-9a18-dc4342f420e3", "indicator--23679f8b-8d67-459b-81fc-7d12c56cbb9c", "indicator--994707d6-a262-48bc-a8ad-d07bf77e035e", "indicator--5ac41fc4-fbe0-4a45-aecd-aea804c3e021", "indicator--adece47c-9f66-404c-8e42-e3e0217458af", "indicator--3af0cf5a-b823-4f2a-863e-9c2de3e2beb8", "indicator--e62f0e29-d2f4-4a06-81bf-29e9f6677dfa", "indicator--560ef02b-a386-44af-a72e-5ed1a5e38445", "indicator--e0901d04-1688-49f1-9289-e4941258879c", "indicator--a9947f22-f611-41ad-b7e6-5e95f42625f7", "indicator--0d0f6f00-4b80-4d5a-b532-81869a620a3f", "indicator--c773e60b-bcf8-4bec-be0f-f8fa46c80851", "indicator--5e803094-a956-4de0-bfd2-ed72902095ab", "indicator--c70dd62f-3f0a-4bcd-8a8a-9ab320c1a873", "indicator--57a4f569-4476-435d-a143-bdadcfc2addc", "indicator--61f9a4c7-b3ae-4f6a-9316-6cf9e21eda1d", "indicator--1990f2ce-837a-4f59-ab65-1bf08e808444", "indicator--404abdd9-b275-44b1-afbd-fbe324105879", "indicator--8badf68d-11e0-4e99-b77e-b3a82414b557", "indicator--ac7fbe41-7f33-4ce4-a041-2b2ba8f68451", "indicator--eb9bab7c-49a5-49eb-820a-9274631f5514", "indicator--6644259f-f68e-4538-afb7-0dff7ec03cc4", "indicator--ecf39c81-f5b4-470f-a779-65236c8fd76e", "indicator--2646f05b-d8f4-4585-ac87-a1a790964f86", "indicator--64442b6a-9f39-4bc2-9ab5-5387539dff2a", "indicator--fe916ea3-5b36-43fb-bd5f-4f2669cbfedd", "indicator--affacbe6-e1e9-4e3f-a076-bd3d6d8cae6b", "indicator--49703804-de11-4c19-a1b3-b45b7f368370", "indicator--c6be281f-6b66-4668-8ce7-dab5f7dd0ae2", "indicator--0160a1ed-85b6-485d-99ab-183fb41cdd4f", "indicator--d9fb4bc5-b6a2-4f94-a64a-bdfd69974d67", "indicator--4bf59fb8-1c8d-4c5c-aa3b-c6cdbc1bad8b", "indicator--dbfbf927-40ac-4d9b-a8bf-42ca259173db", "indicator--38e1e0c3-e116-4183-a3ce-173f14941f2b", "indicator--62fb9267-1cf2-4ac7-8718-3d826d28620d", "indicator--ad612534-2905-47a8-96f8-484e9517b62a", "indicator--b77427b2-6a2f-4e11-af8e-8f15b988c27f", "indicator--9ac74b5d-da0f-4094-8d28-d19dbd6f9625", "indicator--505fcdd5-3366-4325-aaf8-36e14c5a55da", "indicator--43985d64-be86-473f-9ab4-5795388ecf07", "indicator--b36bcaff-47b5-4e1a-8945-8a5557cba903", "indicator--656a84a0-cadd-4ab4-a654-503501ecab74", "indicator--06dfce13-d11e-4833-93b0-73f8f62ff4b0", "indicator--df04f3ad-ee3e-45b3-9498-aa921e1abed3", "indicator--5da4b251-6686-4717-9bb8-0c73b71c75b8", "indicator--35dfc8a2-dda1-4f0b-84c6-a925bede6698", "indicator--8e19224e-78f8-45a1-85f3-9c484059d7b9", "indicator--5ba05232-d1d9-4734-94c3-6cf4efcbd677", "indicator--2132cbf9-58a4-427a-aaeb-b0b9161f467a", "indicator--8c64a625-5413-47e0-a00e-f775eae535fc", "indicator--94173b61-de23-494f-9f18-cdc9316df8f5", "indicator--c23477eb-1ef1-4656-877f-9fbd559980da", "indicator--c3199319-9ca2-4610-bc95-09b03bba2ef9", "indicator--0d53ad9f-c8a3-4d87-9b4d-62dae965ca46", "indicator--cc4de637-4469-45fc-bdfc-becf5997b430", "indicator--a2e9ecf3-5548-41a5-b38e-0ab6ed5e694e", "indicator--6abce5ed-c9e1-49b0-be45-2b3f5175d9e4", "indicator--983a3aa7-616b-4fe7-b884-4cc93ef2f9e9", "indicator--cc451f93-d9c3-4182-aceb-587c3b5266c5", "indicator--f415cb0f-e5b8-4e4d-99a4-0741c974583f", "indicator--2e5d0598-25fe-4fe3-9d0b-93524f5c1659", "indicator--1dcb3501-3842-4860-8bb3-e86e2aa93a94", "indicator--f036bee6-ea69-42e3-883b-c5bcef01327d", "indicator--17ce766f-2650-4214-8e0c-8e19cd46f7f6", "indicator--577d91d7-e19a-472b-810a-01df5de943d6", "indicator--458bc7f5-d50f-44db-9110-4b932d074d92", "indicator--d229b7b2-e597-4bd7-986d-6fc6c40dd7af", "indicator--d8e38676-4c21-4bb0-9771-37be2ab2030f", "indicator--1da310ee-1deb-4a0d-a3e3-46870b8c4904", "indicator--ce7b111c-78f4-4d91-a96c-b27ffa114b3c", "indicator--d7e0d426-5f8d-4993-8886-e59f4d4fd337", "indicator--7baefb2d-5c07-420e-bdd9-0810792ae2cf", "indicator--6e2b4182-bf74-4719-9d87-3cef54aa9593", "indicator--72839150-cc2e-4150-9c55-51b24260b751", "indicator--6605bf4f-a1d6-4d51-94aa-0d53d8a52ae9", "indicator--b9afff64-0096-4dfa-a3c9-1d2e29bb79d5", "indicator--22edc413-3dd7-401b-9335-a89b607b704c", "indicator--6dd1d3b5-8847-454a-877e-a3d094486d1c", "indicator--6abf2546-6d11-4698-a930-515550ac2371", "indicator--afc09b27-8fc5-4ff5-8ab5-9242ab45b47e", "indicator--5ced69ab-3f53-406f-9643-86e1f1596797", "indicator--02fc7c08-c406-4a59-9ed2-c213c1157583", "indicator--3dd176e6-ef2b-4d41-bbe6-449c40660582", "indicator--c2b111a3-181c-4764-b954-26a50cd52275", "indicator--9b9491ad-7fad-4b75-9df4-33422459ba3a", "indicator--a9df9b41-bace-4129-b458-5b3dce6bdf25", "indicator--670bc077-20e3-4fe4-b015-a577c268c212", "indicator--80186833-519c-4a17-88c1-81c8b9acd640", "indicator--01c220a8-bd9d-4527-adb2-4fffde71d922", "indicator--7172aad1-953a-499a-9fec-c3895927fa59", "indicator--1ea672c2-7ce0-42fc-aa24-6c92274e17fc", "indicator--55dc8f0d-82a7-4828-821a-8edac8439988", "indicator--6c176a18-48bd-4003-9fea-14c32ef37879", "indicator--64bb77cd-b8fe-46d1-86c7-35fbfb605ed7", "indicator--d1e6661b-147f-4906-a386-70910ecbd41f", "indicator--76c66c9a-97ce-45a5-8c84-8de17f7ab51d", "indicator--20325168-bead-4f2c-8c7e-e1a809ef0448", "indicator--cbf0ba50-4a3b-449b-b8f6-35011801ab7f", "indicator--a52b6c73-f2fd-4815-adfd-6dbe7c141a1a", "indicator--4053cb6c-dc58-4542-9dcc-474644bec230", "indicator--4adb9865-20b2-44e7-b49a-baf2da19fcf4", "indicator--7d9b46c0-f507-49dc-9790-374ded6916d2", "indicator--b286fe1a-44ce-488d-b362-5ed7e820f0e9", "indicator--fe4da9be-d244-459c-8cb0-7d6e70a5d832", "indicator--bafc641a-d1a5-4a70-aa4c-689ea00dd3b4", "indicator--30bf0b26-c2f4-4f42-a5e8-42228f9b6e8b", "indicator--c198c8fd-1222-402e-a21f-cd09f26e98c4", "indicator--fce9ad29-1f0b-4253-b83b-8154cde4f913", "indicator--8eeae56e-7655-4d16-93e2-e35f0bce1fcb", "indicator--58b46018-257d-431a-a0ed-76976375cc01", "indicator--217fb757-746f-45c6-a6d3-37180ed31c43", "indicator--4f91ffc1-8c48-4a43-a4de-e06d2a2effdf", "indicator--a5753b17-46ab-4036-a511-1a8ae4f62540", "indicator--716ce487-a120-4132-b088-f5f31967c34e", "indicator--77b968e2-02ab-484e-a0f8-1a0139a43eac", "indicator--9f1b611d-87bb-4d0b-8ac9-df69183e0a29", "indicator--334c33bf-8448-41d2-a1ac-790d7f710bc9", "indicator--8584fd79-2593-4c5d-b1b3-6b2573e4c731", "indicator--c5d84d49-5411-4fe4-98f8-d73af60d1439", "indicator--d7b127c8-1b9e-46be-9471-886234633c21", "indicator--586fefcf-fd74-402f-9422-6bf117440167", "indicator--d01d3ec5-c7ee-44fc-909d-2eabb89516a2", "indicator--31c0eef1-d908-44c5-b3e8-aff577bdd1f1", "indicator--ba6e8c44-1f56-435b-b26f-1d90a6ebc167", "indicator--d8b57389-c33a-42a5-a9b5-c142d77c6722", "indicator--48d1ae33-5f8c-4099-8c14-a0f0f384b2bc", "indicator--89244c62-805e-4314-97fc-785cd4765b98", "indicator--b9680626-36a8-4182-b6c7-f538bbf28c8c", "indicator--b0fd1e8c-ad93-4f84-a7e3-7921c6632c1c", "indicator--230b58c7-4e93-460d-b4be-f7ac1a8ab2a8", "indicator--f5532b2f-72cb-486d-a6b9-f31a451c1619", "indicator--26602b02-e4cd-40df-8e0f-e10af550de30", "indicator--72d06f99-a640-437e-b51a-8259421bc2c3", "indicator--47a1d42d-44d2-4779-a9e5-85aa53c12d8b", "indicator--7f468900-691b-476b-b465-74c222ae37df", "indicator--dfed75af-02b7-422c-94ea-5082fb8ea7d9", "indicator--bdcaea8e-f533-4164-a512-6a6dcd6f1e47", "indicator--d2185687-66ec-4496-b4db-612e696a4a44", "indicator--7e43357d-6ce4-4aea-a618-6e92dd589e82", "indicator--541aae2c-a7e1-4591-a1c0-b4876ec33cc9", "indicator--aa807f6d-7c9b-40a1-85d1-b332e6ecb728", "indicator--031696fb-146e-4256-92cb-9d4c13c363cc", "indicator--1dff314a-da2c-4c56-b902-d192ca7d8add", "indicator--f2fad5ab-e2cd-4d73-b0e1-72f1cf4d9402", "indicator--9b772ec4-92ca-422c-83ce-b3738ba2d76c", "indicator--232dcbb1-5fa6-4997-b568-489ca11fe535", "indicator--8ae9f726-da2b-48d2-8c75-eb9cf61c1da8", "indicator--11a42e48-3f7e-430e-8ae0-f772c86f48ac", "indicator--baa0a549-9086-4b36-8d0d-651bbf2f802a", "indicator--17bc8845-bf78-4fd1-9e31-5c07c28c33c1", "indicator--a1ffe28c-0525-44e4-9e05-19ad1921e3ac", "indicator--d7309c14-5084-4861-95a4-e94c4c01441f", "indicator--fea5a989-8607-4a51-a705-f77e74710655", "indicator--a345ad0c-024f-4c19-8241-9f20bd6ccbb1", "indicator--386363aa-2e2f-4c95-aeab-f89a225a596f", "indicator--adac84aa-4bc7-4b54-abdf-43f220b08141", "indicator--66293339-bd06-4402-be41-0b0e62ffd93c", "indicator--77b43092-fcf4-40df-83d7-419c78b0b189", "indicator--a1e1394a-2cec-452e-9a81-5f9d609d419d", "indicator--9d26ffb9-b41a-4e24-bfad-916b40e5bbdf", "indicator--3a01b5fb-7a5a-434f-8209-2d8630a41dbd", "indicator--13d846ec-21a3-4ecf-a3fc-1fa2e6e09001", "indicator--e67a23a2-241a-4ce1-bd46-6f8735beb463", "indicator--4cecaff1-ef6c-4a07-a8f2-119ffbd7373f", "indicator--78b979fe-9884-4266-be51-48d240d679e9", "indicator--9f6a57b4-d0c1-4aa4-9ba3-e5a97e381931", "indicator--6db90077-74bd-4265-aaec-7ef076678b4f", "indicator--bba281e5-d098-490f-a091-cf1be0abbbbf", "indicator--3b5f4807-4d57-4473-8ddd-8ec3860d51eb", "indicator--cb6a7f9a-3b05-406b-ac8c-3b08e09b05b3", "indicator--db62508a-1968-466a-aeef-1d79e8edde23", "indicator--e66e93b3-4dd0-4715-a391-4a9687708b52", "indicator--dae729f8-39d3-46f1-9f0d-fde133dc084b", "indicator--bacf5cac-f968-45c2-bc4d-61f0c7ed50f7", "indicator--87995d77-bc24-42a3-9e78-4cfb5085db86", "indicator--40b7ced7-8a9a-4881-a817-dccaf898ae18", "indicator--42bb3507-ef96-42b6-9c3f-86febaacdc3d", "indicator--751684b4-5828-4b7a-9ec4-3ee18dbdc33b", "indicator--cf9941af-713d-4677-a28f-78a095a21a98", "indicator--71d5353d-0046-43f4-b42a-b9590cd09287", "indicator--4a6353a2-c1c7-4c5e-9449-a2af5ea0d4bb", "indicator--f05a939f-d13e-428b-a5b8-eda94d433a30", "indicator--391769dd-4412-4109-ba8f-b0a9ef2b3189", "indicator--1b64a015-f263-46f0-a0cf-ca25d42ab98e", "indicator--91323bc3-b9c4-4f9b-b4de-c5fb47b5e268", "indicator--01141838-94cd-4cc3-af5b-9a7ce9372160", "indicator--488cb7b3-5932-4dbc-9d8a-e3a3b881725c", "indicator--e8145016-b9c5-4b29-b577-e192f8d5f6ab", "indicator--b74e35a3-8644-46ab-b9a9-f59a5e86d646", "indicator--634bbc92-35cc-4f7a-a2ea-0fb672c506f2", "indicator--ae9cfb96-2033-4041-9e77-98c32e570bff", "indicator--ecd53779-02aa-44b3-a6be-d8db74540dc1", "indicator--7d87918b-f5e8-4dcf-b856-e24d7b31902c", "indicator--5db062aa-da20-45c4-b49f-b286e9fbd79e", "indicator--1d8c8d38-6b10-49c0-8cd3-e3cd43343ddd", "indicator--c8723322-192e-40ba-bdd5-e70e1a41cd30", "indicator--99703c73-d746-4303-9f7d-19a4ca70e298", "indicator--68c3e560-ba0d-4cd0-b211-e3d894dd1987", "indicator--bd80722c-d6a2-4377-80cf-474be19a56dc", "indicator--d3cf5c68-4060-4427-a76e-5191bdfa03e3", "indicator--b57a7974-3cd6-446f-b9e2-e055e69bd188", "indicator--1b8475fc-40fd-4f0f-a502-2a0c58e9a2b1", "indicator--c0ca349a-0196-486d-9bd9-3c3b60a8101e", "indicator--ce938236-0942-48a6-ad4d-e51738c658c0", "indicator--cafe886b-da57-428a-93d8-18909b9b05f9", "indicator--9d65ab37-2ed6-4735-96dc-8c042a3549c4", "indicator--0e206397-9706-4d0f-804b-236c7809b4a4", "indicator--de7cea8d-542f-4d41-bbbf-5c0f4356339d", "indicator--20cb0a43-a0a8-4d0b-8ef9-2fbafe0fcd6f", "indicator--6a2dc44e-ae42-4fc1-969e-4f74fea8ebb5", "indicator--eb9ad00a-3750-40e2-8f91-a339e25f313f", "indicator--e2d54c05-b275-4dae-a643-344dae9e0ae1", "indicator--89c8b15d-6562-4ff0-9344-20375adacb77", "indicator--c0907151-da57-4892-a134-39135469f7f2", "indicator--f966a705-9dc4-4760-85f8-6d6dae7b9da2", "indicator--40d593b7-6d1e-4773-bc29-e6b84405473c", "indicator--77bdb1c7-2070-4d54-bc5b-1923a491a26b", "indicator--fe488807-27bd-471e-99c8-92cc1465220f", "indicator--1da3a5ce-20d1-4938-ab28-90225c840279", "indicator--1c2dee9d-552f-493a-95fc-a145e2a9e5a8", "indicator--e1dd0703-20ce-46fc-af17-887a8677671f", "indicator--34e4eded-41b4-4ae2-b8cc-35eda44ed53e", "indicator--190366d4-a644-43c4-933b-f202642678c8", "indicator--ebb7eb51-63a6-4d70-a589-6e60f6f7b981", "indicator--b23ce699-2901-41ab-9135-32d8e812c828", "indicator--2988316f-6add-43b7-8122-19e84b5b0ff8", "indicator--86d11c7d-6e62-4ce8-b6e7-033ec6b7384b", "indicator--538cc916-3fa4-4d33-809d-1312c12da3b6", "indicator--40a8d696-0421-4f40-94c1-71405685e8b2", "indicator--93b18e3a-57a5-41ee-892f-01cd4a423e6f", "indicator--ac490fdb-9867-4d53-90c1-1532baaf4849", "indicator--72f30aae-94af-4140-a1d2-3241bb39b8af", "indicator--a8debbaf-6bf7-48a8-b487-2b3f14c46f09", "indicator--f285029b-debf-407f-b42a-e631423077d2", "indicator--f949273e-a61e-4837-921e-a988ca04fe1d", "indicator--60dac1fa-90fa-4b29-a2db-a9ab6cc38682", "indicator--f5ea2912-15b3-4ce4-a213-190825e27200", "indicator--9307982b-fede-41f7-a07c-ddb4f69f15a7", "indicator--1df1f93e-32e7-4af2-831a-f47b585e9732", "indicator--4930511d-bac2-43d1-bdf3-6ff85f3c9511", "indicator--39930efd-af83-49c6-aec2-2a9394af4424", "indicator--5014b1ec-557d-4870-b0a6-f90742e84461", "indicator--5f80c411-c4a9-4dd2-8083-6bb09a4167aa", "indicator--f31c9798-08ea-484f-9027-3c4cb3b5acf1", "indicator--b3ad2c3d-aff1-4c7b-be09-587e6013eb50", "indicator--2a2ef913-b0d0-4812-a940-e52ba9fed38c", "indicator--8c65d5df-d43c-4f52-b8e0-85bb26590e89", "indicator--4aa09943-8c08-4972-9a0a-8e5a0e9d0362", "indicator--1089ee70-3028-4a14-9471-e6ff28e227b5", "indicator--0c813b4e-f83d-4df9-a57d-7c3442728d94", "indicator--4d9cd731-eef9-4058-abd8-9dd982a8acd4", "indicator--a4f375ed-8812-472a-a1ad-2bda60dfa90f", "indicator--4b161b31-de18-4c91-ad72-e6f4e119f29b", "indicator--e2ba39d8-cf37-4c09-8728-d09f15f3d874", "indicator--03e040d7-c4b6-4734-878d-fa9280943909", "indicator--b1cdb172-11ef-464d-90fb-d218105611fa", "indicator--f5807cf8-3f8b-4ed0-9ded-708372bf4fb9", "indicator--a2fcddf2-375e-40d8-96f1-ebf5b8c97fde", "indicator--b69597b0-4fc1-405b-b9fb-ae53f8b29943", "indicator--ba56caea-423b-47e5-90a0-033240d99e4e", "indicator--5a5747ff-30b1-4ee3-a1ab-fb69e41d772c", "indicator--5e1e3be0-1191-4146-bb1f-c1e5ca2b6994", "indicator--5c9ad6c9-71f9-4e12-971e-605bc3423f40", "indicator--42b2c746-84a8-4122-a644-d14fef1bfcca", "indicator--91824e86-0e17-4a7e-99f4-7572f8df6d43", "indicator--b6598ff9-91e1-4121-a02e-eb34d72c30ca", "indicator--135f45ee-3052-4499-9809-5ef5c92541f6", "indicator--179a3488-2446-4491-bab3-308a5e0609ed", "indicator--3875398f-5b55-44ab-86ce-91e3f2ad7e6e", "indicator--674b51a5-a767-4da1-a2e0-db6889ac9ed7", "indicator--f579532c-439f-4112-9eea-e1cd1e5d5548", "indicator--7a03656f-2361-4cb1-9291-e4af8c70e4ad", "indicator--5564caa1-1a0b-46bc-88dd-4a1f6e37d3af", "indicator--90f2ae3e-cee1-40c1-b77d-9d1c658fae4c", "indicator--e312034f-8876-4091-9635-da1c2fd85cfc", "indicator--e5c53faf-fdce-4759-81da-a60b978486f5", "indicator--76f64ccf-1b59-49a5-8613-b8bbade14b20", "indicator--9b120a41-3302-4e4c-9119-712ce8157ff7", "indicator--933c9242-c676-483a-ab4f-85765ae9864f", "indicator--6238fa75-22d1-4746-ad08-ccd3a4677120", "indicator--116ad9c5-7161-40f5-aba5-258e9e24b5d7", "indicator--06dbf132-feb0-4a48-a359-bed06c6f07ce", "indicator--64b08050-8d49-4b6c-8db7-258ae76a0181", "indicator--d2e90fe7-b597-409e-aa89-9d7af7e6512a", "indicator--278f0224-c494-4892-bf12-819bbd8c2879", "indicator--f7e69307-0c0e-4584-8ba7-4154a72c2969", "indicator--c29dc309-7f83-4c63-af3f-1e56f8c8aab9", "indicator--1c29b845-7e9d-4bb9-b377-938f48f65777", "indicator--a9dfee61-07c5-41c4-9e2d-f91fb7c5e209", "indicator--5be91fe9-fa9e-49af-8058-5a0211f2ec50", "indicator--bc6e0dd8-0141-4f4a-b980-b03ed5cf402f", "indicator--02482fb3-8f77-498f-bf10-55ec93c18846", "indicator--abb2f8f7-d7a0-4354-bdb8-d6dd5514ce03", "indicator--766664c0-5061-441f-9385-d17167e120cf", "indicator--c0d55f33-174f-487d-96ff-5edf0e0d8667", "indicator--35b8f628-b79f-408d-9e2d-0e1ec98bd146", "indicator--a4bb4b00-181a-478e-8a30-e6d148214257", "indicator--ef693e2e-2c33-488e-b5b8-89ef0d628346", "indicator--74a1f40d-095e-4eec-9237-e4ed069f50e1", "indicator--b86b2526-b9d0-4bb8-b829-8076151dffba", "indicator--dde78fc6-b8a2-4933-bb8a-af311db9cc34", "indicator--7c203b79-aeb0-4704-8d5d-f5ac7f6f1989", "indicator--add92407-df95-4d0d-bafe-68bb9b76e0f7", "indicator--cd770c05-8c95-4af9-8e06-2be30c010aef", "indicator--88734931-6ef3-4db5-81b7-ff2c51111ae4", "indicator--69835e4a-cc2c-48d3-b85c-94099be2db9d", "indicator--5c82dad8-1296-4894-b486-bf8cf540acae", "indicator--542431f7-e96f-488d-b334-0f73946214cf", "indicator--b260dbae-40ac-44e2-8b30-9916b47189b3", "indicator--a459ec68-adbd-4921-b32b-8a86252a03b6", "indicator--fc50d121-ee9a-443d-8d82-05db4546e66f", "indicator--102fd1b5-0b6d-4be5-9cbd-6117fded92e2", "indicator--6809bce8-527c-4ac7-b925-75f01bf46f92", "indicator--6f9c010a-16ff-478b-b8e8-556b1221f51b", "indicator--d03a751b-d9ce-4126-90a5-36dcfe3dcfb6", "indicator--1d0ca0be-3023-4c97-aac7-127e06baee1b", "indicator--7643f5c6-901b-45e4-897b-352c3b969854", "indicator--cefa5f08-a47c-43aa-bdd4-caa1060043b4", "indicator--2500d4e2-6be9-4a51-b309-f7602a6ae42f", "indicator--024c81ff-7271-4eb5-bdbf-22341a1107c6", "indicator--124b0a9c-82a7-48fa-993b-3ef88699ec9d", "indicator--21673897-03b0-4e67-abee-c1d9439f8030", "indicator--0cfaecf6-6952-4aed-a115-8f927ff17ccc", "indicator--933cc0fb-27b2-4fb8-b6aa-72c98cc0576e", "indicator--9a219fa1-f5e7-4404-aca4-cdac8c36391d", "indicator--ff598f76-86a5-4dc2-b22d-21465db6c76c", "indicator--1543e9f7-e878-4593-bde3-250972716e0e", "indicator--b0ed98ef-fdd7-4fb7-bb27-5536e5eb9300", "indicator--40b75967-a48e-4366-9f39-8c6cabf2d002", "indicator--5c2245a6-ea2a-4d53-8d3d-1a5bb281c73b", "indicator--44f5f2d2-d67e-409a-a268-b51ab80b810f", "indicator--f822a207-afd3-495a-8545-1ee987d8f304", "indicator--ca7558ce-5ca1-4466-b5e3-c500ee21b4e7", "indicator--9576aa8c-d914-4599-89ab-8bb1a1dcfa7b", "indicator--5b56be93-159c-44fe-b722-db4a2cd80117", "indicator--2ac2074d-ba8f-4f3f-baf9-0440ae941590", "indicator--7f5957b1-d25a-4278-89d8-c4729accb48e", "indicator--a7f8132b-beb7-43c7-a7b5-33367426fd64", "indicator--ca35ae5f-c83d-4440-be65-b33602e9df5b", "indicator--f3facf68-244d-4a69-842c-96433e53162e", "indicator--81188b8c-2485-4f6e-8638-97c8ab10d70c", "indicator--38fc8c98-dec6-45a1-b1f8-97f879ddfef2", "indicator--ddf68029-0e61-4e55-bb91-b8dae9c61427", "indicator--34883b1d-3952-4b03-8501-43872335cfb2", "indicator--26c42da1-ef95-4415-ada7-c8b7cf75edf2", "indicator--26f32825-1aa1-4103-91fa-9ef2872b6bbd", "indicator--3a3ce22a-69fd-453a-823f-b9c46aaabec4", "indicator--541cbc75-d5d0-4dfc-a2d6-36cc12488ef1", "indicator--9087673d-2d40-44d0-a642-3ff63f3af7ab", "indicator--5e6041ae-a814-49c5-a9c2-976b578238f8", "indicator--76d0bcb5-5af7-42de-af92-01e74a81a4e8", "indicator--9bfefff7-a1b2-42a4-b6c6-37ddf5ea8c8d", "indicator--58bd8475-c7c5-4d60-b13e-18bb3b0d2084", "indicator--95f9112f-1b05-43e4-9fc6-ea03a40fb1a0", "indicator--26a0b3ef-c791-4489-9713-1f5cf7f6c108", "indicator--b5ab15e9-b8f3-413c-974a-d1e07896ac20", "indicator--66391f76-3bef-40fd-b272-f8e8e51d66c9", "indicator--d1d4856c-a195-40b8-a8f0-b37d5c093129", "indicator--39852971-a4c6-443c-973c-c8538d159b6d", "indicator--5f7574c4-7dc1-471c-9637-44473792ce3b", "indicator--276d7420-e9ff-4bb9-90a5-50ed8e7fb1cd", "indicator--1c205aa9-d0a2-4e63-9551-47433e895779", "indicator--f9dbd81e-26ab-4fc2-b37f-a4f014be1e7c", "indicator--a09fe1c7-7dbf-429c-8568-7d0a6517333e", "indicator--2869f751-f909-4a72-a7f3-8ba72281ebc8", "indicator--844f78c0-c84a-47b2-a752-0ae59de94e1a", "indicator--05f3847d-2097-4810-8492-d95380fddcfe", "indicator--f0d7eaeb-7bba-4b2d-b085-3fbae2d5490f", "indicator--d54895ff-4fbf-4247-80c5-8c2a507eaecd", "indicator--351f450c-4c09-49cb-a3cd-bda037088864", "indicator--ee87c704-7323-474c-8c81-77bd43d6aeb8", "indicator--c3f6f7e2-75c1-418e-ae92-a8c823f0f03b", "indicator--8e889f3e-a947-43a3-9aea-6d2dc60a41cb", "indicator--1316f709-3ba3-4e8d-818b-c0ebdaf586ca", "indicator--a35dd92b-eddc-418c-84ef-7943a26c8eb4", "indicator--e2dfca7a-5192-47f2-a054-87db5036986f", "indicator--52deeab6-03fb-4a47-bfae-5fcc71c56365", "indicator--0df1d4f0-e47b-4f1f-a07c-9eeefd96bc95", "indicator--fe483d2d-82a2-4d69-a38d-4a22ddafcc62", "indicator--1669ef00-2b6b-4f34-a8f9-14e9bb3d13df", "indicator--757cb709-71fa-4f88-a189-450a5cf27bd1", "indicator--1715120e-6853-4c72-9ba3-486d1ff0d09a", "indicator--c151bee7-885c-4f0d-98b7-e283974b686d", "indicator--b62fae93-2546-417b-8b22-d007c4dc422f", "indicator--8f373b87-223f-4902-88db-140a88d13237", "indicator--fcbe12d6-d5a9-42b4-b03c-926bd56f613e", "indicator--22f76e64-e153-493b-b874-2d90d8d53989", "indicator--b5b306b2-162d-4300-b79d-4490dd53701f", "indicator--61e87f41-8c32-4acf-8850-0f9aeddef6eb", "indicator--4661a3fb-f078-4490-8639-b2afbbc993db", "indicator--4ef88c65-a437-4f13-891c-8d6ef14f2bcd", "indicator--8dae8d5b-a11f-4651-87ed-c4c5f9415a1b", "indicator--b950bc76-d33d-49ed-bee4-94dab4010716", "indicator--1ca0c58f-fc55-43e1-a45a-6a0fa0e9c356", "indicator--6ef5a313-cbbf-460a-a8a8-1333c4d8966c", "indicator--2c30f0f7-5672-434e-b309-75e8549ddcee", "indicator--0c313f65-62ac-40f3-bf02-3e10311a7fc7", "indicator--65b4d7c9-edd3-492c-a104-f69d6122f652", "indicator--79f187c1-f46e-4528-ae9b-b611d7e413ef", "indicator--3f21684d-b48d-42c1-a3b6-136ddb776eb4", "indicator--658c705d-00b8-489c-bbc7-c88f53c43f48", "indicator--e42b7257-1b6b-43e4-957d-2273f755ba42", "indicator--c6f0794b-fe2a-402e-aeb7-2c6d0234f16d", "indicator--a802ca62-f362-461d-b2cf-d5053d102922", "indicator--d5cfd161-5e2e-4be9-8bdd-0ceb97f19e01", "indicator--8ec6f41d-6add-4e86-9435-ed3897e85967", "indicator--2cb865e1-a16c-4834-93d6-6e330abcb0d0", "indicator--f928aaf7-73e7-4218-af76-c7d0b77ce33c", "indicator--21c7e231-9a16-47b1-a9f1-31f79adede79", "indicator--4503c5f8-8c3f-4088-bdeb-93c78d551378", "indicator--34a55e9b-3691-4194-8261-ac1b4b947775", "indicator--ddd916a0-ea89-4b26-a31c-6b1b72910513", "indicator--b8778e4b-2a2b-4dde-abf1-0019dab018c8", "indicator--7152425a-c56d-4032-ad98-107051c0996b", "indicator--828c8e30-f161-40f2-9fec-080eab5cd34e", "indicator--e1223947-1730-4f05-8f8c-ba397bfa7623", "indicator--08e6944f-5e8b-4170-aecb-674d6e0b4c61", "indicator--c076283f-3cc2-415d-b3c6-ef9844f8700e", "indicator--68b2bb86-9084-47db-a3ad-ad693f6be9eb", "indicator--63c7c893-afd9-4c57-8316-62cb59fcac43", "indicator--69560675-2c48-4a8d-8ddd-23f871ce132a", "indicator--fd9fba48-2dca-413e-b9cf-9545ea3fd80c", "indicator--33592366-8ff0-4949-acef-677fee65c990", "indicator--3644eb0f-a33a-4b18-9f9a-0b3449d8f402", "indicator--7f70ad34-8673-455a-8f07-445597337fe8", "indicator--1c13f106-5a37-4223-9127-2550dba81f68", "indicator--b9155fac-01ec-430b-ab98-85491d121c38", "indicator--d72197b2-f8d8-4eb8-9c1c-834dea8b9b03", "indicator--13c7e7fc-642f-4ed2-87bc-4739b075681e", "indicator--d2160a9b-8f24-4f5e-902c-da6c551a880b", "indicator--e1bb4e36-fab8-4d46-bc23-f2d137381675", "indicator--2908199c-f871-426d-9286-081bc45cacb3", "indicator--c56b1f57-811c-464e-b597-0bcf052e8955", "indicator--36dc903f-582c-4fa0-9936-c94ea20f2845", "indicator--67044120-6a51-4135-b72a-b8b1913e2be7", "indicator--2438b35a-c17c-41c4-9363-1ad3bd62fa89", "indicator--fa497268-cfae-4208-bda6-bb73c84a8e0e", "indicator--ecc13f2c-d79c-4ff7-a836-a09afb95a29c", "indicator--85f734f9-5870-4604-97fb-b543b592e710", "indicator--b47d0078-db34-48f8-80a4-969ac4ca01fd", "indicator--6b30b4ce-83fc-44f3-a770-32bbff2fc402", "indicator--058ba301-e4ad-43ab-b619-e61b4d1aaa61", "indicator--7de330cc-8e7c-4dc2-8ad4-5382074958a2", "indicator--2b97132b-db0b-4131-9bd4-c7fdc82fd94b", "indicator--ded58156-7724-4c4f-82f7-9919a1fa33da", "indicator--3b9af41f-5255-4495-8bbd-588ce33e93f8", "indicator--08367a42-0181-4543-a094-ba54aa259be7", "indicator--f0dfe8bd-a230-4510-a54e-59d2b6a4465c", "indicator--dcc30b90-ca3b-4acb-89df-700ab65f5fd5", "indicator--d7cedd3d-48a7-410e-8b23-bc30b304006e", "indicator--bbac9a2d-6811-43d7-b8b8-d741c7510f9a", "indicator--d8f4a01b-686b-4586-9d20-30870f4fa84d", "indicator--5538e249-3644-4036-8e7e-d2af77bb3c6f", "indicator--d98c4f0c-8dc2-4ad3-ac1a-0da8655fe198", "indicator--ee85c168-fb08-4b37-8a2f-c062a4d73cae", "indicator--11e5dc36-3bb5-4946-8c7d-7ead1c529993", "indicator--941033aa-64d9-4939-bafa-6a304f78cb75", "indicator--48b361f0-395c-4728-863f-cc2d854d1975", "indicator--43e5215b-9079-4ff5-b3bd-abf8f241bdde", "indicator--d450d979-c5fe-4f61-a9b3-838163bb03be", "indicator--3b841074-41fd-4949-aa1e-52202d2370f3", "indicator--09620da3-f99a-49fc-bbab-c0c7bdf02366", "indicator--7161c031-2819-4c09-b1ad-54c90e60c9fa", "indicator--9d61b941-1658-4258-b2e5-f91e7e675e53", "indicator--b5633af5-fb3f-4d10-b10b-3167018f0e0d", "indicator--e3513bce-6959-44f7-8ee6-4a0034e0f1ad", "indicator--2102c8b7-eeab-4204-bbb9-36a8daf48e72", "indicator--32615199-3928-4f2b-8da3-0c9b22d7fa82", "indicator--b823cc61-312b-41a8-80f2-4a635d486dae", "indicator--9a90a080-bac2-4a5d-9b53-8bfb4493beb1", "indicator--4912bcf8-d7f7-407d-bf50-e1952b5fe0ad", "indicator--bf251f3c-bbf3-4f29-9b37-942881e4ccf1", "indicator--e782a782-bfcc-472d-8460-984212ad4501", "indicator--8d6c4721-0d63-4a90-8953-3de070452e3d", "indicator--9e74d815-eaa7-4904-adbd-3d9b61b02e00", "indicator--e7103753-d1ad-4855-9ca5-90fe95bf7ec9", "indicator--2fdce478-f437-4a97-8937-f8822bf8cb2b", "indicator--f4d8550d-6edf-4298-85a7-c71c1256c653", "indicator--67fe0e50-8a75-4c10-8d5f-eb9654b4f7bf", "indicator--7fccfd68-d55f-4ca0-9819-4b247a9c315f", "indicator--f66003a4-2e1c-4788-a32f-0b67d4ea8ab2", "indicator--e7ae41bf-f92c-43a9-8c9d-a00dabb2c85b", "indicator--570a0e08-4669-4ca1-bf8c-3147fe0c3f76", "indicator--6a181d8c-b523-43da-ab47-43ecb98295e0", "indicator--5208521f-6a1a-43c9-89a5-9c18e1352b10", "indicator--cf2a0ed8-cec8-47e7-8f11-6c810e2b1e35", "indicator--7fdfbed5-d004-4a5c-98d4-7a31b9f9c56b", "indicator--a0de760f-5fe7-4608-a076-620b861d12e2", "indicator--ca029683-973a-4dbd-a9b9-7bd4a7b739bb", "indicator--2c3b2f06-e4b9-4210-807c-a2a298812013", "indicator--4c886416-0384-46f2-8080-1b7e53b47681", "indicator--1f00095d-6097-44ba-b01a-f4d10a2741cf", "indicator--940c0a85-cb5a-4e5d-9bd0-dc53df9c0397", "indicator--a401d485-d4f4-42c2-aaa0-f3a055ae6165", "indicator--8c3ef623-c6fb-4f89-b4c1-dcffc9fe04d2", "indicator--8b1df2d8-2c9b-4add-89d0-9857fd0aac15", "indicator--a90a1ade-a235-4b2d-95b5-f259ac9e7252", "indicator--ec069d7f-052f-46b7-9d20-29ff70f8dfb5", "indicator--b94bdf47-de21-4f1e-b2f0-d871e0e904fa", "indicator--fa3610b2-c71c-401f-ba22-3880afab414c", "indicator--f8b6a8e6-e7d2-4cc6-96b1-1e6f323a7129", "indicator--e29d616c-dd1b-4d97-9d72-62da8da4f05d", "indicator--a05c09c0-a8fd-4f36-b231-75a724322752", "indicator--28bf69e5-06dd-4c4c-bc87-4393a7c5afcc", "indicator--de318a25-3567-4342-a254-dda034483032", "indicator--be108bd1-31a3-4545-b530-813bdffa8965", "indicator--df1635b5-d170-445c-878c-24babe8cc26f", "indicator--0c658ee3-6379-4235-a1f0-a5bc1fbdbaf2", "indicator--16685bfb-efc3-4ccf-98eb-d4dbfa453def", "indicator--52f51204-71e9-479e-b625-c8bcdb1cae92", "indicator--1beb23de-31d2-489d-940d-698403155862", "indicator--6b19a247-15fe-47c7-9741-b6401a48002e", "indicator--b1a0eb6b-9872-4cdb-95cc-a38fdabc2132", "indicator--a7dbf987-8827-4124-978d-2bd2ae2e49a5", "indicator--da2c5258-ceec-4cd3-bf38-cfbe4e2bc528", "indicator--2984c62d-6b0c-45f5-ae57-b7429e0dec23", "indicator--9ce84d9f-1140-4580-9d02-833584280e48", "indicator--4a8e02c4-7915-43ff-bb0a-4238a54e7bee", "indicator--b7369220-9516-4602-a08a-bb2e9066c26a", "indicator--3d5e407e-c24c-487b-8ebe-1dff8ea1694a", "indicator--0cc1f547-893d-4926-a01a-a5dc593afc24", "indicator--87faec33-8614-4878-a449-6b1148f5f6ed", "indicator--1c4776d6-55a9-4e45-8a9e-33bf8837ebad", "indicator--7adb942a-43cd-4cf5-bfef-c57c84fc2ea8", "indicator--17cdb090-1769-4f29-bdac-141568a7b663", "indicator--a06c4f92-2494-416b-b7dc-f4e516abda32", "indicator--3393f76c-aa91-463b-a17a-2b80661c9095", "indicator--50681a44-1fc8-4be0-9ea5-4c9dbd7cb862", "indicator--3ab347d7-f006-48bc-bdf8-31a4661d12b7", "indicator--85391e1d-06cb-441b-8255-5cd3523f8418", "indicator--c39d1bc3-828d-4937-9802-0b2ab59a3ea2", "indicator--9f4b010c-76c9-4aae-bc2d-68b01edb0441", "indicator--af3e0643-b250-4bec-9e7d-5f800048b67f", "indicator--99077513-ba19-42e7-8ab3-7bd83faf6e90", "indicator--6f8bbc55-2705-423c-9dba-28a9555cd712", "indicator--8b3e8ef6-9f7e-44e2-9e89-0343b96d1c89", "indicator--7901564f-a722-4ca1-9a19-a08b2c1a0c6d", "indicator--673abaea-9d14-4333-b660-4d4b4ca44238", "indicator--b9882692-7398-41b7-95a3-b5ae3a9de84d", "indicator--33ca3757-d9f9-4a75-91f5-53c1083d3cad", "indicator--017c163d-57ed-4c1c-bf35-d9a896c590a5", "indicator--8ea50f02-6566-4084-be4c-9deefd217be0", "indicator--2d285731-2104-4718-9e7c-14c22af82836", "indicator--11ef5765-18b5-46a1-9813-58c9748b2976", "indicator--d0f646a7-b3d4-44ac-bb0d-43e73292598d", "indicator--9796328b-6b03-4a96-81bb-0864a890c47b", "indicator--6bca27b7-abed-4b8d-9c7e-f366a4e58ee7", "indicator--83411dde-32e4-424a-bef7-44d425935763", "indicator--109b5ec7-2f48-450f-8b79-5ec2c50ab788", "indicator--cb568bbf-af22-47ff-8017-7aab0674503e", "indicator--efd9a3c5-e857-477a-b6df-dedaa3d795e3", "indicator--aedc5a90-6db1-413e-844c-6ad40fc0c402", "indicator--d82aac72-f688-443a-8c1e-cd80eea56639", "indicator--5c29f4dc-d4c3-4f0c-a95f-4fa17e3ef45e", "indicator--101de45c-3ca8-48a6-a3ab-fa2548c0f3fe", "indicator--391cba39-46cd-4035-9b61-55870b7333fd", "indicator--a547397e-9f59-4615-9ee2-d3051880f8d0", "indicator--878dba39-4f7d-4cbc-b534-f2c9853ada18", "indicator--14f4c4b9-4a4e-42ac-99f7-d95a737d22e7", "indicator--9089e711-5361-43d0-b50e-4b2a96deef5f", "indicator--66917d97-123c-4aad-8bb4-80d2ab1e40e7", "indicator--ebea8da8-a71d-435e-ac5d-8bf95fd7dbef", "indicator--a90a115b-3c5f-48ee-8d15-ed90e4888d20", "indicator--84dd97a6-c4cf-4daf-93ff-d6657fc12f95", "indicator--2534140c-0c8a-4bc3-8207-24f53e5384d3", "indicator--5ccc64bf-e94d-43d7-81bc-19b02e5b90a1", "indicator--cd4ca12a-da34-4b5d-b369-f6f67a9c2ddd", "indicator--799163fa-2cf4-42ee-96a6-8f93f577de7f", "indicator--5cfd5b0e-3ca1-41b9-a7c2-9b55675c28b1", "indicator--128a851d-a3c0-4480-ad08-869b98fecfaf", "indicator--341fcebc-e66d-4810-973a-828585444fae", "indicator--2b37c2e6-720a-48d9-8831-935286d48122", "indicator--48de0abc-4f09-4231-8d3d-76320734c4a1", "indicator--589c86e0-463e-4bea-926d-9ac88aaa95e3", "indicator--63874561-9b10-47d6-9774-aad140188c0c", "indicator--73110e83-8b1e-4df0-a9c5-9d61467ba16e", "indicator--1b251232-9ca7-476e-9a27-4753b7b27089", "indicator--4db83d01-c9d5-45bf-9e72-5c84b051258e", "indicator--2d005e53-bea4-4c25-a472-a63b9af6d3e4", "indicator--273f32e8-05a7-490f-8ceb-46ceae6090c3", "indicator--b48cc4fd-41d9-4d51-906c-4ac3d809afc8", "indicator--8909aae6-32db-4949-a141-ea013b7b8bd8", "indicator--d638a6cd-f7f5-417e-b833-382fd2ff1d50", "indicator--d4e8546c-2383-4475-a496-b026d4c033b7", "indicator--deadd5a4-25b4-460a-9fd6-5b3534724839", "indicator--42a7e53e-3228-405e-beff-d823ba5bc9ff", "indicator--d83f6bef-b4aa-4660-b5b1-154b5db1a3a7", "indicator--c37ba455-1580-4265-aa7b-c28f4227ba30", "indicator--454019e7-7865-4704-ad8c-b018f356101a", "indicator--b7fa8fda-acfb-4184-bd17-d0d8fc36aab3", "indicator--86b4bdd3-f5e1-41c5-85db-3225974ec113", "indicator--a211b79c-874a-426d-bc80-7dbf610e78e0", "indicator--6b7ab680-90b5-4ac9-8157-b5bb070a4ef4", "indicator--4bd9365d-95cf-4ec2-994d-8264e035e6be", "indicator--3bc7e1d7-4503-40d2-bd3a-c7a4d2c71159", "indicator--e31a8717-fa93-4c4c-82e1-1a4a85419a3c", "indicator--fa9108cd-c113-48d0-9f19-38012ccd9d11", "indicator--5816e9ee-26d7-467a-b332-4a9d90c66765", "indicator--98df4169-ca20-4bad-8178-c413d805c67f", "indicator--9aaf1e4c-f41a-4aee-9ced-15b00d6ddba1", "indicator--ca3e1e9c-c29b-456a-801c-111d702022bb", "indicator--d4f2086e-b8c5-43bc-957a-c948e89b410f", "indicator--fa50dbc8-8993-4ca5-9299-72b35caecf43", "indicator--b31c5138-78ef-4b55-904b-1396642d8c07", "indicator--4abe13ef-5edf-4348-b934-a5bdf9959c9a", "indicator--e23c978a-1a23-416e-9e59-0baaf99b42aa", "indicator--c9f40467-4ae0-41d4-9b2f-4bcd74a6c36e", "indicator--1afc1449-3f5e-4e05-94ca-6a185f6058ba", "indicator--cc66c837-2a94-41e3-a659-9122411b94ea", "indicator--70a3dd23-4329-4dd4-9e28-a4b369025a42", "indicator--066dc392-5125-4c77-99ba-dc38791b53b5", "indicator--d6e18947-7bb0-4666-add6-95a5990a09c3", "indicator--46ecf42e-9f96-4b89-94e0-bcf19a6d080f", "indicator--35ffd53f-e8e8-4e5a-8f89-56ee8f6259f4", "indicator--8c74e2a5-5e26-4a68-a619-65efc5414861", "indicator--ddbb745b-bd29-42dd-b2d1-22b57cbfcf4a", "indicator--0488dc76-d9db-404b-a0cd-fd8cb9406954", "indicator--f7bb6d6b-b27e-43e4-8644-05c0cd856334", "indicator--497d5002-0e19-40d3-bb55-e33416baaf0c", "indicator--23596100-9cb5-4815-a32b-e9677ebf6c94", "indicator--24d5ec77-f195-432e-9a15-ed53adbf79b6", "indicator--bc8d6e95-9dd8-4363-9f2a-c0e0e1065f83", "indicator--8e273f07-73cb-4b09-8d6e-257949dcb60a", "indicator--9742b0bd-1bac-4df6-b5ed-75cbe1b1f107", "indicator--15c89f3c-b19a-4e02-a99f-c27fa8369804", "indicator--4921bb29-7f99-4d91-a1cc-e9aef1ce872e", "indicator--a78f6493-df22-4834-9f22-4b00b6f7099f", "indicator--25b03ff8-5454-4b88-9a77-d456da3bcf84", "indicator--ff77b31a-dfc3-4c5a-9a03-625d738f9776", "indicator--585a235f-bc36-4403-ab30-78ff7f2fe81c", "indicator--48aa96f9-c608-4f4f-85c7-407d9dce7f6f", "indicator--c4edd723-5593-4d45-9133-1cdd99e379a8", "indicator--53472a5a-52e9-49f1-9c0a-ef5be0329b25", "indicator--92c8f84f-9af1-4585-89d2-6e34d66c2274", "indicator--849c7743-138b-4b27-bb2c-6e595828f393", "indicator--f3a3a87c-0aa2-469a-a670-bcb4c22fa78a", "indicator--9545b2ff-5de0-4813-b22d-b17beea7c201", "indicator--b2cc95db-07ad-408a-8e71-918355c83e2d", "indicator--931d181a-2fd4-46d5-9777-36407dfdb4ee", "indicator--e2695ce7-9b23-4605-abe4-799fadcc76b8", "indicator--e8730c2d-a330-4d54-928b-4c56c6661926", "indicator--7bd18866-170c-4145-86f6-e8776d457b73", "indicator--3e385875-dc64-4e5b-9156-cee1ebb2cbfa", "indicator--05b1d209-0ea5-4355-8559-54e312007baa", "indicator--629c9e22-f970-4241-ba6c-302711c3145e", "indicator--1a40d4d2-f944-4128-863c-d41465c1a65b", "indicator--3a20bc57-9d4e-47e7-b755-0c3940075913", "indicator--9056df8f-991d-4431-8578-cbaf54624e95", "indicator--1bdaa503-623d-4ee9-89ee-e58cca091331", "indicator--2f7d2b49-d65d-49b1-a09f-37ef05ed0b1f", "indicator--eedbdf55-a18e-4324-9d93-d4ca89fc9a6d", "indicator--e37827f9-9434-40a9-8c3b-2153de1feba9", "indicator--8bfa1083-702c-4f3d-be19-8e695a50b7d3", "indicator--8fd40eb0-5e31-4727-8914-17f200550d69", "indicator--0e3797d7-0389-4eb4-8d24-1a8ba02dcf21", "indicator--774dfa45-08a5-4486-8d17-a16541a63dbc", "indicator--1bf83ae4-e6b2-4b33-8d18-f2e088f47112", "indicator--4bd04ecd-0f1c-43b3-99c3-b0bdb960ea72", "indicator--ef9a95c4-624c-4278-9c2c-0296247af653", "indicator--76dd1a46-1a67-434e-a678-73e3baef0d2f", "indicator--6d133489-9709-4faa-9abd-6361b6d63328", "indicator--e9ccb057-4422-4251-9d2d-1f4716995770", "indicator--de773d85-9106-4d52-bb54-2f680390c422", "indicator--f9313c99-560a-41f8-b2c4-2864cffc9f87", "indicator--89a65b7b-3aa4-43bb-9fa3-e3daa3a97b2e", "indicator--ae14feaf-5801-45e0-8ca6-b9239c0e87cd", "indicator--57b65be7-4c49-4510-83a6-64720055dce3", "indicator--97fccca9-5d08-4a8b-ad12-7c5a942e3b65", "indicator--0e5a0d9d-3ebc-45ec-8d65-5bf8e8e73164", "indicator--e1cea642-001f-47d0-b108-c06e8709910b", "indicator--244f26d5-b55c-4a9d-8d27-1f6e1d40c0e8", "indicator--a54a10c2-dddf-42bc-b584-5c45c64abdba", "indicator--b945a957-ecfe-4a8b-b10c-8455942d511c", "indicator--c60a586c-0b09-4d36-9c93-3b5e3d9f36c9", "indicator--dc5873d7-775a-451c-96cf-1f03e1665912", "indicator--93feb618-c64e-418d-9da3-91926840ef91", "indicator--6c4877f7-8c4d-4999-91cd-07876fb8c10b", "indicator--c651cef2-f05c-414c-9ae9-1a899ec79130", "indicator--d42da70f-06c8-4f40-bba9-b976aa994e76", "indicator--101d3318-a06b-4944-a8e7-f78db1aeedad", "indicator--13f46003-24a6-4350-94ec-4e833b779cf7", "indicator--2b332a5b-b97f-4c42-b5be-4fc69c6cbbbf", "indicator--1b7cb411-0b15-4fb3-beb9-362421f58a6e", "indicator--6e7a40c9-9f4f-4c0c-b4db-057106ed6af4", "indicator--0b42347e-ae2d-402f-ad1a-3484b8417a9c", "indicator--4e3a9a0b-1667-47b3-8a96-ac7c6051bf9a", "indicator--72ff1ece-e5d2-49b4-95d8-cbe5519a38d4", "indicator--ca65405c-5901-43b3-8a04-1e50ebffc7eb", "indicator--849d453d-2a5f-4b04-bac4-29b2030bbc63", "indicator--f68f4de7-55ff-4254-a134-e88f99174f30", "indicator--b8b91af4-9c9e-499b-8361-d3b49c1a797f", "indicator--176aa52a-d93e-42a3-8c3c-8ca753b2dae6", "indicator--f7b9a99f-c9b4-4bf1-8b7e-1ce31ee4b289", "indicator--6223d749-10c0-4d5c-95a1-33e616985345", "indicator--1da6f1e6-fe31-48c8-8ba4-7104b8492742", "indicator--594c7dab-ac0a-4992-bf24-58193e5b649b", "indicator--f88bb383-45a8-4b1d-a3e0-55a8a2af72a5", "indicator--aa8b7337-a921-443b-bd41-2b02e32d7f1f", "indicator--311b2b33-8a9f-4ad2-b100-f126e004ca69", "indicator--24f7e2cd-d1ce-4e4a-885e-2c3ad0e89538", "indicator--ad94e504-7843-4077-8d84-bb7ba9106724", "indicator--476f0a27-b8a0-46c9-9c02-2f50c034aa32", "indicator--64ba6c85-2dea-4e99-b650-10fba5a85789", "indicator--0bfca68c-e6cd-4316-a802-e9722775815b", "indicator--96ab6c2a-4c47-4129-a0fe-422abc2644b0", "indicator--b63cd426-d916-410b-9ead-74e956913cb0", "indicator--f09f31da-b303-4725-8b41-e456c895b8c6", "indicator--e7b8a97b-362f-490c-ac12-c4292fff184f", "indicator--c00160b1-957c-4a7f-834e-b737eb643156", "indicator--b2edf002-014d-4e2d-80e1-be4e51f894b8", "indicator--ba571c52-c45e-4a82-a91d-8f905ce9b376", "indicator--44fc88d0-58de-478d-8743-13ec42f8080d", "indicator--ff1379dc-6db8-4824-8605-c13ae4dd49a9", "indicator--2c04083a-fcea-4411-825d-7f297b4ee872", "indicator--dab10233-3bf8-4349-992a-86283c7cd9ca", "indicator--0bf14f59-3482-49f9-ae87-a71984513da2", "indicator--59244f5b-8246-40b4-8c9f-ab7f3604ee1a", "indicator--94cc9446-c9e7-4a66-92d8-0f89cf40fec2", "indicator--79921f12-6a77-4ff5-aa08-68130c6ea833", "indicator--11b53a34-4994-436e-bd7a-3351112346f9", "indicator--8ff5b98e-0d35-4d1b-b5e4-01dc8223e82a", "indicator--ad6ceaf4-1e86-4fc0-9a4c-a8af4357c4a8", "indicator--99d636b9-9d0e-4546-a2bc-7d566f59728f", "indicator--ce95898e-02a2-42d4-8f84-004e17166baf", "indicator--840e4360-6585-4a77-bad9-c24c8f261c57", "indicator--3a7a71ea-faef-4d22-8976-ca1454d1e2b8", "indicator--971aec2e-1735-4448-88f5-99bd8599d436", "indicator--7e1cc131-c373-47f2-a06e-0b530761fa53", "indicator--306c2a6d-909e-4a67-9cd4-409f8a2f393b", "indicator--eda5baff-b540-4755-89d2-db33658d3a5b", "indicator--cb3153f5-59e6-4be0-90c7-e26887efc5a3", "indicator--efd8afe4-c69e-4ab1-a504-36072d5b03b7", "indicator--4a0efdeb-20a7-4d8d-a5a9-c9144a2ebfb5", "indicator--3798e7ab-be0c-4c83-9d59-231af5eefa0c", "indicator--28b30423-f1fb-40e1-87be-738f86a57aed", "indicator--5ec31a6a-d68b-4e54-af47-fdf454c413ef", "indicator--b240c0ff-769c-43d0-841f-b4f180db5d26", "indicator--b2a30df3-73ee-471f-bc7d-9b519e38ef0e", "indicator--eca7451e-12d4-4fd5-a495-36ada9f293f5", "indicator--79b401c3-8af6-41fe-bac3-c39894f6a6c1", "indicator--c6adae0b-a2ef-4ce6-83b8-77b68c6b12f6", "indicator--c90b0534-252a-473a-ac6b-e3b713fc4c0c", "indicator--2476734d-f35d-4619-9da3-43837c419635", "indicator--d39bbbee-510f-4644-a274-1e63999acd81", "indicator--4b4aaa0b-379a-4a44-8f20-2f6049cc0258", "indicator--14d98d43-ff88-49e5-9852-63b64187b88e", "indicator--7afcc466-1f60-4b60-8d92-f0c196060089", "indicator--4c5818ab-d044-41ce-a8dc-c1726f37998f", "indicator--27fc36c2-6dff-46bf-908c-d04d29461f6d", "indicator--352a4f3f-0c79-4341-9be1-bd0736da3933", "indicator--aaedffaa-e878-4e8a-8885-5c4c3a693051", "indicator--24364ccb-d0cc-48b6-a3a4-57506072b698", "indicator--8e0d466f-bd55-4c61-9ff8-97e40ed47c2e", "indicator--ec3ae626-a1aa-45ba-8475-e41be145302e", "indicator--fb39bc85-b814-4b7f-8319-5af7ce15612a", "indicator--8d50326e-1852-4847-99f7-eafbb55078ca", "indicator--7b46de15-e91c-4a93-9ffa-670e8985c777", "indicator--a246fc7e-33dd-41fc-93a1-9a89f91a3df7", "indicator--4cd5149f-c58e-4bb9-b859-67c497866e8c", "indicator--d430e8a5-607c-45ad-8a40-c27750d301e9", "indicator--c3624e8e-dd97-4465-9370-7a36827168b1", "indicator--3c7f8706-2b5e-4df2-b8ec-18e6c20dff84", "indicator--975cfd8e-3151-4515-90ce-fa38760cf6ac", "indicator--9dfa81af-ad04-4b13-8567-db892e9c48c7", "indicator--f6073483-6208-4cdf-b269-351497a7c712", "indicator--84ef4a40-8be0-4a92-b110-1b5cc7bfca7b", "indicator--7ca166de-c6c5-4b6c-8bc8-eac7c3ec08b8", "indicator--a51855d9-e5f6-4923-a606-f83dd9e22764", "indicator--4ac73831-1008-4fdd-8965-2905c2b27ad5", "indicator--3048bb45-22f6-4fe2-bc6c-061cc45a0e37", "indicator--4dca1a6f-2117-43ae-8e6c-163cac57dba2", "indicator--f7ad8c6b-05a4-46df-bc0c-dc4d71bbd86c", "indicator--8f7a9383-da61-4e78-b94c-ee8c5209d71c", "indicator--6c0ad1f8-073a-4539-afb7-cbe507986f4a", "indicator--ff128112-c966-4cab-8cae-0272d09f9a59", "indicator--af943fe5-afd9-4e9f-a3f9-866072b0c712", "indicator--08e0aec6-0907-454f-92ab-7ee6d25a4b90", "indicator--1fa096d5-09bc-469f-b26d-c80a9f0840d2", "indicator--85a8fcad-20d8-483c-9a76-34487a696a72", "indicator--daba9792-df93-4d4c-99b2-ceb82e6422a8", "indicator--8bd0f4ab-6540-472a-a3c5-eb362d258202", "indicator--737f0599-9ca6-4941-abe4-14729db45cec", "indicator--94382f0e-3315-4783-b45a-03850fe2a0d7", "indicator--6e8ec6e5-4838-4594-8c8f-a6059541bd1d", "indicator--f500f502-15c6-4637-81de-fff10b565413", "indicator--2f60c7ab-4aef-4229-bbc2-4a32d9dec9f9", "indicator--f532aee9-d3a1-4924-9e32-72cfeb5173b8", "indicator--f62009c3-5a99-414b-84ce-360c51f80016", "indicator--4f39fe5f-803b-4d6a-9dba-e3ca4b750c2f", "indicator--943be684-665f-442f-9cea-ba57bf6ce16d", "indicator--01ae7d6d-464a-42b0-bb05-37107236ec7d", "indicator--eba5d19e-36e8-46dd-8c64-e35cbc62fa07", "indicator--b092be2b-9753-47f9-963e-61e22144c351", "indicator--f33375f4-8194-4c26-a6ef-e735ab173482", "indicator--b8527470-044e-4870-a6e1-6dcffada219e", "indicator--cdc4233b-328e-45ba-8d09-be2bb1ce31b7", "indicator--fb1171bb-cabb-46f0-9cb6-391c51204998", "indicator--b56af5ce-dfef-4654-b78f-45260420383e", "indicator--945b15d5-c588-47ae-9baa-40185123a4ee", "indicator--c2d61b06-ec46-4e48-9e4b-8dae9ad23ce9", "indicator--dfdb6532-4998-4c42-92cb-50435c538dc5", "indicator--432cefbe-9baa-4b39-9ba2-435fc44a633c", "indicator--47ab1810-cd85-42e2-88fe-37f8d439b650", "indicator--2220480b-2431-465b-b13a-10d8b43626a2", "indicator--76bed13b-ef73-49e7-9722-b8cd3eb03215", "indicator--a06a51c0-dec2-46fa-8908-66d53fa0cf3f", "indicator--40aa9da2-9433-4888-adfd-35d40b37bc7b", "indicator--ebbd7371-a95a-452e-b651-ad036edd1835", "indicator--232fef5d-162d-4cbd-a0d2-6b220960078a", "indicator--8af51197-2609-450a-bde7-0c22e6427ab2", "indicator--276ed2cb-24c9-453f-b041-881f958b1f2b", "indicator--35aca83b-985c-494c-b298-9f50f4bae010", "indicator--7b513b4a-c173-4ce4-ac63-382420805ab8", "indicator--b3b214c1-c69b-4a45-8219-b496ab12bc5d", "indicator--3a1ee82a-bae7-4137-b01a-13da2ee02109", "indicator--f2e71218-588a-4c2a-967a-36e33da52aa8", "indicator--29913e43-260c-419b-bbcc-03dd5868fa3a", "indicator--471d041d-32dd-49e5-af63-6e7604c7f22d", "indicator--672d50e6-7611-4b57-bcab-a8967516e2be", "indicator--87df2332-ca07-44af-baf4-6630dbba6758", "indicator--047cf75f-fcd8-4113-a901-e66f6ad8b7bb", "indicator--87729e82-f731-4f2b-abbf-e28a51b5fd6d", "indicator--23c6384a-3079-4122-bb67-b7efd80beb22", "indicator--5b7b4f3d-c57b-48ff-947c-88bb8b1456dd", "indicator--41b45c19-26e6-4943-a822-ea6a7936ddc7", "indicator--048362f8-9a76-4c46-b932-92f581dc63cd", "indicator--625bc55a-ee11-4945-a75d-ac694b5b264b", "indicator--5c300291-5322-40c5-ade0-f40d1f0a2dbd", "indicator--1b70aa83-7550-421c-a958-b0fd75a3ebf3", "indicator--4301dab0-b13e-4400-9b53-fd2af67e7cd0", "indicator--aa24bfe2-599f-4592-aa3c-6beeea86b612", "indicator--5268666f-4da9-46a1-9e55-b8d2f2cb6d6d", "indicator--44394e4d-983f-408f-b65b-1c9609820a32", "indicator--6a42a1d8-e387-45e3-a6d0-4fea7da604ef", "indicator--bb10d1ab-fc28-47fc-abdd-1ac8cf22de7f", "indicator--4521689b-b1cf-4bed-be84-a69e209c9d12", "indicator--8afd12d3-48d0-4c02-b1e9-712f1756e076", "indicator--f004d9c5-716f-46ca-a03c-a21456f99f4d", "indicator--a9d68d44-de19-472b-90e5-a5c10091cc0b", "indicator--9bda779d-b57e-471a-9990-6fdde37343ff", "indicator--abd7c502-fe3e-47bd-b283-6ad2ba6937e6", "indicator--d5ecd686-b5d1-4cfa-bcfa-313e4c229cb3", "indicator--c2aad011-1b6c-43fc-acd0-106dd55588fc", "indicator--cadf3744-c81e-411b-aa1e-395614624a52", "indicator--04954a28-c88e-4059-a044-6b48f02126f2", "indicator--bb733606-a084-4212-a10f-3337f56bb1e4", "indicator--812c326e-8124-4c39-ab4b-62444512a665", "indicator--5ec92828-93ac-4c69-9827-2a4f20657cfe", "indicator--af217b01-cdae-4317-8416-42a1c4c9cb52", "indicator--d2ea4dbd-54ab-4571-86f2-39d8792dd978", "indicator--09b3ed26-de60-4adf-b5b7-448fca279583", "indicator--a2af0648-fdc2-4732-a04f-c6175173acbe", "indicator--e91afe54-b63b-4dc0-b9e3-b84702f5ad78", "indicator--5f97267c-0889-473b-a827-e9b314ab6095", "indicator--7f5569df-30a7-4256-ba69-738e77dfbfc7", "indicator--fea40dec-d8d3-4337-a993-7b01ced48c19", "indicator--a149e376-7f7a-4ab6-8e28-e62fe16e04c7", "indicator--d5c38c54-7368-4c6a-b696-c2db2bdd4ec0", "relationship--fe526d33-c756-442f-bb08-8976263514ac", "relationship--d7ba85de-22e1-456d-8650-b23cffe23ab0", "relationship--199189bd-5870-436e-af4a-0a56a3eff76d", "indicator--71e80d40-5995-46cc-966c-f57f10230d64", "indicator--233549ce-8de9-4006-ad81-e3dca7671ccc", "indicator--760fb423-8d19-430e-83d8-50738af4c35e", "indicator--0935387b-4ae6-4f8c-bd0c-61f8cbc0f257", "indicator--ef4c414b-dba3-4d5f-b2ee-4195eb44afea", "indicator--8443dbcd-87ca-49e8-9eb2-16161425966a", "indicator--8bcdcf5c-4875-43dc-8bfb-88ae934977e4", "indicator--7384578f-54c6-4c3e-86fd-5a93214c63b9", "indicator--c73db924-da27-4036-8b32-b74ab2c3c5b5", "indicator--558340af-e600-4954-8217-fd20535a697e", "indicator--53854a92-4579-4a8b-b022-2757d2ed5b17", "indicator--16b4cebd-031e-44e8-8650-eff5f4423370", "indicator--e4619b35-6b61-49a8-940b-9dfee5f88e06", "indicator--44a06b6d-1812-45b9-9842-f1f6fba537ea", "indicator--606c3c8a-f1a1-4eb8-a4ee-58c8813a7b8e", "indicator--7aaef0ed-d753-4254-a267-8cbc3ada9f4f", "indicator--4dcc965b-46ca-489d-87d0-094edf0e29ef", "indicator--728eedf5-6d93-44f9-b712-c4e1da933c48", "indicator--16e62899-71d6-4787-bbd2-4c23760473fd", "indicator--4eb1949d-c645-4619-b52f-97a83369868a", "indicator--1180b8d9-eb25-45c2-ace0-06099d692434", "indicator--303eaa27-e80c-4264-903a-affb5ce3c949", "indicator--9ddbb08f-82e1-496f-a7b8-cae9522750f1", "indicator--2d680fd5-fa37-4dce-a358-277c5a16a86e", "indicator--cc6a05a9-eb4f-47ed-a4e8-617a978beec9", "indicator--0c01e60d-a89a-4b99-ab8e-ea2dc4bfed70", "indicator--b4eee6c9-87b4-491d-b6e1-5e20cc59f21f", "indicator--ddf5cf5b-da2b-4fa5-a25b-319b5170dfbc", "indicator--b17e4d72-214e-4187-b08b-6051d3cf434c", "indicator--870495f6-393c-4967-9c7c-69d511d90039", "indicator--3d7f0dec-dc9b-4073-a775-854b5555bd76", "indicator--2d2eafec-bec5-4267-9bf2-6356a8fc719c", "indicator--2afb8269-229a-40f0-ba98-5501e49bd889", "indicator--baaebaec-1567-435b-af81-2fa7aa32c25e", "indicator--05e3a3fa-a5bc-44f3-9130-8060e1f2e05c", "indicator--cdedff96-3fbc-4fc4-b4e0-e1efd07d532d", "indicator--2c11f0bd-e295-4466-af9a-3b153d5b8ccc", "indicator--68b5326c-ffe1-42f2-b633-621ecc3e2e70", "indicator--592eca62-4b1f-4c23-9169-371254de3f9d", "indicator--39d7b661-e66f-4819-8961-689c641273a9", "indicator--c649921e-c897-410c-b8b0-73d76ba95b69", "indicator--055ceb66-6899-409f-aed7-36bcad27b957", "indicator--af68b003-4b47-4aab-ab4d-bd0cd4cef59a", "indicator--f1ef034b-a3a5-428f-add0-3b77c0ee8093", "indicator--0409de06-08f3-4189-9189-3766ff6b8cf7", "indicator--99935ce2-e9e5-4e49-8fb5-48b20aa9eaec", "indicator--d979fa57-59a0-4bb4-84d4-c7f1a0d0207d", "indicator--b88741d7-fee4-4614-8494-94c5e00ac065", "indicator--f3ba1082-af4c-47e1-b16b-7e6f21750eed", "indicator--3352054c-32c3-4260-ba02-c45192527626", "indicator--2bf490cf-5d4d-4ef5-af65-580f6b00fcfc", "indicator--fafe356b-699b-4efc-934c-acd9eac442ff", "indicator--f0a44302-39ac-4c0f-89aa-251d5bafa640", "indicator--722294d7-8edf-4529-8ad8-eecec93cd1f4", "indicator--2cee8e9e-54db-42be-9281-01841835c523", "indicator--342feb55-243f-47df-881a-5793d81e348f", "indicator--9ab419e3-7dcc-4b47-9df9-cf7e59c739d5", "indicator--6968fba0-b203-4cfc-bc4d-43c55a5cac33", "indicator--bdee734f-e2c3-43c4-943f-e487465355a8", "indicator--03db6747-a5dc-4d45-b62a-0316139434a3", "indicator--26429f08-b355-4e36-aa57-610fe6028407", "indicator--bc3fc964-800c-4af3-8a12-bb568a7d7446", "indicator--2b1de7d4-f663-4c3a-a265-1e97646f5fb2", "indicator--f47c0d71-63f4-4809-96d3-888f2b6842c4", "indicator--04154617-9b07-4349-80ca-381689b9ba91", "indicator--82ac55f8-ff21-4422-938f-69cadd677a0e", "indicator--98c2010d-697b-4152-bc30-5d65c5248157", "indicator--fab51429-e6f3-4a84-a128-1f38ef421373", "indicator--d72bba65-3683-4aea-a427-9d616581d085", "indicator--cb9f2292-bb81-4a34-8d88-ee610273a596", "indicator--bb53d657-86a2-4c81-9231-d9a927a69209", "indicator--a2daa987-46d1-440c-93f8-c02ef2affdd4", "indicator--d64d2f8d-95ad-436d-a31d-2542bb742806", "indicator--2e044761-f333-4752-9b69-2ce233ef22ef", "indicator--3c72ab1e-2f1e-4eab-8b5b-b603025c11db", "indicator--d91bd72c-314e-444a-9a25-d3de2d474acd", "indicator--69342cda-6c02-407f-bbbb-0c327bc66a6f", "indicator--f0946fda-e43e-402d-ae0a-07356ee69c79", "indicator--c642d3ec-ac19-4f1f-ae55-ed218bec1a4d", "indicator--7035720d-8a2c-464f-8a38-a9995b6c5d0b", "indicator--efc570f0-1443-4f57-8866-6c9fcb8ab2ce", "indicator--9cb55590-0686-4de4-8455-a9c0848e21e4", "indicator--a4f0b86f-7edd-4f45-9c2a-f7fb662551b5", "indicator--fb254a2a-96e5-4887-846d-4fbecb487453", "indicator--d2516f4e-4ff2-46a1-aaa2-8ba684f57c96", "indicator--306e5e86-a4dc-46bf-b00b-d26f46cc6bfa", "indicator--9d336dc8-43e5-4f69-a56f-2005f1515ed5", "indicator--1ee8c4f5-1872-4afb-b592-c98e10a291c4", "indicator--dee27ea0-d199-42c7-b2f7-a60e5667cc7e", "indicator--41a4c019-3859-4356-a39f-fc6c67d6a428", "indicator--9447e782-f2c6-4ad0-ad8b-25c6d14ed629", "indicator--b7797134-208a-4135-8990-b6084f362f78", "indicator--43e0b3e6-2cd7-48ae-909c-cbd0cebd267f", "indicator--43eafabf-f45c-41c2-bd24-36aa72d6ab3d", "indicator--4ae6eb08-1e3c-4d58-ba0c-4b1463da7625", "indicator--5adf408c-4d5f-4d4d-933d-d67ce7309545", "indicator--e0389ed0-bccc-4e0d-bfd1-315662f4175a", "indicator--0d526b81-33d0-4cfc-ad5b-eabe14b0a626", "indicator--5d729241-ec75-42d3-8255-944e56963026", "indicator--5c38d48e-f28d-4d35-8201-ce6b06651ab3", "indicator--f9aeb955-f611-4ebd-b8e0-44b482ae544b", "indicator--90b6a0bb-7a54-446b-87ad-fff5c863978f", "indicator--fae33099-d8ab-4f93-ad65-e7966e8fc0a7", "indicator--1fd8cca5-fcac-486b-b40c-06234d5e5e99", "indicator--975d59bb-5d64-4d91-a683-756f29d0b62a", "indicator--7ce33e53-feb1-47b3-94b1-78de2fa630b4", "indicator--fd1d1d99-628e-4928-a31a-2e0440cc096f", "indicator--6d7e257f-0f9e-496f-849e-0564e2c18a28", "indicator--5e6601c6-eb23-4a3f-aab9-b431656b3466", "indicator--9f5c0bd2-1d94-4d39-8d55-f3ca603b5ede", "indicator--9ecaa01e-3bb2-4219-b938-a41a07610ecc", "indicator--f4f28c0e-4c4a-4d29-bcdb-ef6c300f16b0", "indicator--1250002c-480f-4fd8-af34-d2df4797c373", "indicator--f49354a0-f7d2-43cc-9c48-5152cc5d28c6", "indicator--d0142d23-3967-4ef5-ab97-fc390eda315f", "indicator--3718c207-e761-475a-ba3a-c7d60ec3c182", "indicator--a751bef0-626c-44ee-b070-e2eab7ccdbe5", "indicator--24d632ad-cd4c-43b4-85bf-41270efcf1fb", "indicator--8e40779d-c440-4fbb-9c90-a29f234c0a6a", "indicator--d5588687-56f4-4e29-b02b-d0459c68ab6f", "indicator--f22b0f07-2bee-4976-8d8b-4744c66a5fa1", "indicator--787423ea-d4ef-4e60-b7e0-77e619c04d7b", "indicator--f31cb401-2f46-41f1-99ef-7462fc2959a5", "indicator--e43e63d9-6d11-4f8f-aa72-5a406480cdd6", "indicator--7ac73842-47ac-4d13-867b-422a08d2b993", "indicator--8839ba0f-1aa9-4c68-8798-4b4063de9594", "indicator--4b1433dc-7cd2-455f-9f89-727284d6f274", "indicator--9470e702-729f-4110-a450-feba7516fb27", "indicator--4d201a78-3dd9-4769-aac0-654cc8dc1a76", "indicator--ca12b17b-8963-43c2-afbb-1463c51f167c", "indicator--75019361-b2fb-4dfd-8c98-1669be42ed7e", "indicator--7938b616-998c-47d8-b346-a25bda96fbe7", "indicator--fa493d4d-7474-480d-ac09-a348faf4c0ee", "indicator--4b8a387e-6bf0-4e8b-be68-232fb55956eb", "indicator--d7efdf97-6590-45ac-978d-8e6e2e4d764a", "indicator--c91f8c84-17d9-45e1-9043-b9929483ff15", "indicator--f350699c-f9ab-48dd-90c5-e965565c26b3", "indicator--e9f6960d-2ee9-4013-a0ae-93e662132103", "indicator--0b98a6e6-a614-4805-a6af-2f7c891e4bfa", "indicator--c93fbd33-506b-48f7-986d-216ad9e7cd4a", "indicator--0b4e880e-efc0-4d9a-914b-45a66447e011", "indicator--e085c38b-d59e-4b0f-b645-b8e7a5007efb", "indicator--19fb34ea-6c7c-4169-a89e-f09befe6beba", "indicator--cc18302e-3598-43e6-a765-de8baa26f47e", "indicator--cd1651cd-ed85-4faf-a279-5d54932eb2fd", "indicator--4847efac-2799-4b46-83e1-7e3fe86ae372", "indicator--1ad0c8fa-67cc-4a4e-b45e-c14d12c211bb", "indicator--6b673c84-30e8-4f73-af1e-54a50086a2e0", "indicator--6bb6a7d6-0c4a-4007-8f92-822d040c1ba3", "indicator--ca00f8c5-6890-4a4a-949b-1c17fa161508", "indicator--0a35eade-1454-4c72-8823-ec554f2b5a2d", "indicator--6efc8d05-ba8a-44f9-b57a-322baa37b529", "indicator--3654ec59-326f-4eca-94b3-03c0c11ecdb7", "indicator--7d49eae2-65db-48ac-80c6-5542ba745fd6", "indicator--ec3eb988-465d-4088-8bb2-154c961cf72c", "indicator--38a2219d-a990-4c52-a4a5-24cf173d4b37", "indicator--2bbbce4c-0270-407b-9ce6-9f6abbc4cffc", "indicator--639a4d8b-f450-463a-8072-4cdf552753cf", "indicator--6c663756-7be6-46a0-9241-9ca6b7103f0f", "indicator--1fffeb49-dee3-4b28-a471-64143c8271a7", "indicator--9d41d0af-e9ee-4178-a016-52042ecea386", "indicator--04bc4990-c562-4cd4-be86-ac1e8bf4c811", "indicator--dd081aae-dc4b-40f6-8588-0d16979c849e", "indicator--ee4fd3ef-33f2-4742-9f90-ff096c63a6bb", "indicator--fb8a18ed-e854-4990-8d97-3112a0f3ffbd", "indicator--7de52f2c-162c-4009-9b5d-38b46044e8f1", "indicator--59469d73-fe38-42cb-bd1a-5e534a1812f2", "indicator--c5b1852b-a9b4-4983-bc0b-c9f65c644f52", "indicator--22b11d04-e082-45ff-bd56-6a1206f809af", "indicator--7bdfcb98-5749-4d18-820e-586171777b29", "indicator--fd313aa2-b004-482d-9db4-24a4de2b55ec", "indicator--7e7a7e93-5cf7-4658-bb76-3570f77804a0", "indicator--c1c3732c-1466-4051-91d3-00da3908b0ec", "indicator--4ec403f5-0b97-4080-ade8-22c950a4a1c8", "indicator--6699943c-bcc3-4e28-8fb5-add4b65d7fb4", "indicator--1a38fdb9-fe32-484a-9c7b-0ccf6636cb46", "indicator--d3bbbdf1-310a-4038-81bd-e7dd19fa3a09", "indicator--feffada7-96d2-4128-b6e5-d2819e546bb6", "indicator--d9cd58e9-2e2e-4b5f-a940-586ae3a022ee", "indicator--9da21544-42c6-4acb-b7fb-47e75b69c5ce", "indicator--f1719179-2d62-408c-85d1-3a109730eab9", "indicator--6cdb430e-eb9b-4780-b4f4-e1aa9d905e34", "indicator--6e3f7f73-3fb3-4abb-be2a-e35f7eafc0f6", "indicator--d8317fd2-4d04-426d-99aa-dd2675e6498b", "indicator--c50e4eea-9617-4e23-8053-4f4fcbce8def", "indicator--af16b979-470a-4101-ae83-323bd8f1f01f", "indicator--a5316993-7199-42d6-8acb-b9e1934fbdab", "indicator--f8a59132-5724-4098-b635-67093fcfe74f", "indicator--ccc753b1-7417-45c2-8769-54bdfc1d47c7", "indicator--1b0bf925-2eae-4e80-a670-d2158faa81c1", "indicator--f9972ff6-2521-40f1-9d75-a15b6af30cf3", "indicator--17e32485-d033-4df9-a9f3-6969f1451954", "indicator--64c46f26-8996-4620-bcda-03d09bc27ec4", "indicator--03d47d40-361d-4730-ac75-d8d254461b16", "indicator--3edfb3ba-2567-46e9-9ea2-0cd49e457d85", "indicator--3adb0bab-274a-4e44-8942-9f9322ef8926", "indicator--d8b3ffd0-6cc0-4801-9a2d-2efb3897467d", "indicator--f82f9318-3155-4986-97ad-298854d58d5d", "indicator--6a902c19-b834-4972-899b-4e9ff05f3d26", "indicator--063d61e4-6562-40b7-b8fa-2dc0b8dde2aa", "indicator--766b728f-eb8e-4e1e-89dd-ae27f15664bf", "indicator--a21a12e3-0e12-4705-b461-566a24a39dc0", "indicator--29da1be5-45fc-4aee-a829-cbf20cda8ac9", "indicator--b3a1cdab-7fdf-41a3-8af2-9b3fa60a092f", "indicator--1703fc0e-4dee-49e4-8b99-d9feb9290eb4", "indicator--805bf1ed-09d7-4def-9504-9a0110f9b8f9", "indicator--8b3636bc-e2ea-41f1-9ccc-ed20835a7d25", "indicator--07dcf1c4-116a-4fa8-912e-a52b8126ccfc", "indicator--3d912615-a877-4bec-9322-79e9aac9e23c", "indicator--801e75ad-47c5-4d83-9aa9-9099f844a049", "indicator--6ff164e0-3c0a-4cee-9ae4-c48d89c3f270", "indicator--50ccdc5f-50b0-4d87-9cef-e665b94dbf7d", "indicator--912e1568-26a3-46ed-a614-84fa318f9806", "indicator--a4fd4efc-d2a3-4ad7-b2e3-b5c68481456a", "indicator--68385f4f-a525-478f-9bea-665520a50940", "indicator--56ac1381-7af6-439f-a149-2599af93d80e", "indicator--8c81e42e-2df3-46e5-9c82-d74e07d6d4c7", "indicator--dff192da-9e69-4edb-a3cf-3a17b4a7351e", "indicator--27bc8aff-e4e5-4ab4-a233-1ff7d2d980c2", "indicator--abafc70f-df6c-404e-827d-63c4221812ec", "indicator--515aafab-ed88-4788-b210-b5bf95f15491", "indicator--8e98a2cd-78ed-4a79-b34f-e36329c83f47", "indicator--22041885-9644-4bea-8553-9eb09e9a9070", "indicator--64948b3f-9e49-40f4-bee5-dd19fcf13a4b", "indicator--80a98677-50f3-4740-be7f-5184563fbc1d", "indicator--22d04ea0-ad2e-4863-86fc-36f95949462d", "indicator--813c9063-8450-44ce-a0f0-1b46e41a3265", "indicator--574c88b7-e7f0-4bde-bbb1-cf32cb08b29e", "indicator--82a664d2-8e48-435b-a874-9bfa9c4dffad", "indicator--6fac8c87-f1c4-477e-9dea-c2d56bb992fd", "indicator--fba7a12c-505f-454b-b284-b8c0d95a97f9", "indicator--b28f6ab8-cc78-46ba-b54a-317b24b27cd8", "indicator--6f4f826d-1cba-4f0c-860e-feaea5b4ca7f", "indicator--e94fef29-d9e1-416d-a866-e6e5dbf48115", "indicator--f8ec2db0-8066-42d4-aa94-500b6e2e03a9", "indicator--6655c049-cbdd-43e2-a300-e6bedf450f52", "indicator--6e2915e5-816d-429a-8372-ceee165487e3", "indicator--992ededf-c194-4e9c-9ac6-42f13b24ad37", "indicator--b1d72dd4-adbb-41a0-a7db-7b44ba0ea2f6", "indicator--0d33ea49-4db0-4a58-888a-41d87df429e2", "indicator--0ab99233-fd7c-4336-8969-24f49eba0396", "indicator--5cdb8944-1a65-4288-8f6a-40945ba8c1cd", "indicator--247bfd62-3e5d-4723-8ae3-a8dbc4b9bca7", "indicator--d6807dcd-8ec6-46c5-9c67-ddb0158636f8", "indicator--e9a24ca9-cb6c-4c9d-a454-d7941df7c8c6", "indicator--bb14863a-1551-4f7b-9bb3-147867b95887", "indicator--40ad029a-dc64-42be-94c7-11ae0a5522ef", "indicator--cf83b345-838e-4254-bdbb-65369b197a6a", "indicator--9294aebc-7c1b-4b5b-b531-ea68a646259b", "indicator--e2cc895c-e1a5-4975-b513-59ecaddd5800", "indicator--95656d99-b3a9-464d-a670-41df96ec4f70", "indicator--255f72ed-9ff3-4c6a-8d40-06b4ff522666", "indicator--1308b135-0366-4f71-bf0a-03b294b28ff0", "indicator--7dc389d8-9cd9-41f5-97d9-42a55c4e2665", "indicator--7a89c497-bb98-4920-adf9-ee45cd5f86ba", "indicator--ab522a15-e805-4734-9adb-919e8a41a3ac", "indicator--db1d789c-b0c9-4b6e-a5ea-3fcffe532484", "indicator--c700e29a-b7c5-4559-9261-2886df71baf5", "indicator--56551281-bd51-433b-a011-c0bbac870e2c", "indicator--19c60073-a338-43dc-b8f7-5c11400b1a78", "indicator--115f410f-cc05-4f24-8ab6-30a27cea10e9", "indicator--dce2c86c-21df-4af5-b88c-c32c247f77a0", "indicator--008fc77b-c0e2-44fe-8f71-1be9a9d1853f", "indicator--2bd5f2ea-134a-4c2f-9cf5-8e4b063717ed", "indicator--46308d73-fdbd-4024-861c-82d3618d27fe", "indicator--90c68acb-c6cc-4c25-89db-cdfc965dbf40", "indicator--c44f723d-0cb0-4795-82c6-d5040f33d222", "indicator--b45602c8-8a55-4bd5-bd4c-e0132d44922c", "indicator--8734b169-38ff-4544-860f-64cde20243b1", "indicator--64423b99-45a0-4933-b54d-67d3b5e3b817", "indicator--e593cd9b-827f-4a32-baac-029996726b50", "indicator--8d78c349-4681-489b-9adc-3ebce94dbcf9", "indicator--362a70d4-9e94-421c-936d-88d83b594373", "indicator--d7d94881-6de2-437c-b575-ec0426c10737", "indicator--cec7577c-513b-41a0-819f-5c7149c749c3", "indicator--981f1a2a-7660-4b1a-b760-d12151fd357b", "indicator--a88e001e-4294-4933-a8da-b746fe6ce94c", "indicator--55cba627-d2bb-4d83-aba1-cd0f70dad79f", "indicator--ebdf3daa-01a6-4690-8c1e-5d4f9eae3ba7", "indicator--37c892ca-d1e3-4b2a-be71-8fa06184551d", "indicator--646dbd10-2211-497a-bfe1-0e49fe69fc07", "indicator--d126ae38-0b41-4ee7-baf2-1eb33b394d3f", "indicator--4050512a-cf34-42ac-8861-64e9544874fc", "indicator--8dfd1b51-7fd8-4463-a3f0-03c26139a87b", "indicator--9879c16e-23bc-48fa-9212-41f9cfaaa84a", "indicator--66c3f7ca-8e87-4bdb-b1f4-9908310075f6", "indicator--4c996e02-c8e3-48f7-91cc-108c122c0858", "indicator--83ef2e8f-e159-4d80-a809-a36454415bfc", "indicator--6e241608-1367-4d1d-9df2-4480470fa8de", "indicator--d070de34-e2d5-4d40-b2e6-0c20cca88a4c", "indicator--af44b76e-5728-44ac-96ab-aa1de304f204", "indicator--fd3190a0-607f-4e0f-b62b-2491824ccfe6", "indicator--149156e1-1304-43a2-a817-28b271dda8e8", "indicator--74f48077-a5f9-4d82-b6c9-c70ca7cc4313", "indicator--fb1d84be-c9d2-4eab-a5f4-1c2e69587fd9", "indicator--8453fbae-e3bc-4820-8741-39b2a2a109cd", "indicator--9006a214-8c07-45bd-be61-e848b33f1e43", "indicator--14fcaec0-42b8-4246-ad91-e66fafc8bf06", "indicator--0e1b7eed-5cf5-4004-8084-1a4958158836", "indicator--b0107f09-69b2-45db-98f1-6eab0c40e262", "indicator--74925ab5-7470-43d8-a076-0b4150f6b84c", "indicator--9dd70d58-40b7-4f01-a10d-299f74588d2a", "indicator--fc4a7426-e43e-48e0-bce1-4fca3cc51edf", "indicator--2d345cf3-b5c5-42cd-b921-23c288799b7b", "indicator--0be0a528-a5e9-4218-9dec-3952a13494ca", "indicator--4240cf1e-d09c-4a75-a4ec-9a5a3329b504", "indicator--6cd06812-c08f-4af2-aed5-e96b965bd084", "indicator--e2ff3a0a-1724-4f5b-8678-4230bda2c2e7", "indicator--2c18b6b6-6751-4bda-b136-861f63b275d6", "indicator--76ed9705-cf17-4271-9eac-5ef9c5b5dfd0", "indicator--18387211-0d25-4b84-919b-e4e5765910f9", "indicator--0d262f00-b559-444c-a8c4-6ad4be936eda", "indicator--13be8549-ef7b-4c91-860f-9c6e71721e9c", "indicator--9bd0cb1e-5a3b-4059-9f36-979a4154846d", "indicator--d153f6ef-fcd4-4b5b-ad19-edb7e9843e06", "indicator--d67124ed-2efc-4da3-b088-37df23a6a53f", "indicator--5279e7ae-3bc0-4f91-b88a-64ef99cbdbc6", "indicator--f4a97ac6-3ca2-41c6-a174-72126a195bc1", "indicator--af4221c5-0370-4da8-9bb4-33ac4b00c069", "indicator--844503f3-c2da-4a92-9e20-04a9ed80ded7", "indicator--edc74452-67ef-4ed8-97a3-dbc022666375", "indicator--242f4b3a-bb28-4ca4-aad8-9bbbe4e5ddec", "indicator--db9b3879-ffa7-46c5-adf8-0fdfc569af83", "indicator--c82a6a0e-0bd5-4835-829d-c7db5862d595", "indicator--9c409259-24f0-4b5e-8853-0461b7455027", "indicator--23e229b6-b3eb-4ccb-829e-e8cb1972dc51", "indicator--3e5b508f-f462-44e6-9195-f1e81c975d73", "indicator--e8b4b385-2885-4339-801b-2f1a39e31aff", "indicator--faf426d0-dca9-423c-b287-e3800f9c1f65", "indicator--a7834ee1-ca16-45cc-bdfb-112abae2ca8d", "indicator--bcbde76c-b0ea-4514-8a5c-19a8131b6989", "indicator--1f9f7ec5-1f18-47af-9a36-7b5f771a7fba", "indicator--15a224f1-7440-40d3-b07f-20295fe95020", "indicator--915cf61c-4784-465f-beff-5241ad735b47", "indicator--5466f0fa-a12b-4ad1-aefd-5afe5aee9d1d", "indicator--fc1b4b2c-1a2d-4489-a8cd-a2128d7b2d14", "indicator--76ed69f5-cfc6-4b49-9e83-a360adf31e79", "indicator--93a03293-b2a1-4d36-a1d4-a757f164f136", "indicator--eb031949-659f-4b06-b7ce-c7f535dac0b4", "indicator--5d32e05e-63b7-498c-a112-d6255b47244e", "indicator--1ef6a76d-4dc9-4c8b-a86d-f82ceb40bf84", "indicator--f37fe967-3a40-4bfc-9deb-3539e072541f", "indicator--497ec135-0aff-4e63-97e3-bed8c7520cac", "indicator--2f5f1fbf-a85b-4e91-a8b1-e8be68f61dbe", "indicator--b75eedd0-071e-42ab-b0d1-388371dc125c", "indicator--9621a88f-2b50-4fad-9248-55a35ee19267", "indicator--8d3a7b6c-f320-4317-9911-c26d466edcf7", "indicator--95321da3-4662-4cf2-85c1-b9d2e3e4ae18", "indicator--d7390245-b521-448b-b985-ac44ab59911e", "indicator--28f84ba6-566f-46fd-a271-aeeeb27c56a1", "indicator--38a70604-8e86-43bb-9557-d132e6bf5efc", "indicator--3a2cf737-e24d-48b7-a979-0b0150b02126", "indicator--0d11eee2-97e9-416c-944c-e72a25bb9e31", "indicator--615493ec-9e9d-4d18-b752-edb9fc474efd", "indicator--3ddbc409-836e-4420-a69f-9809052b8250", "indicator--b7637710-099d-4915-98ac-50618527c4ae", "indicator--ce557703-012d-4c0b-84cb-c7f221d894c1", "indicator--dde289e4-a69f-4ac4-98e3-6da6f857057a", "indicator--3bb7ddf7-0d75-48b0-a78c-a9d9850d81f1", "indicator--04a70f28-3c05-439a-a2f9-bdca88b7e61b", "indicator--2b50e340-1597-4501-9c40-15a6724b1d33", "indicator--fd90d1eb-4df3-41c2-a430-871abb1d4f65", "indicator--10518a59-41ec-4bfd-b6e0-915359115197", "indicator--5f7d769b-f975-4e90-96e8-7d1dd69dfd2d", "indicator--b48fcb06-fbfe-4c1d-8579-dde7b5649aef", "indicator--9deda762-7c32-4e20-89c4-afcc850493d3", "indicator--8a83fb68-20f5-4a19-9bb7-68ca5044f743", "indicator--029aed3f-b9bd-418e-9336-cac2e040e3b6", "indicator--e5fd8eb6-5146-49b4-82bb-78d0ef397287", "indicator--49f94e16-38ba-49cc-b0c7-12e2a6063e34", "indicator--f9cabffb-6837-44d6-a118-7a0e9aeb8d39", "indicator--8bf437cd-31ba-4f5b-9b66-c1a2c78f4850", "indicator--5cc3fdc9-c11a-40e1-94ed-616ed0710e58", "indicator--67d8191c-6aa6-4d5c-b157-1b9bdc85ccbd", "indicator--67abb1dd-2105-436f-95e1-356942f9da75", "indicator--8fe7b374-6f04-424b-a215-6a4b1a1ae60e", "indicator--2bc85a5c-1b1c-420a-8658-b2290d0879b5", "indicator--cd21bb89-7c16-4961-b224-9b17bd94c8e4", "indicator--37ed4b57-1771-481b-982e-1d4a9b9f2f4a", "indicator--dac8422f-5563-4a3d-9f07-d5d21ab50102", "indicator--35ce89be-8baf-4433-85db-28f175e220ee", "indicator--3348a7a3-3e08-4f51-bf03-b1df1def091c", "indicator--fa031c25-22a1-424f-87aa-3dc513326acc", "indicator--c378fd92-03b8-4221-bb3f-a0e6038a50c8", "indicator--973102dd-3ee7-44e7-8110-1c9b860f6ce6", "indicator--efcb844d-8eea-4c3f-b752-ffda92318ca3", "indicator--fb1b99f0-9262-43f9-b468-5cb0758b284e", "indicator--14661354-4eff-4f1e-8739-ad5bb4f4a484", "indicator--fecb8c6f-73d0-4593-9a9d-950a74729bb8", "indicator--5b46aae8-9b05-48c2-96ed-67e24efd7775", "indicator--ad6a28d3-b24b-4af4-aaae-4cec47febafd", "indicator--44f3c257-a03e-40ab-8a00-6b3feeac319a", "indicator--dabb5172-575c-4a70-98fc-5e7480623bcb", "indicator--ea869875-b6fc-4c6c-8684-212d2929c9ee", "indicator--cd877017-5324-41c5-b22f-3a08c83aaa40", "indicator--41d8c7d6-a50f-4745-9ea4-cd9f8e560eaf", "indicator--f6985fbc-8455-441a-8103-7697f4531227", "indicator--69904a39-1e59-477b-baa1-43405a407aa8", "indicator--c7dcedad-e26a-432f-95e4-487812d4042c", "indicator--f49b9562-df82-4246-b522-5079c82a2adb", "indicator--51feaa4b-b999-47b1-be93-dfecd4452f13", "indicator--2a4c2ddf-cc53-4dc8-862f-9c23eaf9d6d6", "indicator--6e84610a-a53c-4eb2-a9dd-6e2cb0fa9b05", "indicator--3e045b4e-5a2b-463d-9b01-0b30edc14bcf", "indicator--95869dea-55d9-4d14-a651-ccb1d8d276d5", "indicator--65c62b2f-c582-4a16-9516-c2d6d3e9d59a", "indicator--dca228df-dfcc-4d84-b7d9-3e2f11b01c5b", "indicator--989c5147-bd1b-4682-88ef-c9bd9c6229c4", "indicator--19ff2c84-a3a6-4f9b-ac19-36e320b07934", "indicator--0d3e253c-ab7a-444f-8136-c5ce117b19ab", "indicator--f88666de-fb1e-4605-9da7-afa8c096e437", "indicator--ef04eef8-be8d-4f61-8b78-d248d1886d09", "indicator--23917856-6e35-455d-9f24-4a494eb8edb1", "indicator--36fddaa7-8e2c-4ee3-9682-db9cec952521", "indicator--67a22957-999c-429a-9f8c-a6ceb22b0b65", "indicator--e1341a01-ff29-4c68-87f5-d7d6eb247301", "indicator--d4575cc7-51eb-4fca-a9ce-176fe691aca9", "indicator--0099c679-2e3e-47bd-9c5b-0108f4922889", "indicator--c92283af-28c0-456f-9397-067d34a98fab", "indicator--763f480c-7ea5-4851-85d2-0d7d3f7a921a", "indicator--1cffbcbd-142c-450d-b9f5-cceebe1baac3", "indicator--f460db02-83a5-43f1-aba6-2b40e1f4be0f", "indicator--546c40bf-0447-4dfb-8d4e-0e390538fc2c", "indicator--25df705d-ba63-4e32-b412-436f3732ad0e", "indicator--595e5413-3ed9-46bf-9703-e42199e808ae", "indicator--949aa5bf-61a5-412d-8e36-73f47cda5a24", "indicator--66787919-adb1-4945-b7c4-a60cf8682e92", "indicator--3dcdd63a-786e-4352-a742-1ce3048de138", "indicator--7cbad021-59d0-4599-82db-4a43324c851a", "indicator--067c1cb1-ed14-4853-b4cc-1491b39dc811", "indicator--0d60603c-be22-4af1-afc0-f1d357aadb9f", "indicator--99096a55-5c6e-4715-b424-7c77da205f72", "indicator--d4408571-76f6-425d-8004-6016f1012001", "indicator--cc40d20c-3aa2-41fe-82ca-6d35b4ac42ae", "indicator--56482c4a-f068-4cb6-96f9-0d100a18a48a", "indicator--d9688ef1-02d4-4cbd-a2db-11b0d85df834", "indicator--ab0d5399-c00b-481f-ac39-81801b380edf", "indicator--db4672c2-6d9e-4385-b5d8-26dc850515da", "indicator--bef49d63-7d50-47c7-8d5e-1cb67524bcc5", "indicator--2bd05f78-5d4a-41ad-a598-006443830c94", "indicator--85d37a2e-f6c4-4d5e-94f3-5a14c29b778f", "indicator--39e5e28a-eab4-449b-941c-1a744e06fd8a", "indicator--5a6601c6-3a60-4bad-b573-f59afd11c818", "indicator--3eacc7c2-16f1-4fdd-98f7-d7870f178a93", "indicator--bc82e664-e3ac-4593-9f77-41d23b6cffed", "indicator--ec21db40-b54c-4da1-898c-38fd2d229d79", "indicator--ba53d994-0fef-48c5-b9c8-4a7097960741", "indicator--20d494da-38f4-4b5e-8201-b91b34e86197", "indicator--fb231690-04c0-4e8d-93a2-f6193b42dfd0", "indicator--f760b7bb-c7e4-49ec-8fe5-178f2d19d640", "indicator--0f61ea40-f359-44bd-9228-7215a5b4bae9", "indicator--94b0e1ee-8402-4b8c-b470-d04062471ed7", "indicator--e5b9092a-8dcc-4209-9357-888e443270c7", "indicator--98d85903-1050-4258-8a3f-078ed6b1f47e", "indicator--41eabc0d-c4ba-462a-bae5-2358a486b102", "indicator--09a2f4d7-9251-4776-a142-5f8f4b7a63a1", "indicator--6f702ded-f4f3-4313-a594-5df7f6d11498", "indicator--05e7e0aa-f847-4fd4-80b6-bee7f6e03103", "indicator--b74a9c32-54ac-4504-bcf7-6df05d4467d0", "indicator--df1e650c-7b31-4c8b-9dab-0877b0308370", "indicator--b96dd3ae-0ca4-4a4d-8f48-f46be3a7a511", "indicator--5185550d-e8c7-481a-b518-b53a34e0104b", "indicator--615bd400-ea75-47dd-8d0b-20148c72c6f5", "indicator--4035af57-71e7-4d4e-b3e1-176629b3084c", "indicator--f062cc5b-261a-4a38-817a-cb5b84c92eba", "indicator--00c33242-1823-489e-b6e0-a552da175bbd", "indicator--d26298b1-3f63-49b8-b58d-5104a97c6ebd", "indicator--a29ad98c-d3e0-40cd-aabb-8468d576a4db", "indicator--9638e63d-e9d2-40f8-9435-b8df6e74f9d6", "indicator--ab71c378-5b47-44a5-8be4-ee952655cc8d", "indicator--8acfbbcb-99a0-4ba9-9e4b-b1aa8b0d4bb4", "indicator--3c828115-ab6a-451f-80c1-fb512ef3593c", "indicator--4f49f07c-8f1a-4346-a09e-6b79442cdf24", "indicator--f642b266-79b5-4d6d-a415-3efdcf7a523f", "indicator--fd7f8cf5-f421-44cb-adc7-521171be8d45", "indicator--613cd196-c0aa-4e94-8aea-b190db45163d", "indicator--2bf722e5-c866-47a9-be29-1f22ee11f48e", "indicator--acebb4ac-c06f-4399-b1e7-e7630b68d00a", "indicator--007e27f8-909e-4489-b4bc-e156e88a1a20", "indicator--8ee59a44-c2d6-4505-a064-08dac6086c53", "relationship--95fe7a15-515c-497f-ad96-7ba5404ae073", "indicator--e7ec5173-0561-4442-bc66-0e954190e7d3", "indicator--b4dd8cec-d2c1-4f34-82f2-9495bac4ac76", "indicator--a0ffb57e-5737-4618-a239-cc649005a2f4", "indicator--428e50cd-a8cc-4b46-a163-4d59f306ff6c", "indicator--91257cc2-4a12-48f2-9896-05ff0a20eef4", "indicator--c3790c14-9b48-443c-80d9-0f6deb51bf6e", "indicator--56c304cb-6132-4eb2-a7ac-7ea1a97518af", "indicator--0df338f9-f4a5-4d75-b3cb-2b5a118dc762", "indicator--551bd8e2-8f91-4100-8438-f504832011a9", "indicator--d6f729ca-312b-4c30-8dee-03271a5ea1b0", "indicator--29711e69-d288-457f-87f9-a9c456e457af", "indicator--2f146867-b247-4863-b684-8059f1618cea", "indicator--0226c884-7e47-448f-9b69-cd9c8ffd4b57", "indicator--e8ebb053-14f1-4469-843c-cca8966c76b4", "indicator--9480e06e-34bd-42dd-aa88-dfc2fbed75d5", "indicator--55b6a660-6387-4a1c-98d9-394e836f9790", "indicator--d6222e86-2151-4fe5-b4e8-0549ddf23099", "indicator--30ae064c-aad2-466d-b951-4188bfbf3489", "indicator--0ec30f29-2553-4878-8cc5-52ebd39b4b63", "indicator--dfa274e8-bd45-4f53-ad36-d1eba0a727a0", "indicator--64ac7a5b-96fc-44ec-a735-f52056b255a4", "indicator--edb6e282-b498-4c05-a795-cc83d5a48035", "indicator--1fbab953-a460-4bdb-8bfe-00b19ac99f1a", "indicator--cd154be3-ed9b-4b85-a8ed-c14dc18ba1c9", "indicator--9c9f763c-6c2c-41da-b309-42ddc2a04662", "indicator--765fe65c-35eb-4283-839b-56d84cf558f2", "indicator--8702f43d-88d3-44db-a6ee-2f7f9a3dd8c6", "indicator--5719f440-d57a-4e71-8004-20c6b119b691", "indicator--4628d539-349c-44bb-be42-badc95c0745c", "indicator--b6c310ff-35d6-4c36-9a0f-2abd5f7e4162", "indicator--861b0421-2445-4c12-a866-54e4b05679ba", "indicator--373fd1e6-d2f9-4f7d-bfe0-881b55bd43ae", "indicator--5832ca84-effd-40e9-b834-f2a06120bef2", "indicator--14d4f443-11ba-4223-872e-e79239050113", "indicator--03204457-1ae7-4ba5-ae70-e75e74657aff", "indicator--6cb47060-12a0-4834-8a0e-167f1b4165c9", "indicator--a5b46076-a339-44c0-9e67-628469d0b865", "indicator--feae8e15-308e-49dc-bb0b-a23954e57c68", "indicator--448066ca-52bc-400b-b33a-123bcbd0e638", "indicator--6988dc2d-6e00-4d40-98ea-a22c2241bf3d", "indicator--4986f499-c4e2-437e-b44c-8678538edb76", "indicator--62ce46f8-2b10-4783-a300-07fcbab86a9d", "indicator--7ff66206-1915-45a3-a945-cbc766cd1352", "indicator--ef7d29c5-c373-4829-9a96-92ba1a738fba", "indicator--2a4c41b6-c813-48b6-b2dd-34df5bb14e1b", "indicator--5b39e762-0167-4b1d-84f0-1ebe27d44e72", "indicator--e2317ff0-a32d-4df7-8874-6d4bf9981a75", "indicator--7c0967d4-d0c4-47c1-8ad2-6affa8884750", "indicator--f28a0d56-b70c-4273-8119-b24438473bcc", "indicator--25cfe5b9-7d7f-4dcf-b48f-e9b8347fbc47", "indicator--de60960a-5a80-45bd-a066-88e11f881093", "indicator--9085f147-fc66-4b9f-abca-47fb49bc8359", "indicator--22033b5b-498e-4f56-a799-d6eb5b7c5658", "indicator--3b6eef53-5e36-4163-8fe6-89bdd3c7d158", "indicator--288b592e-b71a-4180-afec-21ec4378a057", "indicator--802d5759-06e9-46d0-abd4-ec6d5bd35507", "indicator--fa4b9aad-1e40-4bd2-a532-562c219a3eaa", "indicator--11b75a26-2dc4-4a3e-aaf5-a39ec8d77d33", "indicator--c796cb59-7b4a-4de0-b5dd-12680ea1e849", "indicator--ec5d8a4f-5ee3-48b8-b589-543601b71834", "indicator--c49a4c9d-41b9-40fc-bef7-6ef83032b007", "indicator--b5341a91-86de-4cf7-bcb6-c0e28f2f4d6a", "indicator--4e53a41f-d6a1-4d2b-b9c3-ed713fac7035", "indicator--031389c2-257d-47d6-9cc4-05e3839eafa7", "indicator--ce35f2c5-6d95-4fc2-b80b-4832299b3df5", "indicator--57728303-0251-4be6-8c74-e032a91e827f", "indicator--5164898b-cec5-4eb6-affb-e1c52eb1caab", "indicator--203281f9-f1ed-4998-ab7d-bd4e445e4f6b", "indicator--144f5e48-12c7-48d5-8244-62d1f4134555", "indicator--ad4bb106-3e3d-4a7f-bf9b-9e9e082cd4db", "indicator--9012f6f6-16ef-4e11-acdc-3101dce38c3f", "indicator--a340619c-99e5-43e4-beb6-532e6c9fe9eb", "indicator--eaa9131b-2f89-4c5e-a7e8-b82c6af6fdcd", "indicator--610f3e73-498d-4d64-8f73-af9db4f0cfa3", "indicator--ad27a7cc-6a61-4b3d-88f2-8ad4d4f25eb2", "indicator--8beb8e06-2271-484d-857e-25605cbd4269", "indicator--90e43381-e6dd-48e3-a0b7-befb194efa1a", "indicator--df46e7c5-2720-49bd-862e-8fd52a612bde", "indicator--61ff5509-f8a0-4f5d-9ab9-b73236047d99", "indicator--a98c5c07-f1d1-4fd9-9997-9d04ae500090", "indicator--03062bbb-187a-40d6-904c-b0b2c1742a1e", "indicator--67ec9051-eef0-4b6c-ba02-864681a1ba7c", "indicator--2bd660fe-5146-4f6c-a8fd-473fd3e3bc77", "indicator--c5946ef1-7fc4-4abf-b1ae-e79f26b5e864", "indicator--9ba24cdc-ae54-410f-b27c-a2d47fa928bd", "indicator--c3ce1514-a430-41b0-a046-cb9dd5790745", "indicator--15e0fd8d-3ac7-4887-855d-4a22c58e8633", "indicator--312750bc-9e60-4941-bc57-0dde3cea9ff6", "indicator--6c5e972f-10ab-4eff-8c24-a8d13ab16eb7", "indicator--68445c97-ab0d-4562-b984-798203249d4a", "indicator--8693ca8c-6a44-4908-85d5-da2d9474900d", "indicator--dce93867-76a1-47aa-82e2-b365a5c60cf2", "indicator--ae37f930-4abc-490a-8392-45a0162948f2", "indicator--fd38932a-869a-4320-831c-fa6173514777", "indicator--dea363ad-9db7-42c1-b5ce-63d67039cbd8", "indicator--9efb8086-a213-4ae4-bc16-9e59cea9319b", "indicator--c9b2990a-2763-4926-b9b7-ca87d0ab6dc6", "indicator--c67481c6-55b0-4d76-884c-839b44bc4c88", "indicator--5c9d1c34-f761-4edd-b896-29a4bc830975", "indicator--f6f60256-8b01-440d-af72-90fbafd35147", "indicator--04b6e8d7-aaa2-420a-922a-ba2815d75b3d", "indicator--c2b2b0a6-bb60-4989-ad34-4f162c73a2c0", "indicator--98ba7be7-c6dd-42b2-880e-c8bcaf887422", "indicator--4d4201d2-51fc-4948-8717-5ae332dd229c", "indicator--e6393651-09e8-4dfa-8a16-41bfee05de08", "indicator--8f06e3ba-886a-4f3e-b78d-129c762d99d9", "indicator--7ce4237d-2952-4c4b-8a8e-e6b0bc3e803b", "indicator--73ebd8d2-a065-4b5c-b715-f26bceaa4023", "indicator--ac80cb3c-14fc-4e86-9f08-396b2cfc659a", "indicator--2d66c908-c863-4021-9ec9-929acbcdd997", "indicator--53610f17-b87e-4c1d-805b-d060793afaf3", "indicator--30740d66-7a31-42f2-b02a-74b6e7500f6e", "indicator--78345e04-1c82-483b-9117-16f8eb301050", "indicator--0c9afb23-55ab-4c8b-af92-3e0ed594eefd", "indicator--399934f6-7500-40df-8676-00e2c2f4b6e9", "indicator--d6de21ce-dcaf-4bb8-8233-06230789af52", "indicator--b529f040-6036-4639-908e-2ecace0be1ca", "indicator--a7a7d2ba-6df8-48e8-99dd-f9e96858f55b", "indicator--a53038be-81c6-48f1-9307-c83951df5d58", "indicator--61d27f3c-16ae-423b-b434-9cbfdaa857a0", "indicator--0660f1e2-fa05-44b7-aba9-6ec161de3434", "indicator--3ecaea27-e9d3-45c4-9fda-b18dde92de56", "indicator--0b3321dd-796c-466b-88ee-30a77a65a481", "indicator--91763356-7ce1-4f55-a95f-a5f9adcbeee5", "indicator--2a174f3c-2352-4fd7-b652-10e13dd17b2f", "indicator--404d7a71-6dc3-4756-a52e-7e5679009b00", "indicator--6a22dc15-bbd5-4e49-b72b-e8bc4bcc10e5", "indicator--4590fb8e-7f75-4a6c-8530-98431dfbba05", "indicator--4bbe07d1-286e-40f8-86c9-c3cdac4bf179", "indicator--3ac63a7e-9b60-405f-b3f3-b1a61b61427e", "indicator--8f77f177-81df-432f-9552-e509a2ac3449", "indicator--7891bca7-607b-4491-9f96-1caaeb21be0d", "indicator--5ac05283-63df-46a9-92d3-3b93a0e9f03c", "indicator--fcc4c391-95a2-4a13-96e7-470a2047c74f", "indicator--13ae9163-0db6-4a24-ace3-a7b73277e174", "indicator--0fef4f93-7de1-4a93-b959-d7d1d4d7731c", "indicator--11462047-fc40-4dfe-801c-b8fdca30c9b9", "indicator--1a850873-a170-4926-ad0e-0f60f66a8f2c", "indicator--92995dd8-8754-4bf0-8c96-13740bef09fe", "indicator--1b8cc4b4-695e-411c-94ae-08013ad3b052", "indicator--2b72c094-0f54-4d47-8dce-e4c87e0c548b", "indicator--d2ba99ad-fb4f-4d17-a05f-baaac51cc96b", "indicator--6f9020b2-f698-4575-85b5-7ade22710b23", "indicator--0ce4a2a3-f584-4ad6-aa72-387315e18dee", "indicator--3f24d436-e7ee-4b7a-9673-f90fb139ab6c", "indicator--6dec39f6-2c76-41b6-826b-9bb6802ef084", "indicator--56c3fa12-ddd1-4bdf-9860-f9e0580526d8", "indicator--c4b77e3f-6494-4ed8-9c35-0665fcb21717", "indicator--5133551f-e4c3-4899-9d39-b102adad69c1", "indicator--fc2c2ae0-8e3e-4879-a993-d373cca69e26", "indicator--4b66b9c0-8b7a-472e-81c4-885abe9e3adc", "indicator--c4244140-5d3a-4971-b6d5-15e30ad32e15", "indicator--1f41d244-ca0f-465b-91ac-f4817585818a", "indicator--d1eeb782-2d17-4055-98d6-3eba724aa26a", "indicator--b418115b-1ed5-4033-91ff-46fd0c6352a0", "indicator--8cc25ab4-d3de-4844-8742-a8b569d47536", "indicator--5f3f07d5-51f4-4e21-bae4-fe1f660cca76", "indicator--eed2dccb-ba63-42e2-b73d-1093af34ce6e", "indicator--e9c951e3-e2f9-4f13-9894-717cc5f908a5", "indicator--0b4fdf6e-5532-44a8-be38-7599991ba4e0", "indicator--1480a5a6-50a6-4db1-808f-f53b522ab6df", "indicator--0aa6e5d2-90c3-40a0-9c85-93f63239efe9", "indicator--2c3ac31c-20ee-4a9a-be3b-376f414b15eb", "indicator--31853b93-7cc2-4c64-b2a8-6f94be560396", "indicator--34e3da75-1efd-4972-9d5f-a509354e454d", "indicator--f6861d0b-fe39-42c4-9541-a11a7a649775", "indicator--a605419c-dcce-4fe7-8a7f-982d3ad6859b", "indicator--5ae4d41e-e0d3-48e0-aafa-3642ce5a5236", "indicator--8a67363e-6daf-4c1b-bbf6-0f982233b9b6", "indicator--67dfba0f-13fd-415a-a803-587bd1ce6565", "indicator--cb639dc0-0e66-4f75-969f-a5d73bd3a020", "indicator--764b7671-62a2-4b0a-82de-88155398b474", "indicator--754fef7d-16d2-44fd-8183-a227f0f8b703", "indicator--ce1380c5-19b7-4712-9490-c7b86791e346", "indicator--f90b2487-790d-4cff-ba23-a7b93ba105e3", "indicator--b0da343b-e5a7-4234-bb6f-3b20869ddd24", "indicator--eb15dfb4-20da-451e-b7a1-651fb6cc8c49", "indicator--95d930ff-f9aa-4504-8200-6e939126564a", "indicator--cf2aca8c-f3af-476c-ab42-3dabd3456d4f", "indicator--922dd878-73e5-41c6-8483-be9cf5a5e690", "indicator--69f2ccc0-4920-48e9-a36e-fcc69ab2b365", "indicator--ee35d2cb-fde0-4083-a523-0ecb334e80a6", "indicator--be008a34-b7dc-4966-ae41-935d75c4c11d", "indicator--5c483ae3-1aa4-4710-a6b6-98af7094eb6b", "indicator--913ef655-b596-44dc-a4a8-1dee1d75b506", "indicator--abb2f81c-757d-40b4-84dc-3e54da32a247", "indicator--56cbd053-e6ce-480f-9e78-d6a586bc94c1", "indicator--5ec46fb9-6d49-4151-a3d8-9010f2af25cc", "indicator--71df49b7-0058-4b25-827f-271a5029772a", "indicator--bc2fdc09-cb07-4cbc-af81-b94140d29cff", "indicator--36c6b9d4-7f74-47f8-a283-b9642d5a59c6", "indicator--b417af6e-2eb1-40dd-92d1-74f214ae4280", "indicator--56fff81f-5b80-4f44-a3bd-fd9894a34177", "indicator--9cb65685-ca34-45ac-980f-4427130479a8", "indicator--c052040e-ed4f-41c8-949d-939ef94bf0fc", "indicator--9e7f68f6-9242-4852-b9c5-f992e6a23f19", "indicator--9364fabd-cd8f-4659-bc31-6fd767f58a8b", "indicator--b7830949-38d0-49d7-96d2-a223df796059", "indicator--99b81935-c30e-4fb5-b597-19330fe289ef", "indicator--97030ca3-3f44-44eb-98c4-2e54324bad03", "indicator--d9ec45a2-cc38-4794-aa7e-b95e463ac52f", "indicator--dcc093da-b17b-4bbd-8e24-2030a944a465", "indicator--ebab3db3-55fd-4944-b7c4-34c65f325def", "indicator--02bcf48f-fe72-4b9d-a53f-c784dd54e0f1", "indicator--1577277e-51a5-4a44-9f10-5dc87e9b9668", "indicator--8cc75583-bba5-4e5a-b447-f6ecd6d82244", "indicator--cfbe2b5b-c402-43f3-8d9e-2519cdbd9f29", "indicator--c4f646f1-2e87-4476-862d-a9a6c098d201", "indicator--aee59b89-1242-42a8-9434-90bfd370728f", "indicator--653933c0-ba8b-466d-9d4e-ff71c0c5872b", "indicator--87e1d414-bb06-4f71-89b9-4be71e46a599", "indicator--219d0ccf-82a0-4475-b71b-b8f07be5a7f4", "indicator--9ae0fc84-c0c0-4f0d-9433-75320a3d992f", "indicator--8f5e3a64-7260-44ce-ab7b-a19503d167d8", "indicator--d3e99728-8922-47df-a3c2-f44763ed63b9", "indicator--2d628dda-c79c-44a9-9e75-60976f918fe1", "indicator--74aaf1c0-8128-4aad-b996-7b9e671bb38e", "indicator--f96bfb21-fcad-45e6-8ab4-112787d3dff2", "indicator--1b1c98d5-b4c3-4d29-8fbc-2ad42dce0b0c", "indicator--d6388ecb-7413-46e2-8a56-56bdd1a73950", "indicator--859cd973-d3ee-47e3-a1b1-af386018d933", "indicator--11bc8814-6ab5-46ec-a7f0-00be8bc1cc95", "indicator--25aa95ae-9bcd-4c83-9c38-b2f022eae416", "indicator--89f4fe62-607b-440e-918b-951c655c603c", "indicator--644abdc0-f70a-4f00-a7c7-08bd8882ab23", "indicator--06feb6e7-c41e-4275-9e17-f83579367543", "indicator--06dacd10-10ad-47f4-be99-7cb835ac9f5a", "indicator--dc575fcf-8dd2-4e9a-81a0-6b720beba87c", "indicator--1ccb9608-d6e2-4e42-9a57-415b631fdfe9", "indicator--846f05f4-de26-478d-a066-ca08f8ecc2fd", "indicator--db1912ad-4d73-411e-99c5-685a7c044edc", "indicator--8928237a-49cd-44b5-b6c1-40a3b59212f4", "indicator--81a4221f-9329-4099-979d-3120630cb458", "indicator--cbbb6557-e462-40fa-908a-a0d7aee1e31f", "indicator--500e443e-545f-4d60-8b61-d29afaec7e26", "indicator--5cce50c1-5cb8-4612-82a1-9272cb56b96c", "indicator--46fd307d-ad81-4d70-8ff1-f56ff331c140", "indicator--03b26084-39cc-4b01-a51b-05a648cc403a", "indicator--5fc6f78a-59f5-4d58-8164-e1ce8b8b265e", "indicator--27191780-96b6-49f4-bf1c-f00cfe405bd8", "indicator--e75ac417-bca5-4415-9ec0-f661ed832aaa", "indicator--9aa5db6b-2a1b-4992-b9e9-0ee4330a6d24", "indicator--faef48b8-2cdd-41b5-a27e-7808fce47fae", "indicator--3f225b81-b9da-4aa0-b321-f4c5e64c8d96", "indicator--8cdb5543-dc09-4d2d-a8ee-e4bc44f60d41", "indicator--092dee92-5391-42cd-9df4-ddc6abe3917e", "indicator--7b7440fc-f8df-485c-8773-e055dd8cbd04", "indicator--b7e718e3-c8cf-4893-9863-4ae16c785a93", "indicator--7a92468a-5cd8-44e2-a52f-a7ab05ad0c1f", "indicator--5065264c-bb85-45a7-bdfc-562c796d0c91", "indicator--eb0fc56e-43d4-4056-bc74-1f21448d7dfa", "indicator--289715ff-a938-4756-8dd9-73d3550c971b", "indicator--a51e5c66-cb4f-4348-b838-8eb631ad85b7", "indicator--36cbe546-8b5f-4b54-ad1a-403f9060f127", "indicator--dc965fe4-a9ac-4c64-a792-4f682f0a702e", "indicator--d6de3395-c83e-4ebf-b155-001a311ea592", "indicator--e6bda253-74da-45e8-b58d-ff9eabd832f9", "indicator--1e17374f-dc2d-49ad-a73f-891bc7fecb72", "indicator--2876902b-63d5-4e4b-9ceb-094e6842a08d", "indicator--5cfcb62c-d6ac-49a1-bcc5-53f488a30cbf", "indicator--28d14d26-f2d8-412f-baaa-a5f31cafcd79", "indicator--440c7387-5886-42d0-88c8-840a2e880bd2", "indicator--4cdc3c70-8ef9-48ea-a653-74ab5d74a03a", "indicator--669de1da-fd64-4608-b033-b22a08c9b2f6", "indicator--7d2a081b-5046-4d2a-80e3-0a6cbf3dadaa", "indicator--0cfa0f1b-ea94-4213-a269-cd54c4884878", "indicator--535f89c5-07d4-4aec-8e0f-9f7b5457ac33", "indicator--8b4b7ced-61bd-4565-a810-d9536c7d2686", "indicator--7afb7cf2-d249-4976-948c-8cea487da540", "indicator--d252a5bf-6ec0-4329-9c06-ef5d1eddcc67", "indicator--57260174-200d-4540-8c2d-7d12e5742401", "indicator--5ce3eef7-3570-44eb-ac13-827fc4689916", "indicator--21c741dc-8e0d-4326-9fa4-105d2d9523d1", "indicator--17c9b168-c87a-4291-bd58-0baa7a323fd8", "indicator--3b0317c7-4a17-4318-8fe9-4a7c37fcc8a1", "indicator--727cf66d-a976-4cca-a086-6c3152cd7c41", "indicator--25d82742-b0b1-41ce-a01f-faee0c60e751", "indicator--febccfb9-8aae-4cf0-998e-92817dd5972a", "indicator--14052086-3b32-42dc-804c-f10277129fcf", "indicator--e11212f8-3009-432c-a764-40b46f9d7eec", "indicator--69693c25-9126-47d9-9086-59211f97b667", "indicator--c314cdc5-c349-46b8-8bec-06504d5b727f", "indicator--cd8024e5-0755-4723-a162-0b152dfc8cd1", "indicator--6133d225-cddb-474b-82bc-ac8ab78b37c2", "indicator--042f6a01-5e17-48d0-97f1-e15bff3ef891", "indicator--e827a514-4e43-49e9-9440-4805d5671ed9", "indicator--82ec47cf-5f00-4b5c-ab0f-72af935429c3", "indicator--83a2db2d-28d8-4413-b1ac-4602d8ab3fac", "indicator--356b9df1-95d9-4e3d-96e8-fcc2fdc66de6", "indicator--d9d1458f-140f-4fe4-a78f-af9b889e267d", "indicator--4fc5ad98-c867-4207-bb80-d0cdab1fbe0b", "indicator--7c5bd169-7a68-4804-b24f-7f61027a41f5", "indicator--43324379-3ad3-4022-8e78-33e9f263b010", "indicator--8d22f649-895e-4182-a18f-6f869c389f2c", "indicator--12c9eb5a-3c83-4be8-bc7b-7a7f3c1d62ef", "indicator--dc6cedde-e05d-4994-8de4-74228e221da4", "indicator--0c35ea85-cb59-41e8-94a6-8cfbc2b83cb3", "indicator--e0f6dbf8-15f5-42ea-bd55-ab58e951cc00", "indicator--d75b1d8f-cfb3-4563-817f-8371a0b0ea96", "indicator--9244ad6f-a145-409f-b628-bf9a36903936", "indicator--3a898b31-2b5c-48d7-9e5d-c21991e77acf", "indicator--ec1b9bfd-2b86-4895-9f9f-d716368c616d", "indicator--3f86fdd8-a991-4ccd-923c-6d1880bac38d", "indicator--0efdf42e-a4a9-4432-9919-101916a86870", "indicator--707040b3-d5da-46be-a856-f7ccbd946434", "indicator--d6d7d237-d658-478a-91b1-81bb4f946e36", "indicator--b5dbeec6-46f5-4e50-bebe-a9c79be8d0b1", "indicator--8ff80cf9-21d7-4a8d-9aab-434bd424771d", "indicator--54c5b83f-5c32-4215-aa46-6e4146553cc7", "indicator--b32f3ee5-0054-4262-93e1-8b7431bc12ed", "indicator--26f73403-d449-484a-ad9e-d6b0aabbf314", "indicator--f04244ea-2f41-45cf-8061-94bfe31d6959", "indicator--df6dd248-ef68-4432-a9b9-4e30d0046516", "indicator--4ea297bd-0bab-4789-8624-191dfff81697", "indicator--8283b985-60a8-43a7-b81c-16ab77bca047", "indicator--4790ff50-7fef-4f4c-ae2a-ce2ceb260c9e", "indicator--3a06507b-a121-4e94-82a4-2dd938772fc3", "indicator--8136799e-d11a-4d54-b5af-a09df883b9dd", "indicator--890ec764-f62a-45ed-9f94-c26903cbf328", "indicator--fad85f05-280e-4f55-93e4-21f3acda8ddf", "indicator--0494a078-f87c-437e-a3ea-ea1f44d167af", "indicator--a25a7a90-b968-4d9f-a77b-b1a52d4245a5", "indicator--554de2a7-df9b-45fa-b60a-0e70b0b0d6af", "indicator--384c66ed-4ad9-40b8-b5c4-b8e984c07300", "indicator--71bab435-edc0-43b0-9fa2-cf81dec5bbfd", "indicator--9f59f0f7-8d1c-438f-8ef0-a40669e1519f", "indicator--54149528-57aa-4991-9ff1-683351f58478", "indicator--bde2788e-909a-4c3e-8c5b-e136b34eddef", "indicator--dd5135ac-c3d4-4afd-b130-95caefbba90a", "indicator--a9b1e307-487d-4469-b394-dc72e9b3a4a9", "indicator--756ac621-cf23-46de-ac98-44a66f962b85", "indicator--3202613b-4073-4198-beb0-125b12d91069", "indicator--03f5f3cb-5328-4a34-a0fd-130d81e59107", "indicator--4f95a936-be7b-400e-9c40-3301c31402b3", "indicator--5297a5f1-8b3c-4858-86ab-9c57d51e4d47", "indicator--ff4d7542-c36b-40be-bc6c-9391a521cca5", "indicator--98abaf65-905b-41d7-9fc5-02247467a23b", "indicator--5dd5a3c7-0903-4c4e-9046-0ae33df784b7", "indicator--e36f4b1c-2dbe-44ac-80dc-ac2db9b5c6b1", "indicator--06269725-80eb-48b4-a7a9-a97c11efb223", "indicator--037e6fff-d3a8-4aea-8d8f-41356e49a3fc", "indicator--79642910-8664-4e95-8e93-209762d9e8e8", "indicator--67ca4bd7-289e-45ee-a6a8-8c24895629d4", "indicator--1b7f4e14-b181-42be-a777-d7bd89e425f6", "indicator--0749072d-9a13-46f8-8eca-f213277ac640", "indicator--d2aa309c-40a2-41de-9cad-57f72c5bd77b", "indicator--289f2af5-6414-4f45-9c15-b8439991dab6", "indicator--ec8cc5ad-b15a-4126-865e-67c5be3d5b3e", "indicator--fe16b969-166b-4f8e-8a36-523d4e9b8d32", "indicator--a5d5cf31-16ea-4f4b-b569-be7663e58656", "indicator--a1bd78c7-8a01-4ae4-97b9-39c0578ec9a5", "indicator--4472ac37-b4dc-43a9-b4aa-a9ab6bb869ca", "indicator--4d12eb7d-a8ea-4a72-a049-4ef882d17ce3", "indicator--b33d007a-be68-40cb-9f15-450d7b76e7bf", "indicator--00c4e6f0-cb66-4a2b-9175-dff40455aeed", "indicator--1842a338-bc73-44a6-a8bb-a4236453515b", "indicator--1b7417ea-ebf7-4d63-96e5-89bec0382a9b", "indicator--ac69fff7-00e7-4301-bd99-351bcdeeb863", "indicator--75ee18f3-793f-4626-a1fc-ef248e578b50", "indicator--1352ff92-09bb-4912-b0de-56f4e856e9bd", "indicator--d7a8b4ff-01a6-476c-8801-3f908431f971", "indicator--7fbae972-4eb9-4fd3-acbf-869283a7148b", "indicator--f0ee8085-a899-4011-8899-36380ff40a08", "indicator--8d858e80-5784-4085-b198-2f1ac4702bd2", "indicator--40fd7161-b45d-4a65-98b1-5dee434d89d1", "indicator--feed7c35-a12a-4ce8-9fe1-490076584401", "indicator--800d2f97-2d52-4bf9-91cf-dbb5f4581377", "indicator--62985ba6-83e5-4a46-9468-144be7c22bae", "indicator--0a3de5ee-7b43-44e0-bcae-648df9ec69b6", "indicator--99003a04-63dd-4887-a7e5-85962b838da7", "indicator--af82b57f-a5a6-4814-bb5b-60e7160f510b", "indicator--6f32c2d7-29aa-4a16-914f-cd8ff81f09a5", "indicator--811e01b2-b15e-4159-82cf-99857669c994", "indicator--3c2af5f2-11d9-4e09-bb8f-86fe5d97a111", "indicator--9d7f730f-a196-4c93-8270-a8348a2b0813", "indicator--05737281-cf11-43de-844e-3f156bd76a68", "indicator--5a3ff013-cefa-42f3-8218-297b124821a4", "indicator--6eb3ae38-350e-4149-b8f2-9c843d65c217", "indicator--364ceb46-917d-4ba9-ae90-5424959ab074", "indicator--cbc1a680-8246-4466-8eb3-7b2f4c7d2bad", "indicator--267aa6ad-41d1-4b56-98c8-a9b9fa86fd64", "indicator--e1f9afbb-1978-48c9-9d6a-b00604bfa366", "indicator--94942c8f-f1a7-4e20-bdf4-219382030753", "indicator--2d789d0e-d65e-4c31-a9ab-569bbdbdddfd", "indicator--95059d48-9adb-403b-be6d-0e36d56d9be2", "indicator--196ea033-abe2-4803-a725-c113075011b7", "indicator--cd639409-2e89-4572-ad9c-4fad58898d5f", "indicator--b0e9970f-8fb4-43db-acbb-1b11314eaa24", "indicator--d09e6d40-bec3-491a-b78e-9d28afec3b92", "indicator--3414795d-f2f2-490d-a72c-d2f5cea51b34", "indicator--2f2a8b66-bec2-4ece-b82f-625ee88cd391", "indicator--c462f537-d6f5-4750-b083-b0f520c0a047", "indicator--13d3cb1f-3097-435b-83ee-3d50c44fe2d5", "indicator--1797466b-6747-4d64-b53f-f83106fa6281", "indicator--c6dcea5f-d847-4902-911c-ebb2a7ddfc11", "indicator--c6c5bfa3-ac4d-405d-9ab9-a29a34e17a58", "indicator--a748f1be-0e7b-4b84-bfc7-a8e3911d9b09", "indicator--a517f2f9-65ec-44e2-98cf-8528884f6462", "indicator--27b8e01f-d65d-4c67-81c4-aaa038e60218", "indicator--6249308b-9693-4b76-9f30-729597ffb038", "indicator--08e327e1-c817-4deb-a269-c3f53beb8e98", "indicator--affae3f0-a484-4901-bd7d-6749078bd4e0", "indicator--c7c6e31f-95e4-4750-943b-5522d75948bb", "indicator--c8fb741e-1d7b-4785-ae3f-2f3340410c32", "indicator--30cbdc3b-deb1-4694-b777-3bc751a32a05", "indicator--4b64f549-1374-4bab-ae98-4bdad8ac118a", "indicator--b971bb1f-f266-4e75-89d5-474dc8da6808", "indicator--40484e87-b4d5-4d36-9753-ff8a6e4ac2b5", "indicator--3d9fc5e5-39d7-4e70-9a59-6546d468c250", "indicator--28c9ec03-f7a9-4091-865a-689177299482", "indicator--6e67822a-8adf-4528-9bb6-be657ef56a6d", "indicator--7d6e0f5c-3a1f-48eb-9062-daa30f26f10e", "indicator--6431aa63-52d6-4c8f-9c61-f98d5abb28f1", "indicator--ea86c664-3277-4839-9369-68a69b6a7c15", "indicator--39006b4e-c3e0-49a4-8198-088ddc259207", "indicator--4b73f1db-12f6-4667-99b8-79fe4ce75000", "indicator--ed96fbdd-9ed6-406d-9518-1880ca8b1c7b", "indicator--87cee148-2976-4dfd-9491-6009c8d303fd", "indicator--b9ebed80-4b6b-4276-907f-0883464e36b9", "indicator--c3de2a11-b7cb-4e3f-ad3b-3216c1a24b9f", "indicator--e5c03f5f-c7da-421c-b46e-fec5679549cb", "indicator--f56853c8-b195-4cf4-b4bb-2978ef421650", "indicator--67b96ca5-5f46-4a70-b002-8f65189ad52d", "indicator--e5567dc1-c34e-4b9d-b5ac-725e71a83ed4", "indicator--f9cb199a-d694-4bdf-8f45-2cd8f7cef896", "indicator--4df83dec-0d62-44df-9d9f-494a0ce7e88a", "indicator--0e0d7794-4f15-4757-bf1c-607e6ae40383", "indicator--0e5239f8-c8df-4cb2-9b0a-1d685253deb3", "indicator--75a0191f-5dd7-4612-a93f-0ee8a0c0d7af", "indicator--6e5584b4-3af9-4c80-bd27-ee8b05026b80", "indicator--9e9570b9-ee4d-4c49-b1f3-bee95a7b3483", "indicator--796d5e63-9445-4869-9242-747976ae64b4", "indicator--432aad24-ce14-42f6-9b20-03c0e977b643", "indicator--6740c890-673c-4070-af4f-0f2403a12da1", "indicator--96ae6828-eb7e-496c-bd7d-cf1ed4e4ebab", "indicator--526940d6-d1aa-41b7-9be3-b72b8b31e8e4", "indicator--aa90dd1c-49b5-4d0d-87b8-332ce7ca2245", "indicator--e492e9aa-74c9-4b79-a3da-1247ff983428", "indicator--da326e91-465f-4382-8d69-fd7970843adf", "indicator--3fef81fa-8100-4ca0-aca5-6a4a36d6a3fb", "indicator--96a8c278-f57b-4e37-b7df-148d94468b31", "indicator--bc34fac0-1e86-4a28-b03b-d98d34ba9ad7", "indicator--179f3b88-ea0a-478e-928f-9c3f47ae4fb8", "indicator--2318e078-fef0-44d5-b9cf-af0a08347813", "indicator--72b1cb4f-70d5-4dd0-9ca4-b1f094d7f3ec", "indicator--24a023d3-a1d1-4013-975c-7e8c5a2674d5", "indicator--04cc80cd-084e-4d02-acb8-afc01b1c6f63", "indicator--165ff8d8-8acd-48eb-b9b2-f2588462f863", "indicator--11a7e900-ab17-48bb-ad33-522e75887d01", "indicator--94122982-3f0d-4571-8367-15a0fff59cbb", "indicator--a8b3c104-0081-4a6b-b87f-5e1a6b53ba99", "indicator--0e1f60de-769e-4556-b47a-4671f46c10f8", "indicator--8c3af7d7-bb4c-4c2c-afee-e92cf71f5e55", "indicator--ef753a4f-cf06-4fdd-83c9-45ef461cbba1", "indicator--eaacbcf4-4c40-404f-aef0-f6bc0c2efef9", "indicator--c4381c70-8397-4a31-99dc-eb4f0439434f", "indicator--1ec3b0ea-ebc5-4f1e-a339-dd9c0cf5c10d", "indicator--bd4b0cac-6289-46ee-bcfd-d7c3db0e9d8e", "indicator--e14ac01c-309a-4eb0-b34f-a122c7b0b025", "indicator--d4bcef81-9daf-47b4-ab81-14b0ae1a9052", "indicator--98187f33-b601-46fd-ad58-7a012e22ca1b", "indicator--d4026d25-2fdb-4682-b3ca-9435c6823c06", "indicator--9a38abb9-1e2f-45f1-a3bb-08fa6272777c", "indicator--a37f3c1d-221d-44c8-804b-66399ae36200", "indicator--33ab63aa-cbdb-41bd-a64c-9debde1f1876", "indicator--dd6afbd2-4a51-4244-8f8c-b4d3e33e1412", "indicator--05edbb41-0b79-4c59-95c6-915a69f21a2f", "indicator--04fec839-7e72-497d-a311-787f1f08d050", "indicator--4c6b5d24-cf85-4ff6-b598-2464e4e685e6", "indicator--1f654156-b915-4a75-b104-8fdbe798bcdd", "indicator--e45e388e-ea52-450a-9e35-a4a39cf0216d", "indicator--bbb116d4-d9cf-410f-bf87-c7e21054906a", "indicator--9170930c-26f1-4917-a2a1-d3ba19144a51", "indicator--d057d71c-803e-4ef1-b8e7-3464a2754cd8", "indicator--7f69d3c5-632b-41dd-8dfc-106a472fdc7a", "indicator--76232520-2d2a-451b-852d-b9c6b860e58d", "indicator--db9999b8-7d18-469a-886f-913aa2901ff5", "indicator--78ea3c48-9a24-4068-9002-d7fdcec4ac2d", "indicator--10846487-04c6-4ef9-9048-38598459e061", "indicator--f0465264-5eb8-4f2a-b1b1-7da46be6cf41", "indicator--742190a3-3cec-4539-9710-e498a3b47593", "indicator--9ea5021e-7a6b-4cb0-a353-30b739bdb983", "indicator--c8465f55-44cb-4b9a-b369-64a438b2b548", "indicator--1298ee81-fd86-4b59-92b8-fba424aefa41", "indicator--31afc942-ec10-4baa-a9c1-37309cdc35c1", "indicator--421d1ec0-8e55-4414-8078-57b783f92b87", "indicator--6520bdc9-140b-48c4-b7b8-795c872b29ac", "indicator--069236ad-1ffc-4574-b7ff-80a891a9de78", "indicator--63d23ed2-eaf6-4a73-bd4d-d34967250e9a", "indicator--87d446b3-6d07-4369-931d-052fa05f13d3", "indicator--0b0afce3-1ce0-459b-8640-56012487270d", "indicator--c6339a4e-4787-4f71-8ed7-eae93c265495", "indicator--cd8eed36-2455-41f6-8d29-c2e6c6c52e6f", "indicator--bf20d512-6231-4054-b3c4-8528001f55d0", "indicator--f97eefed-c063-44f9-8874-72b6b4540f49", "indicator--a68499d9-e1dc-424a-a4c0-a4c5f58acb80", "indicator--d8a06161-4caa-4311-94e8-c7df687dcd07", "indicator--79b50f48-b3fd-47e6-8b0a-4330230bc768", "indicator--9d9c70d2-2bcb-42d5-bd1c-fd40af185409", "indicator--69326b96-de1e-4f0c-9105-c47ae0c31b53", "indicator--a4bb07c9-b581-4ea0-8a74-539546096eaa", "indicator--50417922-71e0-4fd6-bd8e-5a1d417e62d6", "indicator--938485a3-a296-4ccf-92ee-1efc50c42669", "indicator--7f51fc3a-aa11-4c2f-829e-73111802d0e4", "indicator--d740958f-b97b-48e6-a86b-6e18ae0036d3", "indicator--e0e99386-39d0-47a9-ae88-608efb776926", "indicator--4e4698da-6a65-4ab6-a87a-d9e26095b0fb", "indicator--990cfcae-ceed-47fe-8eaa-7fbda0dc9136", "indicator--afb6844b-f688-4078-8cc2-8a6c69f02ca0", "indicator--fab7f42c-2b81-467a-b9a2-8a6227850522", "indicator--09bd8ece-43f0-481e-812c-ae87f1c3c068", "indicator--7737353b-b543-404f-9568-43d8bfce2ff6", "indicator--58247cbe-62d8-4663-8157-020a451b4f45", "indicator--96497429-4c9a-4f7b-a3c3-c767f1d47150", "indicator--b1425d60-4b0e-4c90-8ee9-0d85c11857e8", "indicator--4ce8fbc7-93b6-4507-95ee-d4806434fdc2", "indicator--4ad31356-318d-4ee5-acdc-93537e493391", "indicator--3d5e443b-1314-4bea-9652-77dfcb8b91c5", "indicator--c038b9f0-7779-4866-a42e-b81a88589cd5", "indicator--cc4b20c5-ee30-49cf-9c2a-aa57b4f74e52", "indicator--941eaae3-1676-4b42-b687-96fc061f0123", "indicator--c4cc8357-a7e9-4de8-9416-6e3f4ac303d9", "indicator--77538e35-03dc-404b-bd67-b700f26ede66", "indicator--215ff01b-4f71-4fdf-a47f-edf5011984ad", "indicator--b595980a-1c42-47cf-a8df-410524e9f344", "indicator--3e77bc00-30ba-4021-b9fc-7713de6d0cf5", "indicator--0d81e3a5-5778-465a-8538-6064bb26ffc9", "indicator--1e7651ea-7450-4176-bbfc-83aef13468e6", "indicator--f3bf7ea8-d0b5-4e02-90e5-24574126b0b4", "indicator--d9ccfccc-709d-4293-bfe5-88a01130f14d", "indicator--a9682c8a-ce10-4e1f-9715-d34c891b2077", "indicator--3a8e9ef9-9998-472d-8464-480648aab450", "indicator--94169cc0-9360-4c1f-8faf-08304692fcc7", "indicator--df97c073-6ae5-4c23-8076-65812879841f", "indicator--94701ee3-444e-450f-95d8-79b4051966d8", "indicator--3576ea8c-da40-487f-ba70-dc0d119e0cc5", "indicator--f5cac5e3-8372-4170-be85-19ab3f57f957", "indicator--916eded1-187c-44a0-a5f3-4a035d27cc2c", "indicator--cd186dbb-1bf2-4cf1-98de-2769852f131c", "indicator--a1279531-30e6-49e9-b8d1-d9ffe597fb90", "indicator--1e233628-4471-46c7-b438-7ff0dcb8d3a8", "indicator--aadbb3de-febf-44f2-bdc7-fd54d0d144e7", "indicator--6f918190-0c1b-435d-ac9b-14a9369d588c", "indicator--eaca8993-a3f5-4be6-8a40-54da3450a81b", "indicator--6daafbfe-c946-4636-9585-e9e301db0320", "indicator--6a5468fd-0814-46b9-851b-20be50b90aa9", "indicator--2500ba86-da07-4117-8cab-00dd5055eb2b", "indicator--799835e1-32ee-4b8a-a8ed-fe9da4c22258", "indicator--ebc38874-5925-4220-bb4d-2032eaf66d71", "indicator--1d145455-eb19-419e-9970-09c3da06bade", "indicator--567439f7-752d-4663-87d5-1f5ae3926644", "indicator--5a4b0d17-cdfe-4240-b656-96a45b629836", "indicator--61b0eb65-d224-4375-bbde-41ee388afb48", "indicator--40bcaa3f-68d3-4c92-867d-9c0bfc74a90f", "indicator--4017947f-eaa6-4bd9-a13f-907d5d148900", "indicator--ec7abf11-54a3-41a2-8322-93d494d93235", "indicator--ff7d0258-45b8-4584-8ca7-c952ee4c37d0", "indicator--f2d13270-4c9b-4175-a0a4-d1b7169634fe", "indicator--214ca7b1-58e7-4770-badc-7b3ee38c2f88", "indicator--f62bf84f-718a-427b-b369-1ce3d3ee92d3", "indicator--14aee471-c301-44aa-a786-42906e634913", "indicator--3992a0d1-a555-4b15-9aec-ce71640c9b21", "indicator--cb8c06b1-a3b0-46b0-b059-efb520b5a4e5", "indicator--29681131-4140-4b47-8321-a0c58df8ad5e", "indicator--b1cdab23-be5f-4a4b-802a-e3c3848a6d94", "indicator--b9a1d953-9a8b-4cf4-83c4-ffbecb1153db", "indicator--cf61311b-c552-4797-b4a6-1ae9d3e2031b", "indicator--a93348f0-1043-44cf-b570-bf2ee8c1277e", "indicator--4201ce6e-4dbf-4cc3-8b89-b46a1b8f52af", "indicator--4c6fdace-ba9c-4ace-9b6e-cec6c31f3182", "indicator--a7b7c0d8-7290-4971-8f59-27fb628cc758", "indicator--3391f0e2-0b3a-4347-91ce-2acae8c8cf21", "indicator--ed4588ac-1c27-4f6b-9b06-897dd2053c88", "indicator--26f8b0e7-f53e-414d-8aea-3cf1a8473f99", "indicator--45f1255d-7193-46f4-9dd8-d40c97ba1abf", "indicator--76f539c1-f214-4080-9f0b-a03284565c08", "indicator--60e98fa2-2e2d-4b6b-854c-f9dca257af37", "indicator--d6a4eb51-0396-4bca-991e-a59aa0e3226c", "indicator--3326b209-94a8-4872-a39f-48bc1af2d0cd", "indicator--31b04607-695f-481e-92a4-8115dd782a1d", "indicator--19cb438b-8f4a-4544-ab1e-12958b10f636", "indicator--07309c99-6a45-41d6-8222-294adab3bf8c", "indicator--1065480f-6495-42a9-a1e8-6a07288f4640", "indicator--bcf92aa2-df9b-4621-9d04-db84613ebca8", "indicator--283119c7-0a21-4a26-af08-7c4e028188a3", "indicator--4e5ab562-721c-4528-ac6a-51526054aa9d", "indicator--93bae32d-58d8-4f55-b48d-709c65b37474", "indicator--4c4de5f5-d8c6-4d08-a4c1-c4cecb271e70", "indicator--8cc1bc5a-3de7-4400-bc6f-4e5026496b2b", "indicator--e5716ac4-1821-4006-8800-3d6deef31b15", "indicator--64b99c69-588a-4850-881e-6fc40d02f992", "indicator--96bd1970-2cc4-42b2-b52d-014b527d8428", "indicator--df9cafac-8649-4b4c-bba5-3c774baf5579", "indicator--38ebabcf-cec0-4bc3-ac15-1cff0f90d48f", "indicator--84e756e7-b96b-4d54-8529-aec7aaf9b503", "indicator--f865c025-12e0-4a20-bc38-fed33ed75409", "indicator--c14bae86-807e-4410-ac6b-6b672aecae76", "indicator--7c606d8a-9df5-4394-a613-cf9d4c769fc3", "indicator--2419a307-7ba4-49bd-93fc-4ad828536847", "indicator--0469cf88-b5c5-499c-a0c0-b3ca9dd5e977", "indicator--5e070bf6-158a-493b-a5c7-14b49fabdc74", "indicator--db0f873e-3aec-4219-94b5-2ac2df02bfdf", "indicator--85624bc5-b3dc-4d4e-a58e-4227beac30f6", "indicator--908447f4-59e2-4cfb-a8aa-d2cfb17b75c7", "indicator--e2c1484b-a291-4eca-b1a9-3a6a9f4b723c", "indicator--f85d9e15-64c4-4cfd-b260-3627562a26bd", "indicator--b08619d4-fc96-4030-ad4f-5359a4e5211c", "indicator--7c7c2e71-3b3c-436b-a060-bc3e43deaaab", "indicator--fda3f70d-fd17-4c45-a412-a3cfc113f2c9", "indicator--466d515a-412c-45a0-8048-16c2daf21cf3", "indicator--447f58ee-94b7-4ccd-a775-38a40b4a5541", "indicator--0fee3b74-541c-4f44-9c3e-1173f4802a72", "indicator--9ad26e76-c213-4353-9533-51a74f040763", "indicator--eed2ab92-b12f-46d8-bfe6-d2492e562cf8", "indicator--1c507535-e5b5-4484-baa9-dbe53755c40c", "indicator--0a6facd7-5e30-46ea-8aa3-0d3ecbd18eec", "indicator--95d4cc37-d167-4bd3-9910-b7c788e76432", "indicator--b7b2db88-e28c-49b0-a15e-a9d164aebd86", "indicator--ff6eacb9-37ac-4cbd-962a-de2efa033d83", "indicator--b7449af7-8610-4984-8380-1a01a3290ae6", "indicator--1eca170f-557d-4ce4-806e-b6cd7a40c1d8", "indicator--27dc6ef4-1eb6-4a30-b42f-f8941e3dc4e0", "indicator--b95d9db3-66f1-412e-8e9e-c0479e91e5d1", "indicator--e531afd1-9f72-42e2-b9c2-0500c66a4fc3", "indicator--1347c1e5-2b80-4b7a-ae9b-69d39bf759fe", "indicator--965b31c8-8d6e-4f96-8d93-f4d826cd8a4e", "indicator--eeabafa8-e6ce-41e0-83f3-e51e6023c9c7", "indicator--65a1655a-00ea-426d-8efc-8906368b07d5", "indicator--fa98e3d1-4dd8-4d13-ab00-d18ea666779a", "indicator--4a50b143-fac2-4aed-a55c-5f6c0b779c67", "indicator--589e10bc-645f-4abd-b084-285e273689ce", "indicator--24c01c4f-5604-4181-9b86-235eb439dc57", "indicator--644d85be-00b3-46cc-add1-4546f4f84901", "indicator--10cfefd0-60f8-48ee-a1a1-6184f6ecec15", "indicator--76d4605e-1a14-41da-ac54-eb738b232955", "indicator--27a9811c-2de9-4224-8fcc-edb85c6e479f", "indicator--232e166e-59b3-4ddc-afff-784591c4e220", "indicator--a2a86f02-1687-44bf-9e75-147961bc21e2", "indicator--15165699-303d-4bcb-b9b9-316f5918c117", "indicator--96f1ac76-a68c-40f8-b9c9-472547ca80ab", "indicator--0f16ac22-78cc-44ec-8e2d-c2371d45b614", "indicator--effc64c9-ce40-46b4-9827-de9c27b947be", "indicator--45832a0c-c756-4aaa-a67b-04c0fe03690a", "indicator--8ba12416-9d8f-4526-ad6b-1a8da0940595", "indicator--3475f31e-aff7-4e79-a149-5d84b61c0bde", "indicator--82c8271a-65a7-43ef-bd4e-fa7c92f8b32c", "indicator--ac01fa99-a235-4d02-8bef-26d270106f8a", "indicator--fa1994c7-c6a3-4428-aa87-1ab0bbee5cbe", "indicator--586960e8-43c1-4d3a-a541-ab7fa12fbfa0", "indicator--26842ef7-3ee6-4585-8cc0-4a4d2563e9f9", "indicator--3ac65dd5-66c4-4002-8ae9-73735511ca01", "indicator--d541ea4e-8c61-4345-95e4-f43bc8975db3", "indicator--b73efb55-d43b-4add-ac1b-0e4ae213e7e4", "indicator--ec00404a-6c8a-4f62-a5ee-9fa63f489b5f", "indicator--0d7d2b5e-41a0-4215-934f-2d8d23447e9f", "indicator--cb2d43da-6ee1-4def-806f-3c2a11b86125", "indicator--d411278d-2621-4393-9c90-4d45255e3b92", "indicator--6950d317-f14f-4a68-9e10-060c7a4c9fe3", "indicator--9dfabdc4-0acf-47f7-9ef7-26ad2aae9e64", "indicator--d5534cb1-c934-4a63-ab86-3abdd0915c84", "indicator--810e5a29-0f5e-4f16-adec-23341bedb53a", "indicator--b5af0573-21bd-45db-ac2e-2c05f435241d", "indicator--95001895-459f-42a4-894d-d096f8e080fc", "indicator--fbee3cea-ef9d-4898-877a-f57fbe858c17", "indicator--c3d94f8c-a411-4fd5-a8af-e4a4f76cb2b7", "indicator--95f68d67-250f-4c49-9f4c-f7123c9f9aaf", "indicator--38da9609-8c6c-4efd-bc18-e42504baf720", "indicator--0d2bbb47-f91b-401d-9c9c-fb24a87bf0e8", "indicator--90035354-f492-4ae8-bdad-c5f04b2fa901", "indicator--cca5a46f-4a4b-4549-8233-f93e40e32dca", "indicator--e3ea3f12-efec-45a1-accc-f165d49025bb", "indicator--14455cf2-6d59-498a-8b0c-add291b8bd13", "indicator--76fb5e8f-fc69-48b1-823c-3b8b2b50c0d7", "indicator--8423a5b9-fadd-4289-9553-0b35f4c7f70d", "indicator--2cca0b73-222b-4f61-b9f0-c4c1e010fe90", "indicator--10cdd8ee-2b72-4d9b-b20b-6e18061bce92", "indicator--da6e5629-a615-446d-9808-4875d5a73ba9", "indicator--52354d34-a2f9-4366-9563-64b7d2519d2b", "indicator--e8add90b-eb2a-4bde-aaae-5937a933b134", "indicator--c0ffd8e9-8a87-411b-a05e-4e51863342b9", "indicator--f1f0ce21-bb5d-4a98-b61f-3acf5e6c6023", "indicator--55a8280a-2b50-4a82-be75-a6af5accce4b", "indicator--18847f5e-c531-4386-b977-dbea32e23063", "indicator--5085cec8-2167-4e9c-a1c7-a3cfddfbb589", "indicator--5a09b76b-0eaa-4e5e-82ae-e00d86fe6ec8", "indicator--10c23a9c-0ce4-4671-a455-e6fd38e6b4c1", "indicator--1c65f6b7-5399-41d8-ae1c-af749721e372", "indicator--94451507-72c2-4484-a276-63bc1b5700be", "indicator--6255d721-7107-433a-9d67-02bff66326bc", "indicator--b1cc7634-8046-48b3-b4d0-e51b6ebe1b5f", "indicator--12d95d07-16f5-4300-bfd0-5bb5cfd29f07", "indicator--6d902fdb-137b-4de5-9ffc-772fe788791a", "indicator--41caee7e-cf0e-4986-822f-4e8cc8713f05", "indicator--c7afca0f-a495-4e46-b311-89678e056757", "indicator--913e3bcb-b0be-4a5f-8574-c8ac35b113de", "indicator--9c0f3fc7-5243-4544-9100-d1ed6f52d171", "indicator--4369cfab-5bd0-42d2-8fe1-0225b2bc695d", "indicator--9d4c2a4d-b585-4da1-a8dc-ee6e0e56770b", "indicator--86d1d1f1-2cf1-46de-a87a-a57554d0be02", "indicator--8de568d5-fa7a-4a07-a4d3-2a98f29482d6", "indicator--75044724-4d1d-494b-9f73-eef5628bb7cb", "indicator--525d1d23-1eff-4c9b-a37a-26431261bc63", "indicator--210c07e3-41cd-4638-ab67-76c793174f06", "indicator--efd539cf-fb49-4660-bdc9-5bf4d64a456d", "indicator--c22cbe66-2f66-46c0-ba74-02dec89fa019", "indicator--7817644a-1f4a-4e9d-b4ea-c5dfc38acb8a", "indicator--e4468f94-19fe-4f78-af09-44e68002d05d", "indicator--78e0e79b-0922-4a6a-a230-084faa4f8272", "indicator--54138f38-e0ec-4dc4-833d-16c5ef65c76c", "indicator--81aae276-a85f-45aa-a562-8ad57a952fde", "indicator--3b5db3f0-218e-45c9-bbb3-8de2b0c222bc", "indicator--99b84652-8875-40c5-a27e-b004b2ef2825", "indicator--b57e2375-335f-475a-9f8e-645c9ad57856", "indicator--b17b1902-4c1f-46a1-8651-f38e91231ed3", "indicator--907a9b72-fab2-46be-b1ad-e9cfd134d5c0", "indicator--5bfc99c8-6e5c-44c9-80f8-a3a42caeafe3", "indicator--e094e809-3463-4c6e-a1e0-87ba7c5f0038", "indicator--c176fd55-4cf1-4239-a219-4004e1d3176d", "indicator--782117c3-2026-485f-b1ef-6a911445a126", "indicator--0d4a0056-a8fa-45df-b788-7f3fb7066e6a", "indicator--b34acf8d-e538-4e29-baea-674f4b27651a", "indicator--1557649a-0023-40ab-ae44-a1b10be8ed74", "indicator--0214a192-46a7-425c-8483-2f67f344b78a", "indicator--1775f1f9-bdd6-44c6-91aa-49dc990ced41", "indicator--abc407e0-4b9b-4218-a299-3dbc6ad6f252", "indicator--641bdad3-be4b-4e16-8488-607276f6b3d1", "indicator--f1c09df0-0fe0-471b-9ef9-c757ae2a971e", "indicator--71770baf-30b2-4c07-825b-0af978e0069c", "indicator--79f8cc18-142d-4318-8b74-db62ba94d33d", "indicator--c2ad1b52-e7a7-429c-b029-f15677dad79b", "indicator--96f6fb8c-24df-4557-adc8-9a137694618c", "indicator--a41b07a3-83f9-4745-bbae-86de1e6a616b", "indicator--6afb5f44-5268-4c93-8ba5-651487933875", "indicator--e3f69258-8181-4a3a-a144-b1d57f1ae45d", "indicator--63fa1e26-e5f5-4a6e-9ab3-e219973ea9b0", "indicator--020677c4-f1b8-46ad-b34d-b72c343df05d", "indicator--537fd76f-5501-4304-b622-e361034d13e5", "indicator--143cfd21-5c53-4cc1-bab9-700786df9744", "indicator--1e3a2d5b-da1c-41d2-bba9-f1d6e47213ad", "indicator--ac282395-e751-46ca-9c20-8870bf7bd49d", "indicator--6d53baad-f0d9-4013-854f-f4b0ef150910", "indicator--a010c2c4-5f2a-437d-a478-cf8979ee21bf", "indicator--498359ae-1aa3-4f95-b05a-b88fd92cd20d", "indicator--20f65b75-f784-40f4-8bdb-bd0f29cf8c07", "indicator--fe36112f-1b85-47d9-bc4f-7a658730a7fc", "indicator--82669aa9-6230-40f3-a0fd-d1ff36498c24", "indicator--525f086a-38bf-4c68-a3da-fb311ced422d", "indicator--959beff9-5aaf-4b87-b18d-f275ee6f079f", "indicator--5018f983-5314-4f84-815b-fa102b1a75d1", "indicator--e014a82a-856d-4791-95c1-a9f6fa9c6b7d", "indicator--d1404d34-7892-450e-98f2-67aa13a4845c", "indicator--c1f52112-2c2d-4d96-b4f3-a609bbd78bcd", "indicator--570389e9-72e8-47e5-91d6-5c2e07791b9d", "indicator--35abe93c-7827-4b69-8fbf-34da9c037b4c", "indicator--a417cc97-57e9-4bfb-81e0-3ccd2e358ca5", "indicator--fb95d65c-9aeb-4c20-a4d1-465cc1b27fa6", "indicator--b162b837-16b0-438d-b553-17b99283510b", "indicator--56cdb852-1662-47c1-ab6e-6d64f6f47f0a", "indicator--13c6c017-6eb9-435a-8d5a-12e1eb4b1fe1", "indicator--d62fb437-e981-4f53-82ae-0c303188cb95", "indicator--37604cdc-f886-44ca-9172-3735bcab02c5", "indicator--2723fba3-7c74-4c7e-b280-905de60f66de", "indicator--fc2f4667-bfb8-430e-bdf8-3c6b9eab9e5d", "indicator--39efe6f1-8919-47a2-bade-65ab13316362", "indicator--f0901502-3117-4792-862d-a0f9c2ac8f34", "indicator--5ce291c4-42d2-4480-a7db-f4fb2f592803", "indicator--00538539-f8db-4d13-96ad-84e6a0905870", "indicator--6acec6be-f4ec-4047-a107-962898bdb2f2", "indicator--7c2a9d35-326c-44a4-af61-4c6564251901", "indicator--11fb31b2-2f34-4f96-805e-29ed401dc68c", "indicator--a307ab95-af84-40bf-b196-53b416efc342", "indicator--11960821-66bc-4e8f-be81-a4cd4956562a", "indicator--f9443c83-ab38-465d-94ea-87f96c7aab0e", "indicator--5a099116-c804-445c-9dd4-dddbff92d780", "indicator--d646e2f4-8298-445e-abfe-43e91d1454a6", "indicator--3e2e042d-429b-45a5-bbac-91de9ff01ece", "indicator--837aa96a-f7b7-45cc-9396-aba63615b5d3", "indicator--e52f1c83-42c9-4937-95e2-f4df53bbc013", "indicator--81ac8c87-20bb-44ff-b09f-d3758b500acb", "indicator--2996cf80-5d84-4d1f-8faa-cf7d1d1415af", "indicator--17927be1-0d31-4633-a865-100d4a512b99", "indicator--e10aff55-f9c4-4699-80b6-108a79fb358d", "indicator--0e04b4f4-fa2f-4dca-9fd3-9fa9274755c8", "indicator--daebd171-0aff-478c-b8b4-e6d3576f7351", "indicator--371c07c4-32c6-462b-8263-57055cb4a764", "indicator--5740d75a-c02d-41ff-aac3-dbc1209ff2ff", "indicator--d751c037-1c69-45a6-b7c4-50b17b302906", "indicator--baa7eb57-90ab-4532-8920-8824f608657a", "indicator--0e55789e-ba86-4ffb-81dd-c0d2ec22829e", "indicator--4c2529ea-229b-4a60-a1e4-180ecfbb3403", "indicator--dcc831f2-8210-4765-a930-dd533dbc264b", "indicator--8dabbcb3-0f57-41e3-b225-acdc6a49a36c", "indicator--3abdae3e-08f0-4da3-a71e-88725b665a36", "indicator--6090da62-16f2-453e-afea-20a39b100223", "indicator--d95098c4-c8d4-4beb-901b-d41d149124f5", "indicator--d1996b6b-3bb6-4e9c-9914-19ae37e7a9a7", "indicator--455f43c0-84d9-473b-9f8b-6a090f4d2729", "indicator--2ca90499-eac4-4de6-861a-7413f6df6378", "indicator--bcf99f55-303e-47ed-bc20-8ee751b29d0e", "indicator--da5ee6fb-4249-495e-aa5f-ca1ac5f3f535", "indicator--44c59bab-261b-4961-8f76-65419a410ed9", "indicator--8d7e619c-7543-4eca-854d-3b69c73af2b5", "indicator--5df98a27-b054-4a8e-b3fe-96307fb7a135", "indicator--efef9a80-e284-48dd-9de5-2228f89200b6", "indicator--764683b5-a1a1-476f-9d64-4558a0a5c632", "indicator--c7ac630d-1056-4fa2-83ee-e7b885c81bb8", "indicator--661ffc4a-862f-46f3-a947-d1a70e7e732e", "indicator--05ce5b8a-c758-4b5f-baf1-7b418c3b32a2", "indicator--ec89cab9-a606-4b89-b26e-1e650bc4400a", "indicator--5bdfb853-5876-4fbf-9c46-9e20da3c16e3", "indicator--8b2e66f5-78cf-4398-a06f-225e921460d3", "indicator--10dc0076-7626-487f-a4a2-98a6ede9db05", "indicator--c3d31242-346a-4484-a5b0-7ca7d55f3b7e", "indicator--71abce7d-f7b7-4431-9ca7-34a138987aa1", "indicator--6bfff2d5-7911-45de-8728-e1e67f55d014", "indicator--4259feb5-30d6-457a-84ed-740d3fabfd46", "indicator--6392fe10-724d-433d-9c32-19d97330f20f", "indicator--4f571033-d811-44a1-88e7-8a21640eb6cd", "indicator--35a7c276-a474-4070-919f-a10184213996", "indicator--2d28f28f-389c-4ce3-a22a-2fbe74af5b84", "indicator--2516ff53-ed32-429c-b32d-457a268b7543", "indicator--be25f258-329d-44e6-896e-1b1aba3c659b", "indicator--0d81d4e1-a674-4d7e-8c73-b40ddf3664fc", "indicator--68941bd1-ea96-4fe1-b99d-84462223770a", "indicator--bab8cd86-ec05-4d5b-a8c5-94e1a22b360d", "indicator--935d0ec6-16d1-4271-b3b6-37b0100dee5b", "indicator--0095f970-9911-42e1-9172-fac759437e3e", "indicator--408a4f3f-bfff-487b-a088-50035c53ede4", "indicator--33c6e60f-05ae-4bfa-8a6e-330c8dde59d5", "indicator--e9f62baa-57ef-4307-b452-3628c5310de3", "indicator--cc09f6b1-2345-40a3-8ae4-e15a253a77d8", "indicator--6e16b7a4-2e3c-4c76-93ed-d42a0ac84720", "indicator--3a064267-05de-49ac-a644-4fe5a9f3e7ee", "indicator--5ce9181e-b131-478a-baa0-87cb398b95a3", "indicator--b33585b3-3827-4038-9074-8eea3fe69d41", "indicator--d5712822-97a1-4291-b433-9a9ea0a7e796", "indicator--bf9ddf83-001d-4014-961a-b1e84a7f60d0", "indicator--c99c622d-ecdd-4198-a423-de43d8394ab7", "indicator--3f145c37-80c2-4339-8586-3c6ddf8b1e17", "indicator--b8eb0000-d0b8-46a9-b9e3-a3bcfc9e5872", "indicator--99bfcb0c-a6ce-44ad-ba32-9fc26d096985", "indicator--b4236430-432e-4a21-9359-3a4cc821c80e", "indicator--feade1c1-505d-4348-9c09-4c1ce14ebe51", "indicator--1e59ab57-8976-47e8-9ec1-6037586e7a7e", "indicator--55937a4a-43f6-47e5-a9a2-6009b73ff3ce", "indicator--dd0ab6e1-d0e9-4027-b085-b605bbff606a", "indicator--2035f9b9-f080-48a4-9432-7e99f889ae61", "indicator--a65aa3b9-036f-401a-8fcc-056e19edd7c9", "indicator--21811f05-dcae-4d9e-b985-ca6a5156352f", "indicator--f7b8b85d-27af-425c-98b9-cb43d4517914", "indicator--477ca271-c518-4103-9987-6fdce62025cb", "indicator--18478a3f-b40f-4a6d-a134-822a54ac98d2", "indicator--1251ca9f-3c30-4ec4-9488-c9c1d0497a59", "indicator--17d35e0a-4f56-4bdc-8143-9063afcf9b2c", "indicator--57399b10-40da-40b4-953b-5d60b2a53942", "indicator--4df8ddf0-03d4-4685-85e2-b0128804b7f8", "indicator--9a500214-a30f-4126-8b3e-17545a17d624", "indicator--37326e60-bb2a-46d2-8102-66771440aa88", "indicator--7d30b99d-6a7a-493c-8506-4e61ba659d19", "indicator--28d5bba0-b71a-4a2e-a51d-37f21da70461", "indicator--c00dd06e-8b85-4fce-bd12-52db9e0080d1", "indicator--ef1456a4-dff5-4c9c-ba91-eb9456f1a9dc", "indicator--aaf21284-37f6-4dd7-9581-6f76a27082ad", "indicator--cd9b5986-d78b-40c0-b1c0-955b86dc4a00", "indicator--2b0a9c30-bf4d-46c8-88e7-737fb8866133", "indicator--7262702c-b37b-4a00-99a0-c9cbc0bff580", "indicator--331839fe-8310-422b-aefe-0dd3703d6525", "indicator--aa491146-a7c3-4e3a-b070-6c90c5f2b2d0", "indicator--14167056-5c00-4953-8252-bf146eca054d", "indicator--e71938a2-f8fd-4068-9113-a461c8466460", "indicator--a3a05fdc-21c2-4a68-be87-93c141f090bf", "indicator--dc1426f4-2b66-4afc-a963-f425eceb98a4", "indicator--758e13fe-728e-4deb-a697-1402952e47b8", "indicator--a1c0de4a-bec9-4103-a83e-b667ad2eef16", "indicator--5ddc618d-6731-44b8-9455-0fe1b13f665a", "indicator--24d2bbca-39af-4fc4-b977-42bfb86c0102", "indicator--54fd4184-bd6f-45fe-8362-8ebd28a3e4c7", "indicator--90222a3c-061b-462a-8ebf-8e27d4c56791", "indicator--7ff95c3c-73dd-429c-8389-7866a1ec4714", "indicator--c972ddd2-0349-4a5e-bde6-4c53c1ce229e", "indicator--50e845b2-f1b1-41fe-b9b9-fbf7a180ad14", "indicator--2598b652-87f5-44db-aa67-8e4a6369305a", "indicator--22aca0fc-cee6-4118-8bd5-d83dbb4e21ab", "indicator--15d570d1-1c73-424c-bc83-3314dec948da", "indicator--a23d05e0-6626-4309-bac3-948a3c027be7", "indicator--7c40f08d-2c56-4710-aa69-c9be814bc682", "indicator--bd0ba09f-be4b-41f2-8daf-6f1b6b7354bf", "indicator--b3032d9d-3b44-41c4-abb1-6e8c8451cc48", "indicator--a1ab745c-6bd2-4954-ab50-fd1cb08f0c18", "indicator--77faf089-9404-43c1-98e3-e6d7b4456f4c", "indicator--9f936848-fcf1-4625-9339-39108e02a82f", "indicator--a58b70ea-0ff6-4f0d-af70-0b849ae09d5e", "indicator--7498a3fe-158f-452a-a58b-0690528fea73", "indicator--69a62948-3078-4d44-acfd-9a8346148c19", "indicator--0fb770c6-f67a-4155-9987-10120c92fb02", "indicator--d31358e5-feed-4fa3-8469-bf68d5d683ff", "indicator--a7ff437d-198c-4004-a545-01bf31790eb4", "indicator--58b3d2c8-985a-4f2b-b6fc-0801c51d386b", "indicator--c9d48f9f-0f98-40c2-85cd-3807412f78be", "indicator--6e0ee3db-e65b-4b16-a0d7-ac047181391b", "indicator--adf63f5e-1ce2-4689-8e06-c5dc74d29e3d", "indicator--8ba7887f-8f0e-40fb-be56-d0961b7f6f5f", "indicator--8c1ee9e3-0bce-4d7c-86ca-3c6a655c52c1", "indicator--1cbeca98-a83a-4753-8208-af9567a7ba14", "indicator--099f9916-5269-477e-9f61-fb8e28f9aaf3", "indicator--33fb98e5-3463-40ed-b757-e4812ccf2ecf", "indicator--07c756a5-b6db-4136-9985-121cba78922a", "indicator--006b2085-aad7-4862-a898-6fd2d8c1e98b", "indicator--09c18d06-b84c-408e-b16d-dea44d54123b", "indicator--fecf3cd4-2423-4199-a46b-5a6f4dca9e9e", "indicator--1afc8fe8-8790-4675-9316-c3fa234402f3", "indicator--2d6ac07a-4ca3-4336-987c-c325346b9a3d", "indicator--78c6e266-7ec8-49ff-b557-fe76b9ae73ba", "indicator--39ad9d83-2694-408f-a2e5-db8b70272e26", "indicator--bd515d6d-8237-4de7-bca4-835f002e19b8", "indicator--d18177ab-993c-41fe-86c4-60e5c16f317b", "indicator--cb50aa8e-f83a-4899-857f-379aad335406", "indicator--093ddbb0-b5da-457d-ad58-acc16e26d8b6", "indicator--6117cb22-9b28-454a-940c-e55025c006cc", "indicator--6c1275eb-8262-49c6-b66f-83bab14c0fe4", "indicator--4719677c-cdc7-4141-89c8-fa595a3ce8bc", "indicator--2298c327-be1c-406d-98ec-8cd65dd78cd1", "indicator--710416b8-6f28-4185-8c52-3b3b34ea0e20", "indicator--76944552-4845-48eb-84b7-43fe47ae5a2d", "indicator--f453a672-5323-4840-a804-97c574cdba46", "indicator--3d0b1131-7b7c-4fe5-988e-12a0410a983d", "indicator--41033004-d296-4122-87ec-ed7a267ef0c2", "indicator--460e65c3-4506-4394-96bd-4fb3982a8b22", "indicator--681db85d-2d01-43a2-a298-ea64be23d4ae", "indicator--8056d41b-def8-41ff-8065-ef91b2de468a", "indicator--e6946964-d761-432e-b616-66a7ef5a009c", "indicator--0857cfd6-e4d6-4ef6-b733-d4f7a26ebfd6", "indicator--57fd874d-b210-43f0-97e5-ecebc29acec1", "indicator--d8435e3e-73e4-4465-95bf-b885b1f45228", "indicator--09f15b49-a6a1-4d0f-b80e-be3c931ee772", "indicator--c6937394-2ca6-4abb-9398-f30eeb9e284c", "indicator--4d13ed6b-0ed1-41c9-b15e-b762bc479221", "indicator--12ab395a-a78b-400f-8a5f-acc3f14c8151", "indicator--b900a7ca-1d8b-4de9-8c2a-186e4ab86525", "indicator--ba753817-e956-4db5-b2c2-154a21c4da3a", "indicator--f3c8c703-4e9f-43b3-8b9e-80b68e696089", "indicator--076c6be5-54b8-4acd-8f6f-24acf8270402", "indicator--38bdaf83-59b6-4086-a4b6-e373307e0852", "indicator--c26beadb-25b2-43bd-a2c0-baabd2ebeefe", "indicator--4e075149-db9f-4120-95df-9bca216f4a2e", "indicator--09d71b5e-c253-4015-9e45-7c7ebf5acba2", "indicator--ba9deeeb-4b5e-4af2-88e4-cad6fc9c7549", "indicator--7edd0f17-cdfc-4f76-bb6e-fe46eec13485", "indicator--9e56462f-f4ee-49ab-bd1c-5551f453f91d", "indicator--11623146-ea69-486b-8fb9-cb141c85ae11", "indicator--21cdc854-e71a-4733-b14a-f82e11735892", "indicator--5e9e8e38-7665-404a-b56d-7e4fc272763d", "indicator--b478cd87-286e-4285-8453-024570c7581e", "indicator--c06332fe-f353-4820-854d-45f7da7bddfc", "indicator--65485bc1-f0f3-4d2c-a626-e82529585ab3", "indicator--b1c32c1c-df76-445a-83a1-c82b718d523a", "indicator--be15094c-85dd-466e-beb6-06d9ade91ee4", "indicator--777df385-0f51-473e-aae6-6fdde8677f88", "indicator--44037b6d-89a1-4461-bace-5204013a09d9", "indicator--4a73c5a1-47fb-4c26-811d-baf85ed1f95f", "indicator--eda90ad3-7346-47e7-bd6d-81c964b8f5e8", "indicator--a6a8dd6e-f53a-4f29-b4e0-dbf6d4bebd73", "indicator--c628e8a1-63cd-4536-9cf8-2594a0a47115", "indicator--d483f5aa-62af-417b-8c2b-3b4f6c6ded1e", "indicator--58893664-ead1-4681-9aab-093e7132eafd", "indicator--ebffee5f-9def-4967-9a38-aa27657e43fe", "indicator--752c46a5-91f4-41b3-8e11-e4e9026f9382", "indicator--dbe5f05f-e793-44f2-8757-069046a76ab0", "indicator--30fe46ea-4d3c-4eff-9939-6eafa637797b", "indicator--940386da-2ac1-4b8c-a565-c54e38859ac5", "indicator--2c5086ec-2e99-459e-b0ca-a397d8ba45b5", "indicator--a841a198-2376-4081-91e4-f7fd0786391f", "indicator--c78b1a13-d074-4aaf-8632-79d6222930e9", "indicator--ac06ad08-66ff-4e70-b40d-6cca2146dd67", "indicator--155dd7a0-d4d5-4d2c-ab20-8fe22390b5de", "indicator--9dc88638-35c7-40e2-962f-075f0b19877b", "indicator--39486f89-3fb7-45f8-bf5f-ad3d62f0225b", "indicator--c4234024-d62d-435d-b480-0a4132bcc1ce", "indicator--e1a740a7-32a1-47b4-9859-763f41713d7f", "indicator--20535e60-6e8b-497c-b1a5-14ce3cd17af1", "indicator--c73b2b58-fed2-4853-b093-e68d5492a7e0", "indicator--c7276617-43f9-477b-801c-623e954dfd1d", "indicator--bc211d90-6618-4147-b671-d4e899e10440", "indicator--cc209b0e-66fd-4d01-8d9d-ca1ab13202c7", "indicator--3d8b8e29-c39a-4551-8a0b-f92b78f306c8", "indicator--655e0b61-f67b-4cc3-a3b5-f7c8de45b2b6", "indicator--e3f2ad9b-044c-4a4d-9a76-3db08c6850ef", "indicator--f6e7668d-2fe2-4df4-bbb5-67329fc2f048", "indicator--f7b4989c-fdaa-4ece-adea-b6052939dd5f", "indicator--96a25df2-7688-4ecc-bea6-54948ff7247a", "indicator--9068c3b0-957b-4f2a-9074-0732c35d8efd", "indicator--72470c4f-9828-40ba-9259-0af3046f7122", "indicator--976ae661-7ebd-4031-91bc-6ecf1f8300a9", "indicator--68b098b8-38a4-4333-abe0-0a349effdab6", "indicator--c1b65d1b-d5d5-4d75-aecd-4b4d9fe2aef6", "indicator--a18ebb81-6bd8-401d-9894-315e4957d8eb", "indicator--d9d080f1-3d6e-438b-937f-36a7553b45fe", "indicator--d5cc941e-12f6-438f-ae53-a6ea2fb0fd6b", "indicator--37a736ed-1cfa-40a3-9d56-91c18a654a43", "indicator--caa7016e-0efe-4422-b0a9-bc3417dc616c", "indicator--fa402c7d-cc09-4f15-813d-1cfa6c5c62df", "indicator--fa507533-edda-4001-a8c1-0e45e91b3c70", "indicator--d50db94d-60cc-4d9b-ab3e-07f1585e1e2e", "indicator--c70c8ca3-229c-4365-9abf-76515d6da7e3", "indicator--224b2a4f-d110-4d6b-8268-06b923262861", "indicator--004c0f9d-8679-4bc2-9f2a-342cae0a7286", "indicator--595965e1-1910-49b7-a2e9-4b8d06189cf3", "indicator--329460cb-ad5b-4a08-87b4-b6b1719483f9", "indicator--90b09874-aa77-48c5-9533-1a350f264eed", "indicator--0db5aef5-67ae-41e0-8794-82b5c4a27cbb", "indicator--23b7a2ee-af93-4061-9410-b434c6a5771e", "indicator--7c383bba-16db-4ccf-9c0c-b44949176a1e", "indicator--b6bf2683-9fb6-426f-ba56-69461e6facd1", "indicator--0ae762c0-3de6-4e0a-b8d9-783d8e41aeff", "indicator--ffdcf97d-b194-431b-a50a-bad245aa0825", "indicator--f8fe92a2-6309-42c1-9ec6-260aa1993d96", "indicator--d7531883-e68e-408b-be77-c141611fce8b", "indicator--a4287678-d487-4a86-b4da-47ffc03a0973", "indicator--b691ff0e-19e8-421b-8764-48bb82651b08", "indicator--57722cc6-fca3-45f9-ad13-b46375dcebc1", "indicator--d448e50b-1ca0-445f-a831-8d1b1cc64797", "indicator--32b92d11-cc3c-4f4e-aba1-99efbcf7b25f", "indicator--3f70f9b6-2c3c-4db9-9eb5-f96451aacee9", "indicator--7cca07b0-dc49-44cf-a280-a29bd0d9fae6", "indicator--4436e72f-db8c-4953-9183-5fa627a5971c", "indicator--80449a2f-5956-4f44-93b3-7b033a74ce72", "indicator--bc250d04-4ba8-46d6-981c-b6d6e379a1c5", "indicator--1d1041d6-c054-49ea-a268-1435bdab0dc3", "indicator--a877e14e-7824-4877-b989-6545f19fff22", "indicator--bbffcbf0-58f5-4cec-a114-1cac516af499", "indicator--8524fd59-c3fb-47a6-b9da-0af68bfdbd17", "indicator--8bff4aba-9237-49e8-8bfa-81b144a61e60", "indicator--edd285f5-7f0a-455d-9586-036bca375cc0", "indicator--927c49a7-94c9-435c-be8b-c4de441735e8", "indicator--6eb7eca6-0d02-41f6-add0-51445d032fd7", "indicator--298fa18c-9002-4e04-9f6f-2454a28676e4", "indicator--efaa431f-e8e4-4dda-b1e7-bdf07951ba02", "indicator--fa227f10-1a4a-4f55-9d3b-8c0e1d718b90", "indicator--4cebdf81-b5c3-41a6-8e33-541046899b02", "indicator--da0e7c85-d2bf-4995-ab94-e535e1608048", "indicator--86058226-0404-4730-a5c7-8dd7046dba71", "indicator--4d154dfc-4103-4ca4-b8ef-4fa5aa1b7c92", "indicator--7f64c9df-1238-45e5-bfcc-2fd0fd1aed32", "indicator--55728d1a-6716-4018-a7e5-a468dcf15932", "indicator--b39ed48c-647a-4e6d-a0f7-463b6951eaab", "indicator--b036ef90-0293-4d56-9cf8-7d8e2d097d77", "indicator--cc0e4516-ae43-4a2a-b033-ba1ed95cf524", "indicator--a0b51b9a-c2c5-41de-88e8-ab220deaa991", "indicator--547cf99c-c42c-4742-a9f5-a89348ea7b93", "indicator--d7af4e41-6beb-4471-a792-543cbd2bd3d2", "indicator--c35e9dc2-77b9-4963-8738-53973114877b", "indicator--1435bd5f-0b75-41c9-aa15-08df8fb54d95", "indicator--6e6e8f45-707d-4dc1-a9cf-adce9e3763fe", "indicator--0443c146-eefd-4972-afa3-7c4e9104ca60", "indicator--d5ca8169-bff6-4d55-a000-224160daebc3", "indicator--867345d8-a1cf-422c-9ad4-e645b96cd8a5", "indicator--13114d8a-80eb-4b64-bbc0-402e2b1ce9e2", "indicator--0fc0ddee-f26f-4384-a989-fe7ae37a7f90", "indicator--af3a281f-c850-4a35-bd22-7151e7922e05", "indicator--584e7339-51ae-4caa-af76-98f0a2d28bbe", "indicator--9058d45a-501d-4988-9ffe-c0d6c5a25c88", "indicator--99dfbef6-2a0f-4544-80e2-d10ffc930f50", "indicator--f001a4d6-38e7-426c-afd6-a8ec0cebd66f", "indicator--47cb2d8c-d049-433c-9dcf-c4b453006cf4", "indicator--1128242c-1643-49ba-88e3-dcbb9fb247e0", "indicator--279cae0c-b6e9-4652-9a2f-4fff15ec3eae", "indicator--7364b861-ef37-41da-8769-b76c6b96af70", "indicator--6f377bbd-1877-4c2e-bb6d-5a6c473412a2", "indicator--cd92a4cb-42d2-4ae6-9b2a-55178300c22b", "indicator--aae79fab-41a4-423f-ad29-2ec1ad60dde4", "indicator--70a68c74-c131-4aff-9aac-f6bf476799c1", "indicator--854ab02b-2cfd-4c4a-93ba-fc21ea232f48", "indicator--a61a1232-2fd0-4f22-ad15-89ea1e9c1114", "indicator--472f64a6-eb6f-4008-b37a-bfea95f75e43", "indicator--9d38aba0-3965-4f8c-b225-76f4e228d6df", "indicator--6ef242e3-223d-48a7-9a2e-622057308a69", "indicator--85dc1d88-7ced-451d-bf8a-51a7df56683f", "indicator--9f060c03-e169-4f5b-aba6-f3b095ce393a", "indicator--2fb42e93-3959-4934-9ad9-1b270b6c1cf2", "indicator--85815fcd-2e00-4792-bc2e-f0ff564b9ea8", "indicator--4efd6007-c18a-44a0-be05-53f19a7d7295", "indicator--5f40144b-aac2-457f-8526-252de4eb76da", "indicator--82aabc23-40e0-42fc-93c7-38ae45820c55", "indicator--78131701-b56e-4290-9901-281dbcc44a62", "indicator--d83ea9e6-e7d2-4a87-ba1d-7f931386cb3f", "indicator--b3ab6ca5-df6f-414d-80a2-9d10e5d52ba6", "indicator--53989dc7-de27-4cff-967c-470f53718dae", "indicator--4c50914d-9eb4-4822-9bd3-8dc39b490105", "indicator--e8ef7795-5221-40db-8a27-e81f43550617", "indicator--ead762d3-8e78-4776-94f2-062fdfffdc51", "indicator--7159216d-88ff-4a32-9e1f-bd58d92378cd", "indicator--760535b5-593d-4ae6-8d8b-9144319cd2f1", "indicator--321d31b5-fcb0-4ac9-8280-a773354cce6d", "indicator--91f62cb2-a3bc-48eb-9938-1f8aae8c8220", "indicator--96e78527-54fb-480d-a5f3-1463e76f41e2", "indicator--e7055309-7615-4e22-9592-5d2946732688", "indicator--7d668235-9cd3-439c-b340-c596644f4914", "indicator--94743a82-9234-44fc-b53c-a4d118ac1d4d", "indicator--96a99994-fcea-4928-aade-a49805ba1dfe", "indicator--cfb2e9f3-f1a4-4059-bee1-66f96d5fef98", "indicator--ade30540-d53a-4057-bdb5-e52e80165766", "indicator--50ad24d5-8cbd-4d16-aab0-06950975e66f", "indicator--cebf4a2e-004b-4c67-b941-3c4c15e5b8ec", "indicator--f5fa5196-d1c2-4c0b-bb5e-cc70ec94c4b4", "indicator--479fa724-f432-46f3-a76b-a822f61a4b05", "indicator--b20cbf45-1e57-4b5c-b2e0-cc27676500ea", "indicator--40460ab0-1579-4f10-89ed-85bd70c743b3", "indicator--272cac02-cfc8-4565-9040-a4b358d43c4e", "indicator--97af555c-facd-4656-a64f-6200ee199309", "indicator--2b240fb2-5fe0-47fc-af8d-59e1353c1826", "indicator--ca245e73-325a-496e-853d-5e01e527d074", "indicator--864b7039-a3d5-45df-9dd7-12ecb5777d91", "indicator--5f185283-cb84-4b46-9cbb-4b756326aea6", "indicator--5d58076d-2572-469e-9481-4f4bc222c26d", "indicator--7fb8e319-1e32-41f4-9055-08597ee73ff4", "indicator--d62672b8-2fb9-46c9-a1b6-0d936d1e237d", "indicator--0d92aa96-cea1-4f85-a759-fa0ccb7de02b", "indicator--ec8f69b1-24f6-449d-a7f8-b1375f3bf036", "indicator--8c125daa-a43e-4a50-9e61-1dfb4da45ad1", "indicator--79052cc3-38d1-49ee-b6ce-bb2b6b9e93d4", "indicator--810cb9c9-30c4-456e-9c24-270a460e4608", "indicator--18466442-c8ca-4aed-beb9-1da9bc90ce81", "indicator--858e46c9-940e-47e0-b94c-a62c09e1a8d2", "indicator--5382e29d-0039-41d2-b8de-f9fd0ccdac56", "indicator--1420ac10-7264-47d7-9106-028e19f2f015", "indicator--53b56cc3-dff4-405e-b554-2c8d6c1c2fb9", "indicator--627f3d66-4270-41bd-94d2-f36d6dea477f", "indicator--393f6dac-04ff-46f8-a0f3-c92b815eed4e", "indicator--c90bbcc9-9dc0-4eb4-a6b5-e5ad77e235a6", "indicator--a57cbae6-5cf0-4fa6-b8c8-0edd2e4b3f4e", "indicator--4a62d141-3639-4656-8bdb-c07ac03252ff", "indicator--4ee560d9-4156-42c3-b2d2-c268283b3f08", "indicator--cf1d9b83-2845-47d8-9fa6-b9b454b03a8a", "indicator--94ce0526-8300-499f-9faf-b893732c48e9", "indicator--d757d216-d028-4c3c-aae0-39164cbfb3b6", "indicator--4d1d68fd-7bd1-45c8-b2af-56f05429c64a", "indicator--58a141cb-d73c-4670-832d-71d0173036a5", "indicator--3e5948c8-5168-4f38-a679-d9e249b259d6", "indicator--043d7edd-98da-4733-97eb-3e4b25e62197", "indicator--5abdf1b4-dec6-4552-8ffa-ffaa542495cb", "indicator--59a683aa-497b-4268-80e1-8e1e71501953", "indicator--b5e7909c-cbd6-466c-986c-a710387a7eb7", "indicator--df35a6bc-e326-49e7-b55e-9c591a728b9c", "indicator--ec31ebdf-23d6-4513-bf24-fedea7dcb465", "indicator--0a2d7104-80b8-4475-9ef7-89227ae86728", "indicator--a53bf389-bb5f-48aa-9057-f42471712863", "indicator--63d2baf4-632f-4820-b47d-34202ce1d6fe", "indicator--03eaab45-256b-4081-9620-953d01f9527e", "indicator--26e9f29c-b98d-4efa-8c24-dbfe2e5b6431", "indicator--36dbb377-2285-4248-b27d-58b15bd13970", "indicator--f077a98f-ecc5-4b28-a582-124f16a755e8", "indicator--fcb7d894-a91f-4b44-aca6-b8ee01667e35", "indicator--f0a01982-1527-4674-85a2-df64733f308e", "indicator--8fcb5785-bcf8-4d68-b696-cc905a5ad95b", "indicator--35c5e229-c767-4038-90a0-1e82ceaa9edf", "indicator--fd0b63a4-1faa-4424-89b0-12ec68a4f19a", "indicator--6fac7625-75df-40c0-9c0e-003e8ea90c62", "indicator--400fb571-2f38-4024-bd69-cc4af329a839", "indicator--21bd9b20-b77a-4157-bdab-e608c489c35d", "indicator--fe4b9920-041f-4343-af50-04b2e72a2402", "indicator--35aaf68c-ed55-42e8-9104-cca70dcc447b", "indicator--fcfe4f38-ea2a-4b33-b3ab-f0e4fc96ab58", "indicator--791d586d-ccd5-44a2-90a6-ec4aaa0f636b", "indicator--5dba787f-4e02-4c48-956e-942ba74c973f", "indicator--fabb6d8e-92b8-4971-8892-8645d76ed5b7", "indicator--96ef7800-4930-4a44-9a10-4a3820a2f660", "indicator--d331fa0f-6b30-49b8-8cf8-29a259bbd372", "indicator--c1ae966f-6dd2-41da-b0c9-a10df066973b", "indicator--3a792445-ae7c-46d6-abf0-fd99a8458811", "indicator--6591b34a-9c9d-4385-b18a-ac30c85a2e6b", "indicator--95608266-3e12-4b97-851f-6b24a0a99537", "indicator--f8d81a20-436f-4d4f-b52b-6fff0c540c72", "indicator--0b8cdb4e-dc50-40d6-96eb-6a626005edec", "indicator--1ba5f631-db52-4e51-83b9-ec313b9a39e2", "indicator--3b1e6364-9f2b-483b-b2a6-eefd9b7df22f", "indicator--24649635-4fad-49b2-9e05-190561520823", "indicator--753abd41-f9b9-459b-8203-d592a539105b", "indicator--a064f9b4-34f1-4758-9ae5-a10f2fb2b611", "indicator--9b0fecd2-1a4e-4952-b445-1bdc3af257db", "indicator--84a4a27c-ab8c-41ef-a125-60dc8671bce8", "indicator--ea40df0d-4fa9-4537-b95d-59eea3e91872", "indicator--3afcd31b-958a-43d1-b3e9-b5fd0a34c3d7", "indicator--0b994084-d5c1-4515-a20e-f85cc23f09b9", "indicator--9e0f4e6a-c452-4eff-8f4a-08729ffd3bd4", "indicator--1824adb8-7cfa-4df5-ac8a-fc6ca7cc8a0d", "indicator--3a6242e4-3417-4107-9823-92842c57ed15", "indicator--5f788875-2572-4dec-b22f-cbee34a1117a", "indicator--02ca7d80-e12c-4882-b9b0-a3240c0079b7", "indicator--dcda5cbb-8b4f-497f-9f13-0d7403e78b4d", "indicator--20af0fd6-5f8c-41c0-9252-328cf81307d3", "indicator--3f32a443-d6db-4d26-80c0-6c1ad56fb313", "indicator--730050c2-5090-4ecc-9cba-8ca073b8d669", "indicator--e1119034-f408-4052-a467-e95686c2d108", "indicator--1c66c62c-3309-4adb-ac4f-380580395469", "indicator--f20a7663-9e01-4925-92b9-dfa0147170f6", "indicator--beb2810f-cf05-456c-8652-a674b3b6bf03", "indicator--80fde535-64c5-453b-abaf-22d974d76b4b", "indicator--132a7d46-9bd8-43b6-8fd9-c41eb7d081cb", "indicator--be7e68eb-c8a3-4354-ad78-36b9accd0627", "indicator--b522724c-aa85-4e84-b5cc-2ab498d434ea", "indicator--6a1faaf9-0458-466b-abad-e680a50d3fe7", "indicator--79919939-4547-415e-9d0d-2d5ac39ef6be", "indicator--0e516655-13a2-42da-b521-d507f097081b", "indicator--4a625b83-3baf-4890-9402-4779e7efea74", "indicator--9750c594-23b1-408a-85f5-ce1543157a03", "indicator--be09b9f3-bdd1-449b-9ceb-d288a489b83c", "indicator--e34445e9-e811-45b2-9249-0ad305a7a6c0", "indicator--be53be0a-eb25-4e1a-a8c5-db4fba081dd0", "indicator--70e0c5b0-56bc-426a-abb8-7650101f4120", "indicator--599155a2-1370-4595-b213-e29d05e797a1", "indicator--873e1f97-88a7-43dd-a024-421c41c6090c", "indicator--c0aebbf0-795a-465f-82ea-05f8d16bdf42", "indicator--ddca798a-1ec5-4e9b-a978-b94faaebfd77", "indicator--042f8dda-d177-4f8c-af10-aa28e4d6bc5b", "indicator--ea749ae3-9590-4572-8012-303bba5b1389", "indicator--e63ae61d-7288-43f9-b88b-e148a6773297", "indicator--5d6ca86f-57b7-4926-9266-d15d9f558352", "indicator--93d4e815-fafe-4ddb-8b07-9f44f3631b6f", "indicator--6462481e-e29d-46b4-8be6-5f50c9d72b4c", "indicator--c9e6bde6-b671-42a3-901f-45593917f8b9", "indicator--2219b295-3c63-414e-a8f0-c08ac83fc65e", "indicator--ef21d078-ac66-455d-9d31-634e03bf75ab", "indicator--8f81c6dc-ad6a-484f-bd3f-6b8b12cc50f1", "indicator--93e3b102-e5b0-4918-8f40-5a1d36213742", "indicator--fb35001f-b84f-4ac0-a079-602e27cf23a9", "indicator--b3060a40-137c-4ece-a6a1-61d8ec6e6460", "indicator--25d28e84-9591-4816-bc2f-34a967e93838", "indicator--85bfefed-c903-449d-8ca2-56d63a7a8330", "indicator--457f7295-bffa-4e16-92f7-1cd919c34be1", "indicator--2d43725f-6282-40db-8ddf-ec2902a25bba", "indicator--2e7ee4fc-e14b-4e1c-bdc8-584989a986aa", "indicator--1ce9c408-ad1a-4cd6-ab5b-40315553cacb", "indicator--1652f5e4-9877-478a-950d-98e098babd34", "indicator--45eafddf-ba0f-4414-be42-852677b23b35", "indicator--f00eb8b5-0173-41c6-b2a4-9296db3d40cd", "indicator--eee75784-aa43-4633-a236-5c31384b3811", "indicator--a9f0a9d9-9b04-4277-a47b-4d05d032b662", "indicator--4eb8531b-1fa3-48eb-9d6e-0dd5a0045bf4", "indicator--6c507aec-eaf8-44ef-91d2-143cc49950fa", "indicator--dc914da4-907b-4a73-aa18-594aba61d302", "indicator--ab3211d0-c213-4b2f-89a2-0e270c6ddc7f", "indicator--b4095e4c-7441-479a-8c00-3cc83c42efa7", "indicator--f7681e16-164c-4d21-91b5-780c03368693", "indicator--76892ac4-a460-44b4-b683-30e775844bc4", "indicator--898ddcc4-f2d7-4fe1-96bc-b0459fbde261", "indicator--898c45e2-ac90-45d1-8fe3-93b6fa4804c8", "indicator--83c9b762-4ef2-4d99-b1af-2453ae53b92f", "indicator--2898a1ba-2b50-44e3-9216-dfecc8032c41", "indicator--b9634768-b23c-4726-b970-55ac4cbaf66d", "indicator--467e2e30-0c99-4cfc-afe7-1f595fe0d9db", "indicator--5a68fc2b-4572-4346-a447-eba587343c69", "indicator--43076886-c89a-4a4a-ae30-169483d0a373", "indicator--5e01676e-1e54-4b5f-b752-94b1f51f22f8", "indicator--46d21e25-adff-4f63-a6c6-fca63e46b28b", "indicator--d7527254-a796-4d6b-b241-b2a6fb69bdc3", "indicator--51385294-8b54-487d-9951-e1561c916ac2", "indicator--aa134fbb-744b-44d3-8167-2b7a1fb70ef7", "indicator--5c08ae76-e916-4046-82c4-3aed0179be4a", "indicator--70246a4f-4f62-4729-b429-6dc5938c4cdf", "indicator--198793d8-6d32-4641-b34b-716de660fd43", "indicator--b341533a-e4d1-48d7-8942-fd10ca812bcf", "indicator--b5b74f71-8eb2-4372-babe-4dc928713ad0", "indicator--dfaf4043-da83-497a-a103-b6008f8f66bd", "indicator--4f94f43b-2af1-45d1-a127-1957231e7ae2", "indicator--5163c061-afec-44fe-816f-786e9d082750", "indicator--9f721b22-d7a9-4b84-b2db-95cc9b3d75c7", "indicator--2563513d-63d4-4ee5-84a0-5a053e22552c", "indicator--9936f5a6-ea48-4d44-a547-8047aa78c5d8", "indicator--be0cc0ee-d696-4007-bf24-98d0f528fadb", "indicator--175b7721-a290-459f-a683-d8bb606e56c3", "indicator--569f1028-ec75-42cc-a1ca-14c0017ac7b0", "indicator--05a263a2-0710-4120-89ec-94ee8fd92acc", "indicator--f5eb54b3-ed28-4b77-992c-e7320bf8d160", "indicator--87207234-8aae-4091-87ac-990d818c87b1", "indicator--f40408ef-2706-4fac-82d3-af1b17eaf788", "indicator--39886864-19db-413f-a066-5dee662306a2", "indicator--146870ea-09a4-4f7c-8e95-1debd55955be", "indicator--119c6a95-b0d0-471b-93cb-09cee6e1e214", "indicator--3d0677ec-2c86-41d9-af8c-2e5300bc5e27", "indicator--49b689f9-fec0-4c4d-980c-77b7f03409a5", "indicator--4f6a711b-3758-456f-8393-e671d6c1849c", "indicator--46d03ce8-9c89-4f61-9654-214d2d6ff202", "indicator--ea880117-7791-438c-b566-8e2cddaa45ed", "indicator--dffd9814-5980-4d61-ae2a-8cf96f62f2ca", "indicator--3556f8b5-481f-46a4-8be5-9940e6f5488b", "indicator--37f01e92-e25f-4009-af0b-5515b9bef544", "indicator--56134d31-267b-4d62-884c-1befa0d6a5e9", "indicator--adf29808-d5f5-4a0e-a18b-e41b76f94b42", "indicator--641da5f9-508f-4212-ac97-d2c61ec94192", "indicator--2f782047-903a-416c-8c56-ff1990def831", "indicator--dea96dc1-8671-4d6d-9576-6d177b9bc17f", "indicator--4673492c-6654-4423-bc32-1b81daa384cf", "indicator--d557685e-9be9-4ebc-89d9-50941b60b376", "indicator--abba400c-a78a-42bf-83b0-53e71615e320", "indicator--3e570970-c6e8-43fb-aac3-626f410e780d", "indicator--621f9999-75ec-4724-ab3b-3d8f91b1f5bd", "indicator--a3d47cc6-a475-4552-afe0-fa99e364ee71", "indicator--38fd0fc7-be4d-4394-8eaf-f811f861921c", "indicator--6d8faacf-caa5-4076-95da-7ecdf7500bb5", "indicator--bc21ec81-78a2-42f6-85c7-49161618aa71", "indicator--8cf83b82-725f-4f00-b06a-b7ff95c38871", "indicator--206e6d83-d52d-4086-a1f9-a5babedb8295", "indicator--9556f18c-58cf-4150-8b2b-e0f238699398", "indicator--96002035-9ce3-4531-b970-68e00cc0a7b1", "indicator--673105f4-3a06-44f1-82a7-f929a0159f29", "indicator--df491a27-0b68-43f0-b30b-2bcb1587e9e9", "indicator--c2258930-f778-4284-b02a-c825206819ce", "indicator--53fa9c96-f5b0-4bd5-92d0-4c702a450fcd", "indicator--8387d9b9-3725-4ff8-b50e-6eb0a7ea3414", "indicator--fd5de290-ea35-44b8-9aea-c40ec019134d", "indicator--0725075c-a6b5-4ea7-af3e-aab325ae4d38", "indicator--c0e5ea2b-38d1-4671-a742-2615a95586d2", "indicator--113b4f2d-0962-4b06-8c3e-8987641ea982", "indicator--713c73e9-d654-4584-a6c1-d1e567beced5", "indicator--b44e0a92-44e1-4cf4-be08-191b193d9a97", "indicator--c7f8f77f-929d-4359-9e16-031fbeec07e3", "indicator--e1e033dc-9b7f-4ee5-86f0-906fa3dad705", "indicator--9d8fcd35-6d59-4787-b6b9-3a529635cf38", "indicator--ebb82a32-9610-42f8-b52e-0fb3d56bb1cc", "indicator--848a5599-cde5-45e8-9677-27137a1947e1", "indicator--6e5e704e-2450-4b46-89db-0027faf0e678", "indicator--279f9659-2d55-4393-b199-cd7800b6cb8c", "indicator--c23b7ace-911a-4e74-a913-0512f8169c19", "indicator--476433ea-6960-470c-8e78-e8fdee4e9d34", "indicator--a538bd12-1eac-4e75-8cfe-811cdbfa4db6", "indicator--e5a43521-311c-44e5-9ea3-e88077c7efb6", "indicator--8d6e0437-0444-4942-9dff-142805bb2ae6", "indicator--e20be88e-b30a-4504-8cf6-49198a47d8c1", "indicator--a50845df-b1e5-4ab7-8bea-c98322f217b0", "indicator--b71c8fe5-29d6-4348-ad63-f6e16d213c99", "indicator--f9eb9a08-5503-41d5-86e6-dc2e3e14fe8d", "indicator--ec89c9bc-c4dd-4fd3-8627-1636cad12970", "indicator--a1df2353-f9c2-4d16-8030-3c4d8867428f", "indicator--bf388a16-2191-48d8-bfef-cc1eacbc4de5", "indicator--28e24193-fd21-4455-8252-b09e5b109c78", "indicator--fe188e99-a907-4951-9d8b-3fa013f37fa9", "indicator--8b6a9480-1c6a-4472-b0e1-c2a958471654", "indicator--7656f647-5de1-4609-83bf-859c63dfec84", "indicator--edb36726-5eac-433e-8a66-07cccd7a819f", "indicator--bd8fde96-c592-4e81-a721-8957d4512e54", "indicator--fdd12719-f7ec-44f3-b640-326205668bb7", "indicator--2f1cd526-31bc-4e52-9c29-49b5f4260ccb", "indicator--6670226f-00f2-4c5a-a359-9f7d6c89de95", "indicator--dd58ba43-f708-4966-a84b-d3e43f67ab6e", "indicator--883f4e91-85f4-4e6e-9376-d7493c10e2a1", "indicator--84e39d04-10f0-452d-8dae-325b545d1b76", "indicator--b9c125b9-2671-4119-a74e-68566e8e4845", "indicator--ad1bc485-b56b-4b82-9dee-fe25e5a6ecde", "indicator--c844e0f5-28fe-4410-9b76-d44d62f7c26e", "indicator--0eed178b-c5d9-44bf-adba-c28f82638ea2", "indicator--69630145-da03-4f62-8d6c-5d4b55c838cb", "indicator--6cc3ab7e-be5f-4338-92cc-c9f553c590c0", "indicator--eef8b0cc-2910-4b8f-91db-c4a143681df7", "indicator--7e60df88-2b87-4875-8ea3-7dda9a206710", "indicator--166c26bf-18f8-4793-8921-25685a1e767d", "indicator--11f9b638-0196-4b3f-9f50-b008eec9fe6c", "indicator--0c8d774d-1ffd-41a1-9302-b27ff76af693", "indicator--f7f9082b-e4f0-46db-8ef2-e94c206de4ca", "indicator--ff9003f7-3a19-4606-bfc0-a473ca6d246c", "indicator--a0f41cdd-296a-4ff1-bbac-1a4c31161cbd", "indicator--fd6f3f6f-6093-4010-82a0-dff9b2f79c39", "indicator--b621aa57-68a6-4cd6-8371-fcee2f4ae058", "indicator--c57b3331-6801-467c-a179-2b757e4831dd", "indicator--697e204e-01c6-44ce-9cdc-8359b78f8b1d", "indicator--3f4f23f7-b891-451e-a2a1-e16710b92f4a", "indicator--a70745c6-123e-4888-bff9-6c302f3ed9d6", "indicator--f447f697-750b-4442-addb-8d25f9e5cb10", "indicator--7419b631-f059-4729-9fb8-a03e2f869346", "indicator--b11ffcbd-2611-4e85-97df-24ab9cbdf888", "indicator--ebcf991b-5fc1-425c-96cc-92b27194eac1", "indicator--d85bf037-19b7-4d1d-a795-f251a393afa8", "indicator--3045abdf-3e49-40f0-aa2e-365e9b1ddd3f", "indicator--cb0204cc-544b-4007-ad8a-433f2471e4f4", "indicator--26423a86-541b-46bc-af59-699e6ec07233", "indicator--626560c5-5131-40b6-82cb-9ec133990442", "indicator--8abe8ba4-441e-4ced-a0f2-39781f97dd88", "indicator--aa5b25aa-8f6e-4357-8f46-f009ee0b308c", "indicator--45f8a978-3a37-406a-aab9-95fcab51adf8", "indicator--1b209d92-9b1a-4376-8a2a-bae49d33ce45", "indicator--745948c8-277e-4771-976b-146dd5b02dc4", "indicator--5aedfd0a-84aa-44a4-a30f-50c141abaf8a", "indicator--e932fa53-4ee1-4980-8f7f-23a72b2aa86f", "indicator--fbeb376b-37d1-45b8-ba44-4a59dd692c93", "indicator--c328ae6e-2ea4-4af8-9a67-54b1a762f396", "indicator--8fb67e9a-4115-4710-810c-eb4215bdf2bd", "indicator--91978715-b12f-4fb2-8076-270a2c8654c2", "indicator--848a2fd7-7ce5-463d-b16c-38b1ecfd41a2", "indicator--f95ecb22-eb8d-4968-b1f6-54284db9b09e", "indicator--16a18f9d-2be7-4549-b252-dcacbf23cba1", "indicator--43185dad-5bc4-4cc3-932c-6a88276cd875", "indicator--49b891e7-36c4-4d5c-9d4c-148aba5cdf3d", "indicator--71efa3e8-0b68-4623-a90b-acf5fca57ca4", "indicator--5ca4ecac-169a-4d4b-ae1b-5428ee65d4bc", "indicator--903d35eb-4372-4661-bb6a-0881c9b2ad05", "indicator--af3e0d50-3eec-40b7-949f-e365a21eedb4", "indicator--1ff4bf52-db9a-4a6e-8cf4-f411cb4b5628", "indicator--cbd12bac-908b-4c42-bde2-bb8359bace8e", "indicator--80a733a5-7ad2-4dda-ac36-7c23e80d5881", "indicator--5510ea9e-821a-4304-b3be-bd0afba0aa1f", "indicator--3b0c54c0-d8e3-4816-bafb-d4f52f16c7ed", "indicator--da047f16-4986-4cd3-bf39-ec031efc40e3", "indicator--8fac93cc-a1be-4b9c-bc81-4458ebb7601e", "indicator--45f54f91-b1b4-42ad-9612-8502b591fe78", "indicator--8865a35b-4512-4f3b-ab21-e6c15e567df0", "indicator--db82abfb-f18e-4ff6-a646-1cd415b4a232", "indicator--a5883227-ba0e-454c-9424-58983c126757", "indicator--412994c1-e013-4cfe-ac42-262f2ff7564a", "indicator--7b77e945-b9f2-4999-8303-9d68f26f87e8", "indicator--3d504ab0-fb21-4fcb-8bce-2156459775b8", "indicator--37f86108-c7ad-4eef-b2ff-23bb01a71449", "indicator--8bfede68-6277-4caa-8624-9b1895ecec1d", "indicator--0da5f124-24ee-46cc-a421-c413a4f4d709", "indicator--0a8fb6f1-4b64-4e9e-bdd4-2d67ddd48aaf", "indicator--06a86af2-b41d-4c70-9833-1b3d0d864356", "indicator--41d12eb3-1d7a-4131-96a1-54cca05e0942", "indicator--80c44edc-1a1b-4126-b213-e0f8b10526b0", "indicator--91d27da0-99e5-4853-9c9a-fb556ebf30d7", "indicator--b6d736ee-889a-49d9-9c87-24f746a99535", "indicator--89bb9db4-832a-42d6-82ea-4058320e06c8", "indicator--5c67ad9b-3ca5-4cbe-95b8-db181a031c37", "indicator--1f943185-778c-4f6d-9ab0-a0f1339a566e", "indicator--e676f249-df98-4b26-b3d5-ee5993687b57", "indicator--da381186-9be2-4cf1-818d-aa44c73636b9", "indicator--6f25c722-6e6e-43bd-a8c8-4a3be79c1a31", "indicator--b37b839b-bd70-4e44-921f-ec16a979cdf7", "indicator--1181827e-22d5-4413-b01f-4ee0ea90089e", "indicator--e39e74da-59c3-420b-a944-72e8afd1fe1a", "indicator--932e3160-e425-448d-8c36-79471a3c340d", "indicator--face0d3c-8da4-4c46-a093-ca2888d16c3b", "indicator--92c9b873-0af0-48b3-a9b5-d4a2c39b2bc0", "indicator--3ef962fb-9a3a-4324-992c-8ea6b4a24b84", "indicator--5f07d0da-06c3-421d-a710-b96649a92c2d", "indicator--0613f0e4-1b4e-46f2-9a89-ada1a4d947b1", "indicator--47a603d5-05aa-4047-b5ad-4773f93a74a9", "indicator--26fc1efe-f24f-457f-beed-874b1120a907", "indicator--72a7defa-20e3-4073-b8e4-512dead5cb36", "indicator--fe4c8839-4aa8-40fb-980b-572013e9f71c", "indicator--a3800244-a1f2-43c0-8314-0ca5a332269d", "indicator--ae97aa8b-bfdc-451a-ab52-3e2515be95f6", "indicator--76381873-e40d-4190-ad1f-1ffa8b49d787", "indicator--e28242e7-cbf5-447c-93c6-9895f509a284", "indicator--407830a3-c9b5-429e-844f-89cf84fd0f05", "indicator--bf3097ca-8f9c-49d7-a030-0bcb189b26d9", "indicator--b357efbc-ca2d-4a01-91b0-d5f66d90a1ab", "indicator--b7c8ca3f-e914-4fba-9f9d-88df41bbfe2b", "indicator--0773bf94-fdcf-4c0a-abd6-caa963fc72f0", "indicator--06c5ecb8-e641-4da7-94d9-fcea934c9cf2", "indicator--1db76bda-70c6-4593-ab72-9293c16602f9", "indicator--663f50a5-5d4b-4c4a-b126-8e7eba7fcd54", "indicator--1d8e1006-dff9-4b6a-a863-0de443257c94", "indicator--869a4779-9181-43f3-8c69-ed98ffff6c1b", "indicator--349ee183-2ee6-4b6f-a6e6-b07e5aac0315", "indicator--d6f055c1-061e-459a-b69c-5476a40ae7a3", "indicator--ca73a08d-9136-4801-ab26-611a5bbc8b16", "indicator--bf7c3fbd-bfaa-4f41-80e3-dfd6900f9af1", "indicator--be917a82-e6a3-4d75-8108-5a37ab01e3aa", "indicator--3b0ba2b0-ac72-4a4b-b8cd-38e8a7cf7a71", "indicator--77f5c935-252b-4487-8448-63a73f20c345", "indicator--27124d43-9d77-4b69-b8a3-2be8b79f8274", "indicator--15909025-53c3-4bc4-8876-1a8b2f41482e", "indicator--c9624067-ea11-4245-8423-d2c17394cd3f", "indicator--2867142c-ad76-4b40-a42f-66007b0422cc", "indicator--64c60115-6ca3-4b6f-aa08-69121e6fcabf", "indicator--3eff9fae-a173-4f6d-b0d1-ac04957c65ed", "indicator--fc592c55-b6c3-463a-b9f4-ac1d051412d4", "indicator--d4824fd2-c61c-48e2-8127-9c68ce221e82", "indicator--aa0fdd07-f482-4135-ae6c-8c78ee7debc3", "indicator--202235fd-4749-4b5b-8321-8882c2a90ca9", "indicator--17bc5bd9-6209-4f1d-89d7-3c5da902631b", "indicator--038db5b9-6f2a-457e-8750-5e4533c057b4", "indicator--0d4e1784-b5f7-4d17-b689-8550f29941af", "indicator--f94b82fa-b672-4b8b-9a0f-8087b8a244b1", "indicator--2c150392-e0ac-455d-ad85-1986e869c635", "indicator--ede56215-acbf-4a1e-b48a-e4b61dffe50b", "indicator--1e516496-14c9-4d3d-9c48-f74c75a22ba9", "indicator--1632b09d-ce69-4471-819b-e2dd8a94f5a4", "indicator--79f53a9f-f1e9-4d58-9a77-6de2a16a4a83", "indicator--2bcb3448-eff1-4932-a24c-e0e49514b7b0", "indicator--6e379d60-6ce5-45c8-981f-97e483b68652", "indicator--2514f084-d493-4a19-b976-331bf7e0e6ad", "indicator--66f2e7ee-226c-4361-87ae-018742af2772", "indicator--a83fa49a-f29f-416a-a921-b9d79ca5a72d", "indicator--16993da4-e69b-4cff-91d6-aa99751d8a41", "indicator--fd3a803e-04b7-4aed-a859-d7d6b575d640", "indicator--b673f761-367f-441b-8302-453c4d4c6b0e", "indicator--c6f325d3-a9da-41f4-a9b3-8c9b86537c15", "indicator--115c6d2c-88db-4e2e-9b41-c0feeecd511a", "indicator--58eaac70-ade5-49f9-8642-d7298353c298", "indicator--194b61fd-4f9e-49aa-8516-69ea533ff5b6", "indicator--4a26b39f-0b0e-4791-aaf3-11c8c877d994", "indicator--1027352f-cae1-49aa-986d-cbaa6709e97f", "indicator--01bf05e4-a654-4b51-bdd7-47b2366cfdd7", "indicator--81d68c53-3ffb-4530-9e9d-48c69c26be02", "indicator--d460ae3d-2c06-4774-97a1-fa8fd15e0c06", "indicator--3060f6c6-5998-4c43-ba5e-09062e4bcd04", "indicator--041c307c-33ac-4b54-93f3-fc0803f89018", "indicator--77639441-e319-41f8-9e3e-770c1f849cf7", "indicator--c753600d-8256-4a9d-a1b4-11aaee2a03cf", "indicator--7bf2d1c6-431c-4935-9640-a90b70c92bf5", "indicator--7b42994b-5d2d-4d33-8707-992b01daeefa", "indicator--ee887aaf-8215-42c1-9610-3b42606384f9", "indicator--001a1858-130d-44f2-88ce-a3ca51db16b1", "indicator--43f21385-b997-4976-85d4-d94e2be92f30", "indicator--c651c293-aaa4-43ff-bfb2-a3c44caf91a4", "indicator--8ae4013b-a271-46da-ae8e-f0a831661474", "indicator--5cb522ad-b8b5-464c-b67a-996331bcc278", "indicator--38c2ac1d-a778-49c7-af36-3f019b349fe5", "indicator--b631de89-5533-4691-97ee-34b99a0e58b2", "indicator--516cc79a-610b-4a96-a128-d4629d4915a8", "indicator--ef0d0605-5272-4a68-a4df-0aeffd78ca6a", "indicator--5933b116-100e-4d8d-a0bd-a051ec196876", "indicator--70e8972f-48f7-4bb5-ae12-de5bfdde1901", "indicator--8e25add2-7e9c-4edc-a3a5-63af1da957de", "indicator--e92bf839-3757-4177-a07c-b1ebfde94006", "indicator--c88f6721-fbeb-48d7-94cb-050882a3f787", "indicator--979939e0-8c72-4fec-a169-d05991b41fa3", "indicator--bdd81405-d099-4401-9d81-44be1475dff1", "indicator--ecce2ad5-184b-4a2e-9928-d58cdda408e1", "indicator--0400d0c6-e307-49fb-8a4d-70b8d2bd27d0", "indicator--869b4b48-b71a-49e2-adde-cd4d4ae04bcc", "indicator--d6bb3532-aa05-4772-9903-a481c9eea52a", "indicator--396834a9-f605-4bef-b9e0-010d91893075", "indicator--aaa9f4a6-bfb4-43cf-88c5-c22b4f4a3fe9", "indicator--ce90627c-6d3b-46fc-be90-3bbff07c5e16", "indicator--0a72fa95-abd8-44d2-a194-e4f972955c01", "indicator--152f138e-1279-47a6-8f73-249737d440db", "indicator--c521806b-570c-4ce3-8ca2-ab8828080bfb", "indicator--b0855244-4361-482d-a31c-5a1fb97026b1", "indicator--2e7f0afc-f555-459c-89f2-6f3782d5e9e6", "indicator--b9d04052-8f1e-4804-8b6e-1dce4ed5428b", "indicator--6c10f7a2-f61d-49bc-b8ce-c0e9a74c7bb4", "indicator--eb0bd99a-0e3b-4566-b547-4a671e535430", "indicator--55a99fce-37e9-4979-aad3-627bd00e1965", "indicator--58b23c55-3b44-4713-ac55-c11774cffa3f", "indicator--826e13f9-0a86-45f8-adb3-26bdc9bba978", "indicator--8b396f45-cfb9-4f29-9b73-0e5f8a0cc7e6", "indicator--f00019a6-2fa4-4447-a472-49c801d926c1", "indicator--e36bb7d1-a34b-40d0-9156-e14152e1fef5", "indicator--49dbaa74-c200-4abc-9295-7edb545f1cc9", "indicator--95b53df6-5ecb-43bf-8642-16694fa1b73b", "indicator--d0fc257e-4576-4290-9597-f3d2fe2efead", "indicator--f7d11c2b-3dd6-4b88-bd5d-f74a9c43d3db", "indicator--8811df19-350c-4687-9093-3a2138df94f4", "indicator--fe37ee21-21f9-4f3c-8c28-ad8aee41c517", "indicator--e3aad739-e19d-4267-9fdd-2fcc4d572e9a", "indicator--2ce788b0-9a9d-49bd-bfda-eb47d1e595d7", "indicator--70e3fefd-b824-487a-86c2-776a2a2e0cb2", "indicator--01e2dc54-e6cc-41d6-9531-b85520c4de46", "indicator--a09ec056-9ebb-4edf-8784-1734c321d464", "indicator--15688547-f8d7-4f8f-ba3c-11e3d4593528", "indicator--1d418011-834a-43d2-b168-639490b04d3b", "indicator--1e1f5d08-6e55-4c15-bb59-4bb5e00a6f31", "indicator--3657c967-0662-4f80-9dc0-8e8df4ce36ca", "indicator--457e9e96-b8fa-4521-94ab-3a26b9076b82", "indicator--20fa761a-13d6-42a7-a974-ede6a11fd09d", "indicator--584ce82e-8fae-4b4a-a38e-519646462334", "indicator--584270ab-695d-4e0a-9787-632524f8f550", "indicator--e512d999-1c3a-4985-b721-3c497d251426", "indicator--4340908b-b360-42c6-838c-7f7a8a2bcb93", "indicator--1b7c01d5-c2e8-4667-87c9-23b11807e057", "indicator--d37a75df-2e64-4afe-b800-e89c853f525d", "indicator--9eb3d18d-8a3c-486d-8d63-e89d9c9a741e", "indicator--dc47d045-4050-4a0e-938f-8cd71d105645", "indicator--b392add4-d3f7-424c-95dc-f76a1c2ab730", "indicator--102cc71a-c1de-4a0b-a953-8362ef572363", "indicator--45190b2b-de27-4273-865d-c185c4208a5b", "indicator--739ae16a-1c1b-4e20-a917-102575a17822", "indicator--6774481f-17f4-4be6-b686-ddcdd39b62b1", "indicator--3d09f098-aecc-4feb-a807-4f638f1e7bf2", "indicator--ac3679b9-98d2-4a06-9b2d-245513d69874", "indicator--207e421a-f864-49d9-8e55-bc0790a842c0", "indicator--6bd8c9e3-2e9c-418b-a9f4-a9658e49b3a7", "indicator--e2b1963e-dd35-4758-bd7c-03f084bf6c64", "indicator--f23296e1-50ab-4eaa-b483-82b1dae2ff8a", "indicator--b89dcbf2-9d0f-4287-ba65-9bd4cacdbc58", "indicator--0b467e3b-f767-498e-afd1-dd1745d18087", "indicator--fdbbae81-44f9-43d2-87c3-914aa62f9431", "indicator--f7dcf704-80fb-4e6b-b204-1b52bdffe8dd", "indicator--15c1c067-e212-4a54-b1bc-309aac936803", "indicator--6e61092a-a5f3-43ce-ab66-64ef67a5eb4c", "indicator--75701b38-7e35-42ec-81cd-c018bf904d1d", "indicator--5ffe4d7b-0e95-47d1-973b-77a62cbe9bb5", "indicator--17d41d02-2a3b-4c45-b0c6-b59a0f35abd5", "indicator--11819011-94d9-4d7c-8c76-6f743064edbb", "indicator--75f2f6a6-4867-4c8f-b0ad-9097c25c8721", "indicator--b81ec322-8efb-4d30-becf-c723b335ee07", "indicator--c7c4b833-15f2-4fda-9c58-334b3240abef", "indicator--b26f743c-8750-4118-b63f-dec7092849a6", "indicator--59b00995-12d1-4448-a164-ac7244204ed6", "indicator--67d32ca9-53a9-4e65-bfe4-e7c493450083", "indicator--a8c7288d-b2e4-42a1-b038-c4c2aee2f114", "indicator--d784a1b4-1749-4bcc-9e1d-e14f7a8fa0d9", "indicator--039df432-64b4-467a-ab4a-cafb4ce88b75", "indicator--373dcc28-da61-495e-9abc-c9bb4a835616", "indicator--5a23a0f4-e64b-4b18-ab0b-3e2f41722886", "indicator--80af4639-c089-46a4-92a5-268de624f21f", "indicator--6d2f4dfb-7ace-4d99-b2b4-386fe2e070ca", "indicator--78f987df-14dc-4c96-9fb8-7ed7586ab65e", "indicator--51309962-6874-415b-92ee-f894414fe873", "indicator--07326451-74ee-4902-b469-e9147bc9df22", "indicator--722094d5-8f9d-433b-890a-98c45681234e", "indicator--509c3845-0aa7-4765-a997-2d3ed9a8cdd3", "indicator--1d320b62-22bd-4e14-a7c6-9bd034633276", "indicator--2331ba69-9c65-4096-9825-b980dacda1a2", "indicator--2fe680d6-25bd-4503-99da-0f31491306f7", "indicator--a20ab0f7-fdfd-47db-a0cf-3cd46f4f0e2e", "indicator--937e9e4e-b244-4d72-9f51-be9955fbc723", "indicator--ab6f04e4-676b-4716-b862-bd5bf6e62f8b", "indicator--e71d21e8-af7d-4bc0-bd72-5eb9e3fe7388", "indicator--3f464ef4-f32b-4497-86bb-46686453967b", "indicator--ed8403be-52fe-49a0-a2fb-b76e7e625c94", "indicator--82e081d5-31d2-4157-bcf0-5c0a7252308f", "indicator--dfac032a-fa86-460b-9ce5-365d5282fc8c", "indicator--806c8021-ae7d-45b0-b7d0-dbb9d45faed0", "indicator--2e66ecc0-dba0-48c7-9971-e2f1a7991c33", "indicator--1c28d324-ad81-4d19-9282-60a6be64f85e", "indicator--2ef4bef2-6b90-4029-8ff7-680897e02b4c", "indicator--0e5a64e8-541e-478c-839e-b3fcdf200cdd", "indicator--b43f0e20-eacb-4ba4-809c-d8bd82c3d213", "indicator--9613b7e0-a765-49ad-a2a8-97a8b512c745", "indicator--8b69b9a0-4d15-4c3a-ba45-395df86cffb3", "indicator--efb6b490-851e-4a32-952a-766bbcee80c0", "indicator--41ad1edf-933c-46ac-95f8-ff9d8d3202fb", "indicator--e2db4f11-25ae-4b54-85e7-65800e3736dc", "indicator--040b4d42-6593-4b1f-8db3-bfa4a8dba518", "indicator--9c8810e7-a729-419d-af37-cd4dd718bc30", "indicator--d6934816-05cc-44a6-8af6-7729948e046b", "indicator--0fbd982c-d5bb-4245-8a59-3cca57361705", "indicator--d30012f3-ba22-4b68-b290-2eaa3e5dac7e", "indicator--70daefa8-c3c0-4ea9-8997-90917ac648c9", "indicator--834c3d08-18ca-4d2c-b627-a2a63340e6e4", "indicator--ba7a1644-3f07-448c-82d5-58f6a3119950", "indicator--ad27d312-f62a-4565-be5e-18816116415e", "indicator--e4dfb890-af49-46ff-8569-11ba8fa191ab", "indicator--34812526-a94f-4d67-ad71-bb6ee32d6519", "indicator--8f7f5f5d-ae76-4412-b0b8-8d32a068b4f5", "indicator--dfb6ba54-dcf6-4e0e-badc-8484735c3719", "indicator--867bc1b2-022c-4d0e-ba96-c0c1eed1c9ad", "indicator--8007f8ab-69d9-4a5a-8357-97c44e76bb91", "indicator--d8afb400-9c94-438f-a420-ba0e822b9d0b", "indicator--02df834e-4a1f-45a3-b329-9666bfd4b02e", "indicator--ac86863b-6ecc-492f-86f2-72f2caafc7c3", "indicator--af7d9b90-6db1-4d91-b9b8-97712ec2d44e", "indicator--66d16778-aef7-4c9b-865e-b24b537c688a", "indicator--737f17f7-0974-46c6-8fbc-29e75261446f", "indicator--884e0baf-2e87-4235-a81e-02ef1a34533d", "indicator--c1388230-485c-4406-bcac-9b562c8f5b2d", "indicator--6b84f5c6-3c3c-495a-81d5-f5be331b9479", "indicator--db264933-cbe2-4606-8fb3-416da3cca01d", "indicator--5d6273e2-7789-4105-ad03-60dc6cffc83a", "indicator--be7ec6b6-e096-4c73-bb36-4bea347670d6", "indicator--58206f6b-2011-4140-be5a-c33d30c0c846", "indicator--0bbb7620-447c-42cb-825c-ff91b662cbf3", "indicator--f86bb434-db91-4cff-bcd9-825725873501", "indicator--ca3b7ec5-8988-4fb9-9bc0-8067da75888e", "indicator--a254847d-0808-49ca-8517-65cc4e2a7d9d", "indicator--e324c857-388c-4f6c-9f8a-74816779754e", "indicator--d3766d35-0368-4f0e-88ba-d702fee5030e", "indicator--3e083b1a-9627-4abe-8a95-069591fc1f4b", "indicator--a450ac25-e850-4945-b200-c6938541555e", "indicator--e640bbad-ffb0-4453-bb16-8cb97774b663", "indicator--81d703f4-e6be-47b2-85aa-e9671d5d8145", "indicator--a53328e0-805d-4ab9-90a1-230d561586f3", "indicator--96d1f543-ff06-46d0-becc-0cba4d2a2445", "indicator--fa17d23f-769c-423f-bf54-e802c83845ac", "indicator--8aff24d8-4688-47cd-bbe9-85d222dd56de", "indicator--56a21ed9-56a4-4bac-9d8f-6204b5fa8cd6", "indicator--82a765f7-7828-4a78-8d42-9725b1626a88", "indicator--855c619f-b92b-4bfc-b8b1-c68f191a36d4", "indicator--99a1fdfd-399f-4c61-841b-b0e2d450f6b7", "indicator--e54ada83-716e-41a0-adb9-da50793f2f77", "indicator--d6e655dd-5d7f-4072-b0a0-62bf0251c547", "indicator--c29d545c-d834-44a2-a256-304b7d301639", "indicator--da605901-9777-4054-a4a5-e856f6bcf9bc", "indicator--42ba3d7c-8986-4d39-adb1-7722e2077c42", "indicator--72ba5349-9121-4216-909f-b0daa7be528a", "indicator--bf2949d1-a40d-4076-b95f-34973088d41b", "indicator--ab4412d2-1981-47a4-b33e-5cf4b1c5d0e4", "indicator--9097d458-8115-445b-b65a-83042fb21d96", "indicator--3bd5b2ca-8402-4bbf-a32b-9354ec5bd115", "indicator--edf35e15-87a6-4a0e-bfa3-02cb7e6cf64a", "indicator--e89f20ff-183b-4398-9cd6-c3a2205ae85d", "indicator--cefdbf51-4790-4053-9221-3f7ef74a88a6", "indicator--a00f1c92-91de-491e-9405-bb13aa36ec4d", "indicator--f0b93946-ad24-45c5-8c4a-fbdd0c6b93c9", "indicator--e76afe97-f3f7-40fc-b7d4-e85c8790e358", "indicator--e4bf7ad1-c458-49cd-afc9-e89372c5f746", "indicator--c30dbc35-a267-4b00-a7a6-21377601e0ba", "indicator--8b22b1f5-de45-4566-84c4-dc16458892a2", "indicator--80c5ad9a-7276-464e-bc8f-fbfac5d08912", "indicator--a314cd36-85de-4704-bc3a-2aaa2a66c9c0", "indicator--1a976deb-fd0c-40ff-8f0d-2c445ae398be", "indicator--e740ca9e-86ac-48ce-b325-4fd6adc0037b", "indicator--4d917655-e566-4773-b9d5-b338a5c1bf21", "indicator--8a05e2ce-5a8a-41b2-89fe-32236f68a3bc", "indicator--71727624-61c0-4460-81cb-cc643d249ebb", "indicator--73398abc-3451-4225-ab2e-9995720b2c74", "indicator--4e623308-a82a-4a36-ae70-82d4a23c95ec", "indicator--97f66870-5c16-4419-afd0-120546c736f5", "indicator--78c27be9-e455-426e-94d4-886e8d6e70ae", "indicator--28ffff8b-22cb-4111-81ad-45a1e1c1ed34", "indicator--cacb440b-faeb-4bb7-9157-671ace00a85f", "indicator--eb350355-4c15-4f50-8ed8-31fcec1dea44", "indicator--9f80efd0-2a38-49eb-9c69-56d44eb1e29c", "indicator--9d95ac8c-604b-48c9-8a79-ac0d102ea4d5", "indicator--d2ae2e80-30ff-4725-86d5-971af9c93433", "indicator--12efbb69-09ee-4566-ac96-b4834e7f7872", "indicator--c625fbe8-32b5-4777-b51b-9b9497a62210", "indicator--aa3b17cd-713e-406d-a698-76d8e3d83dd2", "indicator--f517e23d-49d9-4d0d-8352-8a1737a28836", "indicator--9f153a14-78ef-41cb-a1a5-8a43272a1179", "indicator--ab143460-672f-4a7d-a8d8-330147b13768", "indicator--6143406b-17dd-475c-ad29-d0c713188761", "indicator--1882b868-26ee-4cf8-87b3-f10d9ca83cb4", "indicator--51440b18-e95f-4627-b666-210f66e236c0", "indicator--fdf778db-4c12-4fd3-a128-84dac77ae51d", "indicator--63362259-b2a6-4cab-aaee-f0b7e2c9276c", "indicator--cc32ffba-1f33-48e7-beb5-12ae5da54a18", "indicator--dbfc1513-ea2a-4b0b-b87c-d2f95a31af45", "indicator--9b41aaf6-862c-4de9-ab98-0b0c28ff5c14", "indicator--43bb5d91-e4f8-47ad-a47d-48e9c1c17f3b", "indicator--3f874d11-27cf-4509-95a4-8f9bdd207849", "indicator--96adb104-0f30-454f-b2d0-80d9bde38328", "indicator--12feb736-5393-4c0e-9206-7be4c70cbf5d", "indicator--82eb6fd5-329c-4ca8-998c-37d79945563d", "indicator--87f74d04-deac-4152-b0c9-5afe878832ac", "indicator--428a87d2-426e-471e-87bd-811cfad149e4", "indicator--a8d3ddef-c6f5-420e-bdff-f07ee74c3c66", "indicator--2c550dd2-3f0c-4e27-87bc-684a390c23c5", "indicator--d660f56c-7fb3-4c06-bf3e-ca0a3144fa41", "indicator--684199f0-bb4f-4956-a646-834a6f9237f1", "indicator--cf32d312-e62d-4e73-b31c-1075f432cfeb", "indicator--9d9c4bed-2fe3-4c3d-bc53-0d21d6e2fb43", "indicator--eb62c718-50e6-457e-a3ea-8bb8487bd905", "indicator--359d3f86-8f03-4a24-b99f-4ffd0bc17094", "indicator--25b1181e-2a73-4f80-a18b-39c7c5a1f748", "indicator--e8f5c178-14e9-46a0-b0c9-1dc722e89da5", "indicator--5edb44f9-1758-4b22-9a23-d8b6f86fe154", "indicator--4c52d5de-4681-46c4-b0a0-9ede544afa6f", "indicator--c60a81b2-8fce-432b-9dd7-ecd8d91896db", "indicator--62dc1d20-2902-47d3-a474-8ae75d4459b7", "indicator--54632dd5-0307-4473-806f-8bfcb6e9e543", "indicator--5355ea9c-4968-413e-91d0-2e3a6102e16c", "indicator--2baca30b-4696-44dd-a022-7380534f1802", "indicator--cbf304fc-53ef-4660-90b3-a7e5967e9160", "indicator--b9807c21-052e-4d62-9c3e-e87b52fafc75", "indicator--e1d11240-8a6a-4a01-8d2e-c786b64cea1a", "indicator--a9929f79-857f-42c3-95e0-347b6b4e187c", "indicator--b02c60e1-8aa7-4caf-bce0-5eb32771f13b", "indicator--6d271c92-edfc-4d1b-bf69-2bbc84de83f3", "indicator--84b6522c-54fe-4a4d-a5db-6473621456ef", "indicator--c8fc301e-3ee6-496f-97eb-1090e57d14a1", "indicator--ffeec50e-2309-4128-95eb-1972330cbf8d", "indicator--e558658f-2ec3-47bc-a069-e90e8704cdff", "indicator--594c9acb-bf7c-443b-a546-5f83068da6bd", "indicator--ae2ab66f-0ca5-4c1f-97d9-ec063633b5ed", "indicator--a0ed24f3-60bb-4669-bc45-a7270ff94061", "indicator--2603b483-5968-427b-8461-42eb00804cb8", "indicator--472a2cc7-9389-4268-ad5e-c6e4ee0e45de", "indicator--7d7413f6-43ac-4b28-9910-7eff0575577d", "indicator--1ae3c946-b6eb-4243-9475-ddbb799d8986", "indicator--bb0f4643-20e9-4fd5-9078-f2655fa3cd8c", "indicator--999189a5-9e4d-4922-963a-cbe2fb628640", "indicator--62948265-9817-4722-be4a-17bfd4808850", "indicator--e8fc78b6-8302-44c1-8f5d-811ec86372cd", "indicator--7fdf4773-7402-4975-8234-6f96f21268b5", "indicator--76860b77-63a2-4dce-b02a-690bebc7af42", "indicator--a369847c-aa07-4473-837a-38d898cc4c54", "indicator--8c5260e8-f25c-4cb3-9a13-834317d95341", "indicator--cccacddf-3e56-48e1-81df-0e40efdf20b8", "indicator--fda620dd-72ce-4b46-ab07-1c97e76ff4b9", "indicator--3177fd19-f6ad-407c-8d72-78b2715cd31c", "indicator--b409038a-4803-4b3b-b933-62ee0d81fdae", "indicator--f2cfe358-a4e8-4320-adde-f5f87445f46d", "indicator--0b0bcbd2-41de-4932-a942-dd7ddb692514", "indicator--d0026d7f-b6e0-4f5d-b212-7cd35beb1917", "indicator--54483059-e6f9-43cf-9686-ef50070a87f0", "indicator--ccdd913c-0c45-4a88-8b22-64318db8e243", "indicator--4dc42b89-a88a-4e1b-82b2-5dcc499a94d0", "indicator--02b26426-cef3-4cb6-88ec-92b8d32ad952", "indicator--d05e7479-b494-4a36-8d0e-6e79cac8a263", "indicator--d643aa22-aa63-4384-8462-79b7b4e60754", "indicator--b4774f7a-15a0-4601-baa6-7521d59c900e", "indicator--57addc37-33f4-4384-b97f-68bbadb36d0d", "indicator--f0a5aa1b-4163-455c-91a7-7513f74ab3c6", "indicator--f1f2a58d-35e9-4f9d-989e-f8edfbbcac91", "indicator--68565466-0137-4979-978b-dbbf67e52b9b", "indicator--2b376540-0f4e-4dc2-bb45-c0f549447b5a", "indicator--14df65a4-34d7-4969-86cc-17f87fd60cf9", "indicator--bdeabb5c-0cdb-4880-b0ca-b052cd0e3ca9", "indicator--bad55dc8-91a8-41f6-bf9f-af1b1481067c", "indicator--a911ff3e-96b2-4c7c-bb9c-eff38f8e5947", "indicator--f42ae623-e645-47c5-ad66-8628cfa0944d", "indicator--42759ba9-9d98-48b4-af01-01c6b1b76bb0", "indicator--ad50957c-1bee-4427-9f5c-e812b9972bc8", "indicator--10e32044-6567-437b-a127-708325f634ca", "indicator--0c45a624-176d-49e2-9d98-b53d097e15c7", "indicator--da081e24-e91c-4c5a-8907-76ad7595e236", "indicator--20b0dc25-93da-45e2-8ee3-87123aeae436", "indicator--a9d76f5b-fdf8-4bdf-9eae-d551790de889", "indicator--89a8393d-36d0-4537-8d28-c236d95e04db", "indicator--d1e5d30d-87ed-4029-9429-7d9d3c02ca1b", "indicator--8010faec-2ccb-496e-9f8c-3cb0fc9197f2", "indicator--c7c6f72f-1399-4ba0-90a8-57254ab41423", "indicator--8a8f451d-a25c-4750-93ee-ae7d930d6853", "indicator--1abda654-c892-4992-9d15-e2f703816392", "indicator--5ad727a8-8e99-43be-98ea-0cc24c499c22", "indicator--3f95dc54-205f-4342-bca2-c060f576acf8", "indicator--e686d476-da0b-4d65-989f-2d1724bdc6d5", "indicator--6d482b01-8942-4bb1-bc98-0abe98ccc794", "indicator--9fea6724-795e-4568-a929-30d3e6d3b2bb", "indicator--23e24b42-7d38-4229-add8-ec609299edce", "indicator--d4c351ae-048f-4f4c-bef0-69249f842b48", "indicator--fff4a99d-9d63-4fbf-804a-75b73a513d5e", "indicator--58a260c5-2f82-4777-813f-2cddc5969c41", "indicator--18270735-8666-4e45-816c-f295ed77669a", "indicator--6626569c-53a7-4b78-bcbd-fa5ba55696f3", "indicator--1a0e2d8a-831a-4e3b-9e5c-55b7e180bdbd", "indicator--6e19ba6e-204b-431d-8c7e-4d800e381514", "indicator--84ef5791-2c6f-4f27-8b54-251fea916a06", "indicator--d136230a-76fe-4579-a267-07ead7851f83", "indicator--33c83acd-9b1c-4df4-a888-d9e9b7f0c2c4", "indicator--556c2fcd-2a0a-470c-94e9-bc38bb16e674", "indicator--09ae4f92-3122-4fcf-92fe-d294175e80ba", "indicator--aa3061f8-0571-4b28-a4f8-d3c9507cf882", "indicator--0c656182-f7e2-4e61-b171-c0727691d73c", "sighting--cfde9ed1-bc04-448e-895e-56a9f1a1f0a2", "sighting--a5efcc6a-238d-4531-926a-24b6cb34e9c1", "sighting--228773f1-0361-4685-90c1-caf00c618250", "sighting--1a584df2-256a-43fb-9bb0-763dbe4c6b43", "sighting--ca74e4ad-d47d-4143-8d23-88e970ff65a0", "sighting--c21747df-652e-4741-a982-7c62ab09a674", "sighting--0f143ff2-8bce-4d87-ae4d-3caaf3f28795", "sighting--8f8119d9-17ce-4c5a-9ff5-b31bc03d0f25", "sighting--6998b268-2e51-436a-b683-bf41f6793344", "sighting--1cc554bc-85f6-4962-827d-5ad5be9a417e", "sighting--1cd8b0a7-300b-463f-a07e-e0da35d41cc9", "sighting--d1247318-7918-4846-9a75-f2525cbf4c06", "sighting--4d0527b5-b92b-4c3a-8707-a9a6b9d01a3a", "sighting--12a1d19a-8dde-4169-8892-07d53214bafd", "sighting--3573a6ff-8e41-41ed-8b69-27f537339e45", "sighting--417b9782-c736-4876-ae16-a0327c0381cf", "sighting--922994ff-fcbb-4d11-992c-10b143b4eef3", "sighting--284d7613-39b5-4970-a2a5-3d39242e92d0", "sighting--2e34d371-56a8-4a6a-a478-4a3b655e86c0", "sighting--ec721da3-7e1b-4ad7-99f5-72c9bb6c0678", "sighting--5a29a574-9ab8-455c-9976-07bf9edbab41", "sighting--231e08c8-f74a-4373-baaa-d8f44993845c", "sighting--5efa0d8c-1f24-47a8-8211-6361dd8377bf", "sighting--dd13840c-c819-4a8f-b0f0-9912ec0fd5a4", "sighting--77c6551d-93e4-46c7-94ca-b148cdc545f0", "sighting--d5d9f0ce-43e3-468a-a439-1952e6e3afbb", "sighting--ac18ad17-ad71-4b21-993b-defe07945e81", "sighting--9f6066d0-21f0-4a18-b68d-586c3a5b46eb", "sighting--fa63b36e-cbea-49ce-94bb-c05769e36591", "sighting--9bf90914-32d4-4534-a445-39dec5bbff35", "sighting--68e345b1-6636-4745-b527-201133870eab", "sighting--887a51f4-48e4-494d-9bdc-68aaf9257f0a", "sighting--c80ca795-126b-4fab-ad8b-cf06ad421552", "sighting--7a79ef36-5ada-441e-bac0-580b6d6eee95", "sighting--3cbf73cb-c1ca-4f44-a316-b7d7e3e465d1", "sighting--c36c1fd4-b19d-4170-8bcc-0e1488faa0ef", "sighting--a35a05dd-77a6-48c6-a626-2a9da6b5ad4f", "sighting--764423a5-73a5-466f-b55d-1e27f46b905a", "sighting--353c0979-6c07-4066-a1d0-3295fabd44ac", "sighting--79153d6a-24e9-4380-9acc-4315a82eb12a", "sighting--7b3d447e-0e68-40a6-a8f7-bcd7ff0399aa", "sighting--08c584f3-2ec6-465b-a7de-36251bf88ce5", "sighting--3a8c2f2c-40b9-4eb8-a172-aa5dfb56a6fa", "sighting--40d2ab73-0b09-45b2-b89d-8e72103816cf", "sighting--30a3f13e-bc1f-4b5a-bd7b-aef53c86ecf9", "sighting--d20ae49a-7cb2-4b8b-9d29-646f08c5a162", "sighting--c7052703-a6b6-4ce4-a914-a7061cd20289", "sighting--cf3bfda2-2bf0-4a5f-ac87-666e6c9fbdf5", "sighting--9a018b08-178b-44ee-933a-6ed6a8881194", "sighting--eee1a7e1-b31b-4415-b07e-c2f955310e21", "sighting--c7481444-3ac8-48be-b707-3a476f27f23c", "sighting--1b3343af-0b60-4187-8062-ad13bcfef989", "sighting--ce293e46-856b-4fec-b832-2de0c826489e", "sighting--0146390c-62e4-4531-93f1-daf81cba53a1", "sighting--e5383be8-a39a-49c3-ad3f-bc25b4eafc12", "sighting--540fde08-3302-4e8d-bdf8-733fbf6c08e2", "sighting--39fa5a69-e464-475b-927d-dcc247f688f5", "sighting--468eaa57-cc53-42ce-bd09-7de4199b24a5", "sighting--1f8e2f99-b3ae-4cc7-b29a-79f5dfd520ab", "sighting--1eba43f3-d39e-49c6-8755-1b750aebd922", "sighting--afb02288-9ca6-4aee-bd51-459d70bf4031", "sighting--b47afc95-0fcf-4a75-abc7-0545a8a6b39b", "sighting--247dc609-a12f-4b78-bbea-ffc87a0565df", "sighting--7938e57b-931b-4c9c-b3ea-48eedfc2e171", "sighting--e1ecf5c8-a559-4a51-a7fb-a7210ddb3589", "sighting--d52ae1ea-1e31-451e-acca-2f4b26bee4b6", "sighting--e81f472d-9e5e-4aae-b9a2-20d111ab42be", "sighting--4102683d-6893-457e-8980-0e4a1418fd73", "sighting--222459cb-5437-4a8c-b02d-8681cfe8089d", "sighting--4642cbdb-7494-4294-9016-76a05d8a3f50", "sighting--4bcd360b-9181-4d32-b3f3-b34fd825eccf", "sighting--d78fa85d-0b5b-4ff8-b211-1d1aff29d005", "sighting--b12f03af-6412-4af1-bba1-877d13ef6b77", "sighting--01ec67db-e5e4-45e5-9c62-2d4d6cd02cd7", "sighting--24760bb8-5fd6-4217-ae89-3976e8f9aff7", "sighting--be1cc590-b664-4008-824e-8f9c450c5a04", "sighting--033e44da-4c74-4942-896f-7e14247cdfbc", "sighting--f1824149-bfd4-4a1b-8ff0-debe2e9560a6", "sighting--148797ac-e12a-47da-9385-a3c1d746ffef", "sighting--8b98312f-b4bd-4e26-be53-33095b4ac6a4", "sighting--5d21c2f4-fb1b-4c5e-a4d9-e9feddf3d25f", "sighting--eba2b299-dafe-4900-81cc-6d32818c7c5a", "sighting--90dacd7f-6385-4398-b2c0-1a62bd0f872d", "sighting--7a6acd68-a80b-4f0d-96d0-a4a8c6060ef0", "sighting--d21e32e0-6f91-475c-943d-09ad014a6594", "sighting--c78e371c-9fdf-4b5c-ac35-d361582f0186", "sighting--b01014d8-cf33-458c-ae47-998fba46141a", "sighting--f946bfea-38b2-4bea-ad60-c814f6fa4530", "sighting--92c3926d-3c4a-4446-9e80-6ae824a4f828", "sighting--13e8acf0-1c39-41f7-b3a9-83b4670cb186", "sighting--ddc98d56-42ab-4a99-8f1a-e0e9a9fdb2ce", "sighting--8b367bbf-2ee7-4788-a131-48d597a8b8cb", "sighting--a4297971-e908-467e-a000-34aced296153", "sighting--88c8beee-ae82-4dee-a165-8a2b6368951d", "sighting--4174442c-92f6-4adc-b454-232f98962a91", "sighting--38e81e42-ebbf-4f1f-9301-f6bbc38ce8a4", "sighting--74d9c830-16d1-4ef4-bcdf-321d9fc7b592", "sighting--299c78fe-f48d-4051-9b6b-15b932dd18b7", "sighting--636554cc-92a6-41c9-b52d-214fc8014a79", "sighting--037ac40d-98f6-4955-8c69-22d38d7b23bc", "sighting--06c29d32-39ef-4856-b421-712a8b6247c4", "sighting--e554460b-54f7-42dc-999a-369da9ee8e99", "sighting--8d63e5c5-3238-42d7-8dd9-b14f70eec287", "sighting--d7640b81-2b53-434f-8e47-388510b7dc0d", "sighting--b52da062-d957-4ca3-a68a-945a59e01719", "sighting--27149540-847d-49d9-83ce-eefd852d7196", "sighting--8e09771b-1bc4-4bd0-aa75-b9f0ab838295", "sighting--bd41cd5c-fedd-46bb-bb2b-8e827a9545b8", "sighting--add0f3fb-78de-4678-b8bd-19d78efc81a0", "sighting--0a61f4f9-59e1-4bef-bbb1-b32bf0e8280c", "sighting--9d48ea4a-f639-4e5d-a00b-7e19c6c3bf28", "sighting--8a719c5c-7aa7-4f27-a678-23cba5afa177", "sighting--9384afc8-f349-4a9e-8ed7-05642066218f", "sighting--23b04112-86d2-44a2-a408-5e3eff167732", "sighting--302c4776-d2d1-414b-9dad-71380b1cdd87", "sighting--882cc521-aca4-4d6b-935d-157977493623", "sighting--69958713-05d6-4d92-8880-9e00a3fffe49", "sighting--2bd973fb-011c-41b8-9bfe-bd86ce5acfb8", "sighting--4774355e-fe77-47e9-b1d6-00a4ca816221", "sighting--93f25408-a7ae-47ea-81d5-ee0bdf94b19e", "sighting--d7806094-4b92-4160-8944-e064fa4e300e", "sighting--24d3dd2a-921a-493f-aa9b-eaa2349ebb75", "sighting--7608d3ab-8730-4c49-8d0f-8c8be8899eea", "sighting--5096926e-825b-4588-9e83-aab44d21b14a", "sighting--3907f3a0-7a90-4212-8c21-5321c9153f19", "sighting--15ac0d95-f5f2-4e47-a1d2-62b34ec787d7", "sighting--c8fef945-4454-483e-b259-3f97d7ad13a3", "sighting--27a512fd-d517-4ee9-95b5-e8c52bb9356c", "sighting--a484a504-75e4-49e2-93ee-8e146178be14", "sighting--17b78b52-b7e4-4808-8dc4-d4dffdb99ff2", "sighting--d860db9a-a8dd-4d23-b22b-904937725f08", "sighting--86779f13-9bcf-47bb-8364-403cf2b59568", "sighting--b603b330-b6e1-4e85-b36c-117cd00cc2b1", "sighting--3c776c40-f6d3-408b-b67a-4d8b07c9c0a1", "sighting--60b69500-b9f3-4e5a-997c-579760a68cca", "sighting--6c4e68f3-a30e-4a20-84e9-0516b8272d3e", "sighting--ac9990ec-6ae1-4910-8dc4-5c1624d784c0", "sighting--203fec95-4218-4e31-bf47-de8c2216bc1f", "sighting--ec940723-69d6-451a-9f5b-35603ba89abd", "sighting--622ac75b-2ff5-4cc2-8539-49a4217f73de", "sighting--debca997-6169-44c7-be05-4a5696d0de6a", "sighting--3bea847b-f1bd-4f0f-9281-1d288e06ea2b", "sighting--b5ac6539-cf1c-42d5-acab-8bd917ec75ff", "sighting--145d1797-116a-41d0-9fac-f587223d6446", "sighting--1841bd09-dd37-49c0-a403-51cca1392abe", "sighting--f2535090-d826-4962-95c4-4bf4b4215567", "sighting--2df4fcd7-5087-4ca8-b327-ea560634d7d3", "sighting--593ada06-a2be-4630-a7a3-d15e760c6eeb", "sighting--d89cadd1-67d5-4b5b-adf0-d375496ac674", "sighting--d8247f91-af2c-47ba-97c9-228523a34cb4", "sighting--5475c21c-abbd-487d-a099-b8da31ea9f2f", "sighting--f555e840-5b0e-451d-a6d5-e6fd8a3f034b", "sighting--2e245154-ebce-4b96-a016-b426a93b7a34", "sighting--e248315d-233b-47df-8a4d-b1a05a27dd0a", "sighting--d6947c18-161b-4c49-b9d7-fbb6b47605fa", "sighting--6a412550-32a5-4ab9-b303-3a8bc2081933", "sighting--eaea19fd-3375-4225-ae38-e746993292ff", "sighting--3e469118-4765-4416-9a76-8f54b4999330", "sighting--9fce530c-bf37-4dc4-8903-76f3aba839c7", "sighting--ac9e104d-e723-4e94-9f3b-1f7ea2895a3b", "sighting--1f5a0c0b-d3a8-4f4c-8733-7281a8d9e649", "sighting--af26e04d-3c57-49a4-9a1d-f935bf1e390b", "sighting--1c4dce88-2307-4b2a-9c54-c88406e84eba", "sighting--251aec8b-563d-4d50-88f6-d7116e4e9f37", "sighting--f1863dcb-300b-479d-98ab-0247077d39a3", "sighting--229ba141-823e-4ffb-8ca7-a3511d26522e", "sighting--54fb1b48-5cfc-41d1-ade5-4d637f7de9b6", "sighting--38f61e3f-40ad-49c1-a80b-130a7b6e5d31", "sighting--15db3519-ef30-4ba2-b4ab-e168484b462a", "sighting--42a7d55a-3fc1-44e4-a8a5-80840067ad0a", "sighting--51e11d79-ce7b-4741-9c4d-ac1002206fa8", "sighting--35fe4f4b-458d-4a4d-901f-3b7cc06eae81", "sighting--c066cca0-5fc4-4160-9c3d-85086a2eef7c", "sighting--ebf47f34-7b69-4ebf-b396-948bdda18bb1", "sighting--39f57cdc-20a1-4403-9fce-7463ef404e0c", "sighting--f45426e3-8817-41f3-81bb-06dde6c68044", "sighting--f7d3999f-ab60-4e6b-8636-2dad0966ffed", "sighting--beb7aad1-e19b-403d-9072-acf4537458c9", "sighting--4373d8ce-84f0-4c2b-a6d1-c3d4713b568f", "sighting--2874f56c-8026-4964-807d-aa1d2f7cbe15", "sighting--d79fe131-4f09-4e69-8fae-0169f887c280", "sighting--8bf288a2-0322-41a8-8905-b95879bfd4d6", "sighting--b4602122-8add-4f9c-b1ec-74b47465f595", "sighting--182015ee-53c3-422d-9511-963d0697aaf4", "sighting--c3606cc6-bfb5-4f8e-9397-e2212c7469f0", "sighting--e64f500c-c291-479a-8fda-2c100f6c0830", "sighting--2aa492ab-f02e-432f-b67e-37974133b2b4", "sighting--7d524cf0-8853-4113-a5a3-d708be912d5b", "sighting--3edeb3d0-2dcd-47ba-ae43-00ec5bc86d74", "sighting--e1ad750f-53f6-48e7-a9d0-fa0b62e2359c", "sighting--8472f75b-ea30-4e32-a4ad-b0b6a8374865", "sighting--182cd190-f40d-472f-9300-ba2812c97607", "sighting--f6d3539a-deb6-4758-a5fe-b146542e68c9", "sighting--a3ef688c-faf6-4039-8aba-02c6ef1bf26b", "sighting--c03544ae-4c39-48b5-9202-069da1638214", "sighting--a52c424d-8adc-4ad9-9a7e-b1ac7dcc0375", "sighting--69ce637d-ca06-4c43-9c6e-3282d31171ef", "sighting--5cb3918d-243c-490d-9422-d91ef814c6df", "sighting--454f8cd8-7339-4cae-b169-4ceb0fc40dff", "sighting--e00773d1-7758-4033-9135-9d8d318943d8", "sighting--1f7581a8-76e7-4d49-bec0-e6dd9707a4d8", "sighting--eaddb2c1-f4a0-45e2-8c6c-c97b3946e553", "sighting--cf2408f8-30e9-475c-9b36-2acf1d08f741", "sighting--7563b278-bb22-4ab8-8aa5-a5971a1e7606", "sighting--49aac8e7-f208-4903-bb03-fc338f8f3c23", "sighting--5f5fae87-3394-4fd7-aafa-2fc36459a8d8", "sighting--36d869a4-d5f1-46f9-bd69-9574a4c808d1", "sighting--899208a2-14d9-4080-bcf4-ed4d99967b96", "sighting--71765f70-1f78-48c4-8300-0b10a350da03", "sighting--b025f34e-7e65-4536-ae99-5e09d0e9d10f", "sighting--e227a88f-bcfd-4bcf-8a35-39727806f1e4", "sighting--99d5dae0-2e12-4c85-8769-eecbae7d1cfd", "sighting--57805138-4fbb-4d89-8435-f03096353aac", "sighting--cb39c82f-6783-4eef-a88e-b076131ba50f", "sighting--0abb35a0-23fa-4840-b7b8-9c45ed77eba5", "sighting--b5f23e14-86e1-4eb4-b8f2-9ac1e4378a2e", "sighting--55feb8c0-773c-464f-8701-5295221b5190", "sighting--4b4ab6cf-52a2-4fff-9c7e-d7f8d3ee9c02", "sighting--01ebd23e-7815-4251-979a-64460e2d863e", "sighting--3c222fe0-ce23-41a8-a990-821130f8ae94", "sighting--6c91aaca-29ee-4136-aa90-3440507d13bc", "sighting--2f3c952a-baa1-4f50-b389-9af424f879c0", "sighting--7ad1cb46-c14c-4f05-b851-9ab2c8388d19", "sighting--3592e94e-a9ab-4aba-8844-c0abef4f33ec", "sighting--f4be09e4-a3f4-413a-9ca7-f1cc5064b66c", "sighting--7231bebf-a38c-44fc-aa57-413991ce931a", "sighting--62e63a8f-d48a-4751-90a1-e5f4170933c2", "sighting--7e50253f-2e05-4818-95ba-a6ff7989f777", "sighting--8bb8a1aa-aad6-4a9e-afad-5d868c0c3f85", "sighting--f2fa61d5-619e-46dc-b118-437a2b6dd2bf", "sighting--9676a49f-7077-4a25-94f4-13583e67a1d2", "sighting--1998d036-0ec5-45d5-a9b4-f89c27079b88", "sighting--58486a87-2d6a-420d-bbb7-f3ba0dafae7b", "sighting--930999b2-fea9-4428-8c1a-80959ed563d5", "sighting--8c750309-d1a2-4066-9676-2a7cac97dcaa", "sighting--e6542228-0aff-4a27-b488-01b80f9954ba", "sighting--ff2cdd72-7133-4b3b-8a0c-d59dba6b61e6", "sighting--23d500c1-c138-4e1f-89df-0c87d8ff1614", "sighting--bb9422d9-56bc-451b-ae0d-e6b3e804faa6", "sighting--9ba19a0c-a92b-44bb-9ce4-274bedd92504", "sighting--33f0f98a-1042-4054-9d62-0156bb3ddcf6", "sighting--5224fded-32b0-4911-9026-61a116d23b8c", "sighting--baab3af5-512a-4211-9704-34d435f013f1", "sighting--cdda2bc7-ab9b-4055-b275-43d46e092761", "sighting--12eed28a-25f8-4418-a731-084c54ff1ea5", "sighting--e924cc6e-71fd-4fcd-991c-b2f1308e5445", "sighting--1d39bbd8-4dcb-4619-b614-eaa7dde139b0", "sighting--a301e888-7b39-40a6-9d4d-2b1c87873214", "sighting--d23ad6bd-ed78-4cf6-b038-a11f78cea27d", "sighting--966a83da-4eb8-46d7-b64c-556bd555559e", "sighting--240251b9-46c3-439a-a52c-01fe1940599c", "sighting--b25903a7-5b27-4a44-9432-84cd87ff5b2b", "sighting--79e1a10b-8786-41e8-b210-b87ef7a39531", "sighting--d063767f-3898-4503-a940-947af53011a4", "sighting--57ce2af0-8231-47fc-b49e-e0d4048938c2", "sighting--b9aa695f-ab31-487d-bf60-cbad8afb6290", "sighting--c946853c-71a6-4f6f-afd8-e5026f050e78", "sighting--3c84c04a-8eff-41d8-90e4-58c9927fe8a0", "sighting--4ecb76f5-04f5-4f42-9191-da2aabcb4bf2", "sighting--386330ad-9de3-4aef-9beb-88a51f9772d8", "sighting--d4ab0eb4-be28-42c9-85ee-c3e0fe629993", "sighting--ee170516-8ad0-46b0-bacf-8982f4120916", "sighting--b16b81eb-453c-457c-804e-97b73c2791bb", "sighting--a43a82d4-c089-4b9d-9ee0-953822789118", "sighting--12149dbf-c505-4a7c-a13f-54012aa3e2a1", "sighting--5fa99bd1-c42e-416e-bea9-641d8ff077fe", "sighting--5c75b6b0-ab98-4e6e-8546-038014daee53", "sighting--6651f3c0-b8a8-438a-899c-83a9ff8a6d26", "sighting--a4fe540f-3024-4422-af6d-3f12e1c04004", "sighting--e86df545-6cb8-452c-9105-6fdfc7e114ad", "sighting--e6f18a80-6412-4944-8b7a-b03969be3b34", "sighting--c8610363-9407-4e1a-b1bc-0258498f98e2", "sighting--51de86a2-5c5a-4a17-878e-47e1447ff41e", "sighting--0055fe84-dae5-4990-ba4f-13bf1c3a332e", "sighting--300f4119-6901-4391-81e0-216d7a81dc39", "sighting--e01d8852-09c9-4a37-a9ba-615fa5a2fa34", "sighting--c6008470-b1f7-4d0e-a9b4-a3728b10b399", "sighting--bcaabde9-0a56-4445-b3ad-65ab1c8d5246", "sighting--11de2b6e-3c20-41b6-a56a-f876583a3108", "sighting--03457f81-2549-4858-84e2-5d35df2847a0", "sighting--63a06285-2da9-4664-a297-33d095f3f847", "sighting--484603a2-4127-4ca3-b956-249b94168724", "sighting--a78c7162-cf7f-47ee-a0ab-5b3a7bd9d68f", "sighting--881fecd1-bf97-4845-b1cc-7ce20c4e36b4", "sighting--02ad9e9d-a7e0-4e84-83eb-484bf0767f4e", "sighting--dd224593-b94a-4140-b040-976444ac916e", "sighting--221ae472-0095-42f0-9c22-63c22e4eca3b", "sighting--b2c3db34-cd1e-4639-a6ac-c043318289c5", "sighting--6894e63e-ac1b-4080-b440-1dd4451a6271", "sighting--a71ba0a3-1d55-46a2-b212-ff449b02e5c7", "sighting--f043410e-53ed-4a92-9023-70562ea400d3", "sighting--d770f37a-083f-42b3-bebb-0d083b6a0c74", "sighting--e9b60fd7-5601-4360-83ef-2e3c09ae1961", "sighting--fd1a9fa4-e5cb-4800-b749-bb5ac40b902a", "sighting--fcf8fd5f-09aa-4c8c-93e5-58b41345eb54", "sighting--c9f2913e-e179-4598-833c-f16091a29012", "sighting--a11e79f8-fbd9-4e4d-95f5-ceca9875d183", "sighting--22fda3ad-7d34-49c4-ab6a-23fd9f987242", "sighting--40cc5226-4a42-4b03-be2f-7e293f737530", "sighting--af0e13ee-4a5f-446e-accb-17af22d9c63c", "sighting--e6db8a93-c53f-4ab5-9b08-78b94c054b80", "sighting--ad4aac05-42a9-48f3-af8f-73ad2c16cf42", "sighting--bcbf0582-3f89-44e9-8d11-5cd897cf5bc7", "sighting--4840d243-c163-4dff-94ae-fc60f983aae0", "sighting--d5d0c6dc-46a1-443e-a81d-aa7d088a3230", "sighting--fd17f228-ed93-4bfb-890a-21c4fb3a686e", "sighting--98fc459e-ddce-49f8-80ad-52b44ca3de73", "sighting--18568c6e-41ad-4341-8e86-7c19ab21171d", "sighting--8f623935-67ac-44f8-bec7-75c3aae49bce", "sighting--441261e0-7d59-45d4-9b98-8f8629cd433b", "sighting--d83addee-e626-43ba-94bf-512c780140fc", "sighting--ff9a987e-a813-4dd8-85f9-9007cf4fcba6", "sighting--3e8713ed-5376-4cb1-9619-bf59b8f67a84", "sighting--2f07fb6a-04d2-4dc7-98b5-acde07fd8275", "sighting--a24eb613-6795-43c2-9b53-2a93be19c422", "sighting--58609ca7-9c3c-422d-8e98-af4171b666ac", "sighting--31af405e-e7aa-4129-9479-aee19c81c852", "sighting--0d426710-9a82-4204-b3ec-09ba301779d6", "sighting--3aa91c94-9556-4bd8-a49f-3e2716a563bf", "sighting--704bd7f3-d0ad-44a9-a723-9017dbf6ea14", "sighting--d2122b48-38a9-42b7-85ce-275422352408", "sighting--bc912323-15e6-4432-a4e5-dfdea20ca1b1", "sighting--f082f7dd-b411-4a11-a33e-7dc7df1b3e34", "sighting--e7e50184-daf0-4509-ad11-e6a1fb08401c", "sighting--01d5e719-1fad-47d7-acd9-5cc5e12b3068", "sighting--2ff65b37-fb39-4b3d-8ae8-6a94b7e35b26", "sighting--e34d7ccf-ea9d-45e5-bf30-38e6ae4220cd", "sighting--2ff2118e-a7ed-4837-b5ad-e9cafbff33e9", "sighting--000f2b3d-d2eb-4834-99b3-16af90ad2557", "sighting--cc2ef1aa-9131-4fe8-be0f-f9a524dc1427", "sighting--ee553810-7945-47e6-8782-17b31a5eb27a", "sighting--9be64696-f7af-439d-8f5c-8bebebafbd27", "sighting--008a1474-5572-4a18-8a6c-cc9700ed0a5e", "sighting--928888aa-2049-4e82-bc84-0f5d66206544", "sighting--3c466667-63f5-438b-b034-a86e05f7ee5e", "sighting--835f00a3-30ef-49f8-bf0e-68f2de684ab6", "sighting--34c66885-7c4b-4d65-a35b-04b029d953d2", "sighting--d267ed32-6538-4e0e-abce-474f8b1015e3", "sighting--4428e59b-a2e0-49f7-8e1e-e829423ee4a0", "sighting--ec4c8c9b-ba1c-4ea8-932b-49991dfd2ba7", "sighting--6e2ce90b-67f1-43e8-b5a7-447b515653fa", "sighting--923d9963-54c1-4c58-93ae-de6e52d6898b", "sighting--8076b4c8-cca8-46d0-a000-4945dfd49ecc", "sighting--05297477-93e4-404f-a010-a485438398fc", "sighting--f5e71141-4fff-4af8-b2b7-35b1909d1676", "sighting--1e55d6c8-e5ac-4592-9d5c-d841d896bacb", "sighting--34c9db1d-3b66-499e-b743-fd57eeff5630", "sighting--a73d4d8f-81c9-40f2-b16b-aef548224583", "sighting--b695fcf1-6bde-46ce-9dd1-222c0c5a270d", "sighting--52e56ea6-53b8-4480-a226-61ee2a257218", "sighting--09a36f33-b588-457c-9d04-468ee6c5922b", "sighting--64f83bde-5fc6-46b5-b370-abf8e810303a", "sighting--0bf792ca-2afd-4f8f-a524-582c6d013fbd", "sighting--4b621cb5-3647-479f-ba33-8dfcb6069399", "sighting--5fb447b7-267b-4946-a568-fb7ed8230792", "sighting--a1ba80ec-2db1-4a24-8f90-469ac18f9ec5", "sighting--bb5b5592-4b1d-4449-a084-8e4a5cf4b5d1", "sighting--9b02bfb5-7ca3-485e-bad1-e9c06cb60cbc", "sighting--d803fe14-094c-4369-9664-9f0241f6301d", "sighting--b795d9cf-7d38-4670-8f11-690b9458d1ae", "sighting--a3b908ad-e029-4ceb-a561-60c9cce811ac", "sighting--0b2a7c81-8ab0-40f7-b607-1b98e9133b0c", "sighting--ad0abb89-b636-4f3f-94da-ccafebaf8db4", "sighting--d84921a2-912a-4046-8397-27cd22d53222", "sighting--48259083-375a-4d4b-aa54-64ca9df5ac39", "sighting--3c4cd8ac-6e4f-4b8f-a4d1-7748baa15277", "sighting--345ba13c-7848-4a33-add8-db33175d21e0", "sighting--703d8402-69c5-433e-a501-ec3c0bb236a1", "sighting--f61e1fef-321e-4c0b-acae-62e5f44463cd", "sighting--9ab66ec0-155d-4d79-ba14-15647b3ce5f4", "sighting--e5e5eff3-ed2d-49a8-bdc0-911048dc6a7c", "sighting--114431b4-8fd2-4fef-818b-4aef8b303758", "sighting--f9bae8f9-3716-4fa9-a9a1-b0324cae3090", "sighting--bce7e215-2056-48a1-99e9-c8273355d84a", "sighting--cfe1cf1e-8ab0-4805-9bc0-649091de729a", "sighting--c31584fb-890d-441a-8823-d45fef96fcbf", "sighting--a355efc6-04f7-43c5-9545-fee4d1247a11", "sighting--bae81160-0baa-4dd8-8944-e4cb36bdfd9a", "sighting--218562dd-a9c8-4e94-8410-13306a5644e6", "sighting--89abb256-c211-42bc-a0d7-826be28c04cb", "sighting--70b6c52a-d521-4077-8616-d378cada11f2", "sighting--2341834b-4524-461d-b48b-b2486d34aeaf", "sighting--63175e48-f421-41ab-8c04-bdfb3dc83596", "sighting--cf6b6d23-4284-4a64-967b-fd78757510cb", "sighting--f0e6b1d3-4191-40ab-8405-7016c2f05a0e", "sighting--098f6060-41ed-4086-b87e-8d261078f88c", "sighting--6aa5fc63-c73f-4190-9117-258bff79e883", "sighting--a8e3ba7e-c5d4-4540-b88c-300d0404975d", "sighting--deb4136a-e1c3-4d6a-ab2c-d464821351af", "sighting--1aaffb1d-b351-45d3-88d7-25df26e84dc4", "sighting--6b4ea6da-f488-40ed-b2c9-ef05991ee0ed", "sighting--c50d67c1-2336-4eca-9d7e-310b78217d83", "sighting--4597e75e-5cf8-490d-bcda-57768c31c5ca", "sighting--8a5d4a03-4b5f-4c67-add1-888931c762e1", "sighting--de127d86-4d83-4b26-b993-c93d4b589462", "sighting--ff39aab4-567e-4b0a-a219-1f7ef89056b6", "sighting--33bfd6c3-ed3b-4e09-b043-5cff20c24c56", "sighting--d7f33b83-2f56-4e07-819f-8b86d197fe44", "sighting--a04c51fb-d73c-43d3-b665-5375c428b497", "sighting--02ef60ac-eda6-41fb-bb01-15a98e3f9013", "sighting--683a26bf-2283-4307-89b3-d8507595f91b", "sighting--ea210ea2-0751-4c10-b9df-73e96f659351", "sighting--cbbe4a00-6ac1-496e-a555-881e9a8b4f6f", "sighting--a778e59f-43d1-4ed3-aba5-7ce5c4824cc2", "sighting--81268a5b-2ecb-4254-8b8e-6c57719a8512", "sighting--da80d77e-3a29-4108-935c-9836a2cf7f0d", "sighting--23f99e60-7826-4ba1-87c6-799305014c8b", "sighting--f1caf3d3-abf3-40fd-9e29-6d320b08b73a", "sighting--7de5712d-a782-4758-bf6d-6c22e6c55858", "sighting--af69f85b-4ef1-4871-bbf9-8eeee926a160", "sighting--17b15413-0a64-437d-a641-785d3708c524", "sighting--f4255404-c9ab-4cff-95f6-271207412f11", "sighting--fb13d9b7-33b7-4ad1-af28-6bab7e8d74b9", "sighting--e0a3a1f7-651b-4083-9da1-eb57d147ed30", "sighting--33c771cf-01be-4438-b631-d9c180f792ac", "sighting--26a93528-0ae5-4922-ba1d-334a9b8595df", "sighting--00a02f59-95e2-4abb-a5f5-3268a944e446", "sighting--7104ebee-310f-4309-ab23-f6660a43a9d0", "sighting--453af842-81ae-4bc2-ae76-40eb50827b31", "sighting--5ae97d6c-2864-4ef6-9e3e-2b0051c7897e", "sighting--70d47189-2045-442e-86ed-a8b1d0b49454", "sighting--edac2a4c-daa5-4fa7-a9f3-814e11f57838", "sighting--f2f0036d-d251-4845-bebe-6ac4a6637603", "sighting--3ca49f8f-0800-447c-8fa8-5af3c87b4f64", "sighting--0cb6903c-e308-46bf-9320-97ef51cb2eac", "sighting--650305e0-feff-45a0-967a-a4beca11ed4a", "sighting--941d2f6a-a196-45ba-804f-8176fd86c194", "sighting--789e6861-e2cd-44c5-a17a-dc7a2743674c", "sighting--b2b9a870-13a4-4511-98c7-02eece7ea5e8", "sighting--37d94a8f-ca6c-4b60-8d9b-fcc4c7157513", "sighting--92b846ff-2623-4dee-a3a0-96e5580e53f2", "sighting--4cab3ec7-fd37-461d-aae4-0e995a5a07c5", "sighting--653ed036-df8e-4283-8bb8-0f30340bb98a", "sighting--a096860d-5ef7-4257-aceb-a9f18a95b1d0", "sighting--3853d4d0-1c91-4ffd-bb09-1f2cb0e64857", "sighting--e19c6b2a-43bf-484f-9795-f6e8b235fbc6", "sighting--5498e7bd-297d-433d-92fe-530c17904b97", "sighting--13a43815-f674-40b2-877b-10dfc0105dcf", "sighting--f90b3d87-5ad7-4c61-953a-70c340a1a045", "sighting--ce1c826b-0bf6-4f36-bdd4-c6e3ae44c557", "sighting--30e5f766-92ff-4b05-85d4-5bb1ccecfe6e", "sighting--26d05ad6-ca62-4c32-a514-1a2bc0a2d53c", "sighting--e751e244-83d2-42c8-98a2-2500bee601ca", "sighting--d0583ef8-439d-4fac-9c95-b730e1d5f971", "sighting--12888408-91ad-49ca-9835-f9cf7b2b0519", "sighting--15f7c9c1-66d9-47e0-b4fa-15721651215a", "sighting--12aff4f1-5de8-44d5-9e86-0976367b29a1", "sighting--a153cdcc-b75b-4602-aa76-abf1f397edb2", "sighting--7177aae0-1f6f-43c8-b682-7e952099d74a", "sighting--9a906339-0e70-401b-beb5-ae9c077fc346", "sighting--df38911e-9319-4cf9-8e9f-feb55126339a", "sighting--d12ba745-837c-4589-93ab-791c5715818c", "sighting--0ab48836-d4f9-4b17-987d-f6640fd8f5df", "sighting--6d8d4660-54aa-4e61-ab5f-f122b3dea41f", "sighting--1d1bd601-bf6b-47dd-b87b-69bb8911f1c5", "sighting--db615fbc-3f8a-4e30-be34-b1f99a580774", "sighting--ed00280e-413c-48fc-a3d4-3355b355e490", "sighting--7c362106-b28c-4a4e-96da-b658f76bf679", "sighting--ab604ff6-723c-42e9-a11d-0cfa3c349223", "sighting--c04d3f6a-412b-4ed9-9e63-66982434a3a0", "sighting--4a34e367-54fe-4123-a61a-81cf23ea9403", "sighting--27c461e5-db21-44a3-bd03-23895cb462f9", "sighting--73e1dfdd-d5b3-4543-8f8a-e53e31f019d8", "sighting--3891f248-266c-4551-91d0-e456d4d24aa2", "sighting--fe083ec0-1443-402b-a7f5-8715cb022c08", "sighting--c7bce5ef-1622-4e64-96a3-1a7d4d190a90", "sighting--c3caf966-4970-4775-b832-67313ecc2ac2", "sighting--86ff0506-defc-405f-aa72-a76d2571a797", "sighting--65a27087-c51b-4d9c-baf2-beb44d916bda", "sighting--bf90ad6a-b880-453b-83f7-e9e38da1db6c", "sighting--f8219b18-741b-43e6-a1e7-f41ab33a4379", "sighting--666f496b-1d43-4b01-8cd1-c51d3baab757", "sighting--8ae6cfc0-c952-4f71-ae90-9c308b90a616", "sighting--2de8f264-57cf-494a-94af-4632266e5925", "sighting--17be0278-d235-493b-b48c-e84b8a986af0", "sighting--31b28661-746c-487c-95ef-54940bf77b1e", "sighting--813f2fa2-73d2-441c-8153-bbea8648ef2a", "sighting--55074eb9-3e23-4e85-9230-b52b3d3ed408", "sighting--f4ffb256-2dde-4d3b-831f-f12726cac41c", "sighting--bb570c28-2460-4458-9fdf-ede82af11b2d", "sighting--dc963812-9240-4e04-be46-92b9c6a626d8", "sighting--f5f23fc4-451b-4366-9086-9d9c32e3e79e", "sighting--ccf732db-4e98-44d9-84b8-346926331e96", "sighting--2c2dc310-a918-4c73-9eae-235dcb0ea677", "sighting--e4b19a56-2ee8-401e-a767-b7b4f6e82b37", "sighting--15e5debb-4cd2-4966-8e39-66e523c99349", "sighting--1e70f048-0356-4249-89c7-0fe0cc411db4", "sighting--d3907e81-6b1d-4484-ad2a-d0465968b86a", "sighting--42338f69-06b8-4297-8936-ff1544986bed", "sighting--2eb6cdb1-0e9e-4229-93a2-318e853507d9", "sighting--7e1b4150-f495-471c-8524-f734fdc9e123", "sighting--59e1baa2-868f-4d94-85e0-8d4b32054473", "sighting--2bc5d4f4-ddec-47a3-a8c3-815166939723", "sighting--0ae582bb-c52a-41e9-93ad-4c40fd406d45", "sighting--06d58d86-146f-4c41-9934-45ec98a01900", "sighting--e60ec33e-af68-4bc2-98b4-2c07599842af", "sighting--fcfaa88b-4c46-4da7-86c8-21ba035a9643", "sighting--74b2931c-8cfc-4f1a-b3fc-38cd11759e9f", "sighting--2335ffab-ebec-4567-b1ec-9598b97d3514", "sighting--9da63a88-a0b6-42b0-ada2-5a4a8f4de375", "sighting--fac65802-5bb1-4c7c-9b66-be9e2f6f3e85", "sighting--7ac75f60-f154-4391-8edf-1664e966be01", "sighting--8f876ba5-4011-485c-8887-94ffde0674b2", "sighting--23217e9f-20b9-4981-a670-6d8389696a44", "sighting--3691dd94-3b68-45c5-b5e6-186977ac8140", "sighting--4d855afb-fba7-4c10-b150-892e397c9706", "sighting--8e7f180e-753e-4fa7-8b22-99d94bef7197", "sighting--5bf3cd6d-4680-4a34-8021-50fd3eccde24", "sighting--09a885c9-d565-4ddb-b76f-537588abc984", "sighting--cedac6fc-44a6-4be8-8a37-fdac08ae3c86", "sighting--18f6c92d-46a5-44f4-a4f8-9e0d88dfc040", "sighting--3614ba38-fc4d-492c-8243-4d6d2ec04817", "sighting--3524443b-d2ba-41fa-bd38-d14957c809c1", "sighting--3e5946eb-9179-4e53-b6e2-83b8cf05209e", "sighting--45f3482b-178b-4f48-b8f8-f9f9e95b0f16", "sighting--eda6e3cd-5564-41ae-b393-f16de896d004", "sighting--ffd39e14-d014-40fb-a22c-98c6dcd57110", "sighting--c5e51a74-d9bf-4ff0-b894-988bdb06a3a3", "sighting--bea09a95-34d7-4396-bda7-d1e136e780d6", "sighting--15c100f5-872f-49d7-aaf0-d79b79ae3477", "sighting--dd416ef0-bf81-4e51-8bd1-23d5afd924b2", "sighting--58edf475-01b1-4db8-a7d7-b78dd19d62e7", "sighting--ea9e8dfd-bfa2-47f2-af74-917f8d46595c", "sighting--6c469647-1242-4488-88f2-ff80982ac119", "sighting--287f5742-5c4e-495b-bc7d-fb71a68edb2c", "sighting--eec950ba-e095-47c6-bfec-44be5b0cf595", "sighting--9167f315-4810-45f6-b0b5-35ef2aed0b73", "sighting--fb7f245c-618b-4955-8456-748b7b26d4ff", "sighting--8cb2562d-0c6a-4d36-a76f-3b659841b5a8", "sighting--45f475f5-859b-4837-aa2b-e8ef1082a8ea", "sighting--6ef1479b-d538-4244-bc61-5ddceb1fe165", "sighting--1e1f2963-6d6d-40c3-9bc1-97aefececb4d", "sighting--3f002d51-c0d1-4b97-928e-8c7cf997ff36", "sighting--82a12221-e7b4-423f-9993-60db2efe0e50", "sighting--629784aa-f51f-4979-8c4d-a06a0910932a", "sighting--49a24f36-5fe5-45bd-817c-fd72bff66fa9", "sighting--998c943d-9f82-4376-b277-ee21e2c5f79d", "sighting--0458563e-96cd-49a5-8b6b-95ca90462da9", "sighting--9750cb21-66bd-4b8e-9d16-9abf30c05563", "sighting--88c0d0fd-68b8-49f0-a83d-39dcd472f6d8", "sighting--a9075a5a-42ff-43c8-8ca0-300e1e37eb11", "sighting--a1f49298-a380-49e3-ad44-7cea6beb0038", "sighting--3af8e2fd-ad81-4ad7-a93b-b8cc319bbc79", "sighting--fd11f6ce-5e70-441b-8fa1-0005ed5f1792", "sighting--f5d6f18c-9fa4-4eec-9c60-b40f5a7386e7", "sighting--e8729b6a-836d-4a92-84c6-eb1db6d7bcaf", "sighting--3e43bd14-ac6c-4894-a20a-93ec1460daff", "sighting--78bfc10f-44ee-4422-93a9-5048a3e2564c", "sighting--94cba464-5e4a-4aae-a02c-a91e45db17b4", "sighting--67c89a2b-745e-49c6-baa0-79a10bca5f2c", "sighting--17726317-ce83-47fb-8c08-4f50d451448e", "sighting--f2d0a89c-b573-45e1-ac4b-3c44ef65556f", "sighting--bc9e3ad3-6c73-4675-8590-fef09a75eee7", "sighting--d6af757d-cb27-454f-85e0-08250e65daa2", "sighting--938f414b-1351-43a4-aabc-2e77d74018b3", "sighting--d1836dc5-9d23-4123-af40-29c89b27be12", "sighting--a81fa52e-fe2b-4728-b247-dec5c1e5b293", "sighting--73e7914f-ccf8-4b53-b621-3b73ff3b8353", "sighting--37bcdb28-be3a-4d62-bfbb-16eb6636ae24", "sighting--75c9b1ec-d49b-48f4-8d3b-783f4515d4c6", "sighting--eee742f8-a07f-4567-9eeb-91bfe4b77c79", "sighting--8fcf8d26-d0fb-4df6-8ad9-4c925a28a1a8", "sighting--4a69cb87-6cd9-4636-90e7-1c0660ef5ef4", "sighting--e3dce142-6ce4-4d60-af77-bc8dc5b067eb", "sighting--9a3f51fd-0edb-422b-8895-7fc2b87dc581", "sighting--a4fcbeac-2e3b-4aeb-b9e3-2d60ae61b249", "sighting--635d1e0b-bae5-48b1-aa55-d666ba68cfdf", "sighting--7a49f3a4-23fa-4805-b7dd-510beec775f2", "sighting--00035d4e-336f-47f6-beda-bd6cd407ff66", "sighting--3f44c825-bbb6-44c0-92c9-4c5f48d4cd2e", "sighting--f953e0fd-94f8-4904-9a90-33f862748a86", "sighting--da5e5002-0a87-451d-8f9f-dfab2160c3e3", "sighting--1ae98b62-2b57-4bd7-8e18-67bfaae23646", "sighting--e0491ce9-d00e-4ee6-a36e-d9cc3c531ba6", "sighting--3f22f48b-4e0e-4357-a30f-5cc6ae08c841", "sighting--65ffe981-8665-423a-966f-e767864a3610", "sighting--1423a836-0eed-45e2-95e4-fe541250c462", "sighting--20be5598-d40f-4f79-95a0-ade9331550d4", "sighting--3ee4846c-7642-4d04-998c-0faadfa22ffc", "sighting--68527a23-8150-40d2-9a28-8f986aac7d51", "sighting--733c9005-20c9-4906-899b-ed4977136fff", "sighting--ef182ad2-18cd-4d16-880d-573111255afa", "sighting--6f5932b7-d3c6-4bc8-b4b7-5cd4a20fb950", "sighting--07bde6aa-02cd-4d7a-a4d8-eb33c5c753cc", "sighting--c891ad89-0121-4bba-a432-fa3fcbdeda40", "sighting--e7126d2e-8588-4186-b58c-84682912b6a4", "sighting--40140d01-e0f5-4ab5-84ce-4aa5e7eaf758", "sighting--55f7e7d8-7844-4089-8c0b-f0cae1757615", "sighting--387eeac7-651f-413b-a735-b881b8745935", "sighting--2425a19b-9bff-456d-be52-0c969cca6f2f", "sighting--11ee0c80-5ce3-4e1f-8fa3-993617b3ed5d", "sighting--5e615910-5aef-4bba-ae96-11900269ccd3", "sighting--1c613ff7-27e9-440e-9261-92041eab8969", "sighting--1e53bafe-05d3-4184-8cbe-bb8207ab0257", "sighting--c596d14e-2cd8-45b5-81ab-c1c09a990ea0", "sighting--a5e5bcec-1d77-442d-a528-c94d8e0b8769", "sighting--4558d26c-7af3-4db5-9c7c-7ec9118806cf", "sighting--50570c1f-2a7a-4dd7-9ff6-46b1a9ff6f4c", "sighting--ee7e58bb-4dc5-4440-b4ae-e21950e2bdf9", "sighting--8d6654a3-41fa-440a-8fb6-10acb9409313", "sighting--a60cd116-bfdd-495e-adbe-57b562117277", "sighting--623f7ff1-080c-4ff8-b2f2-da3067b2ba97", "sighting--f90b714f-fe79-4c51-bff5-44796143de5f", "sighting--3e773c3b-ff3f-4944-ae33-5a84b68117cf", "sighting--c145a328-cd9c-4f13-80f4-bce232415d74", "sighting--21d06f77-f658-4c6e-b81e-b9a842a98308", "sighting--c50ffd7d-6c4f-4714-8304-82cb0fd8303b", "sighting--ed37e670-1f19-4501-ac96-db9c45ab820c", "sighting--479c2318-2d8c-4b7b-8fe7-c314f4344809", "sighting--90c1e4a1-ceec-4c74-b18a-4189072845d4", "sighting--9bf04680-ae2f-43da-b043-a6175ac4266e", "sighting--a3edbf9e-428b-4940-a163-b7231848f622", "sighting--00848cd0-08d6-4693-b014-455c498fb7a5", "sighting--bda2f86d-08d5-414d-98ba-c48f78b41cf7", "sighting--29860a10-e26c-4297-9997-447048e9edd2", "sighting--80019417-45cf-4d98-9a27-a6a834d46246", "sighting--f7e79e43-5b00-4f6f-9315-2f0e91facc37", "sighting--7b55fb4c-c233-49ba-bf2e-6c1148ae5c12", "sighting--af98d3e1-675d-4cf4-abb9-73d5e8c009d9", "sighting--8187f80e-5503-4aff-b8ca-35f91987693e", "sighting--6e8b622a-0075-476e-9de9-86d3017904b3", "sighting--5ee6e52f-8259-4fc9-92c3-86cccff07391", "sighting--a3088c45-5223-4952-8f3f-e1e85b88a879", "sighting--aa9561b3-c798-4b6b-b4e2-c75c99d1499f", "sighting--95311f61-bd72-42f9-afc9-0626882cc2eb", "sighting--736a9f9f-cdc2-41c2-9767-b875ccb7e79c", "sighting--df8a7c41-5f5e-43f9-b5f0-fced04117c1e", "sighting--399b9589-0a80-425f-ac43-c9ac919ecf31", "sighting--19fd2c07-1f41-4d5f-882d-2fa519e92e2b", "sighting--05194afe-bb5d-4948-acba-69950c9c13c5", "sighting--eed43d31-017b-4320-b1a8-f3efcf3de281", "sighting--531788ff-36c6-45e8-9f14-02780e71eba2", "sighting--fb3c45c4-7507-439f-a0e8-3f3a929c1781", "sighting--2dab8bc9-35cb-4fc8-a022-aecf7f53f573", "sighting--a6887d4c-5b0f-4a8d-a9a8-048ad46ce8bd", "sighting--0791c702-312c-40d3-937d-912612ceeb43", "sighting--08290a09-4208-424d-b6d7-3bb2bb1939b5", "sighting--517ef716-1479-4e98-8bf5-707565c0e90d", "sighting--f0a26cfc-58ff-4f28-b9d9-628f35044591", "sighting--c2144e35-f30a-4a62-bf78-1201e3628e55", "sighting--1d62e25c-d267-4877-a2ef-99d56ac1087b", "sighting--adde3be1-04ca-4d8c-aa6b-fae392b64bf8", "sighting--d107b5bd-fc76-4601-af87-7cd5c7b46873", "sighting--76625b92-9fc7-405c-921a-c023fc9c4c43", "sighting--2965ce99-f69b-41ab-bf1a-ccf19c7b33d9", "sighting--be0f954b-63d3-4884-9cdf-9f5ea7479bee", "sighting--2c8ac58b-8d5c-4be3-84e5-8f52a39cfbb1", "sighting--d95019be-6111-412f-b952-dde58db3735d", "sighting--a0d34c66-4bec-4aaa-9187-47aab6004fcb", "sighting--5c343096-7ccd-41ab-ace8-4d92f738ce36", "sighting--03ce8abd-e6af-4caa-97c3-7ea77532a451", "sighting--8a6f540e-f9a6-4548-aad5-d4bcd16c74a5", "sighting--bb897891-7ee4-4c4b-84cc-a7c7c9c4543a", "sighting--5085024b-e081-459d-8c94-ba5372fc72c2", "sighting--065235b0-734a-40de-85df-5d8ee1eb1ce8", "sighting--c1b297d7-510b-414d-bc0d-985e852672fb", "sighting--2692e081-d41d-40e0-aa3a-b9ed6dd7ac17", "sighting--da03de18-bf43-48ac-be58-bb297f260add", "sighting--27497b7d-6bc7-444e-85ec-842a3cf44b05", "sighting--65a9ed8a-2153-4b12-b87a-9380c4ff344e", "sighting--ef6c9827-40f5-4c36-9297-a9cc308ddad9", "sighting--04bafcf6-a813-4bd9-b73d-9fc87eb87445", "sighting--7ff341b6-3c3f-4c4d-8014-49e4683b0508", "sighting--981af8bc-5d28-4a12-836b-a21fd8c8e0b3", "sighting--85760817-4c3c-4883-afa7-2c4e98d2b03e", "sighting--162d73df-e826-4dd0-95b6-d191ba663c9a", "sighting--c0f7d96a-ef09-4d41-a88f-992e22aeb0d2", "sighting--0318cbe1-b72a-4789-86a1-4c5639a91fc5", "sighting--53cc7892-e85b-4e40-9d44-314fb4e8a4ae", "sighting--3ca249a0-af29-432d-be78-f69ed6788e8a", "sighting--56f3906a-de4f-4e59-9c33-9b785298ead5", "sighting--bbd97f44-b610-4a74-b9ea-b199f6f08453", "sighting--f75b46bb-6403-4d31-bb7b-c8d0693cccb6", "sighting--f77ee5df-f153-489b-9228-8efc4484a397", "sighting--6f240099-61c2-4cca-963e-aeb7cab81352", "sighting--28ed7d4e-bbe0-46ee-bcbd-14caa3e9e48e", "sighting--20711325-86df-488b-ab71-9027115dda95", "sighting--1dc2b751-ed1e-4e5f-b013-83f5d8ea10af", "sighting--5c8d668e-3161-44a9-82b9-8739846849e1", "sighting--e63ddc52-46c8-41b1-b630-7323298e8159", "sighting--393c356f-6e5e-49b9-94b3-aab448f5e602", "sighting--43df9117-5735-4ddd-8dae-6e67c607d447", "sighting--5a2dd750-61e6-4886-8386-4c711fcd2055", "sighting--65047086-85d9-4f6e-95ff-82f6f4b9ef88", "sighting--38a6e946-58ca-4b11-8d1b-ece3de5d2d95", "sighting--245236e9-45f2-4d4d-8f19-6a7cf48cb115", "sighting--7ac219c8-8772-42a3-bbbb-1a2b57171f7d", "sighting--531faae2-b259-4f47-a1a4-8c854e399748", "sighting--ae667f45-482e-419b-b1d3-7f841b2b4782", "sighting--ca0061fd-d93f-40c0-9586-775d5ce79387", "sighting--2afdbd7f-70d7-4b7c-a95f-beb8a4248718", "sighting--d42575a1-bc83-4b3a-9e79-234a921bb837", "sighting--4d5c6872-90ab-49c1-a1f3-0f230626f6de", "sighting--4578a2d4-3dd7-47f3-968f-01c38b22532b", "sighting--419fafe9-8da2-4901-90bf-0fcf2211bd49", "sighting--8e5f334b-bb64-4dc4-ab06-f324fd8f51f7", "sighting--105c076b-c5d2-40d8-8e7d-79251d5622b0", "sighting--4f0cde97-93df-4180-8b77-165ba37095a0", "sighting--b154866a-6308-4de2-8813-a3fdc67f0b59", "sighting--26381d9a-a46d-4fd0-9dba-9d29cccfec4b", "sighting--53d63ffd-2aea-4b2b-8f13-0511b461d231", "sighting--def730c8-cacf-49f4-abb8-741e6dace2cf", "sighting--329bf991-dd5f-49a9-8778-505f2cb4cf36", "sighting--a9238ef1-a7c5-4886-ad7f-c2663cceb596", "sighting--61350ddc-4967-4bc2-87d7-31c1bfa461bd", "sighting--ffa63654-ec5e-4dc3-898a-da4872799f4d", "sighting--5cdc0212-6dac-4be4-ac8f-b914329de826", "sighting--6591245b-6095-44a0-b4f7-8bd51f7b98cb", "sighting--f069d717-3a7c-4d35-8113-69a4d08f74a6", "sighting--50c9b757-4609-4bcd-bcbd-09e9cdcf67e8", "sighting--f33cf932-121a-47c4-a6b6-8576fd235a38", "sighting--c1ca7fc2-afcd-49ea-bebe-47569f127bb8", "sighting--6820effa-23b3-4da9-a955-2850a82438fa", "sighting--8d4f91ce-59c1-4908-a0d6-3c6822beb313", "sighting--de2f8c05-4a11-4707-b5d4-e0cf46f03126", "sighting--a6b7dc6f-5a2e-491b-9afb-856eec9975d3", "sighting--c351728d-6b66-4f69-8284-ceb085ee1930", "sighting--59e48d39-b35a-443a-9a8d-6b637b3792e4", "sighting--6cb09241-49b5-41fe-9f8e-bfaca27dde86", "sighting--daeeaee1-4a2b-45a9-b091-13dd28a849ad", "sighting--47630a5b-951c-41ef-b519-3ba622e3a61f", "sighting--95288515-71c8-4505-a89e-9cca7662c92d", "sighting--b98dbaad-dfc0-4498-a507-ea62d285762a", "sighting--23fe3a28-fd1f-4b02-8249-71d9022bfb8a", "sighting--0c415068-19f4-4c4b-8f3a-9ad92e2e703b", "sighting--e3fa2181-70bf-4015-bf73-77f9b5759298", "sighting--4144d446-083d-455c-a564-4dc8a801e053", "sighting--67af3822-7c88-4107-bc11-e70a0288213e", "sighting--edee5843-f662-4b5b-a5da-cff920d2d127", "sighting--e03923db-a641-4ccb-8e64-f87ccfbee210", "sighting--94fd0159-4ff9-4cac-9bb8-aff7264cbacb", "sighting--89c28c5a-d8b2-4a5b-9e0a-5f64c55aa367", "sighting--0006dfec-a6bd-4550-87fe-dbf13725c054", "sighting--c376da52-d791-4c26-ab7d-140ffe1adcbb", "sighting--30cb1f24-96d5-4cf2-b9df-66b7f7609331", "sighting--d755eb25-443e-4487-9587-9de8884418e3", "sighting--e5f595dc-a3c6-489c-a015-ac5242481e4a", "sighting--a31a0593-ab9b-4202-8945-25976cf3a1b8", "sighting--5af6d7f3-f4d2-4863-bfcd-6f373fd9d49f", "sighting--9e99e6e9-9d52-4d68-8e13-5ad534f14d31", "sighting--fdc01485-adfe-4f9e-a054-c1e45ed5a3ff", "sighting--1fb1ac0e-af2a-4ad9-a9cb-ba7c3f725920", "sighting--1acc5b8f-a322-4bda-a377-77ec73ffc308", "sighting--ec0a7344-0f6b-41a3-80b5-fefecddebf14", "sighting--95ddb2cc-a611-41fe-b0ed-650693252e23", "sighting--9146bb58-a960-466e-89ad-4cf5a3ce64f7", "sighting--40a0132b-742c-4e3d-b0dd-b851e2a68b24", "sighting--b39965ef-b774-467a-9eab-ab83570c7935", "sighting--0d22948a-c270-4e39-a655-2ff78cf5a0a8", "sighting--7f3180eb-5ce5-417c-bca1-5dcd4127a38b", "sighting--99075656-2757-480c-8680-788d1a6cbaa1", "sighting--28ef169c-d644-47d6-9004-0af2ca16a966", "sighting--5860c6c0-116d-4835-9ed7-8505915707eb", "sighting--e31eb5ae-cd2c-40a0-a419-2d8b6c8f9bb5", "sighting--99df74cb-3dbb-4367-965e-58c080814af5", "sighting--3a910b2a-acd9-46fd-b668-1c6cdc72789c", "sighting--875b702c-9713-4f16-8386-8eebe0ec5c44", "sighting--926608a4-c348-4e89-acf6-a3a0750522d3", "sighting--af0800d4-2dce-4c7d-9bee-9840c8cae62c", "sighting--351e6db8-48f6-4cc0-af0b-079ccc50d178", "sighting--4bb86c0c-9904-4340-85a5-af21f88d6711", "sighting--2e728bd9-5922-47f9-896e-85dab5c67071", "sighting--8e3be3aa-3b14-4d35-9ff3-7675ea19ad10", "sighting--e5edbb8a-9589-409b-a2c6-806fe2137541", "sighting--dd083c49-1760-400e-a88a-3b3fac484391", "sighting--45da8489-058c-4db2-b804-6993ac70a61f", "sighting--09ba6137-77f2-421e-b68a-553d4f7cb217", "sighting--2db5202a-7396-4fed-abff-ab7ee9bfa23e", "sighting--85045021-32bd-4049-b5b0-63fe90ae7f6b", "sighting--94fa6c16-6de7-4aa2-bbf3-9d9c2dc01a6d", "sighting--a8699d8f-23ba-4e1f-8dda-4dc32bd6cd78", "sighting--66e29259-131c-49d6-8944-67db50aaf5b3", "sighting--d74a8fd4-a731-43b3-8b51-c5ccd36d506a", "sighting--678812d8-d480-4fb4-aec1-0a11cf7441bc", "sighting--6713db7f-d23d-4ec4-b24b-ff76f305e26b", "sighting--d92e969b-b6ca-48fe-9f72-f105d86926f2", "sighting--6725c536-870d-4781-bf32-58ab470132d4", "sighting--6dc70308-f9b6-4b22-b95f-bdb5c190f212", "sighting--e6871a47-433f-4b90-b732-5907e8706338", "sighting--874be678-31fc-4678-bc67-1dd17b5ef439", "sighting--f62b9cac-5ae4-4394-916f-da144ebd42dc", "sighting--256d7e01-364e-4db4-b28a-ebf443f79c7e", "sighting--ec6d7964-6b42-462f-8159-220b8f8bc7d7", "sighting--c4f4c90c-f3b6-48a9-8eb6-6f0e3dcc7825", "sighting--72886615-31da-41a5-bcd1-fde84a45ff5f", "sighting--11beb7bd-77b5-4610-8b8d-8859816ba783", "sighting--4c4a0721-7e13-41d2-af01-356fc63b26b9", "sighting--73a7b828-a1b6-4e9a-9942-ca3833a32c28", "sighting--ef566857-7be5-490d-8fc0-00a839cc266a", "sighting--96f0243a-551d-46be-8d7d-115ce7870a53", "sighting--a941a43f-f715-480b-a080-a8181ec7eeb8", "sighting--b9f40d95-ed56-4a53-a67f-742d1f31d32b", "sighting--bf98b11e-ca74-4ce6-831d-f11988b222dd", "sighting--dac9dddb-b708-4daf-90cd-e70c5528f536", "sighting--c653b9a2-051e-43d0-9e8b-c7135f0a23f7", "sighting--8b289e7e-3d3e-46f2-be72-4a6146f3adfb", "sighting--77878928-cabc-4940-b8da-bf0daa7593f1", "sighting--cce7f9b4-fe0f-497a-a535-4b63d4ba4b9b", "sighting--0383b3bc-e54c-4393-89e9-45a82932822f", "sighting--f1e46c91-1372-4a7d-bcbe-6a2e6986ee1e", "sighting--ba4697f6-fd84-4472-b488-d1286b01dda7", "sighting--e1b13d58-d6c4-46f4-97b2-2864b5b4e26b", "sighting--284dad9b-6c6e-43d1-97c1-99287a1ef6d0", "sighting--87be46e0-4e08-4b3d-a4d9-0c21374dc07e", "sighting--36521c40-b9c2-4f75-8d73-589994e79481", "sighting--ff9e475a-21af-4ea1-bd21-b07ddbaea19e", "sighting--3ffdacbb-f1e1-4823-b08a-b70eb22f5dd4", "sighting--50fb7e1c-492b-4706-8edf-7b1fc784b92e", "sighting--71f1ce04-bab8-4611-a9bc-1164406c5e15", "sighting--26488174-438e-40ba-acc9-bc6709b9e869", "sighting--0020fe54-6877-4df0-a932-bad2f187d414", "sighting--ed0ee971-4c5a-44a4-9a05-113dc20d54ca", "sighting--26e204e1-4454-46ff-90b0-3d2464317727", "sighting--4f28a9d5-0db5-42f5-afd1-9d932c6084d7", "sighting--998f53c6-27f4-4288-8160-8f49b73b6bdc", "sighting--70175ef5-b3c9-4d0e-b79f-b1da0ac19dc6", "sighting--351b1e78-1fe7-467d-87ca-76d0f2cb3396", "sighting--47bc03e9-652d-41aa-b562-81ea6880d5c4", "sighting--782a9637-19f6-4ca7-80b9-5028075c8728", "sighting--c76d3cb9-663e-4498-b5b2-55e20465b06d", "sighting--176a8ec1-8acc-4fff-b31d-5856084ef596", "sighting--cfef0344-756b-4d91-afe9-59b6b4f0d198", "sighting--81bdea2e-35b6-4865-9906-83c5feba212e", "sighting--6a7e42e6-49a2-40b8-8684-72a5fea0811e", "sighting--f5b5276e-6030-49c6-8a5e-86b768e1f877", "sighting--1536e4f5-29cb-4c12-9378-996ae5f94d00", "sighting--a628834b-1163-4576-92f2-9702cf4cd599", "sighting--6be74792-d7ef-426e-a087-d90d0712852b", "sighting--80c3ef26-642d-42ce-830c-2c75b33d2fdf", "sighting--c9b610cd-3b90-4c5e-a427-67a6d0a5675b", "sighting--0d1d1032-da9d-4f48-8aee-a9f86c8a0c3a", "sighting--b484edf3-4e53-4218-916d-4688aa3d16a7", "sighting--92efc00d-445a-4259-bcc1-bd6a134bd8bd", "sighting--377f7d13-36ed-406a-b779-3b3653ffacb2", "sighting--7d54be4e-f0e6-4123-bb84-dd7d5bed0a65", "sighting--b9936210-1052-4eb9-84d1-d56753bdb313", "sighting--ae1abcf9-9289-4f0f-ae04-8b58e4bd6c9a", "sighting--d12e4e17-558c-4e81-b99c-fdf2a09880d9", "sighting--d8a04f74-6f46-403b-b487-a1bdb44ccf99", "sighting--87034aaf-0c3e-4343-8769-2d73b4e13840", "sighting--1972caf3-b263-4061-9717-5959a5b97a06", "sighting--be02566d-ce45-42fe-bdc0-54e205954fe7", "sighting--2891a320-1342-4999-ac55-e1562c25c634", "sighting--1befea83-f0b7-4af2-8112-535150767423", "sighting--d87bd6cc-be4c-4dd2-8044-4ac92bf866c4", "sighting--859d52e6-2ac3-460d-a808-badfa6fcb220", "sighting--1ae7c9b8-cc8b-4d0c-8d25-ab77ea6fe42b", "sighting--fc74a07a-aa5f-4de0-9511-0ecabad5b8d4", "sighting--b88484de-3000-4e38-a2e1-55573fbe44cf", "sighting--9b6848f6-da5a-499c-a997-5b9374d68b70", "sighting--cee4db22-fd31-46ca-8f80-f05f8e756986", "sighting--e24d865c-b1fb-4459-acba-8e1509873900", "sighting--37ed7cf1-4e31-4363-9b75-fd4c02580e5c", "sighting--3400461c-563c-4419-bf7e-ca91b90e19ce", "sighting--a9f22491-5617-4e16-9813-21c7fa9d760b", "sighting--cb613dd5-b33b-408e-be92-5d9b9b853a2f", "sighting--5c1de3f2-a49d-4d80-82a4-a6d0897a2a22", "sighting--88b50e6e-0d49-4782-8d2a-51175ad24146", "sighting--23833639-baeb-4fd1-9884-c43d8e9499cd", "sighting--fb6034ba-6da4-4e25-a1be-e7ec317b4f6c", "sighting--40a8f074-7527-4b89-ae98-4ff05b84313b", "sighting--89c8f3df-f5b7-4bec-8d8f-3717c4bb392b", "sighting--237b8c2b-0332-4af3-92af-b5b1130bb5ec", "sighting--407b31e1-dbe9-4e18-bd3d-3a994f6c29ff", "sighting--7658e924-5356-4199-8785-5f4d4c243940", "sighting--cf3acc17-6bbc-4aed-9c81-84a6a03b9b78", "sighting--9e87f1f6-2860-4f7e-af40-0a42015739ed", "sighting--9d318471-2926-4d4d-842b-ed7624e2de91", "sighting--ea33c155-07c9-4510-84a1-e8db8c92cba3", "sighting--6c1f80dc-5518-4239-a57b-1a6a4f9c31a2", "sighting--55f68b56-1e35-45ea-b6f3-139971e280a2", "sighting--af96033f-2de9-44a3-a087-819eec7f6e98", "sighting--4441b2a2-3fe2-4843-affe-b51cc22a78d9", "sighting--aaff3e2d-6bef-4920-adf8-cc149617fc5c", "sighting--63554372-99df-4ae6-ad47-0e07f157a753", "sighting--139ce0f9-36a7-4c70-9848-c3c12fe82706", "sighting--902c8cc9-f252-4043-a053-5529e4242341", "sighting--35de9575-4e8f-4ea7-a9a6-b7b0fa6b0f07", "sighting--0ac2efaf-86e7-4808-8fe7-3c55cb84b6d5", "sighting--f82c510a-c878-4298-95cb-a25fb8027f02", "sighting--4708ad20-df07-4a37-81e9-d048cac2693a", "sighting--475b52a1-b2c3-4077-b9d5-f67c93fabcf3", "sighting--57d8b31d-c0fa-4057-848f-d30565a54857", "sighting--37e44cff-35d1-4205-8f0d-13c614db28e7", "sighting--27b03d2f-94a9-4fde-abfa-710a71d166a7", "sighting--8589dce3-0dfb-49bd-81a1-b435e16ed5d6", "sighting--d52fc08b-f169-4b3c-9251-e84a595e0651", "sighting--bf3b6dac-3081-4dfd-aa43-eac957ee8d79", "sighting--84c4afd0-ea59-452d-a4ec-15bef1fa5ce6", "sighting--0180cc05-2924-45b8-a1da-5af104ba7584", "sighting--2eae574b-08b4-4524-81a1-c0ad5bd58666", "sighting--a42be856-cd54-4f98-9773-e516be3e1846", "sighting--73214bd1-4f3a-4718-a7b0-02ec4e1d1de1", "sighting--9f8a41e8-ae73-4087-8a03-a510adb1559f", "sighting--cb1446d4-0fec-4f88-8c59-cfcef9648d54", "sighting--dd85ecdb-5cfa-4e50-b33d-f08158920215", "sighting--f53039c4-1422-41c0-99ab-a19c7561fac5", "sighting--17589505-818a-4c60-bddb-5dbe18f5e8ee", "sighting--939bfead-48f0-4199-aa20-52069a2cfa4f", "sighting--88820e59-ffc3-4490-a446-9a6681ed34c0", "sighting--8216dbba-32f6-4e96-bcfa-6f8c13bd732d", "sighting--7b279097-0afe-4d45-b55b-cd7d41bfab20", "sighting--582687bb-3eb4-40d3-b4f7-f22006a8a22e", "sighting--7838e924-a6d8-4c44-86e5-0158caadc082", "sighting--08e48d8d-d169-4fc9-9996-2b509514b188", "sighting--edd524cc-f4f6-42ac-8ddd-bf9a159ee507", "sighting--9f8fd854-654f-4ed6-85bd-143b8db3a50a", "sighting--9ef78b8b-712c-4edf-a2dc-fc96c44b8a0e", "sighting--f40ab0b3-1cc5-4a45-a9ff-a6b2812e9723", "sighting--1a040ba0-e00d-4a24-9d6e-a469e7b5c558", "sighting--9523d784-c5ee-4ed2-b3cc-33c1ca2f718a", "sighting--1abcbb2c-0c51-4174-bcbe-82a117da29bd", "sighting--314c15dd-3989-47c4-ae0f-9731f38c1e69", "sighting--4522ac92-2dd2-4c68-ad3b-7838ca469d3b", "sighting--5a1b50e2-0538-4f72-ab12-27811572d6f2", "sighting--a0b8830a-ad43-4da7-9705-78cd293b391f", "sighting--abb41925-bce3-4fc2-9c5f-f056cfa4a603", "sighting--0ecab906-0d7b-4a88-bd33-137912c4e8f1", "sighting--cc52401b-dc67-4447-9990-45a0c60dae06", "sighting--97a3403c-50d1-4f86-bf07-4133825482fb", "sighting--80662bbe-9b28-4dd1-838f-f3a4aeca8446", "sighting--5ac7739c-8097-4e4c-a0e1-65c9347a82a5", "sighting--a93763ed-18da-4d07-8712-7846e98d2c82", "sighting--8fb262c9-b104-45d2-84bb-f72f50e9cd31", "sighting--cef6ba01-1284-4f5e-94f6-705ff043f56b", "sighting--409ec002-0da3-4947-b14c-9cef9cd07b9f", "sighting--43cdac1a-ce01-4f4d-a36a-48d58efb978e", "sighting--937e8d3a-346e-4331-8a31-970d4ff99fc8", "sighting--99e4a859-ddef-47ee-b2ba-f3002c0f6dca", "sighting--fd2c4f79-5e68-439d-9e2e-2acded40a9e7", "sighting--2654467b-0a8e-4a02-a4f4-337a8ef46478", "sighting--2e084ef5-9bd3-45c8-9726-38439555d79a", "sighting--cf184f67-f78a-4459-a5fb-58f5ff2da895", "sighting--d8f0a517-911f-4a34-9a0b-f42548df1c85", "sighting--750829b1-321e-4746-a5e9-98438c8a480a", "sighting--fdc1639f-0842-4b12-90e2-5a8bb943d63d", "sighting--ef00f27c-1e3a-4a70-a706-f5bd3dad7965", "sighting--f08c1185-8943-4440-a374-f0120cde1632", "sighting--f9e0bea9-3fd9-4934-a461-d9b218689b78", "sighting--6f55b336-d9f5-44fc-b8f2-69bda8e1f677", "sighting--8906e758-0bb8-4242-b5f8-9e2a7ff518c0", "sighting--32587261-2dd9-45ac-bfcd-07df415f0b38", "sighting--7cc9ddbb-2aa6-4610-86d8-c399a0371eee", "sighting--4f405185-3823-404f-9171-912742afb349", "sighting--76df47a7-3f0c-4810-8511-c21650525001", "sighting--2e691970-6cca-40e4-be84-49b6e2a48864", "sighting--1da9bcd9-ca23-4866-8979-6a9477a363e6", "sighting--61fc572d-9566-457b-8206-6c86f60af1ca", "sighting--77202b38-f8bf-45a0-8f95-7fc48c5dcbe8", "sighting--634a3127-0fc6-4bec-8464-e7f291561bb5", "sighting--00525b54-96e7-4608-9532-1234a1f78755", "sighting--88274582-95ac-4432-a6aa-5cceafcb1c19", "sighting--926a6c33-7f33-4ce9-b3db-856c033babf8", "sighting--d1a0067e-9126-45d4-9bab-c99ad5506be3", "sighting--98652b4b-3db9-455f-bd83-096757922c8e", "sighting--43661ba7-e90e-43d4-8b0a-0b0cd34acc13", "sighting--e758d95c-dca2-4643-88a0-48abb64b3bfa", "sighting--bf3cf64c-6552-4d92-93e9-7a0c50e1c1bc", "sighting--1d0f20d0-b32d-4c6f-ae9f-bf33acfe3b53", "sighting--cd4771ba-c5e3-4445-9909-b5f13d764fd3", "sighting--17c2d948-ce82-4cb4-ba65-e28f9765ee42", "sighting--b304330b-6fe0-421d-89af-b1589157724a", "sighting--ab953ec4-7a76-483a-aaa7-449e755abfc3", "sighting--6ae3860a-5a15-4510-9fdc-25ba6321b11b", "sighting--f2939100-b147-4396-9753-59df398c8aee", "sighting--344530fb-e162-43a5-b31b-15d57ca01cec", "sighting--d6014ca2-912e-4218-9cf9-9330634366bd", "sighting--05799e66-4cee-4094-872a-321f70474c83", "sighting--a292139b-5fcf-4409-b7a2-60d1fca9e186", "sighting--112a13f0-b4ce-40ad-b091-bc27beb41b7b", "sighting--5a99fccd-24a6-4ef0-a929-b8ce6c873075", "sighting--e4c7fccb-5900-4090-b11d-d2244d949c7e", "sighting--3c06f90d-209b-496d-a99a-756aec25ed8c", "sighting--a4f259f8-b8a0-4f9e-beb4-e763b67831c5", "sighting--37224943-81a3-4680-81a8-f63a721f38bf", "sighting--6d1a5944-9549-45c6-b07f-f454d11b809a", "sighting--cd5bc3ed-27c4-4fb5-99d5-d1db79335601", "sighting--95d2ddd2-d866-48e1-bd18-c59278f030a2", "sighting--bc6eb41b-5c68-4132-ae41-ed482daa5d8b", "sighting--404b8257-83c1-4105-9a48-da436b04a2a0", "sighting--1a4aedd2-36a9-4f34-990f-201ceabbca96", "sighting--0eae429c-cf44-43cf-9fb4-42e8ff3b12a5", "sighting--dd9977a9-c4cd-419e-b3db-038239212ebc", "sighting--ca3b9c37-11e5-4621-b803-6da092b262d6", "sighting--129cbb14-3e24-469c-ae73-540094fdbdcd", "sighting--a49be040-7158-4805-93cf-3c7278bf327f", "sighting--219d1f1c-4ecb-4acf-bd2a-f01c8ed37ad3", "sighting--1451bbe8-bd3c-458f-98cf-d9330cba504c", "sighting--9908dcad-dd34-4480-9056-958eb630b553", "sighting--d9028d1a-0d27-4cc5-932a-95e23c4d3e1a", "sighting--a27059cd-820d-44d1-9601-a0322924c5f4", "sighting--942507da-b5bb-4069-aeae-c527484f05a6", "sighting--e932264e-d23c-4a46-9b12-6155c474d065", "sighting--8439be99-1e68-4007-859c-4cc533f5a938", "sighting--31561803-9b29-48e4-9099-645ed71a9074", "sighting--d02fd0e2-ffe9-4b75-8035-d4aaba138f55", "sighting--a8804ac7-a197-4de2-b11f-bc8828d6c00f", "sighting--f4ab4bd9-3b45-49ef-a8fc-44cf539bd8bb", "sighting--78f55cee-44bb-4858-b32d-acc0f0e1b3b6", "sighting--73b85d2d-6287-468c-975d-b031ad98a38b", "sighting--0c196cd1-4591-4620-9656-2becff154010", "sighting--b4d2e4b2-4537-4872-bb2a-2707c8442cc2", "sighting--1a2c5606-1ada-47e6-be61-f6e6c11952ef", "sighting--2a641bdf-6fa6-4438-a7ba-0ae22aeb0092", "sighting--76a290b6-802b-494b-b72e-2dd5f2598a9f", "sighting--0f789a8d-0e67-45e3-aa10-99ab9ccdf719", "sighting--c0119ace-0666-40db-abb8-fc6b29984de0", "sighting--6ca339b1-4288-4838-b311-282d25ba70d9", "sighting--ff1f917f-63f3-44a2-a544-8e82168aa7e4", "sighting--9c9b06fb-b3a2-4a84-a054-ffbb157c665d", "sighting--52170507-9292-499f-9f6e-a707ab7187dc", "sighting--342af99a-9f22-492b-8ec7-693b93569e63", "sighting--e688e943-acde-4bbf-a0da-d31a7ea969f1", "sighting--bd444765-9553-4af2-b41f-0849aa640616", "sighting--f4fcd2ef-ed9a-4af9-9d1c-412878e0681c", "sighting--4b03dec0-282b-41c9-b041-5afe880cac7c", "sighting--400d486b-084b-48e8-93cf-5933dd62e202", "sighting--73d09ba7-07cf-4529-8bda-971bbb69a5d1", "sighting--c3dc5414-fdd8-4f64-819d-5540f988b5c1", "sighting--13d9e59f-9f47-40af-b707-75fefc63d381", "sighting--c349eef2-d1e8-47ca-a971-d36ac610ccea", "sighting--22420018-1345-4dca-b793-fcac9c5fcb3d", "sighting--007596cd-0bda-4e1d-8171-5b2f3e881d24", "sighting--518051fe-a0af-4a9d-942b-46b57824019d", "sighting--d36039fc-f1a0-42d6-894d-383daa018fbe", "sighting--259eabac-6fda-4e5f-ad85-30a4ad0538fe", "sighting--1818087f-26ee-47b2-ab51-192f5e280e1c", "sighting--c970e614-4300-43c8-9e22-c0d711465e02", "sighting--19d46be7-675d-40f5-8be4-f2f7ea31db18", "sighting--33058d0e-a918-4b53-900a-6aec2c67bf4e", "sighting--10900313-ef7c-4117-97f0-fb2f3ab89abc", "sighting--50ea1076-0dc9-4c4d-8468-fd7a72963b43", "sighting--24939a92-16a1-4002-b65a-6ce2b9c3b1fa", "sighting--46b530a3-a6b9-4b7e-a24b-600ef9df1529", "sighting--ea3c1458-63c3-4c9e-a6ec-37d9294c92e7", "sighting--4f4e9731-b2f8-469e-90fc-0ac5e2b41a15", "sighting--5c39a9a8-3dbc-4b26-8759-0c81de9718e3", "sighting--212c17d8-dc11-4bc6-b0a8-ab2ed627c2f4", "sighting--be7cdeac-d3f9-4b4d-a147-ab5bd548252f", "sighting--16c9459c-9fb2-46c2-b991-519b7333d2bd", "sighting--3bbb26aa-d424-4439-abc4-4ccd158b5090", "sighting--0a7126fd-78ad-4612-a574-c9e56e54ab54", "sighting--e2bfc058-4597-496d-805c-e8b21d153638", "sighting--317513ba-371c-4690-bd27-952bb7b8f2e3", "sighting--54ee74a9-8747-4964-8fbe-68303604b08a", "sighting--a184b039-5a7d-45e7-a72c-fd29236fa434", "sighting--1e486760-7c3b-42e8-9a1c-092f0413bd0e", "sighting--65e533ea-40c1-44a5-a9b5-2a8b1f8a96e7", "sighting--088ecd72-2206-460b-bec9-2e769d8ec97e", "sighting--afc1c7a3-f721-4ac4-b38f-e6410cb440d1", "sighting--9efda425-6544-4fb8-b7cc-63fdd66bce41", "sighting--ad3cba50-8e49-4f60-aeff-7ac13f394e07", "sighting--5eee5f4f-cbf0-433f-9bca-827f24e7c57c", "sighting--0e80b161-ad8d-4c90-9ecc-f4e985ba2c71", "sighting--151887b3-4feb-41f0-b551-29a344f18e05", "sighting--09d71190-2d95-4e21-a78b-5544bef825f9", "sighting--08ff8b3b-f572-46ff-a9d8-05d04017d2d3", "sighting--d60c1ce0-7db2-4f0d-8495-b45cc61ecba3", "sighting--b46dc183-fde2-476b-aa48-54fbc6eb278b", "sighting--1576924f-7a70-4ea1-8b23-831b1559f48c", "sighting--ef86dbb0-b12b-4792-bdfd-514f7b2d609a", "sighting--5a9c1a7c-7f5c-4527-9aa5-0cb31993316b", "sighting--59fd337b-c672-44c0-bcc7-0a6e53bcdc64", "sighting--8b031c4b-5ca1-43cb-82ac-e6dc6c578eac", "sighting--a5c5e83a-560e-47ff-a62a-da1480835447", "sighting--91d1bdd9-13b1-4d11-880a-a777d7e5ee68", "sighting--489f3008-fc3b-46d3-ac99-dfebf7abda5d", "sighting--9f97ef4e-8f88-4330-b06a-579cf8d7ad0b", "sighting--6b1986de-5752-4a4e-bf85-a15cf6a6b9f2", "sighting--d9551fd2-660f-439d-926d-568f29ec9abb", "sighting--4546ef80-571a-486d-adf1-5645e51b19a7", "sighting--84b0d09a-cefd-43e7-ab00-2c4b18a586a3", "sighting--09e7864c-274d-4805-962b-4707c4496c04", "sighting--0fe1958f-5db5-4f00-9619-938cf8bd5b1e", "sighting--c2da5260-128e-42d8-8a66-e9d6f27f2129", "sighting--bb4c0cf3-b678-4d13-b7f8-4c25e2b45d7a", "sighting--f3840d03-80f4-4632-b306-52d1608d9640", "sighting--ba954f02-05a7-48fa-942c-7d1e2cacb43a", "sighting--442ecafd-01e6-4093-b861-f70f5e560454", "sighting--b533cbcb-182d-4cb5-b471-1f0c4c06bb4e", "sighting--68ffbcb1-1bbe-467d-abc2-43239c51583d", "sighting--fa66fc32-a3ef-4b0d-a5e6-4cd046c14589", "sighting--bda94b71-a086-45ae-bff3-b6225b5b7d1a", "sighting--5c3d71bf-7cfa-4c12-b231-e3420f98d71c", "sighting--bc73daa8-097c-40c8-ba08-13f1f0a07a79", "sighting--978c2a9b-7cb8-4c1f-bee0-2e8b334ba9dd", "sighting--60ed49d5-cb86-48b1-a50c-9d7040ce88ca", "sighting--9979be0f-b332-427a-a743-7cec1a1133db", "sighting--5f632ea8-6301-4637-acef-63c97c6d23ff", "sighting--f582577c-6c76-4b1c-9798-7e47a0c435a2", "sighting--f5058422-c88b-4481-a773-cc2081b0e4fc", "sighting--2c754405-a40d-462d-94dd-b08945af8ebd", "sighting--5c5b9d70-e841-4668-b02e-a82093c32580", "sighting--c723aa9a-2c91-4347-bb8d-508237e952e1", "sighting--ea1515c6-9186-4809-882d-23588b163b3b", "sighting--6ec09353-089d-45f8-8108-16defde0dd02", "sighting--a1e1aed9-d958-45f7-aba2-96700f911779", "sighting--e921fe32-caf1-47b0-ae05-08971bd3b5c0", "sighting--b1e6d254-ce3a-4f97-9809-ecc4aca2423f", "sighting--212e1422-84b7-4a03-8b9b-0ffb051c745a", "sighting--e6e33b18-ec2d-4503-b74f-1ca40310b2ab", "sighting--04702092-0d67-4c98-8ebf-a1a8e9026857", "sighting--026f29fc-651a-4f7c-8d0f-52438d6409ed", "sighting--0aeee5c2-5dbd-4d21-b64d-d65bb6463ef7", "sighting--9c648917-74a2-4ada-9083-2c122ab87209", "sighting--ab4b58a4-afa3-4e0c-869a-e53d6ae28f7e", "sighting--de6a38ee-a913-419b-9fbe-a45c22a752f5", "sighting--a6ee928c-af30-477d-aaeb-11d824b3daa1", "sighting--9b164180-5a69-4a97-8835-0064f18d2b22", "sighting--704c2d0d-8505-4e3e-8267-53a52b644934", "sighting--e13a3cf3-d05a-4a72-9fdd-5c57383ad69e", "sighting--a15545ac-1968-4ed8-ad16-f07d50a1e5ac", "sighting--4ef505c4-9fdf-4508-8a15-f07dae383ca9", "sighting--6dac097e-419c-455f-b7d4-70524cff04e0", "sighting--0a286dcf-29db-4379-9bec-13902a43554e", "sighting--bacc6926-08c1-4dc0-9385-850b6a24e02c", "sighting--a81fe4c5-5006-43e4-a216-6229fcc02ba4", "sighting--e287da77-cf73-445d-9668-e8791953f818", "sighting--0d107087-bd88-466f-856a-d3af3eb85e02", "sighting--80f75065-c3b4-4fae-a43e-edd4e6613140", "sighting--6a6e94bb-444f-4867-b56a-a131824363a1", "sighting--a73eb3b3-63bc-490d-88a1-89fafa3101ad", "sighting--a24311fd-9eb7-4ec5-9869-e95213ab1bce", "sighting--07b2650e-079f-4154-9d62-a0c37e6bdb29", "sighting--29df2420-5181-4e2b-918b-88df8db2309e", "sighting--e9086b0d-def5-47e9-8981-510d05c781ce", "sighting--4b79c47b-bd70-4a6d-804a-9e9c3925db81", "sighting--81b59dfd-6ef7-4196-8ac1-bfc623fa0c7f", "sighting--857df7e3-cbba-4f6e-9310-18aa14e3d8b1", "sighting--c3040a16-b619-4120-b0d2-000cf99aa02f", "sighting--a86c553b-70b9-4f9d-a321-d5251b4e153e", "sighting--9d3a61b1-3869-4e0b-bac4-1d6dfff45815", "sighting--cbc9f7b9-bd8d-430b-b6b5-e0e8e8b57b17", "sighting--21cb3b4a-4d84-48ab-90a6-c159a2c3df2b", "sighting--9cb018dc-a204-4790-9ae3-cb8c17a2a72f", "sighting--4fa1bc5a-f4d4-4baa-aa51-0ca4a27deeae", "sighting--9fff754f-55a9-46e7-80c9-6663260fd1ab", "sighting--03d1a451-e0e3-4414-befc-30554cd8a52a", "sighting--b0755812-f768-4ba1-b641-88f63798f209", "sighting--02b7d1f1-f0e2-4cae-8270-c03e70be5985", "sighting--c2a67899-8489-46d2-9435-fffb37ed5480", "sighting--41053e5f-fb90-4088-ac8a-7caafe86eb11", "sighting--2f22cae9-e4ec-406a-b9dd-cd0f75c2e751", "sighting--2638a54f-f32f-4b21-9051-b7cce667795c", "sighting--b27678c8-f5b2-4223-89ff-b1431a27a184", "sighting--a2b6a387-4bd9-486a-adc3-39087bf6b3c3", "sighting--674f6147-31a0-410f-84c2-a80f533d6da3", "sighting--609cddf3-8cab-47af-9c94-7503ed596adf", "sighting--855f83d8-3653-4670-879e-a4d276f267c5", "sighting--f6a93f78-a40f-4471-8b74-c812437f699f", "sighting--826b9727-7747-4393-b791-730032ec90ae", "sighting--e2ba7f19-fe14-4f6c-8109-5b0da152fb51", "sighting--333ccbde-aa2f-4585-87e9-01cde7b83be5", "sighting--26c8e07e-fdeb-4c9f-abcd-099e47d035ed", "sighting--4bad833b-04b5-4274-83a2-ccd0f2c45903", "sighting--7c39f6d6-3d81-4b40-b7b9-a5c7c863989d", "sighting--ada9df01-dd50-4889-a8e2-9c5f164fa9fd", "sighting--cbc25d74-e82d-438d-a7b3-42a69aa66c96", "sighting--e8ed774c-e978-4b63-ae79-3dcd91d79094", "sighting--32ad8300-9e8b-4915-af2a-9e9ebc434c42", "sighting--985750fb-e33c-40ae-bb8f-58253c0fe89f", "sighting--95fc5831-31a0-45c1-8cb1-05f891e9345a", "sighting--db25f924-6fe6-43ee-8aa1-d85128c9b292", "sighting--c10c6cf1-ba18-42fa-8608-9290ce2f2dc3", "sighting--77fdd870-baa9-47cc-a210-961aa0559ef6", "sighting--78833048-a48f-4396-8820-f102f6d69717", "sighting--0db9c977-bd57-4d7c-88b1-dbfaa62e90a7", "sighting--9a7afb1a-6db4-4512-bf27-0ae91c8dd035", "sighting--cb0bb194-ffea-444e-838c-9c4a6e758f11", "sighting--270789ca-afbd-4855-a43c-316b8da7bc88", "sighting--4e95a833-ecf4-479f-9349-6be4d5c74ea1", "sighting--363ca9c1-fb87-441d-a0d9-7c068bd6ba00", "sighting--38c7f411-2b4e-4fb3-bf21-150d04cbe402", "sighting--2915b973-347b-44ac-a077-23db93a63d65", "sighting--87114f3f-8d72-4305-98f9-b44ba9504a31", "sighting--97e3f016-44d5-4e7a-a674-22028f49488c", "sighting--1906d0c6-9a44-462b-864a-40aba79e7a2c", "sighting--6cdda0ce-2fb5-4808-bb64-83e64d995bfb", "sighting--0751b5dc-19c9-4ce4-af96-e44642938ff9", "sighting--095f359f-4b61-4129-8ac0-bd17137c304b", "sighting--7347e59e-0400-41cc-9b1c-9bb8c1b6408e", "sighting--6eb87575-1a94-47cf-893a-68fd4cedd677", "sighting--6843fb41-4ee8-4de0-b6d1-26fd56de797e", "sighting--32863750-e967-420f-be8e-b6b881608121", "sighting--1bf9e02f-5187-491d-811a-bd6310304d8f", "sighting--4be9cc9e-ca8a-4e5a-abea-d122a8335a56", "sighting--f4435e94-0579-4897-bb01-fae08f3184d1", "sighting--295947a5-6b74-4008-acf0-d48440d7e5fd", "sighting--39e94ff2-5c06-4061-861d-cf87db42f7f1", "sighting--bee0c31e-46c1-4abb-a04e-0b6a9c1d7b04", "sighting--cc3aa31b-ad7a-4a8a-9c27-0c480ba0c029", "sighting--d9456063-6e1e-4464-b61d-a743d47462e4", "sighting--fd63df87-0088-4e7f-b166-48779f396d65", "sighting--23e54fc1-28ee-4a6b-9fc6-15f1766a947e", "sighting--7637130f-b158-419c-bd70-f370bcba24ce", "sighting--9fa1a552-c9e2-46d9-959e-0d08794b897d", "sighting--2540a8b5-b3cb-4cd6-ac8e-0d9ca477ec30", "sighting--f039a666-e052-415c-a017-6ff9c8748550", "sighting--ef525168-397b-4a74-8c16-9606a0f805f5", "sighting--c09deb75-1651-48f2-958a-cc0850c81476", "sighting--0196ccc3-e583-4b0a-a380-dab27bc248fe", "sighting--66177b46-bb93-48d1-92d1-bcdb84a49da6", "sighting--6228f955-b5b9-48f9-b1bc-9f66173fecee", "sighting--8940e054-4e29-4f88-b997-f11c7ab61cd8", "sighting--1d027480-730d-483e-85c2-ffd0e52ff560", "sighting--24159beb-fae3-4b65-a80a-6c8dc6e157ad", "sighting--5b104b76-2b16-4e8f-9c2b-5f74392bc8a0", "sighting--b1971808-2c08-4287-891a-da12d3df88ce", "sighting--62172cb6-b0f3-4a40-ab8e-54edf24b43ba", "sighting--88d26d1d-a3bc-44a4-9e74-e0d1b4d5933c", "sighting--86dd4216-0ec9-409c-9fb9-4905e404d383", "sighting--9fff5895-afe3-4348-9eec-15ad869ed9bd", "sighting--7a151d55-6ceb-4d09-a261-775441f42333", "sighting--40d1ba30-1aab-4e38-80cd-95edd2fe76ec", "sighting--9968b899-a444-440a-9e4c-d98574ff0f5c", "sighting--64d07f8f-de47-41ce-9b0c-dce941e73b5c", "sighting--aac6523f-5b5b-4262-b420-11b0fdaebedd", "sighting--84e763aa-bae0-4c66-ae91-6078f18e5254", "sighting--ac4b6304-2d18-418c-a270-a9ade634f4d6", "sighting--c3c5d2ef-d2dc-4e29-93bf-33750f71b384", "sighting--2b5790fb-b927-4f2f-ae96-ea203825cfbf", "sighting--7d4c1535-b131-40ed-8d41-fab5209cfe8a", "sighting--158a287b-49f9-47d7-81b1-dbdd45883b02", "sighting--c4679f60-47eb-44fc-b3fc-31c7c3fa53ac", "sighting--655ecdc9-c3d0-4de0-8395-22ef33d012b0", "sighting--46f1db3f-ee8c-49e9-b453-d73f8d66fde5", "sighting--690bee62-1887-4b06-91db-8525bb8ed6ed", "sighting--46a8704a-dd11-4138-b149-4b9161ebeac9", "sighting--2077eebf-2a6f-401a-ae59-e46d14a10cd7", "sighting--23b6de2e-0fe9-4df4-bbeb-4143397f56b9", "sighting--e3ad1aa1-ebd0-4e9d-bbf1-0fc1bf7d40ac", "sighting--29e0f3b0-8685-4f1d-8088-fa28c41f7f41", "sighting--5c318204-4a90-40d5-a17a-a3a272d3174c", "sighting--d77d6820-6182-4dfb-ab7b-357db602b474", "sighting--839cc71a-8184-485b-bee0-3475c87ff6ae", "sighting--aa3ab6ea-a015-4b16-b4c6-46475724bd9e", "sighting--0964bb35-04c6-4671-b4a1-2b0f54b068c4", "sighting--afe0b6f6-7c48-45ac-9255-25b25ad127d3", "sighting--ab8c80f4-2709-4a17-a155-0723fa387012", "sighting--cbf9385f-8988-4130-a02c-83486fed184a", "sighting--c2f6cf44-f7a9-4814-b7f4-75fbc21b8d6b", "sighting--8b84aa45-371f-4566-a957-b50d3af2e598", "sighting--aa07900b-f9d0-4829-9b91-9ff1ad8ff34e", "sighting--1c0ecb08-73f0-4609-b9c9-5b8518dafa14", "sighting--a0c1c36f-7987-4450-b664-c167ebea3d47", "sighting--d3f65b24-4281-464e-a24c-338eaf23711e", "sighting--448c15f2-60fd-4643-8b38-32e0f755089e", "sighting--1e91e46d-8552-4f46-9d84-51ffadbad42d", "sighting--b5e7f6e3-b845-44da-92d2-b3735cb27696", "sighting--e0380e3f-9d9f-43b6-a375-fb51f6fc76f4", "sighting--919fabb9-6508-450e-bfe8-afd0b5853379", "sighting--7fa96a7e-b0d6-4f4a-896f-de48e33e6c15", "sighting--4c8e41c6-b5b1-48c3-82a0-efc8fe3713b1", "sighting--e3ab9a7c-b7e4-4465-a294-038bb2089f70", "sighting--1b298fa3-5909-4a3b-9156-585fada1230e", "sighting--cd75e070-9836-4b28-94e2-64911204e6f5", "sighting--6a4122a0-eada-4f4e-bb92-b7e8d7bc488a", "sighting--08b3ac41-4455-4dae-b4c2-633f63ff546c", "sighting--478a5b7c-6868-4a4b-af32-a9c6a4beb03d", "sighting--0b58a2e0-1d09-4d65-9c94-a8eb2e0ceafc", "sighting--3d92f054-1cfa-4929-839a-f87af2871e60", "sighting--272aa11d-331f-424d-925c-39e085c3c2d6", "sighting--4b7ce5ef-a740-4228-8c97-ed76effeaf60", "sighting--adb581b4-0e5b-4004-b90e-a336fd7c985f", "sighting--1869d127-915f-40da-8d89-beae832f62cb", "sighting--6014a6cf-6d6d-4cc5-99eb-e671dfdad9b7", "sighting--59c2f593-4684-49fc-be89-846e439db427", "sighting--286e0ba2-bc39-43a3-9104-5c676b19145c", "sighting--5b2440b6-4631-4c06-8975-f2a5ed075e75", "sighting--7531c313-b050-4981-b71f-caeb80b9d733", "sighting--3811a4e4-8598-4c38-a66a-197a2be13d2a", "sighting--1cca6061-70ba-4824-97ee-3228229191c9", "sighting--3763cd8a-d692-4316-bdf8-7e9d6f535504", "sighting--d0453945-946e-402e-8576-42e889de4abd", "sighting--cb2e69b5-8825-4638-867e-0777f1c7762e", "sighting--9ccfb0dc-6e07-42ab-b6c2-bcdda98b5c05", "sighting--ff4c6032-1cf8-427c-8e0f-7d14915dace9", "sighting--bbc470cb-cd85-4fca-b2de-7ed1b87b9e63", "sighting--40c1c68f-6f2f-4bcd-a2d1-5b88407874c4", "sighting--dee3eb26-3e75-4ccd-801f-23bf75fb672a", "sighting--89af53a1-9058-4dc6-9561-6a7ff5837d20", "sighting--59164eb0-1d79-40a2-b2d1-11f3974bb404", "sighting--4905e343-cf71-419d-a259-ba891c159861", "sighting--14bd5800-84e0-4649-aa68-b804da0e7389", "sighting--f93f8f44-328b-4633-a7f0-bcbb5c50ecc6", "sighting--52e313d0-02f8-40cf-8341-67a17808bb51", "sighting--56b15afd-27ac-4aeb-8fdc-dfdd8d9ff644", "sighting--f94b6672-d130-4924-80b8-7c8b065cf900", "sighting--c018a1d7-92f5-46e7-9a31-abd616e71157", "sighting--70f2719f-b498-450b-a738-f2d079ce80b7", "sighting--a9f1f511-51e1-42dc-82af-c784a19ddcb3", "sighting--6b57030a-8364-4bba-8531-79c73562f015", "sighting--405c323b-244d-469f-872f-fbfcf8c426a4", "sighting--1dee0b8d-da50-459c-8a6f-6e8a35ce0ae6", "sighting--784c9d7b-f89d-487a-a6af-1a17e04ad0d2", "sighting--78b04bdb-0f0e-4e6f-81a1-8b932e051e05", "sighting--18643caa-6e5b-4730-9051-8312fdd05843", "sighting--070d7805-c64c-4df1-a765-ae6599bb323b", "sighting--5868d996-2523-4e29-bbc7-55a67d00593b", "sighting--c80ae30e-62f9-4127-a0ec-4ae14f3b12a7", "sighting--ef92c4b8-d5f9-4d32-ae23-f0d5f9f92129", "sighting--c7cfed10-858c-4192-8b91-81ca071f8740", "sighting--66eda808-0702-4f46-a11d-d0777cf0df7f", "sighting--4e7b6490-7f76-4279-8434-47594f21cc6d", "sighting--4d102715-17fb-424d-98c2-e0fd1b5db1af", "sighting--9d785181-9a27-41f2-938d-003969102345", "sighting--396e0e6a-c666-401d-89b4-3718ba5fe703", "sighting--25dc2b8a-faf5-4868-964c-044bdbad8a7e", "sighting--6bfe4187-36b9-4fb4-9dfc-5b34b65f0113", "sighting--16431e06-b71f-462d-8f20-5994cf74ca8c", "sighting--d15f735a-4418-4deb-8c60-7617400b4a95", "sighting--582c0657-9dd8-46dd-9c23-d188aa526aa4", "sighting--e8433b27-b38a-4553-a467-0889172b46a1", "sighting--d36f5d7d-3216-4031-acdf-fddc737108b2", "sighting--4c3155ee-d795-45ce-b580-56d44a9560d3", "sighting--a6c06516-207e-4e03-8015-779addb59028", "sighting--d36c8abd-3eb6-48c5-8a5c-7ccb47459cd1", "sighting--270e5a6d-bb85-42b0-a19e-54a0e3d397fc", "sighting--8be531fa-9bb0-4c05-a73d-d6892ac4af7a", "sighting--f1e2d59b-db78-4496-a084-c97a1a110a8d", "sighting--3ff3ac6f-e818-419c-8550-a1dd9091160e", "sighting--6d117cb6-0642-483a-8654-7558570dc1c3", "sighting--9774b7a6-0a93-46c3-a504-8c6e387d59a3", "sighting--97a7a8a7-0a70-437a-a425-4ad94708c6a9", "sighting--e7ade2ba-50d1-4c1e-9837-90f257e5b4fc", "sighting--5c318233-396b-4fba-9ff3-b063e00ad2cd", "sighting--e4e2073e-9f8a-434f-863f-1bc90d768e90", "sighting--db096fdc-5250-417e-b139-d7bc0d23b6c0", "sighting--880d3af9-ccd2-4d92-8e27-0506df5514e6", "sighting--e1fc164d-a639-4853-a82e-a822d9714d77", "sighting--44ca6e38-a860-4b85-9d65-8cf729d4cb90", "sighting--0e5f0fbd-eece-4b8b-abfc-185d2996bcdc", "sighting--80f51154-bfc9-43a1-a34d-913e7a9d3537", "sighting--0addd52b-b88f-4903-a0ee-9951068c249b", "sighting--b8ba4deb-47f8-475f-8e60-49d587253339", "sighting--f3ac803b-70c6-41b1-ac55-7df0335cacda", "sighting--9c228ee1-bdd6-4dc9-998f-851aa633d25a", "sighting--ab807511-0281-4fb9-bd47-9ddddd8269a4", "sighting--dbe0d40a-866e-45d1-95d5-83229d50112d", "sighting--195a9f18-ac87-41df-8a02-ac86f612ee89", "sighting--4950e4d8-9d27-4843-9195-cdbc1618a0c6", "sighting--54500871-03c1-451c-8f73-d796bd9d54ae", "sighting--3107ddb9-b018-4eb3-9f2a-f7612b18e9b1", "sighting--976677bd-35e7-40d4-b529-eb79f234cbbe", "sighting--77f7d403-3fce-4255-a5d1-08c85074a6b2", "sighting--93bb1e43-3aa9-43fc-b15b-a5e11e2540f1", "sighting--b350ad26-c7b2-4ac5-bcd6-a1dc5dc1a44b", "sighting--28a9f350-2cce-4fec-aecc-2fc4b92353c0", "sighting--59288191-13a6-4ec5-8f14-af16e2b3191d", "sighting--0090697a-414f-4096-af2c-e2aa13d24a66", "sighting--286a0359-2775-4c16-afb5-0271bdbc89b1", "sighting--056e2fee-7c9c-460a-b5a7-83133a416914", "sighting--1582d57e-24e2-47c6-9555-bd3b3618e1f9", "sighting--8af5c902-c1e8-47f4-962a-b82f4543d007", "sighting--1514d6d7-fd62-4269-8559-3dc2303cf2f9", "sighting--d8347a95-3690-4905-b105-3a1b36be9959", "sighting--1981f8d1-3034-4b6d-b2d9-ac40e312d0e2", "sighting--dae04326-dea1-42fe-b988-8ca7ddce0714", "sighting--be7d873c-07d6-4b9b-8caa-a99dd484e0ff", "sighting--d4e6b904-6a9d-4da3-936a-c0dde0e8ecb7", "sighting--27c7f992-e27a-45d6-b5d2-46b821cf6fdf", "sighting--6fe74c43-7e88-4876-b5e1-723f4958ed2b", "sighting--98f68789-c6cf-47b3-bb41-e05bae28ef2e", "sighting--4764ba40-2846-4e46-8f42-806e9ceb513c", "sighting--0dda2bab-735e-46f6-8525-558582928c98", "sighting--7c62ca4a-868d-4ca7-bc5f-97498aae7e4b", "sighting--e42efa1f-740f-446d-97f2-2f84c0adfca2", "sighting--3e97d12f-bfe7-42bf-bd81-35035c2e1ce6", "sighting--5b925923-2efe-4617-8734-76dc40c85933", "sighting--89af9429-6feb-4bf6-a3da-72e9b0748674", "sighting--e9638549-6fb7-4a27-a460-3915f3d514b8", "sighting--cc603f65-184a-4434-b23c-370d27529c77", "sighting--b0755109-6c10-451f-910c-ed21229e2e24", "sighting--139c7cbd-8218-47c5-985d-aafb4147a263", "sighting--52a67776-2520-473c-b902-97f7a55c8cb3", "sighting--0440174e-077b-4dd1-98aa-4bc5a5fcfb64", "sighting--056e3bc0-1b6e-4efa-876d-8e1f4fbd064b", "sighting--de9c22fd-4370-49c2-ae26-58d479dcc0c3", "sighting--41fc2a3c-9fe8-41e0-9478-38367b0dbe68", "sighting--a724a527-caff-475b-b861-4ca98bc51066", "sighting--831bfca9-2fe0-4082-bde3-b86c53d16bce", "sighting--b7e2163b-950e-49d1-84e8-0439a39a4657", "sighting--844b9310-9890-4dc5-a78c-6441d85b69bf", "sighting--3db34dde-b886-4e0c-9180-4d5aad8f7184", "sighting--17c243e8-f211-45bf-a7ad-36a7ac9578f0", "sighting--a68b6675-bed6-4642-bf33-c9b44eade5e6", "sighting--39d853a6-93af-40b3-9a63-35c632671b09", "sighting--c65223fc-76fc-4571-8ca1-a9fb18ccf5a8", "sighting--728e0013-f870-4419-b0bb-3e302a10bc5a", "sighting--2c89eab6-3ce9-49b5-89fd-b9cd5deca6f6", "sighting--b1ff22c5-8bf0-484d-9f3d-4980aec0c13d", "sighting--db6148e9-b463-4643-bf04-701a0c31de11", "sighting--11d274dc-35ae-4e78-aaf1-c96a744b7404", "sighting--8d769265-3312-4071-b2fa-e164b75cdaf5", "sighting--52896254-c7f2-4b0b-a334-efda7babfb09", "sighting--49b57c1b-cc9d-42e9-b4f8-91744ce1a6f8", "sighting--2e0b7c79-01c1-4736-a8ea-3ee98fee599b", "sighting--a63dbade-8467-4f14-9789-ee85eb937c1b", "sighting--8c9db7a8-02c1-47eb-8b00-c6bd5ef99576", "sighting--83dadf44-7be1-444c-8fb7-e03587a5878d", "sighting--2edfcaad-d894-490a-8510-fffdc1f623ea", "sighting--d8d585e7-b91c-41f2-8400-7b330d3821e4", "sighting--d80d5d09-2692-43cc-baf3-f8cf84e205fb", "sighting--9518b747-4c7e-443d-ae03-a0fdacfc9213", "sighting--9a251996-89be-4dea-9ae6-cb36fe8d44b9", "sighting--fc1557ba-a57a-4de2-8746-3e1e6c95b48b", "sighting--a00dc785-fa4e-43c9-b3af-0420dd74b866", "sighting--519a52c7-18a3-4f0e-8dea-1dfe12b200cb", "sighting--cd2caf6f-22fa-4c2f-aaa0-aff28575ac62", "sighting--58c4224c-e50b-4840-81e0-ffea77a6991b", "sighting--e90c5d21-c201-4967-98e7-f85385eea52e", "sighting--e22fed44-ead3-4213-a7c4-fd0430cc86c3", "sighting--ab9a0e82-8728-4b7f-873e-4e736113b669", "sighting--1ed1c34d-7516-4573-b111-c7c4ab16d7de", "sighting--c81deef9-230d-4fd3-a913-f821100506a3", "sighting--ecbb61ca-06be-4c6c-8e33-d62a47bfee73", "sighting--ef736da5-103a-4824-9edd-6c863e16a49f", "sighting--63faf3d3-0e72-4cd9-94d9-74190db83f3f", "sighting--2f3479f3-0ccd-49e6-83c9-e46f91b08263", "sighting--cd069633-4ef5-45ae-93c3-c61066196c41", "sighting--0d1b9703-8156-4868-a943-2c0aca9e313f", "sighting--4f14becb-28f9-4d68-9ef5-3c06afcc3f07", "sighting--44feb55a-a20d-46e3-8763-ecc1ecc12165", "sighting--e7360b59-5df0-4292-baee-72457026cc7d", "sighting--cd82b732-1b13-49d6-a55e-cffb2df8404d", "sighting--de8c42f3-46ed-4988-afcc-34753bc53e06", "sighting--d220c7e8-801e-4424-a583-572cdf66c183", "sighting--28f33f89-7303-47a8-98fb-6e3648f5d5bd", "sighting--5e316f5a-7b7e-467c-84d1-7b9a8b280cab", "sighting--6c8124ff-dd32-494b-a2f4-928f0eb8325c", "sighting--ca2e9522-ab34-4c55-a9f6-83801d2ba9e5", "sighting--b90e0069-9e30-40af-868b-1f70859f8eca", "sighting--a6955c6d-2a01-4bd5-b250-baa922963915", "sighting--1836fa9d-cd0a-4b96-997e-081b2c2320b0", "sighting--ad1c23ee-ce29-4412-babd-e7ad2934ed80", "sighting--e048e96c-7f3e-433f-97f9-b0ca4e67c5cb", "sighting--503951e2-94a9-4b7d-9f7c-35e9da4b31a6", "sighting--04ea0c28-4485-4a34-9d71-fbb5f83c2c63", "sighting--5817eeb3-6d5b-4ef7-93c6-6b57412bbfad", "sighting--d1729637-05f2-4826-8b31-5a68423151a1", "sighting--85ccfc79-5ed4-4da1-92d9-10a26498cf0e", "sighting--6a361750-fa87-4428-9dfd-a396e916c42b", "sighting--b8643b3c-6ecb-40e4-a171-717d456f18f4", "sighting--b7577a7e-0cf6-4ca3-9431-0dfd376dec72", "sighting--bb3332c2-723e-40bf-b1b8-a04c39b7ddc3", "sighting--a1a3ad82-8681-4e2a-a71b-98e25f353118", "sighting--0b4db057-ca13-455f-ac65-f50e08a77808", "sighting--d409b763-1778-4943-b205-2ce3d6c88bc7", "sighting--3eb96262-61b6-4787-a75a-ff440680700a", "sighting--568b764e-6a0a-439e-a598-11f7b247866a", "sighting--dfb96cd0-df5d-462a-ba70-a8c2880f03a0", "sighting--5e1f961d-3d77-4064-8d3b-0db8ad4563b9", "sighting--f1bb17a6-7125-45ca-9c31-670c92e4b1a8", "sighting--fb8dbc86-edf5-489e-9324-054d9326b0f8", "sighting--bd3a82f2-0762-4a9d-9048-43f22092abb2", "sighting--dd984d4c-b523-433c-9989-12bbec64e707", "sighting--6f984d44-d8a3-4174-be74-503a24a1316b", "sighting--1efe89ce-4ff1-44ee-ab90-b986dc18a454", "sighting--543e5f6b-f6d8-451e-9c26-7d86548bfbd1", "sighting--1eab323f-92f5-4592-b03d-b6d6bb964191", "sighting--c15bae38-bd31-4caa-8e73-18d524c77a25", "sighting--a46d1fb4-6316-4430-aea4-015b424bea3b", "sighting--1acbe16b-0687-4846-a7f5-68ac6dd56031", "sighting--99561b11-ed96-424f-9452-f8e0bfee658d", "sighting--c0665c8e-c995-4214-9732-41e274308b27", "sighting--d7af7a38-248b-4d09-a7d1-8d2ce4c01254", "sighting--0a98e5cf-4102-4722-9cdd-2a8e57ab4fb7", "sighting--54490101-5539-4a0a-99a6-be6c6883b23d", "sighting--3a0942b3-56eb-4c21-9bfb-3b62d3b5108a", "sighting--74461c12-8e77-4ba9-97bf-343410199ae3", "sighting--da5a9ce0-4b83-4b18-9271-0e4ece41653e", "sighting--b8b88db6-1d8b-4842-ad4f-356104f35603", "sighting--64cec68e-8234-4b72-b797-1f9fe2439da7", "sighting--d0477d6a-8e52-47d4-8fa4-5bf62c78af80", "sighting--50d142b6-ed10-43c1-be69-24afce41cb57", "sighting--56c01418-7d7c-45ff-8848-784b43dd9285", "sighting--b0cb7152-9229-49b6-a7d9-6c406d792d56", "sighting--29e0a154-e067-4049-a5d2-f7cc9e0332c1", "sighting--9c205eb6-d3ab-46c0-b48b-ea1adf0389f5", "sighting--8103316a-077a-4b70-bb32-7f1f4001556b", "sighting--e04a917f-d781-44a6-bc5e-f6e0c70e0ad0", "sighting--6a0076bd-f162-4fb4-9957-d7152619aeff", "sighting--c0600ca0-caad-4757-9b14-fe07a2cc45ff", "sighting--f5cc62b1-931e-4774-978f-10887cbe6f8d", "sighting--9e61b363-1b99-4cc2-a65a-39173cc367a0", "sighting--039d4940-8ed8-4f3f-8b88-89e1c6b56c5d", "sighting--df04e6a6-e4a3-4f8f-9a16-ec819f22d7b2", "sighting--75784a85-5603-4a3a-90e5-99142a9ca107", "sighting--ab07f388-7e79-4438-8e3c-13131269b2b4", "sighting--c08238d5-43be-4a14-be93-0d3de8c49a20", "sighting--d37bfb8f-b7c3-4688-ac6a-db77251e5772", "sighting--8023e2c6-1277-4bf9-9e22-0d56902a9b60", "sighting--c35e2b91-0d27-4f7a-902f-f25335473ed4", "sighting--4c3c0dfd-d22a-4cb0-8656-17ba2f15c19f", "sighting--247747c6-4f9c-48f7-9efc-290f59944ba3", "sighting--44aaece9-8693-44e1-9f8a-8ab6710f402c", "sighting--aeb5405c-e6a0-4fa9-8528-d9e03664181b", "sighting--bc6b0756-d6a4-49e1-b05d-75b86310ab80", "sighting--6e601080-2a8b-487e-b15b-02bbed48db5d", "sighting--673077bd-1a72-4d67-b7b7-bbaa73b18b47", "sighting--696e0cc4-0f78-4461-a520-a5ea6181f268", "sighting--952c5740-79dc-448c-8da8-d09cd83212fe", "sighting--e2a47852-c03c-4a22-a48c-681fb5771d5c", "sighting--19568d12-7991-4ffc-b1d7-998424b8e85f", "sighting--966166c9-b805-4a03-9333-e6e525c61c71", "sighting--0ddf6260-46a8-4184-a0f1-d71b73ee5714", "sighting--cd14b405-2841-4f3c-9f17-8992b2fb3299", "sighting--9fcdb95e-4959-4dfe-b011-d6e7f6a7040b", "sighting--fa56b9c9-4e0f-4775-ab94-6f7bf4496dc9", "sighting--77689834-01ca-4762-846c-021be5a7c456", "sighting--9038548e-8685-4b4b-9fbd-0c680d87a456", "sighting--8b5fb49e-9b6a-4400-9997-b4f59b8b650a", "sighting--4fd1b77f-2f00-4dcd-80d4-9d4feed0c97d", "sighting--7c8029b0-dce3-4bc3-b3bb-2550376d5651", "sighting--0b185d6e-95a5-47ca-9210-8acc4e7dd65a", "sighting--aa4e30ca-79d1-4206-8eaf-c8a38bc32f4b", "sighting--c5614162-d2a2-4576-8af8-f84c8a6c2dab", "sighting--4c6dea5e-2e6b-4a98-ba87-36388b8f7426", "sighting--5027dc8f-6e67-4f18-aa73-b47a69d0401c", "sighting--4c6dc9ae-fba7-4433-af51-d616e93dd21e", "sighting--3a0013b2-0e1e-47c7-8241-a6c274482618", "sighting--8089f6f9-8da7-4bf9-bd79-e6582fca4151", "sighting--86cef237-ffcb-4e8b-9f34-1a6c5b2f2041", "sighting--aa9c386a-dff1-4358-bd46-c832e50c14d2", "sighting--3250e1cd-ea58-4de5-91cf-6e3b4e83b48f", "sighting--97212fcb-da49-49f7-92b5-e9ab16a5f0c4", "sighting--356c8bc1-5be9-4651-a471-c0d71211a7d6", "sighting--c7f2a73a-3b63-47b3-8fb8-cdf4255f10d6", "sighting--9a4e8046-dbd4-449c-850b-5a353ff6c845", "sighting--d196f7b6-67a8-488f-9ad7-a499a6912ad1", "sighting--5c6a9d7e-a6b1-4216-b2a2-b15a2c765090", "sighting--e6be51e9-f02a-4672-8a31-d410c98e83e4", "sighting--5d902cb6-13f9-464e-8b1a-01a645ef3b4d", "sighting--7ce43ec2-b095-4a29-8148-dbeac2712584", "sighting--557031cc-7c10-4fbb-856c-48d5694f0867", "sighting--9784d8ed-383b-4515-80ce-908fca706554", "sighting--d5e73f4d-4a7b-4ef8-9ddf-37ab98a5ff89", "sighting--9d3cb9e4-8075-46e5-970e-42b0d7802bfd", "sighting--612d3c39-1a97-4666-bde6-bc55f3bf8764", "sighting--506ff0d7-99d7-439a-85d5-2ff6ed3d389a", "sighting--0701135d-a8d8-43e0-aef8-005e9cdcea4a", "sighting--e5e25777-ec40-43ea-ae10-977e30b8d934", "sighting--6b7a7017-aaf5-46f9-88a2-98053d93008f", "sighting--2940231a-14d6-4d6e-87b6-513f1521a9f3", "sighting--9e389842-737e-48df-8dd5-2d10e34a933f", "sighting--b65596c7-8171-423c-9c10-d070969ca222", "sighting--5bf1d9de-031a-48e1-bf59-792e8a5e58bf", "sighting--6180e244-fb51-42af-8dc4-27a3930a46d4", "sighting--08ad3704-1491-4b7e-8cae-dd5abbad441a", "sighting--63a9284e-b1fd-45b1-adb5-3ff234510178", "sighting--92d17069-1261-4814-958b-8043c3370cad", "sighting--1d6c1fd0-f312-4c90-911e-1cb9880b7d27", "sighting--6610f2b7-1b96-4e4f-9b11-901c61bfbe34", "sighting--4fd2a8f7-f7f5-48dd-9b52-8162d548a819", "sighting--be0da72e-2b2c-4f49-8fa7-fec9d0c5dcf4", "sighting--df928f82-ab25-4b1d-8fb9-f97b6d89ad60", "sighting--23a46522-6d35-4199-99b3-3933773bde89", "sighting--40eef8b0-6c1c-4bb3-9882-34740341b83e", "sighting--93a724c8-95e1-4527-99cb-f9ca59ad967f", "sighting--f4feeb53-db82-4237-9895-1817d1f95f76", "sighting--08835971-ea87-44b6-8ef2-1107429296f7", "sighting--9b7bcabc-04c5-4c30-bacd-4234c853602a", "sighting--805ff12b-c278-43fe-96eb-1fd8ba6e5859", "sighting--9c7b848b-8860-4b37-bee4-79d2c58ba4cf", "sighting--0f557f89-de65-4c22-bc75-b115f68a63da", "sighting--1b260803-40b5-4848-b24c-4c5cce5aca63", "sighting--93b9a82e-25d0-4038-b925-803bce8231cb", "sighting--c8acd1ed-9274-43aa-b05f-2be527cebfc5", "sighting--cdfe4219-dbd3-451d-8caa-c0b5f8764d62", "sighting--9499f70a-e48c-4e52-8559-e94a203860f0", "sighting--9bf4d555-fe25-47c2-b877-33a1c3142340", "sighting--2ee35e04-2851-45f7-bdfd-4fb96ba1198d", "sighting--4cc2596c-2a72-4ace-b411-139360667037", "sighting--6fa2481f-33f3-4fc7-afe1-10c9d4c30e3f", "sighting--1e446021-3feb-4b3c-96b7-9c75ebf72f5b", "sighting--6057e34b-e280-4932-b149-0de533aa410a", "sighting--36947360-2876-4658-a640-7a5ef198b735", "sighting--88681244-f2e4-4c37-bfa8-9ff4bcc9deee", "sighting--714396da-4777-4a32-91c6-6ce21da93007", "sighting--074b2faf-fa71-4d0c-9629-ec32a3bec220", "sighting--233a6474-77dd-48e4-b4b4-f0bba8174369", "sighting--8086fad2-e696-4ef4-b6e3-a7f4070fb9ad", "sighting--39ac50e6-d79c-4810-9e44-cc09783f1f38", "sighting--d64fb8bc-998c-401c-8979-9868b4b1b066", "sighting--7ddc97d3-1d23-4763-9677-4202b65bfc82", "sighting--243b1221-2525-4006-bff8-dbd39d8ab76e", "sighting--6d1b9201-3258-4962-930e-f73e2923c682", "sighting--0e9f986d-95bc-472b-8fe4-ef9a0f879b39", "sighting--b31bb937-ca2d-4d5e-80e0-61cf0d484279", "sighting--908b13f5-6b75-4600-8e8b-cafa4b955639", "sighting--784279f5-8e49-4ac9-9b5a-37ba8740d076", "sighting--39f0f4ed-9284-4001-80f3-fd1a1aa6eca6", "sighting--316559fe-61e8-4a70-a246-10bff272539f", "sighting--c569d985-9cb0-4da6-ad26-df4013f60eab", "sighting--884e34ab-ccc7-4ebf-8d36-919ea1450887", "sighting--5c5579e1-54bf-4f5b-aa82-bf34226cc1cf", "sighting--78f8d70c-a727-4e6e-a54a-fb8365953302", "sighting--5c840f99-e724-43a2-a425-134c470e8736", "sighting--9c10ccee-db5b-4b2d-8b03-0f0e9fef803e", "sighting--414ea3d6-029b-4c6b-a3a1-245ca7879171", "sighting--ebfbcf6e-f9b5-44d7-87c5-f1102af9f017", "sighting--51cad9c5-288c-4032-8edd-ba5da0a847a7", "sighting--7b3494e2-fdeb-41f3-8c2e-cf1543052f1b", "sighting--0438ca89-bdaf-4677-b2a7-070c558161b2", "sighting--ad6f045a-74cf-4651-8112-bedbf9cd303c", "sighting--eaea35d7-e358-4535-96d8-af1d92110122", "sighting--8bcb8fb6-ad5a-46d8-adda-5f40198f6db9", "sighting--9e7f22df-ecb0-44ac-bf10-cf44aff46365", "sighting--b7051046-6f1a-4364-b897-d982ce9eda18", "sighting--8ccbc457-f441-4726-90af-e8443d610cd7", "sighting--57319e41-364a-4f41-97d6-236dd8f0ced9", "sighting--f51fb314-31b4-461a-9baa-60c769fb2d82", "sighting--4d3e2af2-c3b2-4edd-85e9-9dddfbded519", "sighting--0ecfaec2-0e28-40a8-b88f-d0ebc42f1112", "sighting--5a4e7d34-d888-4f17-9c98-0af98431e3b9", "sighting--44bf831f-e0ae-4cfd-bd83-4b9a71efad9d", "sighting--aec6c5c4-5852-4596-98fc-530931c831ef", "sighting--5e99b58d-e8ce-4b6b-ac33-411bb01a5a41", "sighting--ca189592-8fc1-4162-9f78-c02b021221d1", "sighting--6d2719e8-fab7-498c-9e7d-3bd18a4259e5", "sighting--e592a58e-01e9-440d-ba31-ebf76c21844b", "sighting--547397c6-299b-4f18-89dc-7e90886025a0", "sighting--662bd2a6-bc99-4b40-88f2-872748bd0c26", "sighting--9b96584d-21d1-4c5f-94bd-3859e434a460", "sighting--b56f04bb-2ae1-49af-8a57-6527ba933956", "sighting--c9febf13-42a4-45ff-8814-554c04ae0cd3", "sighting--098c15c3-b143-4557-a6e1-f8699468639f", "sighting--fe848fa9-af01-4967-985e-6620e9b01cbd", "sighting--86c36b7d-07b9-469b-9eb7-8a3396138c4d", "sighting--322cbf38-8fd4-46a5-a933-bdd4b4a2cc89", "sighting--809da4c1-ff16-4ea1-82e5-d453447310e0", "sighting--e724facc-e289-42c6-8aff-5a8b69a38e54", "sighting--7241a0a9-d46a-40fe-a7d2-27391685317b", "sighting--598d5021-2c81-496d-9799-a6670721c13b", "sighting--7fcab643-958e-45b7-82cb-7a9c6896479d", "sighting--6c68c45c-1544-4f57-90af-819d099b1365", "sighting--49d2d63a-c2c6-4892-8383-5da320e22faf", "sighting--962151e3-9c88-4f89-8fad-f7a9d18b9b18", "sighting--63e4519e-b82b-4c64-a65a-8c703fed91cc", "sighting--03088aa1-b8da-4e23-a4b9-ee693fb2bc9a", "sighting--33f7a350-fb6d-49ba-bc6f-832de5ac9f5e", "sighting--2ee6b70f-192b-431f-8428-03b374ee81ec", "sighting--53e2cdbb-477d-49e8-8f83-c19cd6723d26", "sighting--cea16905-7c0e-49c9-9fdd-a2c30d17738c", "sighting--ab0c2eef-0107-4ab2-9ede-ea45222b397e", "sighting--6b0dcddc-7895-4181-8691-e1069948b1dd", "sighting--9b807d74-0f4f-48c9-bae9-56c5647ca9a7", "sighting--10467a6e-6fee-4cfc-a2e0-1db797830004", "sighting--a61c2e3f-9c9e-4a12-9050-06e90449eab5", "sighting--57f03fe7-4cd3-4f4b-9c42-6a8b4bdde260", "sighting--bcaa6b16-135a-4922-b701-45849d24c874", "sighting--fe2ad081-d4a4-44e9-b097-21f25bdf6a67", "sighting--45312dd4-2772-4940-9df1-60a04f95cb4e", "sighting--333245e5-37b3-4258-b8ec-36ff20f3232f", "sighting--a2096e51-3219-4860-a178-8bf95a5f1f5e", "sighting--d65de805-18ce-46d2-aaa9-fcebd5895c74", "sighting--18f9f1a0-480c-416c-a2b4-0d944dd8f911", "sighting--d97cf0cf-cbe0-4c24-b0ed-962ce6fddf4f", "sighting--cc7b34a6-5e2a-4a2f-8778-5d8f939a3435", "sighting--52c40642-051b-4ddb-9bdd-8dc9c7b9ff8b", "sighting--c8705c25-4c97-48c7-b123-b4f8676bd3f4", "sighting--18d8c86d-578d-4fc2-957e-58a8ffa24dd2", "sighting--484a5848-152d-4fad-a8fa-7f2e3a53bba6", "sighting--88757181-3b27-458c-a11b-4f6da03b1af9", "sighting--1055d1d0-0b53-422d-abc5-589f019e807b", "sighting--1e39ead4-9a9a-406f-a28c-4e53c38f6096", "sighting--445f67e5-1963-45ff-817c-ef28ab27512a", "sighting--2964b03d-4d50-4b56-990a-806dbb5d7fb8", "sighting--c92638b6-ba8d-4ea1-a7fd-6382c5019997", "sighting--8f1d863b-143c-474d-88ae-cfabda899809", "sighting--664e2a6b-3ff8-47aa-8ce2-859753335bd4", "sighting--9e166871-0bdc-4081-bd5f-1ae565a6e63b", "sighting--a1fa9acc-2f9f-42fd-82ef-40abf827b98f", "sighting--81fb1f93-4dcd-4587-b869-c862624cfbf0", "sighting--462fe4c3-651b-4587-9d31-5e08a03c1f77", "sighting--6ef96eeb-149b-4429-8246-902bd4d84d31", "sighting--89875906-0417-4e57-868a-74badd45a632", "sighting--df6ecbc3-08c7-4049-8302-80df637ae7f4", "sighting--d67d1327-8bcb-4b67-af5f-d9a762d8a923", "sighting--7b08fecb-166f-4c4b-8727-0f8c77e686f4", "sighting--eebb0658-1055-4215-8c06-ea139a1c63c9", "sighting--bbab05e1-a4f3-4666-9e4c-5a738ee6e083", "sighting--3011e3eb-12f2-4864-a651-1e3fb275f4f8", "sighting--67fa95f6-2c4d-4079-8dff-ba4bc43d17ba", "sighting--7f94ff14-6b18-491a-af6e-55b2cf73f7ee", "sighting--b4797995-a5b1-40fa-9d6f-fc36ec83f214", "sighting--43fdcce3-ee6e-41ee-a0f5-3fffe3daeb88", "sighting--2c08218a-5268-4daa-bcec-117a02835b83", "sighting--edecfc82-f03d-4ebf-92e8-3b16c16e5c9d", "sighting--cefa1462-beff-47b1-b85c-58d6a204c8ae", "sighting--bffd7949-9910-4cfa-932e-f831c938cb93", "sighting--e7895e35-c15a-4ba5-a948-12ab5f6bd503", "sighting--ec031d37-3584-46c0-96bc-80da3b3130b8", "sighting--94bb2a0c-715c-468b-a3fe-44408bd02df9", "sighting--6748c5be-d9fe-4535-8b34-051cad56bf53", "sighting--2127036c-0d4d-40d7-ade4-86d10e55e7b2", "sighting--b1505adf-7ee7-4aeb-9dd7-cd794d98590a", "sighting--46833bf7-ed57-4633-a77b-49e82c0eb990", "sighting--db56a0ed-96cd-45d1-909d-72d98caf90f3", "sighting--6e718beb-e78d-4a66-949c-76d700685fca", "sighting--357caeda-e9c1-46d6-baf9-32d235321a95", "sighting--dbbbdd9d-f861-4d14-b4f1-3b02f417d195", "sighting--d9646a19-1836-493d-aec0-fd1a9ad69db2", "sighting--ad71e19d-0a4f-40d4-b7d7-e2546177bc4a", "sighting--b3604a6a-da2a-4c0a-ae72-e8e5ab1069cb", "sighting--8eb2b784-c99b-42e4-a323-f5341d4f60cd", "sighting--747004bf-9ef3-45d0-9036-2bc1be4f8518", "sighting--e28a8dad-f157-4956-a432-5c822a5d8405", "sighting--40444363-3b7c-4a0f-b11f-01ca4f574065", "sighting--af0758fa-a9b6-4a23-8286-fa27eee34398", "sighting--f8cb9a09-bd47-49a9-a2bb-c3d195feb114", "sighting--1f69417c-3fed-490f-aef0-8bd07a744605", "sighting--58fb607c-0ce7-4adb-a5f7-0dd3d270a996", "sighting--c68067f4-169a-42fc-8809-c2aa58e51c31", "sighting--f77fce4e-f0b7-4d67-bb40-3aea499eb985", "sighting--4d06bf64-f9f5-4403-88f8-9f681dd308a9", "sighting--9a6f3130-7b0d-405f-a933-917109a4318a", "sighting--31f8f6fb-da82-408f-b79d-b6e09cb2c09c", "sighting--d8e8174f-b3ad-46a6-9e95-a6858070d868", "sighting--bb44a6ed-7c3f-4f0d-afaa-a49ebad31947", "sighting--dd0f5a71-e8b1-4865-a744-4677deda8a68", "sighting--c98c3986-defe-4520-a8b8-a2f9c69f64ba", "sighting--69d0bab9-c8c5-4615-b0db-1b6e6526bfe4", "sighting--73583031-a194-436b-a223-d5d062e16709", "sighting--1725e0f1-0670-4684-87db-3a4d230fab76", "sighting--958a6ab2-3d24-41a8-a7b1-995da70ab68d", "sighting--c1b11591-e0db-4bae-a827-5264bd8670da", "sighting--842649a1-cbaf-4748-9ee2-b4486f1c37c3", "sighting--5a8784d9-692a-413b-a11f-61b3ba88a813", "sighting--b240e8a2-47e4-4260-bc1b-e2cb0e0f6331", "sighting--dd9a614a-3b43-458f-aacc-efbcc844cb9e", "sighting--a994ee66-cb97-4b31-bb9e-58ffbf534363", "sighting--16295e53-7c99-44b5-9192-9d28c7e1450c", "sighting--2d7a7edd-63ae-44e8-969e-b01870f35fb7", "sighting--77a43396-0690-4b0a-aeb3-967298a1c056", "sighting--27a0e059-61ef-4395-89bb-40614926ebc4", "sighting--57b85bd8-ee01-4ca9-ac7f-af6a7e4c60a2", "sighting--35ce3fb4-81a4-4df6-b082-95768f09409b", "sighting--11209711-2d8f-4fd1-99e8-553300f42cd3", "sighting--9d796ff4-9785-4fbe-b5af-060c3a68b582", "sighting--02341bb8-5b39-4398-8384-36f90c7f66fb", "sighting--04dc563f-266b-4abb-8a7e-5481280773d6", "sighting--f38f68ca-dda2-4c67-bfa4-850908cc4ebe", "sighting--39f65623-993c-409d-a6e0-e78da7b358ea", "sighting--b4366c6c-59bf-46da-817f-f9094f321ebb", "sighting--19c27bf1-882f-42b9-9b31-d96b380f824f", "sighting--a3080e3e-498c-4e37-bd2f-2edeb4c8226b", "sighting--1bcac468-ddff-47ae-820d-e6e8ac22053e", "sighting--97d05016-eed9-4d48-b886-9f310fb8e62c", "sighting--7e8ee3b9-f352-46ba-acc2-69f1a280fe4e", "sighting--95d2ac51-c6de-4296-a882-d553a900ec3f", "sighting--549f21e8-1d67-42f4-9b82-a9326958ca27", "sighting--47a54eff-1d9c-4e74-81eb-7b14fa4b0a93", "sighting--b76b3ded-0bce-429e-9354-d839dd7cbefb", "sighting--473c8222-17a8-43b1-b086-3e05c1b382dd", "sighting--cd374beb-5cf6-4feb-bb48-8f9ac1070cc3", "sighting--c50e8586-c5ff-4cfb-9e70-1d7558b8cee3", "sighting--682a1a6d-d6e9-47b3-be31-a84747ed3c41", "sighting--5a19e428-c02e-4bf7-bfb7-54ee546c4613", "sighting--8aededf8-0f55-40d4-8b07-951f3974c5f2", "sighting--e4e1d6ab-3370-46a0-bbe6-6d4ee0e48325", "sighting--6ec80b6a-39a1-47d8-8caa-752edc037383", "sighting--7a18e628-a62b-4866-b9ba-520f8dcc83c7", "sighting--45cba200-a168-4245-ba89-b5350d6ba89e", "sighting--104b7921-8801-4218-b4b8-eb6e2a72e423", "sighting--6c9c1afc-47f0-4d53-8c32-094ebf207dae", "sighting--5a8d499a-9e00-4422-8e13-5580e10dafae", "sighting--96a6ac7c-890c-4a1f-8e8b-5697571befe7", "sighting--361d183d-89b3-4c36-af79-f3db02d64f6f", "sighting--d94e7685-d89e-44f8-9610-b76ba710529d", "sighting--a6ce724a-f37e-4536-91bb-c49dad60601b", "sighting--1bb40562-5c18-4ab2-9fc4-4d40acba32ec", "sighting--a4cc0231-e903-4f8e-ac6c-7c1f8e6d6ef8", "sighting--8306f00c-ff46-49fc-86b8-c5340fe52823", "sighting--4087c366-b1f5-4b17-96d4-25feef7b7921", "sighting--660790d8-5c1c-4285-8877-a5737393aa25", "sighting--f5077354-2539-4a41-bee4-ccdced379954", "sighting--358320df-87f5-4f90-8e4c-2f16b2f96caa", "sighting--61c49644-7b88-4730-8a7f-45a68e571d5d", "sighting--2b0719bf-bb4a-4b61-a08d-d586d8aa349f", "sighting--55a608d0-1a1c-4376-b1e3-84b39c9005e1", "sighting--3a9d9f15-03ca-49a0-89d4-09c5cdc7efbe", "sighting--cfdcd3a4-84a4-4240-9a30-1ff3c6a1fc61", "sighting--19dd802b-f83d-4b9e-8be4-28390f620983", "sighting--78e43f5a-f845-440f-bcbe-d24f87bca5e0", "sighting--2bc1cfcd-248d-4d71-b209-1f769f4bafca", "sighting--f5a93fb9-fb5b-41bb-8b99-9fd3eecb8452", "sighting--aba0348f-7b1e-493f-b120-1354944174f2", "sighting--064cf0f4-694b-42e3-a1e2-5d8338e92780", "sighting--33dd7881-8a7d-4a6b-962d-d60b9c40a88b", "sighting--1f3ed8e9-46d3-43fa-ab1b-9d52c99d56ca", "sighting--36f24254-4f04-427e-9bff-ad2fd46260dc", "sighting--f479cd11-6112-4af4-8aab-52008b9c6427", "sighting--86f076af-0c6b-4c4d-b227-e308f56eea10", "sighting--c513f048-6312-42d4-ab19-9a00426f50c6", "sighting--578d2907-d8ab-44dd-b55a-5ff43c4749df", "sighting--bdc6d5ef-441d-439a-8468-7262235df8b1", "sighting--16156132-43a3-44b8-bb70-b3759d6f0e77", "sighting--1ec2c732-7afb-4167-8dbb-9d7a42ada7ed", "sighting--a67ae11a-6275-45c6-a4a5-5eca4655db90", "sighting--d2b9894c-cb6f-43b7-99bc-283eada725c6", "sighting--972ee815-2233-49e1-8406-77d0462f6aba", "sighting--4e095913-6bee-4f32-b5d1-596d320a677e", "sighting--d4813e14-6a4e-46e7-9cc7-060ae0a818f5", "sighting--c92c50f1-64cb-404d-94e6-214ed7923592", "sighting--73adfe47-cb5d-4534-a9aa-683ea9102d70", "sighting--04445a85-3524-4e97-b60f-62624474ff47", "sighting--0635f2dd-a488-4362-8eaf-922ace6b9f68", "sighting--d368cd47-3772-4f66-b7d6-90ad520433fc", "sighting--b2aebb79-4ccc-4e00-9325-a9cb3391e6d1", "sighting--3b3165a1-c1b9-4efe-bbe1-32c49056b1ca", "sighting--3fa3bf03-6204-446d-bbf0-70fff00689e4", "sighting--7e2ddccf-41ea-4ee8-ad3b-b7a93936a059", "sighting--fbf1cdff-b1da-4c6d-af15-a1026a83a34f", "sighting--76abb481-2669-4b3d-b690-bc0c8154826f", "sighting--7d326140-0cbc-4a86-b321-23c3f909554e", "sighting--94e28467-c31d-49d4-ae94-9637b01c3498", "sighting--a5275a3a-d008-41c3-a180-4c53b6d575f4", "sighting--97ef2059-c913-4bec-91cd-999b52dd387f", "sighting--8e5fee40-72ed-41b4-b5a7-9f2ae85f15a4", "sighting--6cbf539d-2f48-44c7-b81c-6110a9463d14", "sighting--ceb1b84a-6822-4c27-a60d-831bcf46ec3e", "sighting--e9bf1b18-fdca-4778-8cd6-ae0e0c8c643f", "sighting--f9ee85da-d46d-43ab-9c19-1952761fe4b9", "sighting--049dcd23-83ff-4bac-9e5b-f5e1afe51cef", "sighting--1449feca-6ed1-4615-9c78-425638d4589d", "sighting--d45dcf99-3b2a-460c-9118-573ad509d3d4", "sighting--ad00a9d6-0f58-4d34-9720-efdd4ac95626", "sighting--73d39617-29ad-469f-bfa0-cd50505c984d", "sighting--05651371-d6e4-4884-b4a1-72a42cf28289", "sighting--f12ab009-e974-4364-8bf7-36764bd746ef", "sighting--4f16d0d3-99b1-43e7-819f-b9be70067e71", "sighting--4c0cb5af-b818-48d0-8f31-e7fdc436f8f7", "sighting--bea4fb80-9bd2-4cfb-bd16-7604848e22ae", "sighting--66c57740-b9c5-4deb-af95-b6aaf9a42c24", "sighting--885b882f-32dd-41f6-8d5f-0d66c544e17d", "sighting--9a1c1295-1293-4743-83e6-0429bf0eccf2", "sighting--9f3fc21b-36b7-42c7-9c2c-358bc5c5a9b3", "sighting--4378627a-9d83-47f7-b1ef-94b30329394d", "sighting--d1b63085-7ce9-4bb5-9e31-bb16375c6925", "sighting--e3cb0fe9-d074-4ddd-b916-c66608bf85f0", "sighting--a1856b6d-cab2-4fd7-ab18-22d1fb29a850", "sighting--9d38f69f-00e2-43cb-9feb-e513ecb541c0", "sighting--471241a8-aa9a-480e-9dd1-ce1a5223588c", "sighting--deab90b2-4db1-478e-9afc-e4e627de4aef", "sighting--66a87976-6ea3-431e-bfd0-be9b35fec887", "sighting--bb97ba6c-9a2a-4474-ab76-a6abeab4b385", "sighting--0178e17e-77c8-4631-b571-9ff746f27aeb", "sighting--1c225050-1c02-4478-87fc-1651404195d7", "sighting--83f6d754-12eb-4ce4-92a4-9317fe0a976c", "sighting--c1831531-4fd9-418e-9149-6dc0114e8b1d", "sighting--588d2cb7-d5ee-44e4-bed4-cbba183f397d", "sighting--9bb1f128-b764-4390-91e9-7f69dbf4168d", "sighting--31834bd1-eafa-4aad-aa06-69d04cc68307", "sighting--847ddd05-68ff-4437-94c4-da3fcb21b518", "sighting--d0e688cb-d5c9-4d38-84fa-11accf011e89", "sighting--9a64e35b-c5cf-4c62-ac1b-fc0d0dc3b736", "sighting--7c09470c-18a0-4de8-8a13-9aeb670292be", "sighting--5cbc4722-31ef-4ce9-a200-09091410628b", "sighting--c28f6bf2-7f8d-4125-bac5-c5fa3a9e7185", "sighting--4e2947c3-4634-4cd0-ad62-c9498eaa8145", "sighting--73f98c9e-3007-4159-b661-b47dd1ddfa34", "sighting--065d4d11-d999-4483-aaa1-e8da56a4fcb5", "sighting--59f64880-187e-4710-9e8e-f9cc7811dc19", "sighting--2247d271-d671-47d6-888c-bff71576c3ed", "sighting--ea84c610-92f7-4b63-aea0-2843f4c4e01e", "sighting--32fe509b-ad07-47b7-a96d-84272a0f3b82", "sighting--b134d8d1-d855-4c06-ac4e-f9486d399c27", "sighting--2b598a84-8dce-4c85-876f-ff1c75a6ad3c", "sighting--40c63b36-ab68-47e2-aaef-41b475c172e7", "sighting--71c3d85f-9d73-4f73-bbec-b1ceb8ac5fbe", "sighting--a438048d-654e-4b1f-a6c7-074d4906325a", "sighting--35214056-2f01-4914-b890-8bc27443ab5d", "sighting--e3821fbb-8e7c-444d-9d4a-6bd48e939931", "sighting--eb554ad0-7209-4eac-bff4-747ace08f5a7", "sighting--9b0f8817-f592-40a0-8c87-2c91ef39faed", "sighting--15f88d49-7ba7-4284-bbfa-728a59624523", "sighting--9d375e73-5a90-4533-8db0-4ff3cb419067", "sighting--2a5723e4-03f3-4785-a099-2ef7ed93b4d4", "sighting--70a6b830-4fa5-41b9-a7b5-a8182f1aadce", "sighting--9610a8b3-7056-4301-af89-326a92a69d74", "sighting--987d5d78-2f40-416d-8784-2f7659975548", "sighting--94d4d7b1-f5eb-45b8-bf9f-db541bea6a72", "sighting--9c61b18d-6dcf-436d-9dcd-02aec93c0be1", "sighting--6bc2f994-ea31-446a-9663-b4a3007e6ad7", "sighting--2ebd0a22-eddf-4106-baab-204a970f1d29", "sighting--1f2afc23-6fa8-4e21-87b7-c54041b645cf", "sighting--d2fc62ad-4f32-4493-ac45-c64e16dadb27", "sighting--32a1371f-5967-4030-ab8e-75336bf40057", "sighting--c0ab0b44-9949-4067-8840-119395c2c84e", "sighting--14feadb5-1db6-40d1-a13e-f6e8936e90cb", "sighting--5302da39-5bae-466a-ac5c-6b83cc725b7f", "sighting--80e3f9ed-9e66-4b9f-8a6e-27bfc93f9eab", "sighting--6cf402a9-19a0-44c6-91b5-4098b07a511e", "sighting--6d2c21c8-17e1-4426-b2d9-de2832edb1df", "sighting--58ebee86-409d-4514-a3ab-264fb17aecbd", "sighting--c31e73ac-c60f-4262-b855-5dad949d262f", "sighting--0e1e6168-b466-424e-a4f6-7e43bae2229f", "sighting--cce42666-9339-4e64-be2f-e286a28bd5b1", "sighting--87bc8fd6-80e0-4506-b3fb-36153da80003", "sighting--ae7b557c-641c-48c6-a4ab-c9fef4de7672", "sighting--eed2e4a8-74d3-4c5e-a372-68659e49d25b", "sighting--57777a96-7ebd-4516-8f1d-0f54f7095a6b", "sighting--d9263d11-8a4b-430a-8345-b1c7094666be", "sighting--a84083c0-7ffb-454e-abaf-3bd7840625cf", "sighting--74f0dbdd-7965-4222-a435-7c86b63ea49c", "sighting--3aefdb18-9684-40cc-97cb-3f07277928f1", "sighting--50b1c1c2-fcb1-416a-82a3-13dd084a43b9", "sighting--af6d70d8-6fba-4367-9889-7001cc953d1f", "sighting--35ff224f-2a3f-4882-9667-a276c12b3c85", "sighting--e59dced1-b863-4653-abce-448969ae73d3", "sighting--1df13bb3-afe4-4299-a717-53a96077d938", "sighting--71021c46-1a3e-4615-8166-0fa3f305592b", "sighting--3ae8ab77-b12e-45b0-8243-b5a7529194eb", "sighting--be47ff2c-462e-4800-936d-12cb5b5af3d5", "sighting--a117de9e-029c-46fd-a385-89c6ab2db27e", "sighting--ae71fdf9-58d4-4e7f-80c3-a8390ddabcdc", "sighting--d7c91023-7048-48cb-a7f4-3a98440b2b85", "sighting--3516bbb9-54c8-4c47-854f-7701c833f739", "sighting--56031074-6860-49d4-ba21-75883fe58cd7", "sighting--a7b217bd-4579-47fe-8de2-4f87f105b319", "sighting--37c53230-482a-43d4-bd8c-c4dc2234fc95", "sighting--556e1a07-9851-4580-a34c-83cffb1fbc50", "sighting--11ebc862-acb9-47a2-8650-bffa00700d58", "sighting--56331d29-b4e5-4be6-b55a-b6b9c2c7831a", "sighting--53233040-086c-47ec-9263-64b42cfdd635", "sighting--94f371bc-d507-4c09-a2a3-b9aada667d33", "sighting--b91bcc66-22a3-4762-95c1-9b8253262039", "sighting--287ac689-072b-47fe-8677-86c90c08d89b", "sighting--dc78535a-3b76-4645-8541-5aba5f5923d4", "sighting--7209e4b1-db14-4240-a638-7538639b2242", "sighting--46df638c-ccc2-490f-95c7-7bd606f907bf", "sighting--ca6b8da5-6a0f-4e5a-b028-eef37830958b", "sighting--2242cc8c-5358-47e4-befd-0e7474315173", "sighting--e8312248-f554-4a7f-8872-9328ffa0a91c", "sighting--19d2b060-0cfb-45ef-a4d2-4efa05acacc7", "sighting--343df09b-6f85-4b1f-85ae-1a301474f928", "sighting--dfc5004b-dd48-4f2d-9a1e-154c219b37ef", "sighting--f93269ae-9d40-4ba0-a902-39a15f0f6bd1", "sighting--6006cfda-5dd3-4e67-a24d-9e51f53fffe1", "sighting--2eec4cbb-e8d9-4708-9c48-d599dad3a8ff", "sighting--24a8648e-7a94-4b16-bb66-c23ace1bb3d6", "sighting--90205c4d-ad92-49a0-8d09-aa3a47dd1794", "sighting--10c93a16-7d44-46e7-8811-1bab2d432973", "sighting--f9fa89e5-16bf-4dc2-8782-df9f95ee3cc8", "sighting--4ad9e37b-f054-4a58-936c-5c725e61557e", "sighting--0ecaf922-b614-48ab-aa60-79e8490c91f4", "sighting--80caa6a6-c21c-4b08-812e-ccbfd3fed895", "sighting--2c4b1a4d-4f96-4d20-bd17-8feab55da788", "sighting--0649100d-5ad1-42f7-83a8-f62c6db351c6", "sighting--9d9ea455-31ea-494e-85d5-995c26a05a0b", "sighting--a659b9d1-c577-49b2-ba2e-62b3a1855611", "sighting--c3cf1d8b-7490-43e0-949f-85e31edff7e5", "sighting--c338ca7e-242f-4674-bc13-a24aec8e6c6e", "sighting--d51be28c-b96c-4611-9b4f-1d7ffa99c180", "sighting--12d63e0e-00fa-4b3f-92be-281aaf9f2ce9", "sighting--2c62198c-769d-4432-87e0-58708dbe4eb7", "sighting--6d068b71-7027-43e0-956e-2539edf52e69", "sighting--0423ec88-d0fc-4f0a-837a-a9f1f1c66921", "sighting--caf71250-4566-4977-8595-f48b65837376", "sighting--10f665cf-88c4-4024-b86f-191ae1bf430b", "sighting--e2d28c08-0c60-43fd-abfe-4fc43e3f0633", "sighting--2b56f820-0ffa-4cf5-9c6e-f704452e02c0", "sighting--d4fb4e89-04c9-479a-83ea-95166b92f9a1", "sighting--fab392f6-27f9-482d-810f-2c29ceb99b2c", "sighting--436d0f61-4ecb-423d-b13e-cc4c7cea5362", "sighting--f78d3931-8729-4e87-b192-8d7952b72261", "sighting--aa67ce5f-bd9c-480a-bb52-0153464727f2", "sighting--4994bf6c-6eaf-459f-85ab-7670d8d43b50", "sighting--3709fed6-14c8-471a-9538-5eea85fb6827", "sighting--9c93520e-4d53-41f5-b7bd-52524ddf6104", "sighting--e9a37abb-be5e-4f8c-bede-5fb5d2f14ee3", "sighting--9993cf6f-fd41-4738-a712-330b103c2410", "sighting--b51c23b8-086e-4483-b5df-cac4efec422c", "sighting--2834142e-0438-41e1-b7f9-ce7cab97ae97", "sighting--972b0281-1e08-464e-9b53-4f687a9b61bb", "sighting--45152d89-7c9d-4821-a684-708e36cc0fc1", "sighting--d364a5f6-7e73-42ac-a358-a5d9f7066031", "sighting--9ecd3d36-ca1e-4fc8-a4fd-da066a44db81", "sighting--6c517645-c957-48ee-8a7f-29c487150ae0", "sighting--adec8fc4-a7ba-4348-a688-63ea00ebcc51", "sighting--097ba057-c341-47f5-9ec5-2ecc32510e5d", "sighting--b6c66683-3ef9-4645-9ef9-3b2a92c52cb1", "sighting--53c89271-a660-4847-bc33-53611d57574a", "sighting--36368a01-67bf-4636-b1f2-71e115cc9467", "sighting--7a60f6a4-cd23-4d11-b0e6-1214da1df0fc", "sighting--e7fd4d7a-e5b4-4ae5-b563-d2f48ea5af50", "sighting--d7187fe5-8c15-41b4-a660-74852ffe519d", "sighting--f2ce8451-1e1f-4481-92ff-104caba6f88f", "sighting--5607ae90-9dc3-4ca2-94c6-251229b5b5a3", "sighting--d66390c4-bfcc-491f-a50e-e625ba0cb348", "sighting--e6297eb6-a8fb-4c2a-b11f-875f9be8875c", "sighting--1e50d89d-b75e-47f4-96ef-6baafcabb0b5", "sighting--8ce03eb6-db01-4a60-b625-d15c6f049fbf", "sighting--6eeedfe4-a292-433c-a2ac-1540368845bc", "sighting--dcbd6dcd-7514-4f0c-b870-206620872fd2", "sighting--eb54ab97-d1b5-41f9-bd1d-503a6e10eb48", "sighting--714c5879-4ad7-47a8-9845-60e5e782176c", "sighting--694618c2-7944-456f-9e03-03a4cf331357", "sighting--23fa4118-3f8a-4ba8-877e-4fba27f4e375", "sighting--5f6935cd-8679-4f97-ab63-64e987b233f5", "sighting--36887059-66f4-45c5-912f-0f99249aa349", "sighting--91eafc12-64fe-40cb-a7a6-a9755a86d8bf", "sighting--c8e08680-77a8-4906-9c8f-482d46ddf32c", "sighting--48db8e1e-1eb9-4093-8c88-dda902e51b7b", "sighting--17c2b8f7-214e-46bd-b69c-85f089b70a72", "sighting--b8592ad8-d784-4db6-811e-223d61a958fd", "sighting--7ccbd07d-d656-4c5d-839f-a4f2acb1c48e", "sighting--23a95c11-a42b-4e8a-876f-030de4ed6ea4", "sighting--519be9b0-de6c-421d-a0ef-3ff0312ef8e0", "sighting--c11cf179-b387-47f6-a230-514610617ba6", "sighting--d3c39b9b-462a-4f68-8e5d-df40015f0303", "sighting--04ef71a0-9b58-47e4-afd4-e43cbf22d471", "sighting--e113ad5d-b481-4a2d-8f79-0f272fe55917", "sighting--26a0dee8-d258-48b4-aab0-d617c4dca2bb", "sighting--c31bc1e2-1805-41ef-8d03-9ff0ae20cc72", "sighting--dee2bd27-88a8-44ed-a741-a38096624105", "sighting--c6c01afb-baae-450b-aa07-12f66560e8ba", "sighting--7bfe30e4-7ab8-46d7-80eb-be90717d2025", "sighting--2853d436-134c-41b1-819a-86c7d9a830fe", "sighting--99d57ef6-5196-40ee-a881-77422165c365", "sighting--97897eb2-db8e-4566-8820-7c6d312c8f96", "sighting--a1bf9b49-c41c-4477-85c9-ed3b7aaa4592", "sighting--8216a583-615a-4b0c-aa75-599c12076264", "sighting--d106a320-d35b-49fd-96f1-b90bae33a739", "sighting--b01f9757-5a70-498d-a249-f109bb28320c", "sighting--0c3271bf-aed7-4f0f-a889-7c3337ebd3a6", "sighting--08923317-b828-4c53-9d17-e82a92b4bd95", "sighting--13464a4e-8ed8-4aed-93a3-f554a676492e", "sighting--6c2a67c9-703e-410d-83be-34acbbedaf45", "sighting--fc69c892-38d9-4134-8ff8-212bc9d1e851", "sighting--e1929a59-2cf6-4888-a1b4-82bdff26ffef", "sighting--351d4694-5229-45ab-91fe-14ec7665d4ad", "sighting--4bc02df9-6190-4ebf-80a7-6b2c0a43cc1d", "sighting--d518dc62-ced1-41f8-9d09-ff9957530687", "sighting--381da49d-c64b-4757-beaf-97bb917a79b8", "sighting--e9138543-4781-4e54-9415-e4e91210631b", "sighting--e2b0e6ba-ae50-49a1-896a-777141f2b373", "sighting--37d93b0d-5a7a-4fb5-a50c-0802b2ad8026", "sighting--90468ade-1ae8-40de-a375-37a0a62f6e53", "sighting--c38b5c4b-a832-4dfe-8cf1-98a2d3a7d370", "sighting--fa0cbfb2-57fd-4a53-8b43-a06ff09ca85d", "sighting--11bf1d73-d514-4d68-ac85-f971982822b9", "sighting--de121b78-56bb-4cec-b31a-93102096bfaf", "sighting--35dbf07b-478e-4fa8-88fa-d813c2d3908c", "sighting--2b061411-d92e-4c6f-8d4a-f5a1aebaf45c", "sighting--27270793-6877-4a06-9449-26f271c7fa52", "sighting--b5710584-a650-40bf-a735-f753abbdd85b", "sighting--ae6d95dd-bc77-4b95-b666-3e9c856efdff", "sighting--12d49d45-e034-4fd6-865f-c13ceff056e9", "sighting--e180408a-2fab-4111-9f39-7aab7929e024", "sighting--bbff5281-b4ac-4048-bd1b-4535319adbc0", "sighting--1fe76fd5-5f56-4521-93d1-d3a8f41f2de4", "sighting--c298686b-74dc-4bc3-a876-f1731990d88a", "sighting--bd4d1cc6-cde7-475a-b564-78794ca7a0c4", "sighting--ad490335-4308-4dd0-8b30-e93bd1fb5137", "sighting--ecb2fb15-c464-4143-b83d-4e310ab96598", "sighting--a39654a2-62ea-44fe-93ee-e6b6ca2e8c22", "sighting--33d8d082-b123-4691-8622-6d6d5ea39e88", "sighting--335a2811-3912-4798-b1d4-9d0163a65308", "sighting--2ac821dc-af7f-4b4c-881f-138911fd96d0", "sighting--6ab9c0e4-f1bc-4ffe-be2b-04999b21549c", "sighting--26e256bb-a530-4413-b982-af46911bb702", "sighting--17f8b95d-5f9d-42a5-8d6a-fa4f1c56f410", "sighting--a206b2f0-3818-4a65-b117-1a94e758ad85", "sighting--50c0b557-ffda-4514-bdca-04746d5d3e49", "sighting--9a4edb71-3071-44a3-b05d-71692e0bb801", "sighting--0010f7d6-db3c-476c-a412-a38bde921e03", "sighting--6a9a8db4-6b6d-4797-aa1d-47e4e8a40527", "sighting--004d5b78-1b8a-4786-95cd-f5d7c04e6b0a", "sighting--9392d0e7-9992-4fcb-8690-83385dad74bc", "sighting--ed9af187-d03c-4e83-9df9-07c336f6e4da", "sighting--ff7eb482-2021-4156-969c-5cbc062e8efe", "sighting--17c1407e-1bb7-4c72-927d-c9470b1028b1", "sighting--f5d399c0-f9f9-45f7-8d45-2456c2274045", "sighting--3a4b644f-c374-4713-8fe9-beab2f6867ea", "sighting--ec3eb474-e93a-4df3-aa0c-db8ddb6b1138", "sighting--3128a489-1435-4740-90b5-30e46cc4f705", "sighting--8567ec81-4f51-4adf-8186-d748cabb9f49", "sighting--8833f167-243c-483b-bf35-640a8d7d4edc", "sighting--9a5690dc-33a8-491f-b702-ef1ff1714edf", "sighting--3b7f278b-4f70-4d3f-9d69-1a4574a4eca1", "sighting--71f10b9d-c865-447f-b725-c23d089dafb2", "sighting--76a28cd1-b25f-4603-a1b7-b8c4e688a246", "sighting--a7a7800e-b77f-460a-8452-6266ccb924cc", "sighting--13fd53f4-ca0e-4bac-8a72-dbf345d4b4f3", "sighting--aac3ad25-9dee-4afa-8316-6d74ec13ebba", "sighting--993b6991-7af4-43e5-b12e-b4c24eac1b94", "sighting--22bd93b2-58a8-48aa-b366-4633a0cd5b94", "sighting--3b799176-8610-45ff-9391-b79580ab907c", "sighting--b581cfc6-b641-4d45-91ed-183b77388337", "sighting--cd45d033-ef0f-40c4-a474-7ee4089652a6", "sighting--a9c89943-a08f-4c9b-bf9d-8488b8fef3c4", "sighting--438c4f7f-0680-456a-92eb-4e736dce9ce3", "sighting--88fb8dcc-c8fd-4a79-aea4-d723c3d9c110", "sighting--9b60b214-aaf0-4e9e-8e59-7f681b795fca", "sighting--311944fb-2f6b-4ca6-9c0e-c943df9c33dd", "sighting--92ada150-2d82-4768-8c55-857f7861cd10", "sighting--851317e1-9f99-4e25-b636-13b8b63eab8d", "sighting--337dac49-2952-4e3a-9a8e-ba4958666905", "sighting--a70da70c-8754-4971-9d8b-f22852125c0a", "sighting--ab9ce274-e851-410f-9257-bb4b424fb2ca", "sighting--32b76342-64b1-434c-8805-5fcd2c83bfdb", "sighting--3b0ae8a3-0969-4d83-b104-68cb8a30a791", "sighting--cca89b8a-41e0-49ee-ada3-6d77e70744fd", "sighting--445a208f-5f91-4f6f-ae5b-0bcd9eb8cf61", "sighting--4c6708a9-6eb0-4006-8111-ffb7687db5f7", "sighting--b91e0f07-7089-465e-aad9-e6acd45d8f06", "sighting--ba775ffc-6593-4716-8620-396a71c55d03", "sighting--cb2db1db-e6c3-4b98-9a2f-71e509d89438", "sighting--78b7ec3a-4843-4d26-9744-80f0f5a0dba0", "sighting--fa7aba40-6b03-4a30-ba43-4a5c9d1dc7a4", "sighting--d9cb2373-4466-417a-b675-f352229d86f6", "sighting--1d0267b3-79c0-4cbd-ae01-1351a28c68e4", "sighting--652df9f0-ad99-4de0-a294-009e017e2d73", "sighting--aa83c864-a29b-4bbc-b1b9-7fd95fc1b259", "sighting--fee59984-5106-42ce-a799-a4fb87eedb25", "sighting--4bf0d6a8-171f-4cce-9263-1921a984debf", "sighting--4047f40a-b9c4-4874-af8f-2c0f9fc435ff", "sighting--b7ae8212-1055-4a8f-9883-9f0fac13d9ea", "sighting--a99bb97e-ecb7-4f71-92f5-2fdbe41887ae", "sighting--17be7f5f-ab80-4345-abb1-f51ab689e623", "sighting--4b855292-eb42-41e1-91f9-567a09f35fce", "sighting--9ae2fdc1-ecd1-419f-b134-dd709d066eee", "sighting--07fd6748-6acf-45b9-889b-4f244867bf10", "sighting--c51601de-af09-4b12-a4dd-8e5302354544", "sighting--9ea3e3b2-bb63-4d77-a1a8-0c227f812fd0", "sighting--fdb09ae1-d42d-4848-86f0-04c28f4859c5", "sighting--eaed064e-d15b-44ef-a2e8-699d0961a4f4", "sighting--2934e983-22d2-4e8c-8a12-f2ee1507dc07", "sighting--8be56c48-883b-4605-ac1e-488b847c932a", "sighting--759ced9e-a624-47f3-af4f-c093b901e449", "sighting--d42a9419-05f4-4833-84d6-baf574cf8220", "sighting--7bc279db-9e5e-4ee3-bc68-5bf3b204d962", "sighting--b6cd98c8-dc7c-443f-ab32-4e1b6b0d93e2", "sighting--98049b94-fcca-4bf1-9ed6-f98140dae5d3", "sighting--e48b0d0c-b473-46ca-af47-77e09ba27d76", "sighting--f1408fd0-a689-439f-8daa-48465947b326", "sighting--efc7a09f-85f9-472b-89fc-807523929e11", "sighting--932cafc8-df6b-4b99-bd88-5b150bb2c97d", "sighting--2174185a-8b21-4e59-be94-7086aa697ec7", "sighting--05579676-7060-47dc-a9cd-821fb61b7ff4", "sighting--8a001b5f-cdcd-411f-b369-fbe00fc772aa", "sighting--77d8cc4e-2f83-40a9-9b19-458d98b97b45", "sighting--86c85558-c5f4-4dac-a00f-d9de7436655c", "sighting--82f426ca-b462-41e1-b3a2-11d7d2e15540", "sighting--e6462765-bcc2-479c-aca4-1fb16eda685f", "sighting--e8ba1a91-8333-4a3b-b664-386f1e540e87", "sighting--0ac4e723-fc9f-4cd1-8325-2833b2c608d1", "sighting--d9039be4-c3fa-4c7b-80df-8f6531b4b440", "sighting--f6e0d9e1-5398-4f07-8095-cc0c04f96b96", "sighting--cb885fe4-fbbd-45fb-9b40-0df933b0adf8", "sighting--1e814501-c86a-4683-82bf-87696c6f7240", "sighting--5cf39ffa-7d34-4a1a-8cec-a6e05a81c8b0", "sighting--ffdadd74-89ca-4972-877e-b4a3ac0e61ed", "sighting--138c0e38-2532-4f12-9c36-a919eefcefd4", "sighting--66a88f4e-7394-408d-8747-7cadade639b5", "sighting--84594999-1193-4f04-9512-d0787e9dbc10", "sighting--1876967d-2907-45e2-8961-0eb75df56dd3", "sighting--0376a66a-2972-497a-8b45-6b1525e0c824", "sighting--a9f83815-4774-47bd-ac1e-43fc82e6fd1a", "sighting--c95c7d9c-bb8b-4cc5-96f1-f79efb1a1aed", "sighting--bb6e0ab1-fe81-45a2-8829-44d30e158a5c", "sighting--b4b2f7a4-c2a3-41b1-b44f-1fd9334d0325", "sighting--a3b0dda3-be76-44ee-9d56-9e3c4c4bde82", "sighting--0302ed9c-52cc-49f3-a79c-f9ca653f8500", "sighting--4f7ca2ff-5328-4478-92c7-0075084f135e", "sighting--25111348-2599-4432-b949-1db4387770e9", "sighting--f40fd0a7-f2bf-4c1d-9eba-77d80108c000", "sighting--d225f1e8-9b7e-4173-b1f5-ada13f0223c0", "sighting--44bb0f72-ea71-4897-85d1-ef9ed44e52ea", "sighting--7645a331-a49e-4884-9e6f-9cd7393fe913", "sighting--18c0fcf4-8969-4b26-bfaf-69236a4a7d17", "sighting--0d9044ef-af7f-4901-9f3e-cc4f019a5bd3", "sighting--f54c3cb8-fd0e-457e-a4cf-1e649e2e5fbc", "sighting--dbb90d25-591b-4a9c-9977-5ff09575834b", "sighting--9bdab93e-1e62-44e3-b770-6d164c0017bf", "sighting--322e3598-0538-4ecf-bc7b-3ef6a792fd4c", "sighting--b467a603-c05f-466f-af91-19b08442605a", "sighting--1a4ce054-9e75-4fa1-b258-eb20886a5ba0", "sighting--61583d6b-5fdc-4505-8ba4-7b9ced1f6201", "sighting--20954965-5ea9-4829-be01-e0ffe8bbb59e", "sighting--60f46778-1d80-4876-84e6-cacd1f5df64e", "sighting--cad6a347-1329-4910-99b6-ce89ea0535a6", "sighting--10d0a8ef-b165-420a-a948-998fed90b8d7", "sighting--2d9f4838-c52c-4c88-9bae-329b42b92cdf", "sighting--524592d0-9fcd-4ca3-9954-732a316b5d43", "sighting--75c14805-2714-4e39-aae1-2030cc6b6eee", "sighting--60726a58-a161-4e24-bafe-f42e9b6b39a2", "sighting--51ccc6d1-f3f0-44ac-9773-2456b8bd1af7", "sighting--3028f01b-abc3-4656-96a0-335b6075e4c3", "sighting--70abf563-4fee-422d-93f3-b399c09fcbc9", "sighting--bda92222-6300-4bc8-a53b-35c510c999fa", "sighting--ce7f5015-0e85-4c2f-8df6-4fb84a4730e1", "sighting--52e13ecb-42bd-4dd0-82b3-8b90222086b4", "sighting--da5e2cae-8c15-4fc9-9fc3-74a3134ed2dd", "sighting--07d04957-2856-412b-9cdc-33a15d31a010", "sighting--716baa89-0e4b-430f-8a2b-56751aeeeb17", "sighting--5d230b21-42e4-4ad6-aad0-c151304dc0cc", "sighting--47d2ad43-442f-4682-a51f-c755fac988d6", "sighting--ffd6e2cc-ac10-4931-aa94-8974898953f5", "sighting--35d9e809-6925-4556-98c1-df67ae26bc6a", "sighting--b1908170-8217-4034-ba6e-dd6c0b1917e4", "sighting--18a336d9-4293-42fd-ba4c-aab7f9bd55e1", "sighting--b7ae15f2-d170-4241-93e2-d7d02b0b738b", "sighting--f1a51e56-0bee-4ecd-8355-b0982296d9e0", "sighting--255d3aa7-8059-4f8f-8ec2-da40bc745fc9", "sighting--f4d8cfc4-e52c-48b6-b893-4d9985805aa5", "sighting--2febb2c8-4d58-40d9-97e5-1b3c5196fdab", "sighting--7905ad3a-f025-4630-9a40-3f954f693366", "sighting--a9d7279a-33c3-4666-8515-c09c0d3dec29", "sighting--3cfa8b9d-9c1d-4949-bd24-88f72e86c6f6", "sighting--ba525eda-de24-44a7-a1c3-aa6cd330a1e7", "sighting--291cf64e-cd69-4b0a-853d-a008a02c9e37", "sighting--2f0f9258-72e4-4dc2-9320-5ca9427b5f00", "sighting--5883ce4f-9e3a-42a2-be22-d7c519f6fa94", "sighting--61498942-91b7-4684-86e2-e364c3b7b549", "sighting--36b44455-b1e2-4d16-b23c-ca0a98d2da18", "sighting--2fac6547-b577-4afc-bbc4-6380aaa4a0cc", "sighting--21a616f5-d34d-4f85-9166-5fabd47ee717", "sighting--f084affc-c3d3-4208-a3d1-7487ab047d90", "sighting--0f3303e0-cc76-41d8-929e-3f0e75dcd406", "sighting--e815cae9-8026-4c3b-b848-9cecda03102a", "sighting--60b9710f-41d4-415f-94c6-ac65a556ea43", "sighting--1ee52337-72ba-4783-a80c-55a4cc928c95", "sighting--3883285a-1b11-4444-a50e-f5f00214f834", "sighting--b1b3143d-6621-4dd1-93d8-7ec47b768694", "sighting--72d168f0-8de6-4c27-b490-cf015da3797d", "sighting--a9e3eae7-1a2d-4808-8117-6625e38bccf6", "sighting--94e96aba-005a-428e-915b-75513b5c503f", "sighting--7d85ba2a-bc60-41eb-a9f4-70802a050aae", "sighting--e349eeb3-e761-4e13-b939-e027c06830ab", "sighting--dfa0849a-8598-4414-b4b7-6f06f1bad69a", "sighting--d5a9281a-cbde-41d9-9540-f154bfe41cf0", "sighting--47f0a56d-5f14-400c-a7d9-7ec37449e9f4", "sighting--bd7f4a10-b9f4-4ba4-bb4b-2e13d8dd34aa", "sighting--f3b8a1ba-68e7-49dc-9003-2dd4428acbd8", "sighting--087e9b55-fdd9-45d4-b775-b1347bfc074e", "sighting--f4526034-ee60-4eac-a09c-7a86529439c9", "sighting--7a3c934c-f964-4ebf-a035-c79d68d07f86", "sighting--77641606-9dc0-4c71-b47e-cc343de0a617", "sighting--a6085eee-49ab-4470-9620-d6bafa522e6e", "sighting--6f5d3a28-492e-4a0f-89cd-d9fc13c7f818", "sighting--9cf25fc0-0729-4979-b46e-9ba5e392aa74", "sighting--d9323e0f-c9ac-4e68-84ce-08a7c503db0d", "sighting--95ce2a75-c35c-4e4d-8fec-f81a9daf9a02", "sighting--504d071a-c89a-49c5-a7be-77ffe9c7b7ec", "sighting--349ce8e3-6517-4522-abde-f0ead71cc18a", "sighting--0245f38e-5ce8-4c5a-afc0-cc908319a252", "sighting--433d7492-3d46-46ec-8b47-03b989093db6", "sighting--71e5b981-0d71-4da3-8baa-25845a702cbe", "sighting--6ff53559-7bb5-42d0-89c3-0ee91008921f", "sighting--7cafc570-9542-4ec9-ac11-3062280cab45", "sighting--a7f88601-6efd-40aa-af97-cad6692d16f1", "sighting--c68d9bd8-3637-4dda-80eb-dcf2209ff0d9", "sighting--917cd951-5d1e-4ff2-9f99-b545917d2b67", "sighting--ebf6b44b-ebad-41cd-9e84-c45cf77725e6", "sighting--2b54f9db-df92-4005-9297-1ead695b5a2a", "sighting--ac607592-3a7a-422a-9226-e7e42cb72c2a", "sighting--95565ab4-cd1b-4195-8f77-73aec3ab727c", "sighting--9409b233-dc46-4c2d-8958-502ffd8d97a9", "sighting--d53adb76-2e33-4166-85f1-23993441bba3", "sighting--cc84f136-8f3f-4107-8727-be2cfaf7272d", "sighting--be600910-d4b8-4bf3-add0-0acf3e2859dc", "sighting--9b25718d-5faf-40dd-a721-828fbe218ade", "sighting--da27a1af-64e6-43f1-8fb0-033308d09480", "sighting--b9425514-9e23-451a-839e-4c43ef30ca08", "sighting--9a9416cd-508f-446f-b9ce-eb9f9c777ade", "sighting--828562ce-9934-42fc-83f5-65589df2cd46", "sighting--84047b59-4a7e-4046-b7a6-64e6de594fa9", "sighting--11e67ae2-f707-4747-b19f-403fe833075b", "sighting--8be1f6d5-397c-42cf-8e24-a45fee28e6a0", "sighting--cfb798b4-c69f-4f31-8128-21cee3d5c3b9", "sighting--4e17ae93-8c5b-4875-8d2b-768fbf430cfe", "sighting--f3b6e225-fc9c-4c83-8bdc-18da9af67df7", "sighting--2ad4e936-8f9b-438c-a858-c06c8c2ec274", "sighting--a61b25a8-92ce-41d4-9750-0c0c21d9a859", "sighting--435d8a6f-e81a-4dfd-b6ef-57bb00a0da42", "sighting--7c3d3dfc-5dca-4081-8744-c832a80e3a3f", "sighting--397b4324-818f-476e-b418-2c007ae9374a", "sighting--af1dd3a5-1a78-46e6-aa70-8836668d559f", "sighting--39ba26a3-500b-46c5-8a30-9e5f92cd5e86", "sighting--aca51fc4-76dd-4bb0-8ef9-162d53ed124d", "sighting--35fa2c17-d0b6-4c9e-a37e-b5cd77b1fee0", "sighting--3e531b0f-db62-4097-a4c9-b83316bf439f", "sighting--07b6a2b3-d045-4036-ba5a-9a2efd85700f", "sighting--dc636fd0-1cdb-4612-810a-66b928846a5b", "sighting--071067f2-1b71-49fb-aed0-b2c79da20978", "sighting--11069572-aaa5-4014-9a76-ed233038c5df", "sighting--27f535f2-94ca-4c2c-95ba-4e3880997913", "sighting--d28418a4-90ad-46c1-91d6-c665179788c1", "sighting--68183c6b-4996-4751-9602-fdd802c97869", "sighting--27a9f5e7-04c1-4010-b686-f8f9eae4a820", "sighting--ed87c2d4-a735-4386-b625-d012b23eb18b", "sighting--f8c2a81a-40cf-43a3-8e6e-48be27880319", "sighting--7b309867-113b-4811-952a-699ef63a6b3c", "sighting--dc8d9a61-c867-44cb-8f46-feff7a8a72a1", "sighting--8e42455d-1ff2-4b04-877e-9e0f24e020c4", "sighting--ecf18a3e-47c3-4fc8-8239-49c7e5fdd51b", "sighting--7d299b16-d920-4e1d-b457-d1ad38d9d82f", "sighting--4f6c9be3-f03a-4dac-bcd7-fb45030e4672", "sighting--11d61e3b-f1f4-4206-bff5-cd20a621cd12", "sighting--2e61f691-0e85-413a-a407-8c7ba028d5ab", "sighting--8e81eb33-4f65-414f-95df-f43a3df34943", "sighting--09cb230b-aa05-43b8-8fa3-b19202d742ee", "sighting--d1ce4d41-7da4-405e-8870-8b118728fc58", "sighting--dfbba4b9-1ba0-4875-9694-cf45e346caaa", "sighting--2328d0c2-ff3d-4cd3-b52f-db9766e36860", "sighting--abf143ec-08ae-4758-a8d9-5ea68257dbce", "sighting--7a77b6a9-f4ed-4cd9-acdc-3c6f85f7b0c7", "sighting--adaf1639-1249-4127-b04e-5db793130449", "sighting--a1820b52-730f-42e1-81bd-b7d4f4a1f494", "sighting--5c209e13-70f4-4da1-9e7e-e5a88821ad28", "sighting--fe9b60e1-8ecb-4882-b0f3-8a134937be84", "sighting--3e1be19c-09cd-4fe9-8a0b-fe29cf1418b9", "sighting--d15c536e-6f4e-4d21-8f5d-f0fdd800b62f", "sighting--61e29db4-83d1-4e3f-9020-23847b6b9046", "sighting--ea8367a0-c9fb-406f-9a4b-48f5a9716414", "sighting--3e749901-710f-4d4c-903e-5042d393fa91", "sighting--08904bcb-adbc-4cf9-9f2b-fcd2c34b9fe0", "sighting--10347b42-9c88-4eb0-b168-62cdbd27ab89", "sighting--4a190753-1a43-48dc-b81c-dabb242c9462", "sighting--ed293560-6ec2-43f2-872b-34fedc4ca7d2", "sighting--1aabee39-5e84-447b-82ae-47ed1ccc0c64", "sighting--f9ff62f0-92f1-48af-95bb-26532b9120dc", "sighting--418ce722-2422-421a-87cf-3c0fd5a0318d", "sighting--58b22d09-fa5c-4f79-bf34-33735956fb62", "sighting--bc2d3693-e8c3-4fe7-b412-8d16cc4fedb7", "sighting--f99da60d-84e6-42aa-ba86-ea32734f4d3d", "sighting--6a215c34-39a4-4d8a-a6e6-2735dddf3761", "sighting--670ed36d-ae0f-419e-b043-17d883053bec", "sighting--00b4d578-c9b5-4135-b1d5-30df37521c64", "sighting--6249da50-a90d-4793-b683-1481ace02f25", "sighting--a7969e7b-707d-4e7c-a7ca-c9281a998633", "sighting--77155abc-4354-44dc-810a-0e9c8c90d991", "sighting--bc5f9b8a-fce2-497d-b363-103143b9f171", "sighting--f3745fb6-9245-4ecb-aded-71cb4e019d6d", "sighting--fa7338ab-d607-4e0d-ba4a-c702c1d1c5b8", "sighting--926b969a-f504-4c21-9613-7efcb3ffbc5f", "sighting--7bf03c04-2882-47b5-a29b-1a807648b2d0", "sighting--887c7b22-30c6-4c99-991b-c5e8e59b4270", "sighting--7db0ca1f-82b7-41f2-9916-1da6c10c6b2a", "sighting--caec1fd0-4512-4544-9103-a6443bc91111", "sighting--f17290a2-ab2d-4b16-a064-f4b32d57218b", "sighting--943974ba-d8f0-4579-81b7-f6ef63642f07", "sighting--a91fc0de-f5dc-4e8d-a83d-aaa25d2da1a9", "sighting--2fc48071-2ceb-41f8-a53a-aa625db6891a", "sighting--2d92b6dd-478d-4c95-8f32-038117b2e8df", "sighting--3266e4e0-be38-4ba9-a9bb-a3380f4e4451", "sighting--51627b89-e280-4a04-bf05-74571b6e42ca", "sighting--fb679506-97a3-44ee-8a11-f9bfe052d30e", "sighting--1712d03b-23ad-4637-a96a-c8b7ccb516b8", "sighting--f6e5966f-f9a2-4883-9aed-572235b3561e", "sighting--5d919233-11bb-45ab-9bcc-05812453a3e4", "sighting--14716cf3-18f6-4263-995f-d370d81a5a4c", "sighting--1a9c8295-82bb-4d28-8736-7a7c50a6ba3f", "sighting--7e20c02f-6c0d-4143-a2ff-ddf8203362cd", "sighting--f84b3945-d04d-404d-8af8-7c0c594064da", "sighting--be07b4bd-cd0c-4419-87fe-377cd9070c90", "sighting--3ab1415b-1d19-4152-96b6-301afa5e4118", "sighting--088def1c-da4f-438a-ae53-da6ad9d11949", "sighting--d754c272-fac6-4e02-955a-81d40657a557", "sighting--da490863-69f3-4616-9bf5-697cf7aec61e", "sighting--e79d9c06-dd10-4599-bd8c-7b5b07d453dd", "sighting--6ee413dd-9b64-4430-b20f-c3804e8606de", "sighting--0d6cb4a7-d6b6-469e-84e5-fe809526da68", "sighting--b5a04710-5aa3-4c52-bc1d-b1ab24bb54a3", "sighting--3527fc59-690d-4c34-89b6-a9e06f4fbf49", "sighting--4faf495c-ea2f-43a7-ad11-1514dca3c671", "sighting--4e911ca6-8b93-437b-97f9-522a866cca52", "sighting--f1c69437-b938-4b44-9e06-611f74a4363f", "sighting--a1b7aced-7c92-431e-bb82-8194f069d0c4", "sighting--603c3403-357d-4134-b8a5-49665f3c842a", "sighting--a60c0b2d-11c0-4561-967c-c7d73828b694", "sighting--5e75ae92-8da6-404e-8c73-242e70fd0017", "sighting--cd45d401-a932-428e-a1f4-278e686d02fd", "sighting--e5d7e4cd-b978-44fd-8607-37202614de42", "sighting--2301a63d-5cbd-42cd-b985-d1dc4d7c6219", "sighting--c047787e-eaa5-4222-badb-3ef7076cfd97", "sighting--726535f1-a075-4ee9-a951-fe70645379bf", "sighting--5c916aa1-b356-4c1f-bb71-4c025819b033", "sighting--428740f5-225d-418c-9416-8f7e66c452e4", "sighting--e5d8026a-dcc1-4273-a2eb-ce7808a04067", "sighting--41144d3d-449b-4a34-94e5-a2655d3b6e2e", "sighting--2e9017e1-2e8b-437b-8d62-6297b8252780", "sighting--2b152b2a-2ed3-4ffc-a0d6-e04f808c0de6", "sighting--19dab471-785b-4f28-8fca-ee80393b388e", "sighting--da1c3261-134c-43ff-befc-88935069ae56", "sighting--a82d8950-a9cd-4def-be4a-55cd2528feb6", "sighting--2f0f2ffb-6346-40ce-bfda-1401e334683e", "sighting--7bbf5c3b-1bac-45e5-aa3b-377e4a055201", "sighting--1a710ac0-4e33-482c-98e7-701fd3fd8cd8", "sighting--522ac6e7-6bd1-4335-b75d-eac46454610d", "sighting--2b96613f-7002-47f2-b9b7-ab1db5d01bdd", "sighting--7463ea24-a636-4a9e-bda4-33aef5481578", "sighting--1b8e267a-0e3d-4335-b613-6c6a818f5920", "sighting--e4528431-f6df-471e-aa91-78ab5ad2e9ab", "sighting--d1e4c42c-0751-486d-a9ad-e6589cebece9", "sighting--11843fb3-252c-4b98-8a70-53dfb9723b19", "sighting--916efaee-a8b2-45a8-8cb9-b26b76beb5d9", "sighting--730c0a50-6889-4425-90c8-8292d3451d6a", "sighting--26a1e49c-ef70-48cf-87cc-6df513948122", "sighting--c2ad41a3-fa9b-4737-834c-35514c9d325f", "sighting--9ef06b7d-b37a-40cc-a43c-aea6c967ae32", "sighting--2f81afca-2ad5-48b3-84d8-a55a414495e1", "sighting--c572b6cb-14a2-483d-a899-03282d197726", "sighting--269b16c1-fe8f-4f53-a64a-3ea40fa8cadc", "sighting--9ade2e96-251b-450e-9cd0-7aa3007d4cd3", "sighting--fcf417e0-fb23-4348-a330-c5288e5c3a41", "sighting--13f22614-bdd7-4934-bbef-d55ae8b704a0", "sighting--e28aa803-8cd8-4062-8110-72849c11bb61", "sighting--70b4f14e-af4c-4969-ab49-1be539f4e223", "sighting--d7457598-9b63-4e4e-96b9-6eeb29b43caf", "sighting--ddf1604c-61e8-45a1-9707-149149ec7517", "sighting--06d6a0c9-9378-465f-ba50-73536acee9c1", "sighting--fe54f965-fd4f-4ba7-abc5-9b99cfd21524", "sighting--dd72540d-092e-4611-b215-181f1771b6f3", "sighting--ed9a0502-02f3-48fc-ab10-915c5957c1b6", "sighting--6c6880e6-d81b-40bb-b802-74d9a7851805", "sighting--5727b4b8-36b5-4e06-b44d-45479f332f8b", "sighting--ae68c58b-bfd3-4a3a-85c5-234ca059b07d", "sighting--b59766db-792f-45a0-b81f-5e06fe6d13a6", "sighting--df57460a-19bb-4403-979b-33d6f83425b6", "sighting--d239ca4b-e693-4fe3-a1b2-0df26531d3ed", "sighting--75d0b483-6f78-415c-9fbd-a7c8ae4b27f7", "sighting--827819ba-20a2-4239-b146-042ff38b75a7", "sighting--4015dbe6-f58c-4fc5-a6a2-0bb9479a2320", "sighting--8a73b352-4e5b-4943-aa54-d6bb97d2a811", "sighting--e716b398-52ab-43e6-9296-bf080f7b7c62", "sighting--72fb41fc-4530-49db-9dff-620cc6e2a32f", "sighting--226f2ad2-c0f2-47e7-8900-cb9bc306abb8", "sighting--b0d73d96-e895-471f-aa93-d59a835cb9fd", "sighting--2a38f43d-d00a-4f31-9839-dccf61a03ca4", "sighting--0bb9d1a8-e89d-4af7-8f1f-7936141f4b37", "sighting--2fbc7102-1e22-4590-9c43-da681d59ef49", "sighting--6ade8879-876d-48f6-b82e-77b637c55f83", "sighting--366c2195-3dd2-4265-a77f-2e0d012af85d", "sighting--2e40de30-f34b-4345-99ef-b6932c2fc0d2", "sighting--c2b19044-35c6-4956-bcf4-8989a2b9f7ce", "sighting--5511670b-979f-4094-8b69-a47cb55436f4", "sighting--11d47f04-1ffe-4c81-a029-491f7f07063f", "sighting--89f09f68-b518-4639-9146-14403b665bf6", "sighting--bb3ee7a9-0d74-483c-94a3-3f2ffef2103d", "sighting--114d2874-5f81-4f41-98f0-60c71928a3e8", "sighting--65464d84-0a6b-4b85-b78c-8e087974ab7e", "sighting--44ec3e06-d5c1-4648-9096-b80278e8579f", "sighting--0da44068-e7f4-41fb-84b3-9f269cdd381f", "sighting--7f98a84e-7786-4be6-a1a8-34ade4c04fdc", "sighting--d491ffa3-b0d0-4bd6-92ee-0b64a944842c", "sighting--44cdcd6d-5b96-4d3c-8ef8-bc661b04fe54", "sighting--1480a256-d5d0-469b-8297-6327f81abc17", "sighting--1baea020-fa61-4fee-9d29-501d967eb324", "sighting--246b5225-0e46-474e-bbfa-7580833b2e72", "sighting--db7fc6c5-292b-4425-8962-4649677f9f37", "sighting--e14bbbd9-c38e-403b-90a4-dea102c64287", "sighting--7ce32f47-f820-47b9-9b76-ec3c398a3a15", "sighting--7f2f7f68-0bcf-4220-aa3c-3ea9b50e4191", "sighting--911eac41-ee97-4436-b054-20b6db05eee0", "sighting--a6b82653-5e66-4877-b83d-bc46c0fee48e", "sighting--bf34de98-feee-40da-8210-6de537daee06", "sighting--6af43e11-51ae-49cb-a1c0-8aac541afab8", "sighting--da642388-3a99-4d03-9e1a-5c8986d15a36", "sighting--3550b448-fe13-4f51-b57e-b366ad7d73d6", "sighting--32e84063-48ce-4830-aae4-8f4ebf482932", "sighting--17bb04fe-8f0b-4cc4-83e1-b65d42cdc591", "sighting--94235bbf-6a82-4d54-b8bc-64a6d49efdef", "sighting--0cb0011c-950a-472e-8239-11c6988cfd67", "sighting--b7ab8fdb-7d83-49b7-87e4-ffb6a34df571", "sighting--2a43f87e-ad83-40b7-8245-e842ff4f07e1", "sighting--76dcf4b3-655e-4d48-a72d-c412d7ec65ef", "sighting--1dd72f8a-3f8b-4e07-b461-0920c1bedd90", "sighting--748d9ad8-187d-48d3-ae81-90658b10b9d5", "sighting--c538881e-9034-409f-b560-77819a992b9c", "sighting--11c4a29b-22d0-44f9-8382-6a953dd00f9f", "sighting--f05833a3-f9e5-4542-b104-03526fe08808", "sighting--b63f73c8-1ddf-40d6-9c3f-1e5abee17b15", "sighting--41b91d45-00a3-4674-9f54-c9d3dc9a258c", "sighting--44fcbd9e-f5e7-4a20-9366-b66b6792f8e7", "sighting--8a6476b4-f416-4b6c-a155-b077a6d262e8", "sighting--ff3578e3-3820-45f0-9cf5-0e1472b41a68", "sighting--64e11d3e-388c-49fb-ad95-bf8dce7d261b", "sighting--e6dd08f4-1556-43e7-9d84-fb6930f990fa", "sighting--520f8a47-34e4-451f-819b-bcb1a57a832a", "sighting--8fa80573-6b0f-458a-8a14-c11c3aab7447", "sighting--7ddd8847-ba9d-46b7-9586-18bc6972d404", "sighting--19335d65-2b9f-4049-ba52-73bad86c8df0", "sighting--55e980fa-2d8f-4cbe-91b8-c197749cedfa", "sighting--92d1f42f-71fd-4678-a419-dd5ac38833b7", "sighting--9b5ab23b-cc39-45be-ab88-7bab6a6144d3", "sighting--fe727695-1222-4b71-8525-e06cf77671fa", "sighting--28fa327b-a99d-4c10-9a10-3accd6f37ff0", "sighting--3bd99236-b7cb-4bba-847c-9427c76016df", "sighting--e93bde9e-e91e-4154-ac58-650bcadc9a72", "sighting--f9ce95d2-3514-4591-8436-45f7c35fc845", "sighting--85043417-b872-4a94-b08e-dd6bdee31d80", "sighting--ff852f12-539e-432f-b564-5e8f6e095546", "sighting--39097fe2-6124-48fe-95ff-520d2d6c45f0", "sighting--d263fdb3-2eab-4aed-a20f-b636a0b9ceea", "sighting--2fb69dcd-5c89-4833-8af2-84a21c3617d7", "sighting--245b0ac6-051f-4ac5-b4d4-a9d7c23a29f3", "sighting--55e61688-24fc-4e4b-adce-a43dce2ab503", "sighting--69401fc7-0ba2-483a-9972-9acca50f8f9f", "sighting--2435809a-f16c-40f3-9c3f-117699e85b95", "sighting--2471cef0-9db7-41e5-9763-84d530a59b0f", "sighting--f83bf88d-4e67-4dac-8a69-369cbbb4b9e3", "sighting--ba294b47-3e77-47c3-b035-0e875811d707", "sighting--dcd7152d-e07c-4f5a-b49c-55ef807a0d73", "sighting--106fea63-6110-486e-bb36-d79997a86b34", "sighting--129c502a-fa9d-4d9e-a485-8d9b9bc2e499", "sighting--3645d2c3-f3e4-4ae5-a1ab-6a5d3561ec8e", "sighting--567237e6-ab5e-4f11-84e7-4242dcada764", "sighting--7b8397ef-8fd4-4f12-97d5-921cb03cecfd", "sighting--990d2d61-57c8-4464-a91c-7188b96426ac", "sighting--a736a8d9-0f37-4ec3-8774-334660fedc89", "sighting--1b624d66-8606-46bf-8fa6-81a45ccc7aeb", "sighting--56c26be2-b7cd-4cc4-a2ba-46f096e6ab6f", "sighting--0c7deab1-cc6b-4984-9b7c-8406ca6be523", "sighting--123cb831-63a4-4281-a0a4-87badda8eac3", "sighting--eebdc8fc-0187-4429-a1be-f30602867516", "sighting--c3744dd0-43f2-47a2-b39f-b390ecdd3215", "sighting--14300096-a0aa-4047-867e-04c68c185364", "sighting--6b46402f-186d-4634-bf5c-c7ca148c5bc5", "sighting--6ac2c47f-fa2b-4b6e-b2c7-b81750093658", "sighting--d9323809-3b95-4c0b-9700-562322fb6e32", "sighting--2c8e2a79-2045-49a7-9aa9-cf319843c6d6", "sighting--b60e042d-d00b-41a0-8972-dd7baf2c8491", "sighting--f6b01620-32f0-47d5-8082-b6f3f7b6dce2", "sighting--6f33c547-94d4-4b97-8865-c5071d7bb988", "sighting--9afb0180-1e33-4da8-b825-e0e7b198b332", "sighting--6478ae47-a534-4a3f-a8e7-1879270e0044", "sighting--0aa23b05-dc51-4c7a-be46-85140f6d1dc1", "sighting--d7abfb29-d713-457d-9a40-87cd94f448b2", "sighting--af407db9-f81d-435e-a6f8-b7e74df8f943", "sighting--faf22d36-09af-4ccb-8736-3edddb36362e", "sighting--5deeeb35-2b9d-4db6-a17b-2f73095a7847", "sighting--4c4a479d-5d1f-40e2-b936-dbac617e0ac6", "sighting--c8589fc8-278b-4f22-897f-4f1d819b8f6c", "sighting--d9fd81a2-9114-4e00-914c-f9244e24a256", "sighting--c7739def-3e2a-41f1-8fa5-7930bc11b26d", "sighting--c79ebbf4-3e43-48db-a7f9-5af0cd936b3e", "sighting--1a7a7e03-4495-4626-809e-9bdf510b05e0", "sighting--de7d30cf-125f-4d9c-92c8-aed218778297", "sighting--5f541563-5fef-40be-a780-9222f465d6bb", "sighting--43718b4a-c1e6-4cd1-b2e8-10e947ebc051", "sighting--ac73559e-ed0b-4ea2-bc52-49fa7e9fd8e9", "sighting--7250ddc8-ab1a-483d-a03a-2f5b81a5682f", "sighting--192f5461-bff7-4286-8c87-07b2d7d2a368", "sighting--e367205e-1e86-4b25-943b-fecd24e310a0", "sighting--3f09433d-6e54-44e0-8f5d-ffd4f1a80a19", "sighting--0f49c3c2-36e5-45d0-afc7-86aecbec05b0", "sighting--6ea711f1-a720-454a-9a81-9291d0659e42", "sighting--4a495020-34b5-43e7-9905-721e6aabc2b0", "sighting--6c715287-e12d-4ffb-9f2d-ef289d2d226f", "sighting--b88d4888-2dd6-456b-a0b6-20c675280963", "sighting--5f7e70d6-f171-4ceb-8314-91f3e2017777", "sighting--41421e9a-aef7-4d82-b6a6-03057292c2fd", "sighting--b48ea57b-cec3-4e1c-9ef8-28a0eb25befc", "sighting--9cf2299c-aa79-4eff-a6ca-a27b93401584", "sighting--e1e64b4e-cddf-4a10-8711-8965af1d3024", "sighting--e97f9af3-40d1-4c5e-a78e-af441600ef36", "sighting--e585b002-1e1b-433f-af22-e4de98df0493", "sighting--1266c4cd-55b4-4d42-9acb-0da09afd7ad6", "sighting--50e57461-6b0b-422d-ba41-fea98f536abe", "sighting--c9308712-3dbb-441a-b13d-324a501d6992", "sighting--c6159539-c6ac-4fa5-968c-0388162ff7c9", "sighting--38d1fa0b-393c-4396-a7c6-88539b2de8ec", "sighting--9115c2dd-8ecb-4f91-a58f-e1ecec998c13", "sighting--a1ed40a9-2dba-4f9b-acc5-a554213e8611", "sighting--201499b6-9e6b-4e2b-9839-f0d78938e089", "sighting--b2287c30-9c85-4a35-8f14-16a28ff1a28c", "sighting--9ecba450-c504-4102-9d11-fc6347aaa7e7", "sighting--c164f18d-f29a-4a3a-8aaa-0a4640b95f49", "sighting--e86b4d09-7598-4964-8703-e20bbdf6e18c", "sighting--aa0ebf6b-2701-4dc9-99db-51b31705ec09", "sighting--f45c5d68-ec2c-4824-8675-4440710d1eb9", "sighting--3ef8a890-74ff-4984-a272-9b984d2858bf", "sighting--fadfb9cd-8a91-4d16-9621-18c6fe00c7c5", "sighting--1d22ee22-663e-4ccc-9a90-ca0a702210b8", "sighting--374b0dcb-f220-4150-9904-d7fa846471e3", "sighting--2c748d82-7e87-415d-bc1c-7c6c1199eb77", "sighting--e36f68e6-76ba-46cf-9bf8-5da028d9aea8", "sighting--5e39f68a-eda2-4c3f-bd73-a9cdde50a239", "sighting--2549ac75-b674-4b8b-8b9f-b38bc037f352", "sighting--89700108-86ea-4a63-89e8-6dae48da6175", "sighting--b543cdf2-1bde-4c98-bc35-11dea4ba6e2d", "sighting--295ff890-68ee-4649-803a-13afb7ccb57b", "sighting--cc70d277-0514-4f6f-9ca5-fd8326fd1c0d", "sighting--3a03e7ec-5027-40ba-8228-2d775e4af27a", "sighting--42a86928-2fc2-4a6b-9b94-bb0a780bf6f1", "sighting--8f010955-9714-47aa-a61d-282d688aae4b", "sighting--e2a3bfda-e227-43cc-a6b5-6bbc1df0960d", "sighting--1a18c077-85ce-4127-b0a4-dd39b376c13c", "sighting--ae0262fc-2c14-48d7-9012-46c5e9a05d5e", "sighting--33edca28-44f6-4a04-aca8-ed05679d70e8", "sighting--37734258-f5eb-4142-8fee-7894f8eaa683", "sighting--60c843ed-230a-4c00-a467-947c133fae12", "sighting--e60c9b9c-ec65-4dc9-8dbc-f23383f781da", "sighting--ca5a3797-5d22-4d10-a966-e6894eb6d609", "sighting--4358e532-2787-421a-a4e2-e92b04a5bdf9", "sighting--841982de-ed8e-47c6-91c7-bf5535b87b8f", "sighting--4001114a-4ef1-44d4-b709-0c265b390450", "sighting--5e7800fa-b462-4a3b-9a25-886e9beee451", "sighting--7ff38708-cdf9-4f7f-86d8-bdb9c1373b3a", "sighting--f8e1a820-85bb-4525-b9a7-c9627c14cadf", "sighting--84b9ab0c-9336-49c8-a19c-54fc4f42dec2", "sighting--d5acb0bd-089e-4cc3-82e8-3d5728b2bdc3", "sighting--535ce2ab-4682-4c66-9a04-cff97d47e891", "sighting--abdfd464-7d10-41da-85d1-312ff5f8abef", "sighting--955f3a47-5f42-4a91-b37d-4a7d1036ee33", "sighting--a5a5c1f9-5935-4cb1-b0d1-6a162d47f775", "sighting--e3f16633-8fa5-4202-a85e-3551eab31b13", "sighting--1acb57d2-76d6-4176-92fa-b3b7d310bd98", "sighting--bc8506d5-40ac-4835-bb8c-0c3f98b32a1e", "sighting--41da00a6-a897-4e4e-89e2-d8fb5a0d9f78", "sighting--fd32d2e6-36d8-4d6e-818e-ae8ffef67dce", "sighting--e7284798-3fb0-4ea6-a7d3-dfe019fd6ab8", "sighting--5df1e4c9-3824-47a9-b88e-6b16dc69ea52", "sighting--3f898908-8b3c-462f-b33e-02ac623c5dd7", "sighting--21e27b8c-e0de-49cf-81a0-25f918e451c5", "sighting--a83fd2fc-225f-4629-907a-f8001fac29d0", "sighting--d1667698-026b-47e6-878c-f4d9cbaf77ef", "sighting--a70617ba-12ea-4f82-90f9-dee6bfc632fc", "sighting--fb770605-c025-4b4b-8c1c-e36c22e012a1", "sighting--98ed3963-e25c-4261-8b27-289987171041", "sighting--7e19b981-839b-46a0-93d0-5ae75a299e4d", "sighting--d937bbc5-bf9c-47e9-a3ab-fe5a7c8dabfc", "sighting--2172f1fb-eb3e-49a0-a6f7-e5b3a6b764b1", "sighting--0beb016a-4e4b-453e-a0ff-708d2e13a5f4", "sighting--cdb71466-3d32-4fc9-83cf-5ab73b9efeb4", "sighting--f946eafc-426a-48f4-be3f-9a828e7ddf14", "sighting--a6c4b9d8-bcb7-4f6f-8d60-1bd6cf0b788a", "sighting--e048c8f0-f167-4726-b764-01eb7cc17e65", "sighting--c3449af4-7640-4815-a8e5-a80bcca00393", "sighting--e6b12f65-bfb8-4484-aab8-346311230907", "sighting--6e436c28-d348-4bf4-b933-4ae31dfa2d46", "sighting--c610dda0-15cd-4120-8776-bf49094619e7", "sighting--60b9a698-755d-4368-a4e2-ec5aaa70e0f6", "sighting--a40d1c38-5595-410c-8a76-5182f28fe907", "sighting--d0584ad4-2470-4244-ab05-b1620442861f", "sighting--c7dd8518-6b79-40fd-9d24-86109d568a5b", "sighting--e9465218-b67a-410e-9a8c-9d3037beb9ab", "sighting--21c2ff47-7280-41e2-a3a0-d9c0abd2228c", "sighting--55a4f937-0197-4732-b993-6300d4d87d1c", "sighting--b683f65c-2c1c-45e3-aa75-4b62d9087cbc", "sighting--66077154-5412-45a2-bfdb-3125c6312458", "sighting--41f13e68-da02-4c04-8f9e-80571e2263df", "sighting--333a38c7-8de7-49a4-b1c7-2a171c46ee51", "sighting--613280a8-5bcb-493f-8724-41b686774959", "sighting--fa74fbbb-7bbb-425f-8faf-c08c6f240bbb", "sighting--1bd01a8c-edb4-490c-ac34-727ad2568f4c", "sighting--7c547d3c-5621-44c0-9d65-38369d328454", "sighting--c1921d3f-1df7-4927-93b4-48e194867d2a", "sighting--961c7bf3-f25b-48e8-a077-a963d462f0cf", "sighting--4b0e950a-01be-42e5-869d-308b4756715b", "sighting--f3c7591e-5e67-491f-9d2f-c901f482016b", "sighting--dc367c35-cbd7-40a0-bf9d-78b2f724198a", "sighting--4e41b962-9584-4691-ab04-d6fc13445838", "sighting--cfb5b2be-db75-4e9b-9123-bfa75de15d71", "sighting--ae040540-0c73-4850-8a27-adf49463bff0", "sighting--a9ffd724-35de-45a1-b121-21ac939291ec", "sighting--b4db4a82-ce9d-4e49-b589-b9124feeeedd", "sighting--50a30c2d-cf6f-4627-a6d1-9837099476a3", "sighting--3e1dc5d2-31ab-462d-a7b1-fba0d4c79992", "sighting--6b555f49-c558-47cb-8ff6-9155c530888d", "sighting--4fe4f791-e99e-4436-8615-efb9cb7f9175", "sighting--c04a900e-c424-4a50-9ebe-425a55288fcd", "sighting--30afb0bd-d3f5-41a7-b4ba-827b3e008f4f", "sighting--9848443d-6240-4bbb-9cf0-a539fba5be26", "sighting--fdf5daab-77e4-41ff-b28f-bd514aa30c19", "sighting--bedf7474-a2d5-4271-a4f7-c56bf9f4766b", "sighting--9353cbac-4d42-487a-8ac2-1e900c0f5143", "sighting--41a4f46c-5096-4df4-9bc5-582505d4e83c", "sighting--1f3307fc-72fc-4ca8-a25b-541d09b15653", "sighting--00f0c81b-170c-434a-aaec-906be5b7f709", "sighting--adc45963-ceaf-40ad-a831-16e0d7770112", "sighting--869dd2ba-cc93-4065-af64-6a81d566211a", "sighting--f09b461d-275c-4dfb-beb9-23d97e1d5105", "sighting--42d98430-de97-44eb-95cb-c2f8360de129", "sighting--7c402ac8-979b-4c42-b5ba-2717369369ca", "sighting--beb819d2-c647-4fec-96ef-679822388486", "sighting--11930fbf-cde2-42a2-a203-2c988310968a", "sighting--545e2a5d-aa2f-4e3d-8c21-d62c65483695", "sighting--87e5ba95-e6c7-45ad-bb03-8052baff6c3c", "sighting--863db2c9-1884-4aaf-aa59-07b73e17da33", "sighting--8e1ecf15-368d-432e-815c-4c1db2f75074", "sighting--17dff3a8-f952-41ef-a7b5-6510f9e4e428", "sighting--92beee3f-e5b2-4fcc-8a72-c8bec86bc5ba", "sighting--231033a0-e1c9-4892-bee3-25bb66256421", "sighting--c9f69276-afe1-4222-94e2-896289a2494d", "sighting--9177c8f6-9f4d-4391-9298-4eff81263f63", "sighting--41a4374c-4c69-406a-b7b3-4ed18d8ac882", "sighting--635ad83a-5b34-43a5-8c7a-0ed806ae39a6", "sighting--8e87b2f0-33e9-4398-8cbf-db820b67eb0a", "sighting--5be3e0f8-016c-4e77-b4dc-41c312d078e2", "sighting--704a2fb4-667c-485f-ba57-c3c279109861", "sighting--3d492cfd-b17f-4b35-a683-b8d1c28efbff", "sighting--4b145d95-100d-45f5-82ec-8c1e572dc69a", "sighting--4f6fadaa-4458-4d30-960f-984e27c1ade7", "sighting--53e47ca2-3b31-47ae-9dac-1ff44bdc09ed", "sighting--356704c1-8bba-4c97-ba40-1a059f2d131b", "sighting--d857212f-80e4-4c58-96f5-331ecb1908ee", "sighting--02cf28ba-98ff-42de-945d-2e0c15472d1b", "sighting--5f829a94-d133-44e1-9114-852a6efee365", "sighting--3d7bcdca-b144-44d0-b76e-4e70ac8230c7", "sighting--5b0a7179-df9d-4856-9458-5cf2c5640e4d", "sighting--f47b50a1-23de-42ed-8080-cbc5261905ed", "sighting--112fdf5d-3737-4127-a591-a6a3d31c9e7c", "sighting--11e261cf-d72e-494e-b874-93bf777b37b4", "sighting--65064791-de88-46ca-9f00-7fd9c37b6202", "sighting--a6279425-6f8f-47a9-9b6e-7b0c82581fd0", "sighting--2fe15275-1e0b-4d42-a682-f9e3ead12d2e", "sighting--0ee73b7a-9d04-4a2c-8b91-b0f375f4ffcf", "sighting--38639908-eb6e-4493-875b-c5cb3393e342", "sighting--c9365867-0505-450e-b0f9-d5a13685f32a", "sighting--929ee7e0-905c-45f5-a318-2c6f35c6af0c", "sighting--92e84710-1579-421a-9756-23ac8ccad64c", "sighting--d8edd864-46c6-47f9-9d96-c4df8fceeefa", "sighting--bb4fb229-f5ae-4f5d-807a-a301ad02848b", "sighting--2b4eb9a5-9a21-46e2-81f3-30de0fbf72d4", "sighting--ed5080b4-3f49-41ed-a1fa-2277284cfae7", "sighting--488b147d-48c4-48a9-93b3-397235adcb73", "sighting--3322e346-eaef-4918-b739-24791e8069cb", "sighting--ce4d0e6d-7d84-475d-bc70-e5b10e65d732", "sighting--c34094a7-9685-4f87-8dd9-3e790137edf7", "sighting--33d0c8b4-c6a8-4e11-bef6-8aa2cf43f52e", "sighting--453f96d9-842a-4f5f-8208-6cd3fcf4a121", "sighting--fb2129c5-990b-425b-b3bf-4f330d92e856", "sighting--85b81593-ba88-4e7d-af0a-1a0c22306ed5", "sighting--6bab8233-1956-4ee6-a939-7355c8b55ec8", "sighting--cd4b25b6-ca8c-4ac7-b418-1f6ce393ed07", "sighting--84f15c71-936a-4c3d-8e8c-46e5f80c77cf", "sighting--f6ec67db-9d44-47d0-b6b8-9f35236f29f9", "sighting--37dc48f6-c21e-4303-b70f-3c80e989a24f", "sighting--c706a04b-14f9-4a71-87c5-da9029974a87", "sighting--8c1e87a9-7c45-43b4-89f3-e6398b344176", "sighting--31087725-d77e-4c60-9f19-bd60011ebecb", "sighting--07982826-9e89-4e3c-b6cc-aa35535c1071", "sighting--d3fe9d4f-f0fb-4950-a52b-afb66ef45e98", "sighting--c446559c-81d3-4549-adf7-c2dd01869b65", "sighting--612b81eb-bf30-4393-b091-0f822380035e", "sighting--69c8aa93-f275-4a60-84f2-94c7d7f4dc38", "sighting--1137d938-9851-4095-9bee-8b0efd28c4f6", "sighting--d4fbc793-20dd-4fd8-bc75-e8c7550cecd8", "sighting--51d5ddbc-db6c-4989-959e-7dd335473aec", "sighting--75852946-ec78-4fe5-aa06-4422aa74b0f4", "sighting--9c316453-dd98-4577-98ed-5cb9af8a1d9b", "sighting--6b604fc0-62a1-4471-aa0d-37813cbc5e06", "sighting--72575393-5747-4958-a354-f0076011cb1d", "sighting--a9cbae86-8013-4831-86af-cb0849719216", "sighting--afd8152f-0d39-4709-9f49-64c72c3e8902", "sighting--c08cccd3-de05-4605-ae41-716af8b8004c", "sighting--02ecdc0b-667f-4738-aeb3-72f1fc5cf8ed", "sighting--c79c842e-cdca-472c-8c2a-18a80857e127", "sighting--d2f627ac-9e36-49fd-bc30-6563e0663154", "sighting--e48b727b-ce50-44bf-a209-d4aac3dcc799", "sighting--c269493a-71b5-4776-b0fd-e43c4fe4abc2", "sighting--a7170725-298d-4ffa-ad7c-11f57f84a748", "sighting--b9e451f1-2807-4980-afb7-9c0047129b70", "sighting--3f758033-c4c0-411f-8e66-13e833b75ee5", "sighting--437567b4-74c4-4dc5-a7e6-62fe01550dfa", "sighting--e9366e84-0cf2-4180-9c00-014288a03eb3", "sighting--7852998a-0ce4-43a0-8e77-7205249ddb96", "sighting--38c897b7-4868-4186-a19c-41dac4c69d77", "sighting--8232bc9d-f76e-429f-a2b1-18540bf45d1e", "sighting--87786637-0fa8-4ba0-82f2-67874ef6b5c2", "sighting--7576c80f-281f-4946-902d-6bb90ffe75e3", "sighting--e325688a-cc5c-45ec-949d-ed01893170c6", "sighting--3eec21fa-33c1-4842-a70f-817bb078ff1c", "sighting--33e965c1-0db6-4f2d-bc25-309081f366a9", "sighting--c1d101c7-4c96-43b9-aa5e-3b37e634706e", "sighting--a33cf343-6523-4c7a-b944-b15a7ed357d0", "sighting--27f15844-69e2-4dc3-b6cf-cc79e9869664", "sighting--6e2c5e93-dcc0-47c3-9e1d-a216344128bd", "sighting--c9406947-2602-4448-a3b6-a88f8ebaf72c", "sighting--7bc4a761-6dbb-468f-9364-6004c3ccba51", "sighting--56e51ad3-e7ee-4fa1-b3d2-7e6c6ce9718e", "sighting--d59921b8-d21c-4142-ab97-980f9da2e03c", "sighting--c76017f4-5753-48fb-b659-5c36c2c3e00b", "sighting--e12ff08a-251e-4939-9905-2c3476581505", "sighting--3e208107-2d78-48df-a898-f8c045919c6e", "sighting--e20c1bf8-7d28-4134-b559-d2e063feb138", "sighting--402bfc8c-8a5a-430b-9ce3-0a8a3d091a8c", "sighting--7f638029-5e41-41f4-a993-301dbac3d439", "sighting--4cd620af-5c93-458c-9475-419a52739b98", "sighting--cc71ab3a-b2b6-4ffc-93f5-f4e4ced283e2", "sighting--dc7fd25b-49b4-4a55-9cce-0f5a11aa940c", "sighting--368a3147-1685-4652-bacc-9e5425709626", "sighting--e8aae52f-dd83-4035-b634-7ae5376074f9", "sighting--36d108c1-e6af-4688-bb2d-d66ffcaf16ca", "sighting--08508dfb-4029-43d6-87ef-f8d0a1f7db4e", "sighting--de2d41e0-fff7-46fc-ab53-c40359955e22", "sighting--1d24f210-7133-4198-9123-9eac6a49efe6", "sighting--3aef82e3-2a92-4630-9393-cd1d9523bfb6", "sighting--b6c73e7a-f058-4d27-9236-311aed2847c1", "sighting--34426096-c9f2-4f22-b09e-4f4d8d14d218", "sighting--f22eea64-d4ed-4000-8608-a06a444e2636", "sighting--731c6284-ab4e-462e-8ef4-53b3ce98b253", "sighting--43356d82-5b48-4a21-b279-38eeb1157e17", "sighting--1e252633-7ec5-4324-b673-6d0d2068c457", "sighting--3cce579b-76c0-4824-9456-e9abbbcacf81", "sighting--e0dad73e-e657-4e8a-9480-091ce0e6a2b3", "sighting--be943ac2-2936-4826-a29d-135b2097cacd", "sighting--8d9ffb06-07e5-4818-8f95-2c167b601c7d", "sighting--17c4c807-99b3-43f6-a9de-9c85ca67e0d6", "sighting--a93765af-4dd0-4940-ac5a-795e50ff937a", "sighting--90218bf9-2977-422f-992a-63a1d38239f5", "sighting--63dcef0b-9c99-46e2-9b3d-e4706974a22c", "sighting--860b7e30-a3d0-42b1-8943-b206ecf38779", "sighting--bc9badcf-c913-4c9a-aea6-def4a2c5f998", "sighting--0c71d883-27ba-43fd-bc19-96a4b1110f5d", "sighting--083960ff-be7c-4854-b081-5a3a22b743c0", "sighting--8d954b36-0500-4a52-9bf8-07f269737b75", "sighting--2c4eda4f-8deb-4b99-a072-29279313446c", "sighting--3e977e42-b9ca-46e7-a849-8ea383e14ae0", "sighting--5c71fea9-304a-4775-a3a9-52cddb70b01d", "sighting--a48596fe-a436-4ac0-b58b-35d829a96bf7", "sighting--e16e0335-ce07-466d-9134-b50fa5a20f4a", "sighting--b3164552-20f8-4db9-b5df-82b45c54d2eb", "sighting--2aa9be15-0bdc-4b20-8736-dd66beb536a2", "sighting--642fadf0-89be-412a-9e31-552e895b5105", "sighting--1fadf032-7ebd-4c19-882f-cb72b4050415", "sighting--e6b86a74-d716-4a81-92d4-dcf9455b7d91", "sighting--0840d815-0207-47b6-aa2b-9c35c5810281", "sighting--67e1e447-69d5-4f9d-99c5-adbbbe0e1a39", "sighting--2ce4013c-e2e3-4fff-a272-0cfc14e229da", "sighting--ce4147b6-10fc-40b9-a935-48f692bb9d90", "sighting--793ccdc5-6499-4202-a6d5-14eb215fb57c", "sighting--361f9715-09de-4cc8-9994-aa5f73ff487f", "sighting--fc71fd5d-9739-4b1b-9389-7fd1a3a5e81c", "sighting--ac5ffcce-1545-4542-a548-355d9fc7fc8e", "sighting--0b43a6d9-fd2a-481e-b71b-21eb024b6971", "sighting--8b50eb3e-8cbb-4918-9a0c-4250d588076f", "sighting--89e6785b-9500-4598-a215-67deba27a42d", "sighting--43938570-b80a-43b3-9da4-4c59dffed9e0", "sighting--c80911f3-4e87-4a3a-afe1-1907087ffe1a", "sighting--650b25f9-9632-42f9-8555-fbc4f92dd5d2", "sighting--c142da3c-249c-40f5-9804-c56b540611cf", "sighting--c40721a7-d291-4ef8-ae61-436a926b7502", "sighting--a00d58c0-a46f-4d80-a75b-57c6f337be5f", "sighting--067a1ee6-9d3c-4fa7-a0ef-f8b17fa253fa", "sighting--87a0bc7c-41e6-43ce-8c54-48d4c415418f", "sighting--1a2e179b-4b5e-49da-ae2b-97e787596b00", "sighting--32ff9a8e-52ac-4a00-85d1-41e17999ce64", "sighting--1cfb3917-ad6b-4ec7-b35e-1c8b58a6559c", "sighting--4c68ffd0-8173-4bce-8f92-81b854b56116", "sighting--d980beb1-7d25-4ffb-838e-668cc0772dcd", "sighting--40dad302-63fa-4670-9e86-933131209e73", "sighting--7cb17dcc-b7f1-4771-8e1b-53c8b8f3e9f9", "sighting--32b449d1-a8e6-41ea-9650-d19f72b943f8", "sighting--3576931b-a009-4372-920d-99d5490237c0", "sighting--29732b5c-f0fe-44f0-8430-351382f3ecbb", "sighting--48ff4bd8-5072-4057-b54b-aa18b8de3752", "sighting--111f0a78-3da7-41e6-92b1-9cbebb52a468", "sighting--b267a674-0891-4a74-a72e-b117471b170d", "sighting--9c74a8db-583f-4018-8585-3535688feeb5", "sighting--82b350a8-77c1-4056-bf2d-46ab92f43219", "sighting--c670409b-54e7-44dd-acde-8409ae655e30", "sighting--1035026c-d99f-4d68-b38b-2975e8646699", "sighting--2d421bac-7a51-4aa5-b6f8-5e8bc5cc30e7", "sighting--b5998eb9-3934-4dd0-bbc5-074f106ef542", "sighting--5dab2bbe-8a27-4526-aeed-6ad1cc494c0a", "sighting--4150e049-2a56-431d-a611-5cd0ce580f46", "sighting--5cdb6c09-6f55-475c-9633-997ca5ea4ed7", "sighting--989f058a-c8b2-4e39-a461-6e9cb285c7e7", "sighting--fae0ba11-6948-4b33-8ef3-814d0fe2b360", "sighting--a329e4f7-01a8-4e4e-bef1-3eb20e4f3c0a", "sighting--8d45f7c7-3f4f-4d6c-9bbd-79926587374d", "sighting--a16c6faf-6f77-487e-b88b-67f346d8926b", "sighting--7ddaf468-063f-4af3-aa28-fc0acd5d313a", "sighting--79370eee-e83d-41af-b0e5-dfcae05c4786", "sighting--22c1fa5b-b5ed-4f6b-8f9f-725182aeaa58", "sighting--64995de6-9345-445b-b724-2b730d011c09", "sighting--feb10252-34eb-4c4b-8df1-3dc00954e859", "sighting--b1adc445-49e0-464b-a607-51599888e0b4", "sighting--573a8486-cca3-490b-9b10-a2a11e6328f9", "sighting--9cdacf1b-9f60-4ba5-abd7-91c7325c885a", "sighting--e6b4916c-b8e0-4453-ad56-480264b9b33a", "sighting--fec12c07-7917-490f-8a3a-402ee9d12c00", "sighting--55e99189-bc3c-4544-ae18-a8076a43e3c4", "sighting--f4afb956-3aa9-444b-b743-387bf33a9840", "sighting--01970b1c-581e-4fa9-8581-782806316a67", "sighting--5141add7-fad6-49f7-a1e3-44c5928b2160", "sighting--5e21547b-098f-4281-8357-2d39b6b18d91", "sighting--5688100f-6711-42f4-b97a-fb28b78248e3", "sighting--e5a0f233-9d5f-43f6-a5c2-73279edde591", "sighting--c7b457cf-f114-4f0e-ad1f-2623f2e24a8d", "sighting--8856b6ee-a3a0-4a92-9a2d-dbd96084b5de", "sighting--01ee0786-6ce1-4c03-8c67-1ead5733b392", "sighting--bd503e78-403b-43a6-870a-7daf7a812543", "sighting--c5afac1d-c68d-49aa-90bf-a90e1061c9b8", "sighting--66bf8a09-39a6-401e-aa80-9cf2f9f3ef6f", "sighting--0d4c60ef-53d9-4a36-b7ae-7dabdccb59ad", "sighting--f25e0789-011d-4a07-af7b-61af4c1c527e", "sighting--bf392946-656c-4bf1-8bad-b24f4996e132", "sighting--18589aa0-2c33-46cc-a489-c63ac7f72828", "sighting--62964525-c410-46df-be20-7c24ef112512", "sighting--33a42ce4-aaa8-44d3-8d2f-ba0c0d11c697", "sighting--8d481554-189b-4484-ad2f-e07f46ea4e3d", "sighting--4ffcceda-9be1-4822-9498-709f29fd5a0c", "sighting--d7582338-85dd-49fa-8515-6c43f40f8b8f", "sighting--ffd77378-3ff4-41b4-9ab1-088767ace552", "sighting--1cf949dd-59b7-4c3e-af86-c3a0b5cf17fc", "sighting--036a9151-fd6b-43a9-9776-83a07f9bcb17", "sighting--b92c5f45-e375-4cb3-bff6-aef6028c3f63", "sighting--460c2ee4-a932-4b04-9f54-f1c6e4359836", "sighting--d50ff584-6a2c-4a4f-bec3-03b287d80c90", "sighting--c4b81432-a24d-498a-ba7a-935f6acb3a6f", "sighting--09ec1420-d7c0-4ebd-8491-3ea50768a58d", "sighting--b1839594-71b7-46b3-b8ad-2211cffceceb", "sighting--a6e3c27e-2b5b-49e1-8950-565ff3b38d40", "sighting--977cf261-de19-4691-9940-dcc48fd63dc8", "sighting--632b6f2c-0e98-4b99-b14f-065225989765", "sighting--ad56c863-260d-4d59-bf0d-1b8f3ac97081", "sighting--2a90b130-33cb-40fe-ab33-48f769cd8792", "sighting--c732a0f9-326b-4d38-a6fb-e71993965114", "sighting--26c157d4-c48a-41d5-b2ff-e2922cc48ca7", "sighting--c31c7559-781b-4d71-b6e1-afb11676eb72", "sighting--d973760a-0720-4683-bec6-ba9c345e210d", "sighting--8c59d787-fcd4-4448-9b6d-ac35b9d4e257", "sighting--59c00c23-9447-492c-84ab-c3aae5c13282", "sighting--0dc904ca-250f-43c3-8dfa-faf96c35e7f1", "sighting--bbf0b99d-0e47-41c0-82d4-feb65e7a9ce7", "sighting--0700883e-f509-49ce-b137-715cbc50d9f6", "sighting--6e07e0ce-0ba9-4f44-9251-2eea371f0127", "sighting--11020bf2-a8b0-43a5-816d-2dbb23a0c1d0", "sighting--80458469-e26c-4af3-9b52-5d202341c690", "sighting--3634f775-6f15-4ef6-86a3-f6b23e2b1df9", "sighting--8b37ab18-e2f5-41c2-9d2f-9b780ac3cb57", "sighting--b1ddd208-bc91-4e04-ac31-6819ec765a97", "sighting--954c0d28-70b1-43e5-aab0-eba85828d96e", "sighting--5155fdea-2e03-4675-b4b2-cffbddcc5f9c", "sighting--5e3a41a9-84da-475c-ae4e-59aa9cbc9b8c", "sighting--5926ad29-ac10-41b1-815f-71ca3a29adf3", "sighting--e92bc9e0-66f4-47f0-9936-abde5a8c697f", "sighting--42d476b0-f5a5-467f-9a00-736a3c5fd3e9", "sighting--1fc215d3-41b9-4c88-8bbc-b83168948212", "sighting--d6b2c296-61ad-47b3-9523-13355aa84384", "sighting--e3d4ae95-c887-44e1-8ab4-ca445676699a", "sighting--5d228768-3351-4ba0-9132-1017126c45cc", "sighting--220976d5-7a26-4d56-bef8-3952743efe53", "sighting--7e34addf-1ee2-43a4-9eb5-4ce1fd560a28", "sighting--fc604885-0358-47c9-a1e2-afc7ff75eb40", "sighting--4b1f1d05-117e-4eb9-9860-02ee1cfe0e4d", "sighting--8a64b2d6-b46b-443a-b37d-1a4c401194f0", "sighting--4d8cf1c3-8d78-44eb-a488-60953e42be51", "sighting--5ff396a1-4e5c-4922-ba63-515db10a4945", "sighting--cf40152f-a73d-4780-b4d5-385749145435", "sighting--7ea9a746-94b2-44c4-ad55-19885a1052be", "sighting--3e8c8c5e-e59e-4aa3-9026-ad889097a70d", "sighting--3e496cf4-0156-4521-a688-fa88f98b5db9", "sighting--a869e4ec-3385-45b5-af18-0c8c04b700cc", "sighting--a03ab07c-8c53-49c1-9837-a591623963a0", "sighting--87bfb99e-2572-4509-a53e-1fc64496bf5c", "sighting--03618f7b-487a-4b12-a846-a71765f1119b", "sighting--bdb83ecf-e256-4ff2-b220-065ad6365d23", "sighting--2c0e6ced-2971-4603-81ea-6773f39cb0a4", "sighting--8802d11a-8cee-454a-a145-46a8f115e6be", "sighting--9bb3fc63-4d4e-433e-aafd-d29249abd051", "sighting--a5cfdf4b-e6e7-49e9-ba3e-db30aca13d0a", "sighting--1fe0272a-a10f-4652-80d7-6dab82092bd7", "sighting--9d9f2149-f3e6-4090-aeee-0f664919d0bf", "sighting--9c4867e6-709f-4af4-bfcb-4c402510f2b8", "sighting--5b978ccf-95de-4e88-b167-7496f7153d9f", "sighting--cf8cc6b9-dbef-41e3-b30d-32c86b723a90", "sighting--62349f66-81e3-43be-aa21-d9344665f4bb", "sighting--31d3e7df-9d30-46fa-8d59-7a48c2b537bf", "sighting--7f8ce0ae-2a3e-4cf2-a873-6b0620d9bb1a", "sighting--a0cfa144-2779-43a9-b94a-e24b17d061c7", "sighting--a10bd03b-1991-4c86-b7d5-eb4df8faf5c6", "sighting--1285de5f-e33e-4c3e-9864-09334038ba42", "sighting--17532a50-7395-4041-bcc4-2199e676a099", "sighting--bf78915d-8e8d-45c7-bd4e-50d378b50ce9", "sighting--ff160c28-aa4c-4d10-8e53-3eb324c9d470", "sighting--4cf1a524-754b-4549-bfda-5b232aa12e5e", "sighting--473e96ed-8ff4-44ba-9dc0-366def464410", "sighting--b8dc9793-90e8-48ef-b01b-f4a8c0e3421d", "sighting--ac2bff30-c0d7-40da-a03a-1a3d3065b093", "sighting--6cbe5308-ad3b-4986-bc13-9362e04919f4", "sighting--803ef5ee-c49b-466a-9e7d-0c66d50f8e3a", "sighting--2b3353b4-8204-48df-bc5d-b21adb8e335d", "sighting--506039ad-9fef-43a7-8fb3-2d6f6b470175", "sighting--4feaffcb-4e0d-4fbf-bc24-0db138f1cca5", "sighting--60d82436-c291-4415-a593-a44d6c3f2105", "sighting--b8b63bea-e1d1-41d2-b3be-e5a4984f87bf", "sighting--f2fa4ca2-5980-476c-aee5-ad205f8d374f", "sighting--52cb914e-079d-4897-99d3-95deac414d73", "sighting--02e388f6-b34f-4fe0-a02e-2c9ab9a7d696", "sighting--7f4d9813-48be-4282-a3ba-ce422605d559", "sighting--6dcb4708-89c0-4178-bdf7-3494e9b51e2d", "sighting--6c8fbf3f-1760-4187-9ecc-6ae835b8b3ba", "sighting--5ddc8b15-ff6a-4b4c-8dee-1671d453fe5a", "sighting--45cfa3d2-e244-4c5c-9e26-39255443dda1", "sighting--04fc6719-d181-4fcf-b25b-f33f5b3cda7d", "sighting--cf84523d-926a-4b58-ae1e-6e3898ba3faa", "sighting--b336107b-d1a1-43b2-bb75-7fdb5c088cb4", "sighting--f896c1b5-822b-4386-9788-a23757eb5fb5", "sighting--a1cddbbc-7532-422d-9e1f-a84efad9055f", "sighting--529ec559-fff2-438d-ad5a-20107dd2e6f6", "sighting--e3aae38e-e9f5-4bab-9d06-3fe2e12a00cd", "sighting--8a0b4efd-3b74-4022-aeca-49e2eb53fd9a", "sighting--e5cbea3f-b3a1-4b3d-b8ce-45a13677b085", "sighting--fdcac37c-74fd-462d-bf7d-908322ff92b4", "sighting--03414a05-7522-4b26-a495-e21bb3d4152e", "sighting--6d6be660-a60e-4761-8d72-9faf677125d9", "sighting--0a0b9947-0e2d-44c5-9319-1b6c4c7f638e", "sighting--ed706e2d-e378-4fdb-9f8e-0c1f567d113a", "sighting--dc4cea78-d1b9-4887-a3bf-fa84b273a86d", "sighting--27cbe8d3-d561-463b-9036-2e84a4d09b55", "sighting--d7c0a353-c554-41cc-88ec-be047d8c85bf", "sighting--49789229-8557-4b60-b1c5-c33568826c4b", "sighting--8d18d912-7b2d-4e4b-a435-9b754bf90de1", "sighting--b6bfb86f-f125-4471-a87f-4e158cc0b006", "sighting--77edeeb7-b3c3-4772-a591-ebc1f1de7627", "sighting--ad5f9c0d-45cc-4b57-9b23-e88e8a8a9e72", "sighting--143f7323-eaf3-40b8-a04b-3fe394095fd5", "sighting--abce6061-ed2a-4ef8-a21b-37c4fe124208", "sighting--77dab4e0-17e6-4939-b56e-2e3dbd4d769e", "sighting--ae4a1846-16d6-4dbe-8f15-3e30c1579264", "sighting--28f36aa4-99fb-418d-90c1-87cefc72b7e7", "sighting--bf566c48-26a0-4f39-8593-8951fdd436b9", "sighting--43d3d216-17e3-413f-bc8a-9a8683139aba", "sighting--4a65f176-1783-4c43-a245-0b3e8c545db0", "sighting--29ebf4ff-08c4-4a3c-82a2-0754e816e919", "sighting--f80e455b-e4cd-4dbf-8ece-62c3b6b162e1", "sighting--17c3406c-e6e3-4055-ace5-cebeffd1260c", "sighting--9b8aea68-9b30-4ac7-b915-1c369be0565a", "sighting--5d4d52ac-4219-4cbd-ad90-ac8b23cb6705", "sighting--8b748a63-e322-40d3-aad6-65124846a464", "sighting--1afa4dec-b429-41dd-a14a-6441c07942a2", "sighting--1c8b1838-79f3-4b6f-946c-dc4517df00e6", "sighting--2877d56f-332f-4227-9eb0-ab2e0ac6c670", "sighting--d9901101-95d9-46c1-9643-9864e3925ef1", "sighting--9f4c4b78-f974-4e3c-bc0c-51c3e3b3f9bb", "sighting--adf9fa1d-131d-4a45-a2c9-fd7926299023", "sighting--06c5fc4d-1de6-46f8-a38a-ca830aa44b76", "sighting--17b9f88d-0c57-4179-a589-9fa938d133af", "sighting--ba54c61e-34aa-4d58-a92e-2b1ff74ab0d5", "sighting--a968afb0-afac-49db-814e-1e4ebba065c9", "sighting--907f6861-3837-4e5e-9538-1d023b0a08aa", "sighting--b2ef3987-9727-4819-b995-e4a3268960a5", "sighting--ecf76216-9c6d-4232-948c-3c64f97b06cc", "sighting--acc5c643-7c15-41b1-8925-90318f623b2f", "sighting--7435506d-b9cb-4b71-b932-239f0c3b45c1", "sighting--d45e409d-7b60-4b6e-9d9c-561ed83ded2c", "sighting--5816feb4-854b-47e9-8dc6-91b83a8ccb21", "sighting--702e2229-4be0-452c-a05e-21a88b8821b4", "sighting--ab0cafb9-fdd2-41e7-afc8-2f33b9eb1001", "sighting--2fbdbc36-0485-4c04-aff6-d1c7097dd6f5", "sighting--11cbbd86-2412-49db-9aa2-b90f851ac08f", "sighting--5cf08b2a-845b-483e-a1ca-f6c93ac714a9", "sighting--e0e122c4-9f63-40e2-81b8-137819dc58b6", "sighting--e23ba5bc-173a-457c-90ad-be207ca2cf70", "sighting--8ea1fda3-7269-46d9-ab80-162b46c31cd8", "sighting--7bc83c29-dda7-4a5f-bb47-4ab195e4bae9", "sighting--cb2c8364-6e13-4746-8715-8fc8c2fff697", "sighting--b26a0d9a-c3d1-4430-a0f3-62272678bba5", "sighting--9f1827b0-fd30-4fef-8212-bcefa24cd7ac", "sighting--3662749f-978f-43c2-99e4-4030f52300b2", "sighting--54d3498b-97df-495e-bae6-c06a1b5cc9f6", "sighting--08adb3bd-a61f-441f-b328-ba4be04c41a0", "sighting--64427379-66cf-441c-b0f9-3c556f003591", "sighting--c2c08ac5-d73f-4e99-bde6-5c19c04a5d7a", "sighting--b4695ccc-e5f2-4997-bab8-a2f3c6282e71", "sighting--2ba28a25-d28c-4d79-8738-d53749305ef9", "sighting--0d91c6ca-866d-4d38-bdde-667d5e1b3d03", "sighting--bb04ed0c-33dc-4258-ac3c-0a655b7ad9ff", "sighting--8c135447-f00e-48b8-b995-b9aefa04bb81", "sighting--d69812a1-1eca-4bbf-99fa-f20fc0b589db", "sighting--ff519909-83b4-4e20-a807-93e0e966e521", "sighting--a5b0c11e-13c8-4a6e-8c1c-d53647a6288e", "sighting--962f5487-9e95-49ff-81f7-06d6a4d6f217", "sighting--634dfc8b-32db-4d66-86ef-30145591600a", "sighting--08ce4be3-1fe0-4e60-af78-61017b38ec93", "sighting--006fec3a-f3e5-4ad9-a251-4a96aed3cc12", "sighting--4f4b5ac2-e762-4fc2-a344-ec52c4a30074", "sighting--133a85cd-b59d-48e7-b9cf-a6e3d1b85a92", "sighting--2defacdb-5e4c-4883-a455-939fc55b17aa", "sighting--fea947ac-bc2d-4701-87a4-13d8d5f1945b", "sighting--e47ce5a7-4349-440e-8460-09ef87ec9eff", "sighting--ce985d56-deae-4ea8-a80c-0cb54bb58bde", "sighting--4f0f4419-d150-4045-a4d1-ba7e80381ad9", "sighting--4e5e87ae-d840-4106-b09f-7217d203fbb3", "sighting--dfeec762-d19d-4420-a7a2-dd64e0f89ff5", "sighting--cd329cb6-2b67-41c3-9fb1-608ee1ca2835", "sighting--4cc99ecd-40ba-4958-bc69-48bc3366cf0b", "sighting--fc4ea3fe-6ce8-45cf-bcc9-c1b17c916609", "sighting--ac5d1608-8264-44d5-bbc1-a73294f94bee", "sighting--c0ba220c-301a-4eae-8a1d-2d6d3cef135a", "sighting--fd6abe92-97e5-44aa-9ed2-18004d00802b", "sighting--71d50513-cc67-4be6-8ac0-c07d032c3d14", "sighting--e2587bcf-1dea-40e8-a16c-b4ffb7268d9f", "sighting--392a2170-a495-4d0f-a4de-20667a63808b", "sighting--72c2c457-935d-4f0a-8576-a82e8b9cf8af", "sighting--5d33f7de-cdcf-4d91-8473-02d4a8b2fb5c", "sighting--041d1bee-b896-49fe-bfef-4597ac073dc3", "sighting--f50552c8-c731-4c31-88ee-4881fc099de6", "sighting--3d400ba0-7f75-40fc-845c-5e95fd950d43", "sighting--158a0823-a553-443f-9c88-13af10de467a", "sighting--317d4e50-ab8b-4032-9eba-d6e6c82be685", "sighting--4e012d1f-e932-46ac-9785-afc8f215c015", "sighting--c4bfd44d-cf49-4614-8c27-5a2f136a874e", "sighting--83c74025-b3d6-40ab-a560-7eb4a2b87c29", "sighting--f98961a0-6db4-4515-b1ac-1efdcf2a1111", "sighting--6b7a8704-883c-4300-8053-55df3587c600", "sighting--bc7c5598-544a-4d35-a8da-db82fb613aaf", "sighting--bf7d50b8-110f-4437-be32-f1378e109ed3", "sighting--c08cc21e-07da-4056-8d51-26e9cc3729dc", "sighting--4f2bf7ab-4201-4380-8667-735370f7721c", "sighting--767f5d8e-be2f-4688-8f2a-0e35c7dfd111", "sighting--91e96180-e3ce-4af6-9951-f11145b560ff", "sighting--22a78e92-be9a-4e49-93e2-9821ea0f46a4", "sighting--140388b0-8f68-4f13-8863-b63da0210fa4", "sighting--4a1ad9ae-585f-418a-bf51-2fdd4d8d54e9", "sighting--1430b2d6-21d1-4cf9-997b-30637d976110", "sighting--7742fec2-fdcf-468e-a481-9f7a7d4def12", "sighting--92f5e75e-1b24-4cf6-be93-f56f4bcb9410", "sighting--bb8e5a39-d262-4deb-8b89-70c4ba3fb442", "sighting--014c563f-da9e-49e1-b22b-5f4456988486", "sighting--1b8d752c-2d58-46a9-b695-30f64b18fb2a", "sighting--d54864a2-5436-47e5-a0de-0730486a6606", "sighting--eb1b7ba4-00ff-4548-8054-bfd1e237ee47", "sighting--850087a2-f5ab-4926-b3db-d4c94cf54ff8", "sighting--0fb2b80d-4c70-45b3-be3c-1a49aad20e5a", "sighting--4063e35b-099f-474c-a8e5-06c0a3834a51", "sighting--bf879e56-0295-4317-bd80-488fc64ecb34", "sighting--eccba6a6-9be6-461c-9e87-187b1c56a178", "sighting--27fbd897-8819-4069-9c1e-c4c214dc497c", "sighting--9f3fe1d4-00a6-4f52-bb1e-c766a5227d40", "sighting--917d5554-ef43-4262-afc0-4542e770628e", "sighting--635342e2-104b-4f76-a4d1-9c433e829fee", "sighting--fa6347bb-4182-4695-ae57-93a0a76dfca9", "sighting--4181cd54-1f2b-4b79-a0ac-0e7fda1d162d", "sighting--63d38182-ec7f-4232-91d6-e51ce6b74663", "sighting--aaec9b07-2bfa-4a9f-9e7e-9f72606789ff", "sighting--286a7465-23c6-4d43-a194-254560351d5b", "sighting--e748588a-ea77-4165-bf2d-07a15338d27f", "sighting--7415a817-3cc7-4bdd-a850-21bd6ac623c9", "sighting--b7ba1262-6ff1-42a6-8509-b754587dc002", "sighting--568f5455-88c8-49bf-91a6-7a34ca5ae31a", "sighting--28fa0d61-6f69-4830-a881-e028a805e408", "sighting--0ca69eea-7a17-4f43-9f0b-f0e1815ed044", "sighting--6261f402-8923-4255-a8bc-38396c93da47", "sighting--4defd4ef-1a21-4cf0-879a-b5a8437a15bc", "sighting--6392e05b-a02e-43d5-ae15-5e88b9a6bd80", "sighting--da85ea75-7d89-4b4c-b357-96103aa4e1d4", "sighting--294f9f17-4827-43d6-bc7b-9847f94f8ef0", "sighting--85fe1b30-f417-4eca-aa28-e379bcb40e7e", "sighting--daede982-5796-44e5-950c-3d4b3829c369", "sighting--f6631294-3c03-4310-a550-25a5766cd22b", "sighting--f1715265-e9ae-482c-a99d-4e19b5c6799d", "sighting--43fd6859-e0b3-4adf-a4ce-bc52d61b80c7", "sighting--a4d468b1-a74e-40e5-9546-88b075974723", "sighting--28278802-4429-4000-81f2-e8404e4f8f9d", "sighting--36bbe45f-be93-42f1-adfa-732970a57167", "sighting--4579a706-9c5e-486a-b15c-3acd361e2200", "sighting--a6fac9cd-7992-49ab-b468-2e5c55cf6ebc", "sighting--47d0c666-c934-4428-9a6f-551928c12c14", "sighting--270d384e-7f5b-4e56-a0d9-b06914408f34", "sighting--91c3656d-7560-42a0-adaf-91308255a015", "sighting--579fd984-45f8-422b-9625-cfc057485576", "sighting--90d11cbc-1d84-4662-bd95-f5011b5b0ff9", "sighting--90a65aa9-0fc6-4a62-8d93-d5c69ac667c0", "sighting--2ce0f3f5-249f-4486-8e81-a67d2b847bf1", "sighting--bbd9eca1-d770-4810-ac22-2408bb618dbf", "sighting--28613353-afa3-440c-a322-97d19283a800", "sighting--8f88816a-94a5-4f19-89f0-6ba0c1895c2e", "sighting--495466a4-a876-4d13-9da4-b4e449714363", "sighting--bf823616-ed47-4fb3-ab42-9ce651cf0764", "sighting--468f41ac-3271-4e4f-bc5c-234778ae3fa4", "sighting--3c632162-7567-4ba4-a130-c5f52161b843", "sighting--efc8bdd5-326b-432f-ad00-6f5313279d52", "sighting--7a12ab2d-6466-4922-a100-8c88bc9352a1", "sighting--c4749cfd-55fa-4bd2-baa1-09194dcefa53", "sighting--92465853-0933-4c3f-90bd-b8f9552d19c2", "sighting--9846c568-646d-4472-a20d-67fe306748fb", "sighting--a7375957-2d5e-49ed-a2e7-9ff9bdcc9eb8", "sighting--f4c25948-4c16-4a67-aac8-ee23be8085a5", "sighting--c72242aa-af74-43e1-a325-bd25e54e3748", "sighting--44b19edb-e7ee-4e6f-9444-15a9559d7580", "sighting--4332d541-996a-46ef-9254-5dbacb876d79", "sighting--d889e0be-9090-4ced-97f4-50ac0203ced3", "sighting--fee53004-6f44-4393-8cf6-444d85597754", "sighting--f7304696-7db3-433b-b5fa-ace503a92a7a", "sighting--4698fcbe-a0e8-46d3-87a1-ddec5a9fe0d4", "sighting--bd4cfae9-6b0a-4013-8bb0-032725a065bc", "sighting--0789ff50-4e02-4bac-acdd-ca831e6e895c", "sighting--7dc8c4ea-e620-4908-a613-67dc04b0e1f0", "sighting--36234186-96b0-4fea-be94-81846b4d9c18", "sighting--6f5807be-fb1f-4746-9d8f-dcb3e08fdcdb", "sighting--66fddaff-633f-4766-98cf-258215019272", "sighting--9ff4a983-4c55-4c9f-bb87-157336ec28da", "sighting--7df66f3d-2224-48bf-9ec0-c78912e6430f", "sighting--26f70261-ed4f-4e88-a70e-fec898ed3215", "sighting--1ee44de1-de18-467d-ac7e-94f901b9437d", "sighting--b7d32ab1-7e40-44c4-8685-6c4454b40861", "sighting--a43229a0-5ea1-4e9f-af48-be6f72b7900c", "sighting--be37f2b6-1880-4072-87dc-749d2c3a6074", "sighting--ee1198f2-1944-4918-8d68-14281633cea8", "sighting--41f89bdc-0e66-421e-b71f-a9d407a9645a", "sighting--5887cd80-0a89-46da-80ab-d4e31e7ea3e7", "sighting--7dd13e3f-9d4e-48eb-8572-347f5bf459b2", "sighting--eaec0c9e-f51d-495c-961c-607f12fa9fa0", "sighting--78c1bc86-5ba2-4268-826d-a1dd0209b17d", "sighting--5e59b7fd-2ed9-4eb4-abec-9a8974a79fbe", "sighting--939979a9-ec79-4cff-83e1-4805f3b499a2", "sighting--bc10b226-19f1-47c3-a950-3b8a67a178b9", "sighting--f4610093-777e-468d-869f-4e2ea208877e", "sighting--8052550a-6eb9-45c0-b624-1c48a2300fa9", "sighting--0649fe1f-6c27-432c-9435-3a36a8c27345", "sighting--67ce968a-5c0b-4d81-8bb3-33cbaa7ea8a2", "sighting--e87f7e84-90ff-47d8-b904-66b8e3700eb0", "sighting--7870182d-4f62-4316-a2ad-1272b32edfff", "sighting--1bfdbf18-56c4-464b-b8de-80219799a26c", "sighting--bd2043ac-ec3d-4f27-b623-e5aa4926988f", "sighting--f50186ed-9dc3-4ec7-8cd7-0e7464ac1dcc", "sighting--92899899-44e2-494d-8fef-a2981518834e", "sighting--2847341d-f6db-4c83-a078-3c2f613860d3", "sighting--d829e083-0eda-453f-88ae-da0dd99de180", "sighting--5b21ab50-e4c3-48a3-946b-9d0de933af20", "sighting--875699ce-17f3-4ce3-8929-64ae55ab0055", "sighting--2f80fca1-1cfa-4d98-9640-58a9b3da1a32", "sighting--48b49989-29f6-4ee7-b26d-7cb4a7f39618", "sighting--5c5b777e-917f-47a2-8757-cebefa07e8ae", "sighting--9f95b0b9-916a-47a0-8d5c-a4f20ab04ffa", "sighting--ca8e490a-ca69-4d06-8242-74d2a63288ac", "sighting--fc200ec5-3334-4798-9449-65e537f1ea23", "sighting--10c22863-f68a-49fa-a0b7-fdb6551d995f", "sighting--82ae7c1a-5f01-4566-ae99-b645b7a2e7c1", "sighting--952198d9-1af8-4094-9929-2ad539e3c568", "sighting--592be9a4-0468-450d-a961-3325b6ffc75c", "sighting--712e9e01-1b8e-4320-b2b6-4b68a7f83b43", "sighting--2c6d66b8-7537-4583-9748-5f9587ec0f38", "sighting--4fcb4d78-4329-427b-9733-f9ebe334e3ee", "sighting--98272baf-644c-443e-b4e4-f86e1b979c01", "sighting--6fd5ba84-5657-47ed-941f-50bd48b7d76b", "sighting--475cb65b-72d0-4b51-bac7-b83b1b7f1166", "sighting--03875f69-8b44-4ad8-a59c-66cdf093a801", "sighting--4a9b13c0-e13a-4113-ae7d-7b60d6555de6", "sighting--9f60285a-8be1-42da-a6c9-269b208370b9", "sighting--78fd04b5-c641-4ac7-89ed-35fd06090423", "sighting--b0ce1378-236f-45e3-bcd7-437077165302", "sighting--37f8db60-48d2-4dfa-a01e-ea1737f59172", "sighting--75b05013-ca4c-48fc-8e65-daa1e7f72b6c", "sighting--4e499205-a81c-49bd-bc49-d0da04d2ca3a", "sighting--86e197a6-07e4-4dab-85e7-cb641918e3ff", "sighting--16384230-535f-4baf-8c1c-e0bbcfc0f650", "sighting--15b64807-7e59-4865-b35d-91246bc58a74", "sighting--1b48b7f8-2334-4cec-90a6-9d4cc8161948", "sighting--01bfc86c-2004-407b-9fc4-b2737c0d0728", "sighting--1aeee4e4-0f4d-4336-9d57-2e67720276d3", "sighting--7bc2482d-39b4-4f80-99ab-2b9342a91e9c", "sighting--b92461f6-b0b3-48d2-8177-c8bf3a06e9bc", "sighting--893d9c97-b635-4992-b635-f1981c372bc7", "sighting--c1c8179d-342d-45ee-8a29-b8fed6c70e28", "sighting--72d2f0a5-9b5a-4134-82df-d5ddcd487836", "sighting--3d7fc602-a15c-4ed0-8f51-ac876da2c2ad", "sighting--6866034a-7c32-4c07-86e4-40c3c489c32b", "sighting--777b885d-4371-4936-a919-2e0f5d0a5a4b", "sighting--b58fcaa4-011c-4a97-a90e-28778897c747", "sighting--c0f236ab-7b58-402b-9544-dc85abd8e5ee", "sighting--f2e30d0d-7d7c-417c-b8fd-d706880d59c4", "sighting--4c74dd06-811d-4e01-85d7-a1016474f453", "sighting--0829d590-9265-48b7-8199-e69851f5708b", "sighting--b1ae9f23-7b3f-46ab-89bb-9fa9fa6da078", "sighting--e7cc4cdc-c79d-4214-97cd-0150c609ee01", "sighting--246157e8-c7b8-4fc2-bac2-97db762a8f63", "sighting--90c6d0f4-6ca5-457a-8c12-1c2f8ecc555b", "sighting--bbea1a0f-070d-4816-b4d7-c0c3c1bf8fcb", "sighting--db0ac243-cfbd-4043-b9c7-a6e4da2521af", "sighting--3c1d4e51-5b99-42bd-9556-01e2fb80d595", "sighting--8e1ee2cc-a184-4e93-9470-f6a3874cd395", "sighting--88b62b4e-4a3c-4763-9b5a-209beeb53fd2", "sighting--f9ba5931-43f4-4a75-9634-266193575f84", "sighting--5dc1de36-dfac-4e82-949b-a3e8a3dc0139", "sighting--8ab6fad0-3153-4b32-ae5b-0d7312be5c61", "sighting--1820a956-bbe2-47e9-a863-69d8fa517c37", "sighting--e4dafa66-7a61-4b25-9603-ae263e67e2a7", "sighting--b989991d-7ed1-49cf-9533-ce0b083ac5bc", "sighting--5b4424e0-c007-492c-a798-2b3d7a8a5477", "sighting--3e7a6fd1-6aeb-40b1-a789-4b1d8a804d2c", "sighting--24a8d1df-a04e-4910-96f4-bc5652e11165", "sighting--00581ccf-6ae3-4f2b-92ab-47b160e726c9", "sighting--6b0423d4-1bd0-4be4-b4d5-dfa51280708f", "sighting--a001ad74-1aec-4e3c-8274-6158c74bb830", "sighting--2a896bf4-ab19-44f0-ba0c-0a9e4f164e39", "sighting--ef322ac0-3bd9-48aa-8e4a-4235a1d11c5c", "sighting--58e071b1-be52-44c9-8908-2487c929970a", "sighting--e987de8b-4723-4ebe-b742-7b0298159d94", "sighting--ec3c6562-89f3-4974-a861-688f29a1ea03", "sighting--1db38e14-b05b-4137-bf24-9528c886cc4c", "sighting--93541fc2-7c4c-4a8a-9afd-2bbab0e5bfad", "sighting--2ef3b767-5c71-4832-b742-e86b630ef1fc", "sighting--5b21ba97-c7e9-4f2d-931e-4f5217415a25", "sighting--c7df632c-b85b-47a2-95b9-42dbc1df6a52", "sighting--ea9cac1f-4ae0-4caa-9b71-c241f1b76105", "sighting--bf42c21d-e5c9-4eac-b7b5-1388e5f75565", "sighting--e960afc1-fd25-408c-9db2-53fd6955dea5", "sighting--9769e76a-b447-44ff-aa4e-db7adf5e969e", "sighting--4d00e7ac-aca0-4cba-ac63-dd6e39a16223", "sighting--262ec251-061f-448c-baf4-f1d738d1c7d2", "sighting--be62213d-dd58-4c5b-ae10-696c3eefedcf", "sighting--8d85c382-c635-46a8-9bf2-58371c1a431b", "sighting--aeb03b99-ce59-45ef-b519-ebf3d0f72c18", "sighting--a1097654-8a98-4433-839a-3f556b481fd5", "sighting--79646b02-f8dd-4667-bc13-493844fe101b", "sighting--e2c89b3d-edac-4ed4-9517-c943f894dff4", "sighting--ec16443a-85e2-49f0-ac54-8b5f06ced280", "sighting--bf2ecbb5-9a49-4300-a9f4-b6045a240def", "sighting--5b058af9-bc30-4f2c-ad65-4e42dca65aa6", "sighting--baca6162-c6c3-4ad5-ace5-b1ef6e1cacd1", "sighting--bb522bdb-db7b-4856-b1e7-2c96db469f0a", "sighting--a6861e43-7a04-40d1-b52c-1c8fe26d9ad4", "sighting--88082bc1-6b16-44e3-b458-1729aca48da3", "sighting--c60a5d66-a6c8-4669-8001-821f48371f41", "sighting--433f79e7-315b-4034-b9b2-718d81231e1c", "sighting--87d7b95d-2d1a-4047-8e2d-49a1cf23c7c7", "sighting--b6f50114-4a0d-4262-ad6f-6a929ea31249", "sighting--5356fc0d-3290-4a39-9d44-5aff5866c7c6", "sighting--05debc2b-a854-4cb9-9df1-ebfe2cbf23a1", "sighting--a336c40c-53fd-4f86-96ac-244eebf92f37", "sighting--550834e0-45b1-4f6d-b6aa-f23772674bc8", "sighting--098e00e9-cef8-4ded-a84c-e8442b9d0c96", "sighting--9d3ad40b-3594-40d7-bad7-f513de36f6f2", "sighting--ba32df9a-21a2-4b4e-8637-779fc4c3c5b7", "sighting--ffe37170-3de3-4eda-b9c4-444aa2944daf", "sighting--e644be62-328e-4849-9367-82e1883394d9", "sighting--0b8a9762-f280-4d35-9f05-7112b5121de7", "sighting--1c29adb9-c628-4fc3-8049-1adf4a7100c9", "sighting--ebdb504e-87ed-4110-b696-a28cd1ebb946", "sighting--c6f80aac-2e63-4b42-9bf0-b4c3d5bddd49", "sighting--4276d2e7-bfb5-4e47-b7b9-a6c669b1caba", "sighting--f82b8d35-6cd0-49de-bc3c-dc2042191b0d", "sighting--a83c4e8c-1b5c-4c19-b107-a444bb1f4ff1", "sighting--e269c470-dbb6-471b-9ae9-bf4714261031", "sighting--43a02b61-5e82-4200-8916-75e6650adb57", "sighting--dcbe3d1b-c02f-40d1-8a50-5604226f920c", "sighting--1a250b8b-87f9-44b9-a3fa-0414b2b08ef2", "sighting--2faa4b14-7105-40aa-a818-178cb5647ac1", "sighting--b7f1f21f-d108-4bf5-8f09-808b0ce11b07", "sighting--2b3684fb-6576-418b-8391-71d07f6f8ef0", "sighting--1baf0be1-09fa-420e-a15e-f70f4b750c17", "sighting--d0deeea1-408e-4922-bbad-8d2fcf36ebc1", "sighting--86df2d92-5f28-467c-a975-2d2c84530da3", "sighting--4b4bd3c7-cf19-4ee2-9042-e6a7b2f7c4d6", "sighting--b6dee70c-9e5e-48e3-8bd7-453920adccdd", "sighting--4d5ee265-efaf-47bf-b0e8-2927f00ebe05", "sighting--2bb94e26-c0d6-4140-8436-5ab58fee1026", "sighting--d73b854d-9aaa-4b9a-84a4-02ce27d4f7f1", "sighting--2ca409f1-7b8f-452e-9349-95383781b257", "sighting--7fad42e1-a243-4fcd-9a34-2af67a690eed", "sighting--036e11d4-3374-48af-b998-5fb98ca7ab7e", "sighting--254cf5db-364b-4308-a5bc-9b639d197313", "sighting--00f657aa-423a-42d1-9a59-4dfbe37a8c86", "sighting--a30d9839-c5d1-4326-b00a-de8508727a11", "sighting--9dcc7b81-2563-4f1c-8e00-a1cf7b93c6b3", "sighting--0b752a5e-dd1d-40c3-8a80-9a71d955f9a3", "sighting--bad88691-68a5-415b-b6c8-317ead6f5a8a", "sighting--529bd1fb-6b32-41c5-9a15-9ef6ed6b7640", "sighting--4454c5c1-d95d-45c1-a6f5-a980908f17c8", "sighting--1b5c0402-836f-4a70-899e-b61394066521", "sighting--b2055d5f-3c81-4c74-b3c5-026abe653654", "sighting--e98732b9-42c1-4fc3-b177-8a8fb06f0da4", "sighting--55f33a39-2bab-4066-9adc-05d2a6d4199d", "sighting--fb7fe700-7a91-49e2-a6bf-9041c8ee29f3", "sighting--dd5733c4-e22a-48d9-bbd0-38b6ff9dbacf", "sighting--d6d03285-3a9c-4854-8861-91129e17fd24", "sighting--ab79523e-16b7-4db8-ab77-4ad8db4e2865", "sighting--d02c7e61-da4d-45a3-a24f-249f69502290", "sighting--d5aaeac7-8b95-4ae9-940d-bb8835f5d86c", "sighting--5ee2178e-689e-4bf7-8a7d-922de57a8285", "sighting--b155a531-936e-4251-b299-8b6c7b7e41b3", "sighting--ed5de708-4241-44ff-b4ab-7b115b85d004", "sighting--960e8ba8-452b-4ca4-bf9b-975bb00ff3c2", "sighting--3c42fcdd-564b-4c25-b662-7b206eb6f12a", "sighting--b2c9e9dd-7c3e-4f41-a8b1-1fa890c3f31a", "sighting--e2ff9a14-d7c2-4a30-8474-0325e549d062", "sighting--f2cb1085-c941-43b4-8173-bc0efa7786b0", "sighting--32dfbcf1-fa2f-4150-bf6c-175b6f105163", "sighting--8bced84a-2426-4b2c-b5e0-a392b64a8267", "sighting--096b4e04-eced-4ade-97a7-2f9aa771daaf", "sighting--9a8a2102-fbdd-45d4-8571-0f788c03e8a4", "sighting--04ce5e61-2210-4ec9-83b7-440f02972747", "sighting--4a77f587-e0b0-4285-9d74-60d71560767a", "sighting--ef6c3444-66eb-425a-9c77-c7a0177c1b70", "sighting--f4df6c67-c031-423f-9dce-6efd1a11a921", "sighting--933b4a37-7f94-4803-9960-c9993337e100", "sighting--05755d30-ba45-413d-a77b-2afe787d8e11", "sighting--2025b03e-15d9-42ed-83e2-cd25c8fea3f8", "sighting--3a8e7a1d-9c36-461a-b2ed-47f7ead3b7dd", "sighting--fed1f1ff-33a2-4f52-a92f-08d0bd92568b", "sighting--a0c8e4f2-6a7b-45c0-9749-282b96737ed9", "sighting--fa79150f-07f9-47e0-b8bc-7bbcb0f9d1bd", "sighting--6905bf2b-9da1-45a8-98f0-d670bb74e8d5", "sighting--90708e2a-42a7-478a-b079-e5e42909a847", "sighting--7aeade9e-f71f-40f0-9602-2925cee630d6", "sighting--163e9558-da1c-4db3-8de2-5c9bbb8631f2", "sighting--ac82f261-a047-42dc-8f63-b29d5a08d365", "sighting--4dfeba95-04fa-44cd-9e95-219fc604c34f", "sighting--fe10e34c-c644-4b2e-983c-a1705e112bc2", "sighting--891aa0a8-da73-488c-ba57-f74dd5c6fc01", "sighting--1384eddc-5a6a-4473-8d07-85824030b668", "sighting--ed78bf58-bff5-4d53-b039-c6f7ed795432", "sighting--40161edd-4138-4161-9e30-e7a0d82ce2d6", "sighting--e1959b63-54a6-4927-8bf9-3869ed500ac8", "sighting--4c88e34b-5bd8-4b53-81ae-bb60591aa334", "sighting--d290a1f5-29fc-46cb-b60c-53792ac36ef5", "sighting--76fb5683-06c6-46db-9798-717dd7b5d7e2", "sighting--81e64ffa-a88d-4a5b-b553-eb3346308bbb", "sighting--221a6b8a-f160-4b55-bc20-576d53080b4c", "sighting--d7cccfa3-d357-46e1-8cb5-7b11bbc3a1e4", "sighting--53f2de18-3d43-4d06-a8e4-5c5c9e86491b", "sighting--1d591968-25ef-4d52-a556-69ae3d1c308b", "sighting--c5d1d82c-f256-4cd5-8267-01e41cdbd4d5", "sighting--ae95ede1-89b8-42a9-9a92-6d973352419d", "sighting--a179a701-7586-484a-97db-47e4285aa109", "sighting--a27ac586-2f05-4561-9446-113103658db4", "sighting--9da60e08-49a7-4baf-a77c-0dc00e12aa7a", "sighting--2f6464b6-8c01-418d-882b-42b7933f4f0f", "sighting--76da4672-7241-43f9-9c27-1f5c0bb4e399", "sighting--8444708a-1d9f-485a-bc4f-7cb9db6a43a3", "sighting--31de07d5-80fd-4e62-b7a4-653fbecc302d", "sighting--0c63bd9e-d8c5-4545-b1b4-3f9821d93abc", "sighting--82a07b68-fdad-4309-b426-c1c0bad9b0aa", "sighting--82c6d7a4-db5f-4b52-b0fd-6316405a8244", "sighting--762a77d4-359b-408b-b02d-2680cc028cec", "sighting--aac6ee34-eb6b-40a9-b35d-2bb491d10544", "sighting--9d1b505d-d0bf-484e-826a-7316bcf1e6b9", "sighting--2f0df2e7-f160-4f49-8348-d53b063741fe", "sighting--e66175ee-1c4c-4735-b569-a7d9a56ccc83", "sighting--285e2b54-fabb-410e-bcfe-d3a8286fa7af", "sighting--fda7f09b-8a1f-465f-9851-e2f3a993a0e9", "sighting--87adcec1-8b85-4c5b-87d2-7bc1370297fa", "sighting--d3eb4ea8-3826-4b6b-9032-9b7bce48167f", "sighting--1ab46809-8f41-4bbd-8fb3-276b16021f9c", "sighting--58a4c32c-2f9b-4c3d-8bed-7b5932baa93c", "sighting--f0213168-13b9-4491-98f8-dcae4b7e6bf2", "sighting--cf82ee07-06bb-4b82-8876-269d217a87bc", "sighting--e1e9f57c-093b-48f6-9cd9-f2aa67d46890", "sighting--9835c0da-27f0-4294-a5fa-c0e418826bc2", "sighting--658561db-ddae-462e-869c-115af2aea5c6", "sighting--cc53e7bd-776f-4cc5-9f3f-f5621e9a7378", "sighting--f40d3ffc-9c2e-4333-bde2-0990cabcf286", "sighting--75fa5136-62f7-4998-9ac1-9b8a94c1f90e", "sighting--ee360c08-bee4-4dd8-96de-02e4e78fdcd8", "sighting--b5c14065-b202-4891-b657-30000884e7da", "sighting--9bdd5d0b-89ec-4c97-a52f-f1c36898ee90", "sighting--cb3205f6-9d4c-410f-8db9-df063cd3f15a", "sighting--59258825-a37b-4ec5-940b-d9e1c7e34cc3", "sighting--9c91ab8a-867c-42c6-9e8d-b651f209bfab", "sighting--3840347b-13f6-4258-afa4-3d3d1f7f9247", "sighting--e2bfc224-17bf-4036-abe6-5b9ad7bdda5d", "sighting--b0fa6f61-d042-4a21-81a1-c3bf9a6b7786", "sighting--c70935b9-6bd8-40bc-8ee1-299c3d69765b", "sighting--dc4d4ea5-ac31-4d94-a9fd-435513581196", "sighting--e93833e3-f7b0-42ca-a03f-d54cb802df1a", "sighting--fa085dbc-7de6-4872-88ed-584528524717", "sighting--90d5cb08-ea91-4bdd-a32f-5789ec914b9e", "sighting--7fb8758a-4fa5-4d72-95f0-8843febc6142", "sighting--01315c3b-480a-4b9f-aa9d-396214cf6bf5", "sighting--ae1d6928-0e57-4cad-b082-5a878fed3929", "sighting--72004715-27ed-44cb-ab37-0a2463b2e19f", "sighting--8f453c8b-e83e-45fe-974d-517d9cd22085", "sighting--c783f9f3-fc75-4840-88cf-5d159a6b5eca", "sighting--45d544a4-828a-4428-8199-a090cf095fcb", "sighting--596f03d4-a5bf-47e1-b5e7-32a30911d9f0", "sighting--020eb9fa-74ac-4b84-b525-38bdfc2162cd", "sighting--f429faed-81b0-4a67-bd3f-25c9d9ce6ad6", "sighting--805dbbf9-4d7a-4ba1-aef5-2aee21ef008f", "sighting--2a68dc74-5467-4445-9cf6-1faad8cf7a11", "sighting--143d5421-8d68-4a41-bc26-b89e2235ee8b", "sighting--aaaee37d-4478-4e2d-8101-677a10f3b23a", "sighting--fa8e0a3e-f5a5-4e62-9b69-47e315c1a53c", "sighting--47eb5b15-dbe8-4e7a-b226-65ac9fe33595", "sighting--2ae16a8d-fb3f-4c0d-a179-4efa91c3570e", "sighting--ee9a5312-79fa-4020-af45-ac90fc0d45c1", "sighting--87984531-906e-45e3-afea-a338cd0d5c53", "sighting--f5f74524-ae62-4875-9650-b6f5a2e2440d", "sighting--361e02b4-1125-494a-bba3-c791c2c73c79", "sighting--2914e653-dc81-4024-8a51-a11e7dcac59d", "sighting--a2c307c5-9f9d-44c2-8d19-138f551e7a3f", "sighting--a75d27bb-d2f2-4de7-890f-253ac9937c35", "sighting--e077b76d-38ae-438d-b1f9-d3fd8dd2c436", "sighting--3511fb25-08af-4b72-8f7b-806385145ff6", "sighting--e7c36690-c267-41e7-8bea-47a5152651d5", "sighting--c244d457-d6dd-4f42-8c4f-29ec06c93119", "sighting--580e5f7c-00bc-4a80-81ae-85cf3eba9a40", "sighting--a5a032b5-32d5-4741-973f-b7435ff49190", "sighting--2660b44b-2712-4cef-bf31-c6af543b0284", "sighting--8327c05b-2e90-4598-837b-b4c3bd9e6803", "sighting--d3bcf463-5971-4a78-8b2e-0f0b9fb28fbe", "sighting--3056c5e8-95ee-4af0-8f38-38e39b0e2a59", "sighting--c4429995-ef73-4748-b521-c5c568ac35ec", "sighting--d7ea0822-129e-4b45-81dc-00236a83bc33", "sighting--7830a69a-e395-4d2f-8ffc-b1101d4fbb09", "sighting--785ed45b-f988-4f20-b72d-e3d98579b17b", "sighting--cf67161f-95b8-4510-bf11-c4bdf7336522", "sighting--44bc7654-8d7b-42e4-b91e-ea2f5aecceeb", "sighting--210231e3-fd01-48e5-af55-b00c52ec5de8", "sighting--bd96d8cb-cfb4-482f-8220-12600276ef1b", "sighting--6934c527-c6ba-4016-a901-25f232ba9a99", "sighting--8721ebbc-3d78-4c00-9941-aee21fd9846d", "sighting--523a8ca3-a3c1-4a61-b393-bad3de90f301", "sighting--10d1f801-dd02-4349-9da9-dad5a51e9fa5", "sighting--4415ab3a-6b3d-4d5a-8bd8-3311bc8f6865", "sighting--10710a31-559e-447f-a126-a9066294e7ef", "sighting--090bc4ae-8c74-4561-bec3-335b347f007f", "sighting--a0d52558-6f1c-4ba2-b0cd-69a278f6bf9c", "sighting--004da45d-66cd-441c-8791-2fdfd0161125", "sighting--726533e1-6968-46b4-b030-e7c6cf54bd0d", "sighting--e1d36b91-c9f7-4823-a9b5-8bbc3b81fcc9", "sighting--6c181a39-1baa-4c5f-ae93-9979acab9d11", "sighting--8b722a11-02db-4d89-9696-1115cbd76628", "sighting--d0cdf113-758c-49dd-b670-e5e8c624cf2a", "sighting--9eb07265-3590-4b1d-a801-cbdc2173e3b2", "sighting--3bcd7837-110c-4d5b-8ace-fb1341ea88e9", "sighting--21d020c2-13a5-442d-a55c-9c5e9530780a", "sighting--66e34d34-a409-4903-8db1-b4e953f5dbe1", "sighting--17e1d385-04b8-41f0-9666-73420a2976b1", "sighting--9df915a9-ff55-4887-9760-e1c173ecee0d", "sighting--35d7cc33-1113-4ae9-91d4-c485e1b010d3", "sighting--dd925e2c-942d-4855-8a72-cb1db75ba367", "sighting--aeae8359-79bc-47d4-95d0-da1c95ce2028", "sighting--f81b630e-b0e4-49cf-9341-4fec9996ffdd", "sighting--db81e0c5-d657-4339-9db1-e97dbf732c47", "sighting--ca4e03c5-4725-43d9-82f7-a08a9bb546b6", "sighting--785bddbb-4ddb-41c8-8cd0-2ca501db5a50", "sighting--c4c40ec6-fd9c-46e2-966a-5c32453a8e17", "sighting--5740eb48-f24e-4549-b4ec-01b9bafe2aee", "sighting--94ac65d2-5a78-4f22-9e34-38f399bffb0e", "sighting--2e4be702-7a9f-44a0-9eb4-d3b4186db411", "sighting--68485a9c-6e27-494e-af29-4f90ab36e9bb", "sighting--4c1956d0-3ef0-4930-a0c7-2130212e8459", "sighting--22c47f8b-6612-4c14-a31f-2c8d9251779f", "sighting--f7cc1408-3b78-4552-a82d-d5803617ba27", "sighting--bfbcfda5-af1a-4b35-afbb-786bae1bf451", "sighting--071dee2d-ba50-4955-ae89-09521bdba8fd", "sighting--c5669009-2c30-443e-ba3a-4cd2285857dd", "sighting--062596c2-316a-401e-9851-3c3c6c355e11", "sighting--ff55396e-e04f-4b70-9d75-40f860eddcfd", "sighting--3e79e372-6af4-43fd-8ced-975d3738a661", "sighting--19b69577-c636-420a-8a83-cbbeb5e88b4b", "sighting--d88bc178-fa44-4fe1-a940-61de5c351370", "sighting--a45667bf-358c-420f-8e4b-843f48a594e5", "sighting--d304fc5f-7d05-4dba-9982-470e41ae4e7e", "sighting--95cc2fec-0ef2-44c2-aef7-c625094f46a4", "sighting--61368ce4-8e0d-4c92-b448-db0ac8c203a6", "sighting--a8716f72-20ba-4efe-9c25-ff20c744fede", "sighting--282c9785-dc52-4dbd-85d1-003b4e2db519", "sighting--a70bde9e-9260-451e-8b27-d28599caa3ce", "sighting--62ad4668-359c-44f1-8efa-235b31487b5e", "sighting--0cfcdcb5-bcb1-45e8-af6d-0825e228ca35", "sighting--1ce4b1ab-026e-4c78-9319-87e063a26f97", "sighting--16c68e17-aab3-4bfc-ba66-260b367b5270", "sighting--89102eed-499b-4acc-9ca2-347358c258e5", "sighting--8addb0e2-891f-485b-9a82-23ed2c8a2586", "sighting--c6927af9-4294-44f7-8510-ca7bc94e4ebd", "sighting--1ae92233-8778-419e-9222-886184da250c", "sighting--268ec051-4888-491d-8ca9-aa7272274072", "sighting--6ccb4493-1454-4768-a65b-1069d4b4e95a", "sighting--503a86b1-7403-47c9-bdb3-a8299a5c9d0e", "sighting--958538d6-bdce-496a-b3b8-3b205fa4ae83", "sighting--5027cc0c-ddac-43f6-bfbc-d7c5df8fdd34", "sighting--03c1119a-70f4-4116-ba0b-9e0ee2d3bd01", "sighting--58c5c93e-7433-4cd8-b595-78c329ddf9ea", "sighting--0a8533f1-6456-4536-a078-04bd357f57a6", "sighting--94b5db53-e870-4dcb-870a-d4615936f77e", "sighting--e411e012-9aba-4470-a378-3a91ad9902f2", "sighting--5962ff7e-4c4b-4413-b1fb-fd8896864395", "sighting--ff6da230-e8b3-46a6-9769-260e5866b242", "sighting--eef670e8-1f8a-401d-947b-c465cdd23d1d", "sighting--e1016ac2-f3dd-4b3c-8f6e-48b16cf03e9c", "sighting--5f61d478-8354-4e54-90da-855c6f46245a", "sighting--ed447c74-d85c-4214-92bf-01ffa00e9c98", "sighting--ad24f4fe-6e54-44d3-b2bd-e54e4a068bc5", "sighting--6c274d19-0288-43f3-b694-87db49f69e0f", "sighting--fd4ed195-985a-4957-b508-5150d7421fd3", "sighting--b795a50c-20b7-46ec-8242-2bd93ce72209", "sighting--92be6e4b-484d-4fbb-be19-bee2f0131f36", "sighting--3b134fc3-8da6-4e13-9e1e-c61adf41c585", "sighting--d08a5371-f918-4640-85e4-790450013ebc", "sighting--302ad008-6848-428c-a995-fdf41898f155", "sighting--d977fbf3-0997-4587-83cc-3af08f947568", "sighting--72f9f4ee-de25-4e43-8be0-5b9de18b6f5e", "sighting--873aa211-11f6-4cd0-b7e7-0410c4a5527b", "sighting--5e88b099-ba85-4630-91eb-8c31c87ff5b4", "sighting--a23b8c35-29cb-4389-a845-e7bb39564ff2", "sighting--4e085b87-af63-45d2-84d9-6cdb854fb6a9", "sighting--d34aedb4-0fed-481c-99a9-17442907e89f", "sighting--8e13adf9-5449-494e-a196-a75da7a63716", "sighting--e206bdee-45c3-4ecf-a6a6-e4e750a9d944", "sighting--2f5dac9d-1489-4ac8-9a37-9f985bc8ac23", "sighting--2765c480-188c-4cc0-99ba-6bfd0bc07012", "sighting--b51c3f77-3c95-40ed-ab15-2fda97766d14", "sighting--584f1431-0197-4c6c-9a5c-434c03f0e57f", "sighting--a22a0662-e907-4830-ada2-766fe4581563", "sighting--380a9c5a-85e2-440a-a82f-32ac8d9bcc4a", "sighting--b2a91eca-c087-4eab-a8c6-6447575f30ca", "sighting--ac23c38f-f115-47d8-ab3c-db2a9fff1a41", "sighting--cd819589-2fac-4d9e-879a-f05792f267bf", "sighting--d284ef4f-f73f-40bf-9bb7-dea12fe035ec", "sighting--e036190f-a9c7-43c0-ae5f-3a447061408c", "sighting--3cb7fd37-260f-4e4a-978f-2dc8fe8d9807", "sighting--a543f1c8-a501-4e5a-b389-61dfa8f01bd1", "sighting--24e2ae77-2b00-4a13-8ae3-01788e20e89f", "sighting--eee01441-0a6a-4f34-b541-e8963f753ba5", "sighting--b04c1e31-4e09-4223-888e-c65c88e4f4b9", "sighting--0f2424cd-cf54-4e83-bc99-96d77235d3a3", "sighting--341d5848-7e1b-4cc1-a661-ce618b87e212", "sighting--a25b56bc-b447-4321-a7ed-ba903670d1a9", "sighting--0fe85378-ef74-4ea0-97ea-f27700d3dfb9", "sighting--3c73894b-37ce-4204-b1cd-1a25e353088f", "sighting--28dfd308-c8a5-431f-b260-04b8df4bbd59", "sighting--6c9ca561-c632-4742-951e-014e9e6a8496", "sighting--cae9ff61-7a4d-43e1-94c7-36a09586fd55", "sighting--54a100a7-bc61-463a-90ff-e86b3a89fe98", "sighting--35719225-3ba7-4e02-96cb-f4fd5ddf2836", "sighting--5a381b59-26b5-4e6f-aac1-18a34af453c6", "sighting--8a842b3a-eaf3-4fa7-874f-9211845aa3cd", "sighting--919ae0a2-b355-4eae-ae59-7c4e2d8c115e", "sighting--0900bba0-f5f5-49aa-a924-2546327b2b8b", "sighting--20c17cfa-9dcc-4ae9-a066-7bf57fb4f154", "sighting--462496ff-0c01-4705-8bc6-203f04b6dc53", "sighting--86dd3d10-efd9-4131-986c-04eab08feb93", "sighting--790d1861-dd48-44b4-aba1-571de8c66cc3", "sighting--3f16e412-157a-4724-bf80-d9036836a054", "sighting--3f10bd1d-278d-444c-908e-987c71caeaea", "sighting--491d06aa-12cc-491e-92d7-58b21a9ab3af", "sighting--7fb60970-2232-4f69-8646-991e2e75a403", "sighting--d1586afc-649d-4ef5-a478-3a994fdbc9bf", "sighting--2703c33d-4dce-4ea9-8db4-cbf3e54e05e6", "sighting--5fb4e9a6-70e7-4a45-a5ed-c4a96f9b5483", "sighting--be99ea38-d2fc-43d8-9f8b-017b20d665c3", "sighting--65d7c9d4-d758-41ad-bd0a-effbd27b728c", "sighting--bce7fbde-810b-47b0-b712-02da4e9c9621", "sighting--80b212df-04b4-4a2e-9310-b3ff09afdd22", "sighting--b433c98b-e880-4af7-a1d2-32ea66150814", "sighting--f876632e-7568-4e25-a22f-2ad80ecfd6eb", "sighting--1abf7723-5093-4c2b-8bd5-2373f7353004", "sighting--a790a21f-a600-4365-a052-895c84243ab3", "sighting--4c1cb10d-4905-4971-9fb1-e99e4b897ba3", "sighting--dbc29154-19d5-4531-a5f0-85cc8af2f35e", "sighting--a5c023f0-c53d-40f9-9978-5321a1f868cc", "sighting--f825ed5a-4d23-48af-af53-27050b2cb643", "sighting--2db9e9c9-5040-4ac1-80dc-dda8837dbd83", "sighting--5763cb6a-cc07-46ab-8833-98c31955a5c6", "sighting--b886329a-b7b8-46a1-aca0-eef9462d3a93", "sighting--f2cb8277-47df-4586-8297-62b0771f08b2", "sighting--02ee0873-25ea-4901-991f-ebc540acfbd9", "sighting--7736b31f-338c-4843-b36d-58de242e9b5e", "sighting--e6b62069-a78a-496f-be35-14b06bb9095a", "sighting--7fe97e5e-2781-47f3-a177-be81fc23858c", "sighting--1c052edf-b653-4dbd-be41-d9fff541d7ad", "sighting--705d5daf-2624-449f-af58-fe9b0d868a4b", "sighting--652732d2-de57-46d5-b99d-1f4b93132d67", "sighting--f4b3c110-ab92-4178-b1ed-cac7ffc1fd29", "sighting--d6a426b3-82d8-405c-a8cb-64f8b2986eaf", "sighting--8c9b6a85-bffa-4677-ab8b-17f936d7fc5e", "sighting--66608dee-4757-4d34-ab4e-d87e92103c09", "sighting--a3b46cf3-1970-4433-85cc-0c82dc83bea3", "sighting--7c11a1ea-2491-4d19-b0cc-2a2982784dc2", "sighting--d97872b4-266c-4a17-961b-4d5e18a52001", "sighting--b28abef8-118d-401d-b575-6ba099a88935", "sighting--af2fdb3c-3d07-4a47-9a6a-9f3137a6d1ba", "sighting--1134ec7e-b000-48b5-b0ed-b24052c918d8", "sighting--724323b0-7705-41aa-a5f8-e5111cd1326a", "sighting--b179328d-6e35-4f7d-a7de-3ec33b4862b6", "sighting--b636feb3-863a-4faf-be6b-d2e067c44855", "sighting--cf16b67f-ab3a-4acb-956f-b59e6a9155d3", "sighting--964e969f-3c54-4199-ac8d-c240cfdb75f7", "sighting--a08abf74-007b-4dfa-a690-4ae71cd8f781", "sighting--7b2e784b-84f4-4d29-8c4f-3122c1173004", "sighting--b5b90d61-3ce7-4fa5-b737-f11f8eb73c0b", "sighting--ac5c82c0-000f-4db2-beee-09bcc7eb69c4", "sighting--e8716335-54ed-4007-ad0a-be6d1af2426e", "sighting--3c34ee90-749c-4a77-ac4a-c494c7274b34", "sighting--2f6104d4-7487-4410-88d1-bbd38c1c0ea2", "sighting--19d06349-1b7e-453d-910a-1546c55def61", "sighting--ed48dfea-1b29-4df7-b56d-c4ab22d46091", "sighting--095546d3-bfd1-40b6-b5b4-f61349510327", "sighting--e09405e3-2273-4a89-bf35-8079d6b2af4e", "sighting--8d892270-4697-40de-ad29-0a8d5f641a7c", "sighting--37e9afdc-db20-430a-84b0-54b1a285ad9b", "sighting--b66f4e40-67e0-4ccb-b575-8cc0066e6971", "sighting--77d70187-edaa-42f1-9c9b-b17fcb89fb5f", "sighting--24487566-3cdd-418a-a59b-b6297c60a5e3", "sighting--268514f1-0580-4db6-a261-7a4ad3966ff7", "sighting--684546e8-b15a-4e41-9036-50f9302f30cd", "sighting--3bada6a0-aec6-479b-9dd8-8b744f88e46a", "sighting--f6ff693f-5927-406d-8f2c-410152573501", "sighting--ff00d00d-dbde-4259-9812-638f791860eb", "sighting--cd90202d-9eb2-483d-8473-c4ea89b701d4", "sighting--952090ef-ba58-4d79-aa18-2ee38b6e259a", "sighting--4e23920c-e076-47e8-8cca-f159466659b2", "sighting--44a7420b-1a32-4a92-854d-f9d30d135d8a", "sighting--f32dc0ed-8834-4329-a6ef-e1de20d728c8", "sighting--fa7cc161-7542-446f-8fe5-b82b27ae7265", "sighting--83c71214-0b2b-43d1-90a3-3c467023df9e", "sighting--37dfcfd8-780f-4921-8a7e-f2aeebb735d5", "sighting--e6a6c23f-cae3-47e2-b09a-1903a24dcbe1", "sighting--18125a09-1857-44a7-975e-06845e4508b6", "sighting--4efedb74-7275-46b4-8867-4d137c81b1f3", "sighting--dc255b5f-2ea4-41e5-83a6-1d4e61717aad", "sighting--4795a3d0-3eb8-4948-87b7-f550a7af456a", "sighting--5e2adc05-1981-4b62-8881-90d5c60c829f", "sighting--acd6f0f8-b304-44bc-8ada-65c505b443b0", "sighting--35867482-b198-4749-a629-5cc3598da3e8", "sighting--6a497854-b74a-4379-a065-85aab9aef468", "sighting--2ac6dbca-248d-4fb2-b1a9-0e82653249cb", "sighting--1aa62539-86da-442d-be06-973f20c3fb0c", "sighting--3774b605-6fc8-44ef-8b02-82d5301ec51e", "sighting--12e791af-9cdc-4089-bcd8-d3e0b05a5692", "sighting--5816cfd9-9fb0-401b-9427-25f35a501d4f", "sighting--159753a3-a757-4442-8e7a-747445a35ad3", "sighting--e93c1b53-a69a-4b49-aa08-1df9cc275582", "sighting--8fc19122-97bc-4425-b25b-c15aa079d82e", "sighting--b574b3ac-9600-45c7-b56a-e4da620240a4", "sighting--42a936ba-6a9b-4af1-8dad-637429d63096", "sighting--0aa5b9fe-07a1-4ed1-b160-ffd063e4d478", "sighting--9c167167-b446-4e33-9c4a-bf8cbd0cf5fa", "sighting--6a87c43c-0e85-4016-a200-fe0bdb807300", "sighting--f44afd8a-8fe8-4cd5-a174-1b556ceef443", "sighting--dfa1f4a0-4022-4f0b-81b6-1e8a085fa26f", "sighting--633c2e8c-52da-4296-ab9d-56f0cd92fde4", "sighting--43ed4ed5-c4ee-4e17-ab3c-11a4d34f3c71", "sighting--07e2a1bd-61bd-4a1b-b314-cc54c6cc82cc", "sighting--0d05d398-5df3-405f-bf7d-997ac26f42c0", "sighting--188cafca-203e-4e4f-b3fd-5d91f818a278", "sighting--9d228e59-20fd-4da5-8308-5060406deb74", "sighting--9cbe283d-a8bc-487a-9eec-f7de8d743dde", "sighting--b353f56e-9caa-4f15-8b08-84a74454d027", "sighting--7f0b9b81-96d1-4e5c-adcd-83cee6143995", "sighting--8b46e258-e55d-4afd-a042-a63d9a26cdbd", "sighting--e16e049e-1e90-402f-9e69-af4c673dc53b", "sighting--5139fd66-64b5-4de1-a3ed-9c0b52a51677", "sighting--dc9277ce-8b8a-4dc1-bd10-1fcb15cc6208", "sighting--7233e99b-8d57-44b2-a8c0-1ee905c33915", "sighting--1cc3178b-59a4-4319-a1f1-bbd31cf0734a", "sighting--c62b1d6e-c708-4f61-aba0-7be9babfa9e1", "sighting--1194ce08-7c4b-4c7f-a5d1-ab56953f58ee", "sighting--1256d01e-af81-44c0-84b5-c96323fa6cb4", "sighting--201d914b-9cf2-4b75-8908-7cb3373b57e7", "sighting--64c8f65b-6101-4816-a5df-3735c78922cb", "sighting--e2d00759-c072-4091-99ba-1e54990efd42", "sighting--ea220d09-5157-4058-8a93-17ccc70617cc", "sighting--88f67a6b-c59d-421c-ac22-3eac884c9451", "sighting--b61f1bb5-cf34-4546-905f-a3ce33e26201", "sighting--58bb4c17-76a8-4099-8ec1-06a6166aceec", "sighting--d70462e5-dd4a-4256-953c-917e30feca34", "sighting--12d10aa7-0e76-4531-83b1-98d379dd49bf", "sighting--bf6de2a9-d095-4e93-b866-867e165fe1ee", "sighting--7795cf7c-56d1-4270-8cb6-69754974f9e0", "sighting--70f3bb83-1a1b-4929-b395-09f7455286ac", "sighting--e855d84e-09ac-402a-9265-c6fa1d0b8dad", "sighting--a5ac45cf-bd7e-472f-978c-12d444f19eb1", "sighting--b7d8a687-e9d2-4684-bac4-347a37e6b3b7", "sighting--42a5552a-6a38-4d83-b2c3-d0fe2ae99462", "sighting--48ececa6-e145-4881-b9d9-76cebe236b62", "sighting--d68fcf14-2345-46f1-9375-abc0dd9f5738", "sighting--cd95c3c4-9b57-4ffb-90d1-8519a7d8806e", "sighting--fd4bb43c-98eb-4a4b-911f-474123634c21", "sighting--4bac9025-5d2b-4018-97e0-34e2cfda8d71", "sighting--01e977fe-a47c-4aeb-91ff-0048df1415fc", "sighting--41ca0f9e-6625-42f4-bb10-dba7b41e8f4a", "sighting--aa57895e-b702-420d-8f58-ce410cee693c", "sighting--da731813-fcae-4788-9250-0a4fa59c7fd2", "sighting--e887122f-c15c-4a62-a531-59cefba6cd4e", "sighting--ea8862ef-51bc-4331-af00-9abec876f71a", "sighting--be05a00c-a956-431a-b368-0228916fd0bd", "sighting--2c0d9d00-9ad4-42bc-9347-18d267627b86", "sighting--842d10cf-166d-4add-9b85-15836cf7ef66", "sighting--56dc4c63-c478-41b6-b226-2f01908aa833", "sighting--deac0e89-eec5-40fb-a637-fedc1aba51f1", "sighting--98e43a6b-83bb-4122-bca5-085478ce2559", "sighting--24d17600-09bb-4825-adeb-6496853d7b4c", "sighting--53a056c8-0b32-4480-a56b-c7c41cc1bc82", "sighting--b2a44930-6ef0-4b07-b00d-7cce4f160722", "sighting--95c7aacb-2de9-4a82-8852-f3576ca15147", "sighting--9f4e351a-529b-4332-9111-46d0e1b59fd1", "sighting--d4af499e-9894-4518-8c0f-0abc64cb9c55", "sighting--915244bc-fe98-4451-84f9-1557dbbceb20", "sighting--2d1fe7cc-6904-412d-b5ef-bdb952972bba", "sighting--87bf3006-f2ce-46bb-8533-0e9af0d26983", "sighting--3125f40f-5de7-4666-befb-d1618e394fdf", "sighting--21f362d7-e611-4372-add4-ec4991494e7d", "sighting--31bce335-79e5-44b9-be7b-c251519dafd1", "sighting--0c395ab0-8f40-4ad0-bc42-1c9bc096b14c", "sighting--45a78fea-e909-4884-954e-67941eaebacd", "sighting--6fcc6bb9-8d0c-4802-8597-07e3949833f4", "sighting--cfca351f-34f9-4974-bd6e-159361144b22", "sighting--9ec0154c-2875-4751-b1e8-2a8f16c097b5", "sighting--6cddf8a4-c049-4aed-a0bc-aa21b841e214", "sighting--c4ba70c3-25ff-4a5f-a5f8-983d02d6952d", "sighting--e7bd988a-f0f8-4315-af46-ad2aa3db0e56", "sighting--8b8a9592-7e75-470d-be01-317251ed96e0", "sighting--6a1a509f-a3eb-408f-b0d1-8030392e39ff", "sighting--dbec80b9-8091-4f38-af98-649b74041b25", "sighting--2528688e-ec3c-4e3e-a951-8082ba554b73", "sighting--9c528e6d-e7d6-4791-b561-0af7c9954fb4", "sighting--16798429-6a0c-4a2b-ad85-c7dc53e72521", "sighting--7ff802e4-c9fe-48f4-86ad-d488034000e3", "sighting--6591b046-cc2b-46da-b14f-03018e66af70", "sighting--6e96d865-8083-4953-8ffe-782836276aa6", "sighting--0e9bd498-7652-4b78-befd-997ac6f3a3a9", "sighting--13817927-f37d-4207-827e-7d5687ea74cd", "sighting--ad7ab74a-acb2-4b3b-8a83-cbb148af05b9", "sighting--dfc6c3a2-e2fb-417d-b263-136d53d721c7", "sighting--62f496a1-38f4-4521-8904-de0c52a525e7", "sighting--d51fa5b4-eb54-413f-9b92-19b3bd80848a", "sighting--6b041d76-1183-469a-b952-d18769bdf10c", "sighting--f75d8c1d-33ea-4f31-a1f2-f3f3f8e1d83d", "sighting--4a704a39-7b84-451f-a87e-c83c47f682e3", "sighting--7ed40c17-0df3-481f-8947-9db326e4d2b5", "sighting--cae9be52-83a4-4fef-bd9d-c0ced61df868", "sighting--9d8c9d58-d92b-4b09-b729-2d3d23f2dd98", "sighting--092bc192-87bf-46e0-a166-8d385e243b6c", "sighting--d2b5db3b-3ab1-4a7e-b26b-757d484c64dc", "sighting--ac0e908b-9f98-488e-b4a5-13fe758c275a", "sighting--47159d03-333e-4a6f-bc87-ddefc67ea955", "sighting--c2f0e94b-462a-4a67-bc0c-680aa70fe3bd", "sighting--090d1a29-93e4-440f-9670-b5d86f1ae1e4", "sighting--627bc73b-d674-4831-aa89-d38f4beeb1bd", "sighting--0a7ac729-9b56-4ec0-a025-9d3f7b796c61", "sighting--5796f1e5-3dc8-45e8-91e7-4a109b78d7a6", "sighting--a3bfd7d0-6ab1-4415-99b1-c968458e5b63", "sighting--66f1c709-3652-48b7-96c6-b15c5044f1a8", "sighting--8a3ad137-e14a-433a-84b1-95f23a3032c8", "sighting--d643cd21-6ac3-48d7-8044-b5246d76d12d", "sighting--3c784120-cb22-46d7-9692-c75e2e5f7f22", "sighting--254948a1-d0db-4ff4-802e-a86d4b1781ad", "sighting--1741ffc7-5fad-4610-9410-e9025383d8e7", "sighting--abcbdf9a-07aa-4e13-8536-96e5d8c25997", "sighting--8ac32bb6-71f7-4b1b-8e86-7a0f0f6689da", "sighting--afc8ad37-69ed-4a70-bead-3aa6aa5e26a4", "sighting--e2b942f3-3d78-42f3-b605-183999964f44", "sighting--87b4f1c0-dd1a-48ab-8ff6-ad136490d839", "sighting--73396168-af64-4199-8e31-1e330c02c6ff", "sighting--0422ba80-934d-4cc4-adb7-bf7b094c65f2", "sighting--d9755011-4a96-43c0-91fd-a9ce5fbc3b6c", "sighting--ebbaa3f4-0c90-404c-8fd8-a95043cb0aaf", "sighting--dd75f81f-0fe2-4e6f-8990-072a10ef4c4c", "sighting--e6c01c33-7e7b-4997-ae8f-b71ed5e1cc7e", "sighting--7bf1819f-8e14-45b2-a96d-c987a18ca0a0", "sighting--383d2e66-2810-48d5-a0b3-252f6b704a11", "sighting--86760976-57a8-48fa-9f03-ae1bf56e083d", "sighting--9f243193-ed5e-4ca7-9ba7-186cf5f27c47", "sighting--1e97b454-b3d1-4ad3-952d-a8e7902c55e7", "sighting--b2ef1461-230b-4b46-b095-2f92bd835dc3", "sighting--13fe67f7-0f73-413c-854b-faff812ff82d", "sighting--3ca4f32e-c360-487a-8059-efaf043a68ec", "sighting--b59b1f25-82b2-43c8-9f70-996dfeb15b36", "sighting--9f703741-1642-4e3e-a989-1b4a38cb1235", "sighting--688abff4-0a29-4cb8-8518-921fca90ae7a", "sighting--0320c812-7300-46be-b7c3-a4763a4d7a11", "sighting--d7393a51-2a69-40ce-90f7-76f038d8142c", "sighting--cf307e8f-3555-428a-8f10-3a56df0ea979", "sighting--e7b5dbed-8487-4c0e-9b62-a3ece18e15b4", "sighting--a70c1260-5ade-4361-89c2-35e5b980ae1b", "sighting--314a4e09-5179-4b24-8801-41400c0e8982", "sighting--9fb63ae2-7bbf-400b-87e9-4cc5d4a851b8", "sighting--e766ba31-e2ef-4945-be1d-3d9a6a0b2327", "sighting--648ce591-d624-4e1d-8932-c25ead3ec473", "sighting--cedefaa0-8bc7-4554-a993-040d8b22414f", "sighting--948b6a9a-6107-4669-b308-1047bbd03a37", "sighting--a63e6fc1-8aab-4937-9845-a9d8f77033e1", "sighting--36aec868-f7b0-400b-bf8f-e1112b756738", "sighting--2c6afe46-8368-4b53-aaa8-55b5e151a83d", "sighting--5a619999-798e-43c5-86c6-1fa858283f85", "sighting--4339221c-3d39-41e9-b1c7-7bee6e35260e", "sighting--8b56e72d-d236-4315-b104-fefb4e082897", "sighting--f40967fd-2212-4425-b7bc-c8a6e1956b4c", "sighting--d55f3192-1fc6-41cf-9e11-f203fda3121e", "sighting--dadac969-dc97-4e23-b033-f1425d0928ea", "sighting--b3a13c21-e3b8-417c-b2a6-556703c586b3", "sighting--26efd829-d776-4b12-8bd1-c8ec78684875", "sighting--7f8fb558-46ab-4ae5-9823-e85ecdc1bf3c", "sighting--b0e97d25-9040-422e-9306-1e93d8835da9", "sighting--946b5a35-0db4-4d58-9803-a613258b0dc4", "sighting--ab96c015-667b-4b46-8247-efc193a458b4", "sighting--33e2e1f8-8ff4-4636-a25e-635c1e12995a", "sighting--317499b3-ec7d-422f-9bfe-df819548105a", "sighting--46a1062b-de95-4f26-a4c3-841bf9dab5b5", "sighting--dd9d7310-44f0-42cf-97f9-21cb86116188", "sighting--3b658489-0d99-4fc6-91f9-0861d5e29a6f", "sighting--68c69cc6-6bcd-40ce-9f75-624315b44a5f", "sighting--5d4d1c31-db28-4b3e-80bd-492f995c0634", "sighting--3b9334d9-6a4e-4559-9fb1-1f71089b1fc8", "sighting--b108223f-9970-4de3-a705-591d262b63ab", "sighting--aa7310ac-52f4-4606-9152-2326afbb739c", "sighting--c5ab2416-2149-447d-86f2-c404ce10c863", "sighting--dcbacd86-a738-49a1-b4e2-23cfbe129b25", "sighting--88637d4d-baf1-4212-9f70-b2195564038e", "sighting--ba85330f-049d-4175-aa61-bff9331c718a", "sighting--78b4c493-6193-42d2-85b1-0f28c0ab22c1", "sighting--10268799-4074-41ff-8de1-e617b707fb21", "sighting--1e6b24a9-2b46-415c-9ad9-8fdad0304cf2", "sighting--95a14b4d-e93c-4aed-afe8-92478487231e", "sighting--8cb473be-63ef-4549-9b89-70efd4298f1c", "sighting--f11b4eff-768b-4b8d-a66b-acab694df553", "sighting--ceb530de-597c-478c-8a4c-e399a993c7c8", "sighting--cfc5736c-db1b-4942-b074-ad584cc26d5c", "sighting--bcee259b-f777-4f2b-bb17-f99c7acdd42a", "sighting--f0ff46d1-0aca-4ffc-a4eb-46ff2310fd79", "sighting--912947b1-aed3-4684-83c4-2df61df519a4", "sighting--af26cfdb-a40a-4a9f-94f9-ed2b40bf9717", "sighting--bbcf457a-0a7b-4eae-8be1-e7e69bd522aa", "sighting--12944fd2-df08-4862-aaeb-f442fcf7d37d", "sighting--9dee01e0-6e06-46d5-9bf1-960709a144b9", "sighting--1a4bb9f5-ffcf-4810-8785-91a3945914bd", "sighting--153900d1-3f12-4d6a-91a3-917b71dfccf2", "sighting--b267d652-7370-42c3-b69d-63dab708fac7", "sighting--0f9fa6b4-9077-48c2-9b59-f9375024645a", "sighting--e2be71ac-e5dd-4145-a25e-83ae77d98427", "sighting--27349614-c373-4de5-a9e2-8e1cad6e363b", "sighting--2e0923b8-579d-42d2-804c-85d94c4a25d4", "sighting--5f0db14e-5373-4781-bdaa-d10f8981b0a1", "sighting--ade6eaae-623c-48e3-a7b1-d69d1817c3a9", "sighting--903e20cb-2dbf-403c-a495-96d5c41bf281", "sighting--5f6a02a2-5c86-43b8-9b40-ddd3439f4f5e", "sighting--242530aa-96ca-4455-b711-f7a10c4c8426", "sighting--b9c9f952-64cc-4fb8-b530-05b9cb8dea5c", "sighting--0d7a8a9e-5a29-4157-8644-ae9cd6e13388", "sighting--e0054974-9b23-4c44-abc2-8d16de06df51", "sighting--d2f70f20-00f6-43f9-a4b8-c9f3759eaa8e", "sighting--210beb54-3853-47e6-8dc6-e191c79a3cfc", "sighting--4575c6f1-458e-463d-bba8-d1f2a7936f4b", "sighting--7c8a843a-e68b-4583-aeb4-bff8d26e21a5", "sighting--1f7229c5-a064-498f-b631-dcf82459690d", "sighting--c70ac045-a4d0-470e-9093-45c966d7841d", "sighting--3139b72a-5c9a-4818-9535-9b30af96838c", "sighting--88532690-ac9a-4435-9b8d-1a37a0680477", "sighting--983299b5-4f5a-4630-8c35-575bb2f7be85", "sighting--a0daa410-4661-4202-8426-e2bef3a08acc", "sighting--f95f2c9d-5992-4d03-bb66-691861348cf0", "sighting--fc59e71d-5a39-488b-bd5a-e62ad78602ae", "sighting--613dbbac-8853-4c9c-8918-fc3974d0a99a", "sighting--e18830da-2f81-42f8-b35d-b6d3efe48c64", "sighting--e371bf8a-1e3d-4992-910d-9f56b17b5abf", "sighting--bf44e1b2-a9b0-45b5-925f-8bd02f682b21", "sighting--d4edcae3-29e1-47c3-a1b0-ebc7f61df433", "sighting--7affb8e0-5dd4-4132-b46d-d73c4aa56f95", "sighting--1af4a2f3-3a06-4155-a122-89226c82e4cc", "sighting--f441f61d-51a4-438c-8a85-a49a62ca1bf4", "sighting--4e1ec7cd-2b91-4652-9493-b01b2683c51f", "sighting--93740197-a496-473a-86c2-827c588a26b6", "sighting--1f9f0e91-94f1-48d2-bd78-b37523fc8482", "sighting--04361a3a-e6c6-494f-9f1d-2920895a7b1f", "sighting--facb77c3-5840-41f6-8428-c264cbefd938", "sighting--ee057133-7ff1-44ed-874c-47b27f27798f", "sighting--50fd6af0-a54b-40fd-9e2e-a52e1c353027", "sighting--bbbcb469-1e91-4d6e-905b-669c207e6824", "sighting--2da3d73a-2d7e-48b6-bfd0-989b314534f5", "sighting--5a82a1e8-ecda-48ed-afea-03ddbca69d9c", "sighting--3bfc510f-0bdc-4eff-8269-98c503cc3294", "sighting--4851ccfb-0df4-4306-b507-c4e520a84607", "sighting--b9bf1f35-161c-4e64-91fa-d2046f915194", "sighting--6f528600-1ff6-4be0-8867-86c911a8ed85", "sighting--d6988e83-a8c5-4ff1-8d07-0af19d9a209c", "sighting--bc0b0c81-8b3f-4367-9b52-4cce0f484769", "sighting--156b69e8-fef9-4f80-a7ef-79157564fdd0", "sighting--e3af116d-a9ff-4b82-9f98-8dad9b666d4f", "sighting--2d5134a1-ef57-42fd-a5e4-94047deb550c", "sighting--f37061fd-851f-4458-aa98-26ed4e849e53", "sighting--850b23f7-3b20-4929-aa04-628b4e7cef92", "sighting--15462705-c397-4c2f-ba41-bc1e0fdc3090", "sighting--47192de6-bdde-49ab-814f-ca50aa4ba44b", "sighting--eba3f794-136b-46bd-a53d-0f61620b87cb", "sighting--6de0e996-9719-45ef-9211-0112abd9c989", "sighting--b42b67c6-791d-46c1-b04b-71ebe5ec2275", "sighting--aeedd465-2da6-4c39-a06b-c8e8a42d5ef7", "sighting--6a6bf7e6-5f37-4f5b-a3a5-4037982a62a4", "sighting--193b7395-90eb-4b4e-aae4-f9b2ccb0a8fb", "sighting--6af4697e-bb59-40b7-bed8-6269730b7377", "sighting--11092559-b093-404d-a644-71a2b57eb068", "sighting--e324b96f-5eef-4d4a-b356-1244bf25cbf1", "sighting--e0dbfb75-6eab-4e7e-866d-0d9df781781d", "sighting--069b3bec-690c-4c07-9e35-1a6f19611f45", "sighting--7e2bdcd3-7c4d-47eb-985a-7f610d9fab69", "sighting--46ccc660-c72c-444d-843a-505610358c11", "sighting--cbb6d1c3-7fa7-4d36-a16c-2115bb89a8d6", "sighting--cb51888f-0bfc-4387-91fa-aa78fecce7b8", "sighting--9c920418-04b7-4006-9d8f-2a2f20095a2f", "sighting--a55260e5-b58e-4778-b2cc-7bfd87ea5236", "sighting--385db926-8df4-4359-87d1-5bff934dde9d", "sighting--13c452ce-0dcb-497c-8979-c66f97050ebc", "sighting--e0f79256-30dd-48ec-8e51-09b4cf4bdfc9", "sighting--89bcece0-483a-4318-ae68-1f524f80ee92", "sighting--c8cd2834-3e91-4180-bac2-54e82ada5862", "sighting--c8da5c49-f0d6-401d-84c0-c7896b82f12d", "sighting--d4e319d8-f0bc-46f5-bae9-cff22707757b", "sighting--17d391e7-35ce-44a7-ad6e-0b506d24c266", "sighting--e14cbe74-77f7-4154-82fb-ecfc0bad944b", "sighting--0e7fddc6-f9ec-49b5-b8fd-fe9a2a5cc6c1", "sighting--fadc530b-db90-431d-b1f8-28b4a26089bf", "sighting--f09a1337-3239-464d-aeb2-89bbe96cbdde", "sighting--483c34d9-725f-4816-8e70-079a0cb709d9", "sighting--de1087b5-b73b-4f1e-ac82-a90333965d93", "sighting--c18544a2-2f87-495b-9c04-04c8eef6cc54", "sighting--f62bbc4a-7aa5-4ece-8fe0-d2ec6da40f03", "sighting--924f741e-7257-4d9f-8879-620512000be9", "sighting--521dbe0f-0f31-4554-b745-52b1a97af85c", "sighting--890ede75-ce22-4fe9-aa52-21db6a3bb379", "sighting--cc9c7c72-122e-480c-a395-350a1818a947", "sighting--9acf67e4-284d-4d6b-a286-7c8a6d1d567c", "sighting--de70b454-d0da-4315-a216-e1cea9c27d87", "sighting--6835c561-b663-4290-ad6b-050dd34ff3cf", "sighting--883c70aa-3c48-40e9-b540-750629859afb", "sighting--d75e7512-f03d-4b1f-8945-f8b861564f73", "sighting--5f2205a2-a503-4285-b134-4a2df976a8df", "sighting--038d3497-96aa-482a-bdb2-5025b876a45f", "sighting--3952364d-c63b-4c12-8e98-668cfd57fe9e", "sighting--21c92746-f110-4b87-a9d6-925ce85edffc", "sighting--d7855100-243a-451f-94cf-1a245b1d8677", "sighting--f1d29295-ec54-43f7-a15b-d8e48adb7e8b", "sighting--8fb7dbc9-cea8-4ef4-9384-def4f250f8dc", "sighting--6b92a419-8632-43c4-a0a7-9c67b4026699", "sighting--cbcf23e4-1d91-4772-83de-a8af3a02974f", "sighting--050c046a-cff9-4eba-8cf0-cfcca7ae2bd5", "sighting--6de1ae7f-0946-4573-9462-d91c009ff6c0", "sighting--18102110-be42-472c-8a12-67513408f25b", "sighting--4c2591cb-3b10-4fbe-95c2-ca6c768edf6a", "sighting--35c71ad1-7387-479a-8616-8455f3aa7b2f", "sighting--741778ef-85eb-4fef-a5c4-25f34a3cf5f6", "sighting--3546393e-6fcd-4ddb-b72c-0cae1b0252da", "sighting--02cfbb48-c976-48f5-8aeb-bbe381c3c891", "sighting--3ba02d9e-e004-49c7-8adf-08e6eeedf926", "sighting--97cca4d3-dbfa-48be-a6f0-13e66b777c1c", "sighting--26b4f0ca-2c52-45e2-9bf4-f846689635a5", "sighting--80e0a234-c287-48de-ba91-39fde71f72f4", "sighting--c4bbae49-8c2b-4dbb-8aca-5b10c97a8aab", "sighting--1014a8e2-11d4-415f-b526-c0a3eaf93555", "sighting--002f4c2a-adbc-4957-bfe0-40e7ad469fb4", "sighting--8c47566c-bbbb-4e00-80ad-27c343f88fc4", "sighting--4db6645b-ee9c-439c-9b6e-592338280c62", "sighting--04007cad-de2a-4062-aae6-ebcbcb20509e", "sighting--245023ca-6782-43ec-986b-717d6c76e38d", "sighting--548d858a-7616-4cf2-816b-0d37d891c62b", "sighting--a9bfc6cb-3c7c-4ed7-82a2-d5e7f21de492", "sighting--bcd2aa96-14e5-4170-b1b7-b50416813d29", "sighting--8a836274-cc11-47e9-844d-1ce68e5383de", "sighting--5586d3ac-95fc-473a-a0b9-6d734879b127", "sighting--20141b7c-2c2f-46ed-abdf-9f993a2e29ea", "sighting--5a06605b-ddf7-45cc-b1a9-4359d9dc9db9", "sighting--b092273a-4fe4-4730-a7c4-6daf2d10d53f", "sighting--13a93304-d389-4c88-8e9b-3c7d0422a9f4", "sighting--b6c2f775-735a-4b8b-87ee-c8bdf8c18ea4", "sighting--1c1d67f6-3d9e-4a08-96c5-460059793fc9", "sighting--be29c171-4d51-4d1f-9541-fe00e5880653", "sighting--d4bc0e82-ca04-4555-852f-1ce3ebc3c840", "sighting--31433a85-f848-4b53-8976-de08bc65cd99", "sighting--1d1ce47a-b37f-44a0-bdda-ef46e6c702a8", "sighting--b14995e6-7ed6-41c7-8563-59580f4f86fa", "sighting--2484975d-5a61-4571-b322-f3f933f8617a", "sighting--84976ee2-40a6-45d9-8e24-6ae262b8c3da", "sighting--6e2f710d-34bc-468e-b472-eaf3d3b22044", "sighting--b1f29a21-f217-4c42-971e-e7cc24e7ce76", "sighting--27965c27-b422-4531-af01-2e44837bff2e", "sighting--834b275e-024b-4901-8f32-11705fa2115e", "sighting--48288064-a672-4f15-8021-38a4433153be", "sighting--c83a5d62-4a4b-4bdf-85da-ef04f9d25694", "sighting--694a56be-0448-475a-9e3d-1c04bbe60dec", "sighting--e1ea4a0d-5373-4468-84b2-0d8cb2efd8be", "sighting--5dc520b8-498a-49e1-9c03-f75d31ddd472", "sighting--81553e09-616e-44ac-95d0-18f18948ab10", "sighting--64f38a78-a1a3-4cc2-97d0-cdb4cd3db868", "sighting--c1c02984-d3db-4f98-b189-fb21ec54d245", "sighting--fada69de-bc20-43d1-b787-9bf60efbc968", "sighting--ff20e770-2417-422c-8f9f-af743ce89f35", "sighting--14e2f06f-0888-4212-8d18-6116a5c2ff05", "sighting--be597ad8-e16e-4efc-8e83-1e5debe78479", "sighting--5133c855-7a84-438b-ba70-2f4d896cb90b", "sighting--c42c8da5-296d-448b-bb64-0b6c23a6f86e", "sighting--0c7101b8-8437-431e-a6a8-90355b380faa", "sighting--a944b6d6-0ff9-451d-ab2a-8ac0f4a03d01", "sighting--990fde97-32c8-4a47-9715-f93e28a0cb61", "sighting--54484ab3-6633-4b53-9da4-8223f801b6de", "sighting--fdc3bd8a-e8a0-4e0d-9878-ff081517da29", "sighting--cb98b91f-b49c-427d-89ac-4e2266d793a8", "sighting--bd34e02a-cbd7-4d5a-8334-13db094b6e7d", "sighting--f650c68a-84c5-4442-a5f6-22ef1e81e18c", "sighting--0a337945-e09e-415f-b7ee-5f279df68621", "sighting--43675dec-f8c6-446c-b358-cfaaf65cbe49", "sighting--47c2ba31-bb49-4823-8e34-8835fc9c105d", "sighting--b4363554-a1f8-4896-829b-54d636d27ea8", "sighting--8dd5c530-4cb2-42fb-afc2-c8261fe09ddc", "sighting--8c535117-fed0-496f-bf47-22e8107a63a6", "sighting--898d4b07-9d1f-482e-9dbb-742207d85228", "sighting--85636ce0-12b3-4e3c-99bc-9628d0383d05", "sighting--076fdaa3-d676-4621-a0ab-03d24a96a0f4", "sighting--b8b272a1-954b-46ca-bb26-2d68b4cc76ff", "sighting--da17bd5d-1a93-4e49-8bcc-78d9c4c22636", "sighting--061dbd75-c07a-4d46-a84c-5fca98bcf4b7", "sighting--ad4c19f3-03c8-42e1-9878-9d331f3e9bd3", "sighting--0463de24-668d-4515-a3b2-ebe010a57693", "sighting--e3b9eaaf-e0e5-4961-a0f4-c82298839971", "sighting--6f0d345d-e98e-4a1a-911e-1ef54a26a095", "sighting--f70a0d8f-05c2-4d69-929b-30c6bb63fe7f", "sighting--1886480f-0c54-471f-b3a6-8a3fcec3f732", "sighting--39177318-2ae3-4d4c-9ad4-4cc821e29aeb", "sighting--c53a6d73-622d-436b-8f7b-030973f45e11", "sighting--4c1060c3-bc2a-4a9d-9cc1-e41a5d026b60", "sighting--6b10c8c9-e152-49f3-982e-f0e35412bffd", "sighting--ced35968-69ee-48aa-add8-54cdd3001fec", "sighting--9513517c-9251-4b70-9141-4afdccf77d62", "sighting--771ac656-3d49-44d0-895c-b7b123858b44", "sighting--7f03a16f-be58-4fa4-8ee3-832890e4b534", "sighting--13a10c6d-2bcc-45ed-a899-beaad6164adb", "sighting--f4eec964-b90c-4725-b001-3267a447e647", "sighting--cd9ae813-3ea7-4213-8c4a-311e5f48eb86", "sighting--16c56b2f-465c-4f50-b394-0168c3dbac5a", "sighting--08247201-c1a3-4842-a856-05bc4ac43a2b", "sighting--2b25c25d-7766-4d4c-a82f-820a7e6fde71", "sighting--39502cc1-58e4-40bd-ae37-d586dcb07ea5", "sighting--2fe480e0-e420-4391-8823-a439a0cbad68", "sighting--0f1493aa-9b12-4e9c-acc0-4841d4de9a2d", "sighting--355073ea-aeda-4f73-9c48-4cd3b0ac921d", "sighting--3a23faa9-c0d5-4c89-b785-10a9d138bce2", "sighting--05354ad5-e790-46b0-b2bf-07f90909d8bf", "sighting--a8b57cb5-494f-4bc9-bbf4-e6091d089ed1", "sighting--ed070cf3-7b98-4c4f-a753-4c4892d0e357", "sighting--34eccc48-858e-4fc0-a08e-e9d02be3ff50", "sighting--f2e60928-413a-4a50-a581-6b1083e24c18", "sighting--82dcd8c2-4b91-4ae4-8d73-58e5b3df4258", "sighting--84da778e-e180-4253-9e21-01cb7ecc6689", "sighting--9e4f072b-ac47-4105-951d-7f18cdc975be", "sighting--4a7fe8f3-6710-46c9-a24a-78069e110ce7", "sighting--64502e36-5b7d-42b2-8dd4-ffe223967cf7", "sighting--9298fdba-dee0-4129-9da8-d84a4e48ef73", "sighting--8a14e392-96e9-45a2-be1f-d0d8962b2ca4", "sighting--04d7fc15-bd6b-4a9d-8258-dfca06f13ece", "sighting--1b4b7d65-3aea-4f99-9db1-dd05d545a648", "sighting--9c0b0bcc-16a1-43e6-a011-6bdf44f2566e", "sighting--659b6761-bac3-44d8-9180-32bf5422b858", "sighting--10efe619-e4ba-45fc-bc8a-a4eaf7ae591e", "sighting--c2fc4831-9a45-413a-9917-82ad2f1c6ce5", "sighting--2335e442-3224-4bdb-9c9a-697e30465b76", "sighting--bfc7dd45-cefb-413c-b2a1-d7ea21943a77", "sighting--05be61bf-903d-45f4-bbdc-f75900364464", "sighting--222895a2-515f-4777-b1d9-406c691b0887", "sighting--f9345249-0cae-4ef7-b8af-571118e1d9cb", "sighting--8d56ee4e-e2db-4ef6-ae51-522eac79b46a", "sighting--f581f36a-4c72-4bcf-b966-5581c059065a", "sighting--441c75e9-0255-4a87-86dd-9ce3db20b71a", "sighting--1e1e459d-f574-4655-860d-669c6b21585a", "sighting--91cd6995-3f5b-4311-af0a-9925979a55c8", "sighting--526058b2-cd84-427c-89b2-5402d3fc5eb9", "sighting--e9a97b37-8b37-4c80-a3ff-c99266ee6d00", "sighting--09c62de8-97ca-42e9-90e2-43d695c5d513", "sighting--ef8fcd89-27e4-4952-be7c-75c637dd6f9c", "sighting--6c9e3648-356a-4938-8ca5-ba0d76a60ad8", "sighting--314f0ccb-bb14-4e01-b9d7-2097ef8469e0", "sighting--c7697e8a-d142-40aa-956d-851f7c16433b", "sighting--a1948093-4ea7-4d01-bd82-27682e0084fc", "sighting--e20443d4-1425-46a0-9b5a-1a5edc4a0c3d", "sighting--06e7b083-ead8-41ab-a1a1-e40e7aba4d98", "sighting--afb576d6-72aa-4d84-be3b-28f68492b3ca", "sighting--2950cc92-6066-41e1-b1ad-39b8030a17cb", "sighting--cdd4b2a0-06f3-46a6-9abd-b8ff2fddc508", "sighting--1c8b5b4b-b83f-4f79-bbf0-87da07f4ed82", "sighting--d25c6d73-de03-48b7-9695-4163b62ca472", "sighting--09243e54-8a72-4f46-8d84-d85be184c51a", "sighting--3de73387-04fa-4732-9fbd-7773960ba9c1", "sighting--b162aa1e-7624-4b4f-a6b9-b1f0f6f58b50", "sighting--d4877def-5c3e-4fee-b19c-92ec769c5c60", "sighting--5115232f-aba7-4057-ba91-c38a1fa90d29", "sighting--939a6b09-30ef-482d-b589-adf208b6a745", "sighting--c69fe3f4-d19d-44a8-b6cc-4b434333c9d6", "sighting--c82a0a21-71da-4aee-ad62-fcf61ac49f88", "sighting--d9cebde0-f493-47e1-b1d4-9b04124af115", "sighting--82d89a46-237f-4669-bac7-3139c212567f", "sighting--191df4e1-3129-492e-82fe-533287571b37", "sighting--0378c56e-bd21-4d7c-8039-871200a5abfe", "sighting--7147f4a2-baa8-4aa8-b4a2-909311add0ab", "sighting--903f4d3f-fef0-4d0c-9c54-ee8b4f3a1ce4", "sighting--ea1e49d2-aa54-4528-869e-2dc347e6993c", "sighting--716a95fc-5e3f-47ff-af92-7c52c58f51b8", "sighting--a0232d1f-2fb2-4ee8-a5a3-c9ac45fd7726", "sighting--8bc5a158-6dd3-4b0a-838f-4a0cf404b6ef", "sighting--21f63ff0-6d29-4f86-9544-2db487af3a8e", "sighting--6521564e-e980-40c7-8cc2-7f6799a55696", "sighting--e9dbdb92-39d7-4f84-b634-e322fc481eb4", "sighting--1d33acbb-5af9-4c13-b5e6-4dfe13a17b9d", "sighting--ffb6a7e9-85c8-41c2-8e09-c7a6da910d2b", "sighting--19315c87-5e27-4e8d-90db-6a5596fdf9f0", "sighting--019e7545-edc3-49ce-85ac-4d5a60704860", "sighting--a7bd7d5e-c032-4f02-b87f-cf5a9d369b7c", "sighting--e8df403e-d163-4c85-97e6-a62be658d00f", "sighting--485319b5-e2fd-4061-9cb4-cdf2ac08f0d5", "sighting--6caec8ff-5b6d-4bfb-95f6-d5b1ee8173c2", "sighting--27caf627-43e7-42b8-b46a-12f237764baa", "sighting--301f96b1-200e-43ed-a8d1-ad05a4711271", "sighting--8a58fb7e-78cf-4f1c-9d39-d1024df57edb", "sighting--010159b8-8f61-4e6d-a8e0-caac26d1c1f0", "sighting--feacab62-1896-4c65-a757-5f6ca40f3eb8", "sighting--96767314-e17a-47e4-a7b9-bafa6256d41d", "sighting--fd398946-a42a-4746-ae46-8968254e2c7b", "sighting--64699c7e-4737-491e-bb3b-6f9aefc65940", "sighting--0e26b3e5-6d82-4cb7-977c-aa46fa6a75c5", "sighting--8240ab34-4da1-4371-8cab-7b6d1d705bb1", "sighting--b46064f0-29c1-4e6a-aa92-94d0afaeb33f", "sighting--3a930de9-6a9c-4a5f-ad4e-678f5a3f12cd", "sighting--d07afa60-be14-4897-95bd-75a8f6a0f982", "sighting--07ee4808-408c-481b-8ed7-b12f446e373f", "sighting--ce4882d2-9923-48af-9587-7df0273d2068", "sighting--d79dfacc-175c-46cc-b46a-05be4be98b9b", "sighting--1cbe0861-f427-4e27-9b30-eb19a580cfb4", "sighting--8afa6ec6-eaef-41c6-ac8a-31441a4101e4", "sighting--de309a38-ee9d-42f9-b931-5d9cb1de19bb", "sighting--5f48bcfe-9b2c-4b8a-b9e4-9a50b9aa7c17", "sighting--a4bc57f1-79c0-4b59-aeb0-27a56865d682", "sighting--c8888aa7-6cdc-4294-b6a9-eaf63c257b91", "sighting--37fa5a54-d09a-4b90-ad3a-8ff306040537", "sighting--ec45d6be-452a-404a-b23d-934f575405d3", "sighting--928da89b-8a5d-414b-b31d-3885c76c444f", "sighting--742f27e9-bc38-4766-8908-21dd9e09c137", "sighting--c9744abf-4954-4bd0-9019-d47c2caa78bb", "sighting--965b9a49-2825-4868-a9f3-b8eaf10b3644", "sighting--5fc05c58-b2ac-42b9-9db7-093f3e2d5231", "sighting--ed953250-4997-49f0-8946-72e33b0e51de", "sighting--d425f795-24b9-43be-aad9-f3ebb21724a3", "sighting--29466f70-5b02-476f-aa17-7ce64f677449", "sighting--a0079a6f-2469-4cbf-8b37-b4f83faede3e", "sighting--acfdf97c-0de9-40d8-a76c-84ca9e131e06", "sighting--a4baa9e5-7450-4d3c-9012-a2803b949100", "sighting--7817f3b9-a74b-47be-818d-1e5dd6332662", "sighting--442b3af3-4d50-491c-8324-ea49dcafc57c", "sighting--a80828ea-a992-4cb3-97af-9380245bc6df", "sighting--fca65771-cae7-422b-b7b2-c461baf3512a", "sighting--d766abe8-1a50-4782-a26d-301039036801", "sighting--6bc0ab21-abf0-4c38-8113-8bc2bdb20ed3", "sighting--03f71eb5-ae26-4502-bdf5-543ec5b3d8f1", "sighting--a3c62f47-534d-4978-9c76-987ddf06d111", "sighting--610d742e-3a39-4551-9fc1-a861c80afd8f", "sighting--3a441451-05a8-4077-a6f9-28a991f20f4f", "sighting--ede18778-092a-4bb1-8269-d85f5127422c", "sighting--9085b9c3-d0c2-4fab-b7a9-96d16fcf599e", "sighting--fb8b4954-b88c-4a70-aa22-16e320abab7d", "sighting--f26acf74-aed1-4690-b2c9-bf5f9f7f9d18", "sighting--83ed2ea2-7ba8-4213-9185-9112f086c572", "sighting--7fb3a988-8d2c-4a7a-8ada-fe43c5c7677d", "sighting--cc6ba741-e08a-4dc0-a501-634b56e13894", "sighting--f800f733-3943-46ca-84d6-ee08c8d97a0c", "sighting--610ef2bc-7355-4e21-92a9-dc73b9de6b8b", "sighting--985177c1-9b8c-4a3f-93d0-527db9c8f4c4", "sighting--5451b8fd-3db7-4a43-89f1-731ef8bf23b5", "sighting--d125d97d-1ed8-4612-b418-23da51be9d80", "sighting--5e9806c8-c33a-48ab-84e2-1d508718787f", "sighting--7b35324f-94c5-4021-a19c-4af74e6c44c5", "sighting--bb58183f-d427-440d-85d5-2f124dd4903d", "sighting--5168f638-a174-425e-a6d2-2338afeac5cc", "sighting--b778da26-2aa9-4bf5-8c4a-0149321c384b", "sighting--922e1b6a-0e50-4716-aefa-3a8e7c7b368c", "sighting--05654649-729d-4cad-a07c-d859e20b694c", "sighting--71cfe2fe-1d2f-4dca-96bf-3fda97412766", "sighting--f9423247-2648-4ee3-b04e-3e43e3c33613", "sighting--227551f7-901d-47e1-895c-a6b77bcd6f05", "sighting--64e6eff2-1ed5-42c7-a42e-f478000303ac", "sighting--5dcd4603-21e6-45bd-94f8-4e1bc7ef0aad", "sighting--3b3dd425-118a-41ea-9a73-4a490b477292", "sighting--ca7893f2-0e17-4dfd-aeff-c76ace7c1290", "sighting--4e0859fd-59f1-422c-9a15-eb73da0fb4a3", "sighting--9bb1a107-fda4-4f67-9870-f5f4c9cd76e3", "sighting--eafcc0e9-e57d-4ef9-ae91-45cc29011497", "sighting--e1ac37db-5857-41cc-9767-af91553ab247", "sighting--d1181f43-ac63-423f-a67a-b71f4784699d", "sighting--052b2b41-a835-437c-ac39-2ca0950cb53d", "sighting--bb3488ae-2dc0-427c-a03f-4b06a38de819", "sighting--1e064d75-6b69-462d-af53-4b1edd10a33b", "sighting--22a5bd78-c5ad-4231-b3ea-9b15ae1147b1", "sighting--dad6ff28-0bc7-418b-b83c-5513009aed90", "sighting--376bd9ea-85d6-4745-9f0e-52bbe1678609", "sighting--ceaebe76-45bf-4b02-bf80-ed52683f0210", "sighting--b8870061-f969-46f1-ae97-fa9b074fd8ab", "sighting--855dcd89-b6e9-4cd0-aefe-7427501e01f1", "sighting--f26b84d4-6b70-4367-85be-bec684af4f74", "sighting--ff5012b3-d41d-4ad4-8af8-fcd04af2e57c", "sighting--35df2aba-490c-402b-a542-fa7936212bbe", "sighting--dec9b072-bb17-46cd-89a9-a792f31c50c6", "sighting--a82833ea-38d1-4b69-bcad-f5774eccd8a7", "sighting--e92ba54d-563e-4914-8e6a-8745376f494a", "sighting--9bbdc09a-1541-4129-8a53-91cddd13fafa", "sighting--f555aa2d-1693-4f4a-94bf-b96f7331ca4e", "sighting--b56e998f-f4ec-4012-a636-bab7078154e8", "sighting--fe86d4d5-836b-4b80-afa2-961a657f1268", "sighting--e4c65453-7814-43b8-8d3d-0208fd39b168", "sighting--c4829414-4b18-4595-9479-d63b25a839ad", "sighting--7d62ff32-8f2e-4751-94e8-65cb5a5dffe8", "sighting--db82272d-6fd1-40f2-ba2d-3a222244e162", "sighting--0e0d8c21-3c4f-4ade-b949-f61479fbd828", "sighting--a5012c93-9974-43a1-9931-524e95011f25", "sighting--8245a7fc-cc8b-46cb-a52f-b1f8d43e3fb4", "sighting--801a134d-401f-4b85-af6b-76f52e4209fa", "sighting--2da88906-9e83-4b3f-aff8-71e350fddc26", "sighting--ae3eef0b-0712-4894-8760-c406214aae61", "sighting--ed7b185b-669a-420f-9e83-aaa831253d7d", "sighting--e8350bc4-84f6-4125-9dc3-7b335723eaa4", "sighting--38f86224-78de-4f98-ae6b-87d18bdc6f47", "sighting--769fb708-9449-46b7-ab9c-956f76143cf6", "sighting--1ca182e8-96c2-40e5-88bc-04c519721acb", "sighting--f9b3b295-729b-401f-a12f-5751b0ec9a3c", "sighting--f5be996b-54c7-4897-9d5a-52c10a509d8e", "sighting--116818a0-c364-438c-806f-b362b0f3c05e", "sighting--9d1f5a0a-81f6-4b07-b4a0-dad608b90a3e", "sighting--f1f5d63c-27a2-4fd0-8546-c50aa0b0ab02", "sighting--72375752-65ec-4094-9d3e-969430eb9428", "sighting--7e7cafc0-c11a-40e2-9b50-c9257d5c1990", "sighting--887c0058-5c24-4633-b288-34b6df5875d8", "sighting--56209f55-65dc-46a7-810b-c1a8089d8daf", "sighting--3b0b13d3-1b0f-4e3b-a21f-de8e4af1bbe5", "sighting--cc7f49fa-f9d9-49c2-a0dd-23c9423ab8fb", "sighting--9103258c-95fb-48cb-8d3d-f6a8b8a89f71", "sighting--c070ab6f-7b0b-4140-83fc-3f0146638003", "sighting--4b962778-4453-4413-b077-28d46c116f8f", "sighting--4ad04137-7663-4199-8e70-9d66d0406ca3", "sighting--9ba015f6-e52c-47dd-bfa4-46ebe27ce9cf", "sighting--0a4e45c5-1f53-4239-ade6-a081fc2070ea", "sighting--11947801-065f-4ecb-afd5-9c5126685012", "sighting--f4c5cc00-5bbe-4e47-a6fd-d69be2219e07", "sighting--91d18b0d-2818-4b5f-8128-fc593b2fad50", "sighting--809c5a7d-c356-4f49-a17e-7e5d3f6e6add", "sighting--71a2c4a3-f2cb-47d0-ad69-f9c002188815", "sighting--759c6ef5-5cf4-4c99-8050-c15ec8ed5a77", "sighting--ff342825-7c41-4233-9c3a-5ed2c57aa052", "sighting--bf3bbf0c-e130-406e-a227-81e3070afb51", "sighting--c3bdae6b-43eb-4b87-a7b3-34b12772a6d0", "sighting--35f5e9d5-5256-4df2-b2ba-612bd79ef1dc", "sighting--aeff6c5c-120f-44e0-8d40-baeeaae36c10", "sighting--8a32ef93-29ac-457d-8b7f-e0095ebb40d3", "sighting--987eb265-ec4a-4035-9eb7-4e88ddbbf284", "sighting--269fc001-a7ac-451a-8244-26322cec0926", "sighting--15a395b1-37dd-4d6c-8c78-6dada7ab6c74", "sighting--921405f9-1e75-4617-8727-17771967b365", "sighting--f0f0e318-eeb3-433b-9c24-481152dac123", "sighting--98a3a4fe-7ff0-4355-afe1-fc8ee32bf5b2", "sighting--91e548ad-be30-453e-a608-df20aa6273ec", "sighting--5de0f16d-701a-4db8-b8ff-8e044691f4b2", "sighting--4f236a22-efb5-4a97-8981-d4152c53e61c", "sighting--8cbfab3d-1352-4e0b-9289-522cd1aaf17a", "sighting--30a309f5-e122-4b3e-a7ec-1fbd485fe278", "sighting--a16eb6b1-2ae9-4660-a004-bb7cc16d3b26", "sighting--52464149-d6f1-4c3f-86af-76a27b78a8dc", "sighting--c28a2322-c397-418e-9ff3-e06a81dd33a6", "sighting--f58d0d78-3223-4c8b-83dc-9af4ee70fbe5", "sighting--991f84ec-3ce5-4abb-abc2-02a98bf3b6d0", "sighting--8901ab41-6c30-404f-b0cd-ca036b1f646d", "sighting--0f2caf9e-bd17-4a3e-b6e9-2146d9cdd1f2", "sighting--b8354b2e-14c1-45ba-bd59-2f2f25fb55bf", "sighting--48a6c01a-9842-421c-a45e-0a20b1bb987e", "sighting--fc14734b-245d-49b6-b76e-b84c360cdeda", "sighting--2139f396-a8ba-4dc8-a905-dc50fa7d8c37", "sighting--2ba8712a-10d7-4c9a-8498-d6aed6d7e26c", "sighting--43d38ad9-5a14-48a9-a5a1-f4bb7392c125", "sighting--8bd966fa-ffd2-49ac-af1c-19e5225da518", "sighting--776b815f-f115-4d0d-8769-9c5df276c0b0", "sighting--7fbb9959-37e8-4e6b-bb77-5ff86a631ffe", "sighting--e7cce233-8c51-4bc6-b8aa-4d56fe83e1c7", "sighting--0571af5b-ee75-4b09-b9dd-8aebc22b6c32", "sighting--77d9e84b-f4ab-459e-9f82-e90bd989466f", "sighting--c1255d46-694a-4cb3-aaa2-91b439c4b425", "sighting--3dc61b40-4d44-4db9-9e63-2b92aa0be733", "sighting--c4c1cfef-deef-4bb0-9c52-07b357d4e3d2", "sighting--54e206a9-a922-4a56-ba07-cffd28b63b5b", "sighting--45ed559f-f8d8-45a7-a787-8d86b1f105e1", "sighting--aabca8a7-03d3-4503-a088-58fdd6e724bc", "sighting--73a67384-85c8-4588-881a-5bf3644c782e", "sighting--1940507f-dbdf-431c-9606-6f8ec05fe300", "sighting--f8a6719b-3a78-4a58-89b0-dff3b7d3bd7a", "sighting--f9f2fc97-b1f6-45f0-9d5e-6a4d5f15d709", "sighting--56e4ee97-e260-44ba-ba13-2d5585cd041a", "sighting--de19db6e-24d4-45f3-916a-091cd6a5e028", "sighting--2cabaae8-ed27-49c4-90f2-c830f6def75e", "sighting--c05f334c-a79c-4599-8c57-ff7adbf22ee1", "sighting--e29984ca-c965-4807-a033-81459c096de7", "sighting--a95c35ae-2237-4619-8273-12b0b99b7daa", "sighting--391cc90f-3351-46ed-9e62-51ba485e09de", "sighting--02b97e90-85a8-4990-8d7c-38a6f1853859", "sighting--1b7ad9d9-1a27-4800-811e-f1b00ea1280a", "sighting--8bb1c150-1047-45b3-a2af-926588ff576d", "sighting--ab3d3407-c680-47bc-bbdc-d0193720b678", "sighting--51a535c8-7fc4-4d37-bdf9-f5b4f9e1299a", "sighting--ef2f7828-2088-4fe4-b9d4-b2ff68fb40d3", "sighting--e1ec8e32-428f-494d-8dbb-3fb80c7b4df2", "sighting--ecf55d1c-345d-4e75-826b-fd2ec5702f4b", "sighting--346b22a8-18b0-47d0-b231-8e9275e7fa89", "sighting--dc4a4ea7-3d23-4b0b-9f15-31d8aea2b45b", "sighting--7b6cc20d-7c4f-4572-b3f9-25131ab72359", "sighting--6439fe4d-495d-470d-89af-e5c1f2339bbb", "sighting--83197ce7-caa7-4456-87be-be23c62ac8cc", "sighting--33e53406-92a1-4546-a691-0f7dce1b282f", "sighting--a73f08b5-ccbc-4cf6-a2c0-5577ac1ef58e", "sighting--50ee4283-4a74-4961-88cf-d3202b86e7eb", "sighting--2afdf58a-98e0-489f-a399-8ef818e9554c", "sighting--ba6fb32e-983d-47f3-8062-11a09c41a63a", "sighting--da68ed67-1c66-4c1d-83f5-679fd4b389c1", "sighting--1fd2208d-c388-4ff9-b0d6-474e38ae0866", "sighting--43764741-e6d2-47ec-b698-7616f106be05", "sighting--884bb064-3000-4b10-a739-d085cb000a11", "sighting--dfb99c79-f66f-434e-b237-5412f128cb48", "sighting--8430d152-4207-4412-bc9c-12595fed92de", "sighting--7faef8ee-697b-46fc-9cf5-70a8a340b57a", "sighting--e02970fc-7cbd-45c9-936c-dd91a131917c", "sighting--16d620d5-dc9e-43bc-9c42-2c27e640bfca", "sighting--856270f7-8c3b-43d8-9011-36080ec81104", "sighting--20660a77-9048-4540-b165-e604aa6d4d18", "sighting--02317645-c22d-4c46-a904-519f6849919a", "sighting--327bdcfc-281b-4481-aa03-e638f2e36580", "sighting--4e6b635d-1876-4f0b-91b3-0bfed7c2ea22", "sighting--95d9d8c1-791a-4f00-836d-a5038b4f610a", "sighting--2a6e1565-7d0a-477d-9319-142e4ef94945", "sighting--1aa2616d-62b5-40c0-a41f-4a5eaf3139f5", "sighting--b65a1752-0a6c-400e-89f6-3b01de8cc689", "sighting--6ea24480-3ebb-4597-922c-40c1ce181d56", "sighting--364e8c25-a2d3-45d7-97b8-957a271e6e4e", "sighting--fcb3b1d1-04b3-4d04-93ff-893d41acc7cd", "sighting--d117cd26-02c0-4ce5-b1fa-9fd7addb0ef8", "sighting--d40ea9b6-f7b8-49f4-910f-75607c6cb981", "sighting--118e0fc3-513d-4d11-8134-779c09dc4923", "sighting--7218c0d7-b8da-4d47-a146-cb4672e826e1", "sighting--914f2681-9e9a-4f26-bd87-b9ea7bf2c031", "sighting--f91b6bba-6dd9-47e3-9f6b-ddfa4f0ef457", "sighting--2c16521d-68ad-4aa1-84fa-6997bd788efe", "sighting--e88c5be3-9c60-4ade-a5f1-a2b8ff8d30a0", "sighting--ef895eeb-40ce-4c74-a94d-e75593333917", "sighting--0a125837-ba3c-45ae-842d-e38080e139f4", "sighting--59de8679-e135-4393-b9f8-bbd25078bff1", "sighting--6974b022-db09-4a22-be55-baa04b208eb6", "sighting--68a10fcd-0b0f-45e0-9485-4a31e6c974ef", "sighting--0a79ac88-c9bb-4492-a92a-c39415f8d5dd", "sighting--f1e4e31d-9a62-4e39-a962-574ae751df09", "sighting--c0a33cb7-6a73-4201-8195-258dd1c8b968", "sighting--801501bc-addf-471f-b555-5467dd96f8c9", "sighting--36a9d4f1-ecf3-4209-aab8-c4ac71f1394b", "sighting--b918084d-dfa2-4162-8e79-35e226ba5248", "sighting--b211a670-6dc4-40a5-b0f2-45f95412907d", "sighting--ce5b7a90-4850-4a59-9d93-f556958203d0", "sighting--e54d253b-ba8f-460d-8e79-1dc8ad993a85", "sighting--06bd9fd2-8a5a-41ae-a55b-b4a3784492b9", "sighting--4df9ab64-891c-4614-8fc3-9086b0e33edf", "sighting--4e30710c-1fa3-4a1a-8954-56efce0efad6", "sighting--87f19623-c1bb-4f14-811e-761f84e10c57", "sighting--35e5bed1-0baa-4aee-b700-bdc4e912a6a2", "sighting--260f2535-7618-4547-8bbb-384e8f9bda93", "sighting--f1e74edd-4708-441c-a792-cacb05978413", "sighting--1caa60da-b2e1-49ae-9d4b-d5ecba19de6f", "sighting--0c9a8ca3-f343-4399-8e79-72f4f8a43353", "sighting--fc20624d-bbdb-4063-a9ba-32f0de3d7361", "sighting--bf9672b1-50d3-4cd7-9883-c2e4104f518f", "sighting--b0991eb5-e43a-4af9-960a-a6587d5a884b", "sighting--620ebfbe-e56f-4ad4-a94c-4d801e98a88e", "sighting--e3aa6835-5b58-46c0-9866-d8532ea7bc7e", "sighting--6a6fa265-0cca-47ad-9ddc-abbf5613d8ba", "sighting--a38ce003-0835-418f-8141-169c47ad8c0d", "sighting--5cda80e7-9f11-46b5-aaa2-ac094b14257e", "sighting--b88afd2a-4f0b-4aa0-b80a-b7ea122fcfa2", "sighting--514b12c2-93ef-436c-99ca-ed1ec89f99c5", "sighting--378e1279-73d3-49fc-9b5d-58291fa90822", "sighting--8351fbcc-0240-4525-aeca-58268bdd0be5", "sighting--1ebdb446-c043-4c5f-8b5f-6dec445b24dc", "sighting--2f2856a0-cbc4-4215-a701-98a15646a8a5", "sighting--ab4d8478-d750-4af5-8d79-3037b9c2041b", "sighting--d2a0b8aa-1cec-4430-9b64-1c8afbda01f0", "sighting--c4232a6f-b37f-43bc-8e63-fca5785a3ee8", "sighting--76c00cd8-5d74-4576-b197-45219f28cd22", "sighting--0a8e830a-6ce4-4b9c-b157-62878dd06971", "sighting--409b7c8d-6a44-4050-a99e-550eb0f83b1c", "sighting--f60e6cbd-ac28-4771-b02e-d793e355966d", "sighting--654a896e-d335-4e8c-a0f2-c1e907c008f3", "sighting--ab12c884-2e04-46b1-b2cb-efecc043b554", "sighting--6fee5ef4-c561-4711-9d65-94608c5c4109", "sighting--db95c5e3-3126-47f9-8394-e5e6e1884323", "sighting--799e5af8-f0b0-4204-8914-8b3277adf9b5", "sighting--a8485dbc-a085-4d87-bbb7-3e94efb696cc", "sighting--0639e974-6101-47fd-b24d-79224131e926", "sighting--e75272c0-1413-4aad-bc05-127f2cb346e4", "sighting--2b2d7ec3-3d88-41fc-a167-7057d9165721", "sighting--305a3451-cc9d-401f-b121-9c1b0ea0fe80", "sighting--d47d5740-f0ed-4ac9-8630-9233c03ae017", "sighting--8c681e17-a8f5-402c-a21d-50d2c83f9919", "sighting--44085f4b-9631-4aab-a03d-7f0bec5c2938", "sighting--fb05903a-b47f-4d34-8fad-b00541db968b", "sighting--1835670f-e331-4b7b-bfbd-0de9ba820d8e", "sighting--3bb98b6f-9a80-4813-b9c3-4f8b535d4f5f", "sighting--420b9de5-1576-4769-bb43-9970d50315f7", "sighting--b39c5474-97fa-40b4-b020-a25b64eb492d", "sighting--e7df79ce-fb29-4bc8-a81f-76452409550f", "sighting--832dc5e8-5ea8-469b-b4fa-c27df57d311c", "sighting--eda2b27c-beeb-4fac-8201-37b87a8247dc", "sighting--6cd7a571-5c30-4621-9f06-716478841990", "sighting--2620f424-7fa6-4f7c-a619-9c66b31fa41b", "sighting--8b37c5f2-1e6a-4c64-8d89-f50b90deb7dd", "sighting--7d5d8476-f090-46bc-92e4-4cd2b3f6f8db", "sighting--3f8e1fa7-52ff-4b92-9aa8-e18eef1aab24", "sighting--ab154074-d38f-4dae-8c36-67a75d5017a0", "sighting--530360c4-5927-4233-8a04-ebc20843921f", "sighting--f2a037dc-c4a0-4287-aed3-1e57fc8be06c", "sighting--08bd5921-fb4e-4114-9198-110316680aaf", "sighting--48333aa8-8172-490d-9a2c-c950e80c7416", "sighting--daa5eaa7-a3b5-4bf7-b1d9-1314a7e01c49", "sighting--734f3dd1-1a10-46d4-8e68-df3c8aca4cbb", "sighting--b0b41eeb-3cd1-4651-9829-7500789b63db", "sighting--49a4fca7-a481-4575-893a-611d3c1ce6f5", "sighting--06697e16-dab5-4fa0-82ce-8a767e8373e1", "sighting--21ffe326-e72a-450f-8060-94dbb819339f", "sighting--8b28c281-6b48-4946-b99a-e37cb06941d1", "sighting--74cdd05f-8808-4fb8-afcf-f0ec419e26f0", "sighting--0e716129-68d9-47a4-9152-0e06a12b4a94", "sighting--b9ff5ff9-5390-46bb-86bb-89accfff7a73", "sighting--4e0ddff2-d886-46ce-90e5-709fde3f3b7f", "sighting--ddc404ee-54b6-461d-a0fd-3bb2f10c5fac", "sighting--2f08d206-6e61-4691-b816-88de51a297c8", "sighting--b8daa32e-bac4-4d58-ad77-47b9297602be", "sighting--51a0ed53-2b67-4b2d-9d6a-2070e24da290", "sighting--54b644b6-1151-47a5-b0f4-dcca51371f2f", "sighting--fe962ad0-d8a4-4ac0-8ca7-50188d9c26c4", "sighting--df7f041c-fe18-4e85-b05f-2cb0a676cb1b", "sighting--18f5e1cd-cb3f-4744-9449-70bf524ec04f", "sighting--d2508a8f-07e9-44bc-9093-774f691fcf41", "sighting--04251f37-4d0f-42a5-a61e-60b73b65d100", "sighting--9e91230b-545c-4924-8ad1-2e00947187bc", "sighting--2a7aff3b-df2f-44df-bae7-9f3894950b10", "sighting--75f381c2-c73b-4d55-bfa8-703507bed5df", "sighting--8c1ab0b0-d7e1-4429-b486-d2ccf11b7b9e", "sighting--0161175d-91e3-42db-ac46-2c17288cfabe", "sighting--0b05cdc3-847f-46c1-996a-5b87bd504dff", "sighting--7e4577af-5a2e-42d5-b228-b46eb8b95d35", "sighting--f62af0d4-4004-4ce6-a99d-bcbd8bfb34de", "sighting--8be0aa94-ca25-4897-8e26-e0d8406c907f", "sighting--97e072c8-6fb4-4448-a0dc-4132bd0acba6", "sighting--00b9eee9-ee5c-4efc-9f64-7a2125208a30", "sighting--ef8ef8ef-d523-4779-80d4-6a6188b43aa8", "sighting--12b5791e-75a6-499f-99f3-7a0a4026061f", "sighting--de98cb97-4076-4b1a-8d5e-d2171e0b534b", "sighting--ceac9422-d33d-481d-aa52-3cdf7b84d49e", "sighting--4087363a-06c5-490a-b1f0-a6bcd92a888f", "sighting--571d68bf-2967-4781-b36c-6840012576f6", "sighting--063b8acd-c5ec-4d9d-9e5a-e17b6c2cf9c4", "sighting--474a9f0a-23d6-42f5-804c-8ce19250fdd0", "sighting--96253699-33d8-4f20-9756-67c85be5ac8b", "sighting--5d91f336-ebcf-4de1-a199-02307dd5419c", "sighting--6db48eec-a651-4403-8b4e-d7124843251b", "sighting--4ea84843-d0bb-420f-a2f8-7155596e8fc5", "sighting--8750769c-3c7d-43c8-bafd-a431072436e1", "sighting--5fbcfe26-c6cb-4c7a-a8e0-2fd8c825c4fc", "sighting--9208ae14-3677-4b91-8004-c7cd27818544", "sighting--42800746-e88a-48cf-b5e3-15ee30d8a41b", "sighting--78cdabaf-7905-46e3-b713-cf8677323119", "sighting--f08da527-783a-4cf7-b989-98700288776c", "sighting--9464e2d7-7e20-4d2c-b8a2-3b65f2cf4b23", "sighting--654f4816-852c-4e93-af43-e7bb5a4db7e4", "sighting--6804bfdb-a10b-46ed-aab4-3ebb9b783610", "sighting--37ee1ad7-8804-499b-ba6a-bf600cc6ecbc", "sighting--cf06dd08-4ffd-42f0-add3-760c5b852eff", "sighting--53dc617e-0a49-4808-9fb3-abf364bcb54e", "sighting--811b0617-bda3-4abd-a404-4ed3413d88af", "sighting--4185ca1c-77ff-4cfe-b558-fc87f84c9bf2", "sighting--f1670bfd-1d10-4894-b7d9-c4a91719c425", "sighting--c1a993c8-3464-4110-8fd1-e77c0e34612c", "sighting--fabf962c-17d0-47f1-9c81-a263e03d54fe", "sighting--5b949443-3ac8-4c02-bf29-f460abadc5c7", "sighting--a14a33b7-5fea-40eb-b7c0-f5721a078931", "sighting--86ea54d8-e67b-4a66-a067-736e40d0a9f4", "sighting--d9591647-a24b-4e01-97f7-91029c7ac98c", "sighting--e54988b0-b465-4c7d-9baf-6eb359244488", "sighting--266f2df9-4e44-48d7-84f1-0e4d54431b16", "sighting--85fd9179-9b2b-4cd8-8942-2058768868bf", "sighting--c17a1709-dd0d-48b6-81e5-6009e4cf2eb1", "sighting--0c624f29-7e85-4fd9-a883-ce3fa967fb89", "sighting--f721521a-8375-46b0-8ec1-6f2bc94b7147", "sighting--09185eba-7c09-4930-aa65-c37b8c224bff", "sighting--0b46d322-acff-4920-8b65-7bc336af2e07", "sighting--ede2311d-c438-4814-aadb-5a3615dddf05", "sighting--afbc5b31-f21d-4f97-a524-e8fcad66f711", "sighting--9d89c449-2a5b-4ff8-b0cc-3809afff5322", "sighting--bca8ab65-9256-4876-b54c-291511aa11fb", "sighting--d6d20696-c859-4ee4-986f-fe8be50eab74", "sighting--b299b8e5-110e-41a6-848a-271c1f382f44", "sighting--554225f0-807b-443c-8c9a-928a92f855df", "sighting--a79ecacf-7a5e-4496-86dc-cc3caf51a474", "sighting--e6891947-8354-4ca3-b740-95fed23d3f42", "sighting--7151832b-691d-42b0-9cfc-684b343f8844", "sighting--2c29f5e5-d661-4227-ae45-683ed51f954f", "sighting--9d4cb3db-f375-47b9-a482-e3eb3f93ccdb", "sighting--0cedb243-f274-4336-b8b4-dcbc2fb1d108", "sighting--07b04fa2-6690-48e2-aecf-593bedd6ceff", "sighting--93edee1d-4e55-49d3-94d6-7703f2881b1e", "sighting--45ad51b5-518b-496e-8e42-fa2541e97410", "sighting--80d898c7-0d16-4a63-a6ef-627358ae899f", "sighting--608ce8a0-bbcb-4195-89ce-a0b4d0495484", "sighting--32487e0e-9d4a-4710-8b5b-f2580ac8d583", "sighting--4a6f1802-a832-428b-9217-30db1a5c4ea4", "sighting--1cde6eeb-cdac-457a-b679-416fca6a87af", "sighting--0f2ffc63-af48-4529-9403-118fe1f4ca61", "sighting--25940fb2-050f-4bab-8176-3a92cf581c3e", "sighting--bb0c21a2-d33c-45cc-bd50-757c5f80d5c7", "sighting--54dbabb6-0274-426e-8b03-b8f3f804ba82", "sighting--e48d0156-0a63-4c7d-859c-b19be1a2b5d2", "sighting--faaa256e-705a-485c-bb5c-93ea40453b16", "sighting--a2519315-54ae-47c6-8623-c9b20faa89d0", "sighting--b4eaa17b-88b4-48c4-b422-6bba7b8d3659", "sighting--ba2aee50-ebad-4fea-9a6f-f65837195a3a", "sighting--2ab66a5d-fa80-4bea-8bbf-46cdcb8fd999", "sighting--94affac7-02df-438c-8325-0c21bdfb2dad", "sighting--3196ce20-e659-4e5d-9a3c-d978c0d81689", "sighting--3391f431-bb9e-47e9-ae21-67154d465bb2", "sighting--c337f12c-386e-4c28-bc9b-53bc13380c65", "sighting--dc35d56c-384d-4367-8707-c3e9b73d6177", "sighting--c3f8768b-8794-4efc-842b-a03ade51f7b9", "sighting--53191457-02d0-43b7-8674-33b8169b1ecb", "sighting--61827410-8b21-46b4-a6eb-b4187d815cf8", "sighting--8bbd30bd-0aec-4de5-b250-0509d4a67af2", "sighting--1b6e8bc2-d33d-4eeb-9251-584acd4c8d3e", "sighting--01816f93-db9a-4585-9e24-14913d4c433e", "sighting--6956432f-fc5d-4065-b6cb-6842870fd95d", "sighting--86a3d411-ceec-4b3c-a8cb-4f4e2f1e7b28", "sighting--c877645d-328e-4641-bbee-ffa2fb750b9a", "sighting--a0d4b6d7-7c99-4801-8cf2-3f22945c008c", "sighting--b47732c5-80bc-446d-b9c0-0327d61960b0", "sighting--47cceae3-32d5-4880-952b-49465b4c0433", "sighting--65197262-c9fc-446a-9369-c0218d94a328", "sighting--ad3b34dd-c682-4aaa-b9a7-dbf0718aee6f", "sighting--d6b6dcaf-5450-44f3-994b-2dd3dbe8e895", "sighting--071dff48-992c-4fc6-9830-5f953b69e7ee", "sighting--542f2b5a-9323-4190-a633-1a337b06c640", "sighting--0ddb97ba-84f9-4feb-b9ae-e91bb48d7a04", "sighting--1d3411d3-316f-4d2a-a3fd-6e0bd5e6daa8", "sighting--0910cf8c-1ec4-4a80-b8a5-84935f95d37a", "sighting--feb00031-fd9f-4cf8-933e-0de5ec0177e6", "sighting--a469aebf-b2a1-4655-aef2-18d2a0dac856", "sighting--87d26c82-4b25-4508-8a54-7385b3906602", "sighting--9bdb1c2d-8683-4eeb-a4c4-ce700064c110", "sighting--d89c0e43-a563-41ce-8110-912cb5a8d6ee", "sighting--01012d47-959e-4a30-b42e-4d463ce19127", "sighting--3815c6aa-5ec0-477c-962a-4d9047a2c83e", "sighting--274b6a00-82e9-4665-9564-274db5ffd6ea", "sighting--90c13d0d-1c74-4745-bea9-38c9df5a1f03", "sighting--64d0b4a4-8ddc-4e73-b60c-cbf5590acec4", "sighting--c7f8f1b0-1fd0-42b9-b799-32cc4efd9e5e", "sighting--32a7f6c0-a1e1-4737-bd24-9cb0d9d354ff", "sighting--b93ceb6d-faa2-496c-9c61-36b23333a186", "sighting--1dd37264-5a67-47de-9e58-cbae3118b7ec", "sighting--d4bc2960-7973-4bf8-85b2-fe16f756c5cc", "sighting--03eb3820-7cdd-4932-990e-a8d4de9e571c", "sighting--01996586-ed0d-4807-8949-cad7283e6e3c", "sighting--ab5e6a80-9b75-4433-ae08-fbddc148fd99", "sighting--af97fff0-3835-4e62-af11-5bb6bf78199c", "sighting--33a53a14-634b-432e-9f70-c2ce10487d71", "sighting--cd7c4316-4314-4a6e-9c68-6a5e5410cc3f", "sighting--0da935a9-ff09-48e7-af83-bc4ba0a1ef39", "sighting--7a517cc3-faba-4967-9a2e-db365adda0aa", "sighting--4f53cd2b-1ed3-414c-a354-dfe19ad2270c", "sighting--3098405a-4c7c-4cfd-aafe-88638f7cfe58", "sighting--205c4688-29c2-4c23-ba9c-000aec5e9f4e", "sighting--7f447d7b-fbd4-4202-891d-0427ed6ff5c6", "sighting--e99cf04c-1704-4b40-88f1-9fc867ded3d2", "sighting--34b840de-60db-45a5-9a17-66e70121d6a2", "sighting--e4bd7035-460b-4d6d-aa3a-ad50efc08fa2", "sighting--2dc53dda-24f2-474b-8d35-7d175049d3fc", "sighting--ba95f7bf-e1b7-4ab1-94e7-c0c5d66e5537", "sighting--ee22f961-ceed-4a5d-b697-171036fef88d", "sighting--f686a1b9-dc9f-497c-bb4a-39a5b4ac0f6e", "sighting--38a60099-d9c2-42b6-a92f-8948f5ce2f6f", "sighting--31978683-ce34-40c6-889a-a6ccf7b56822", "sighting--36c9020f-fc03-4aab-9c6f-e8e522a8c0e0", "sighting--1fdd508d-e96e-4b4c-975c-e1d78344c02b", "sighting--60ee39c1-8077-419f-898e-700d149d21b3", "sighting--62b81668-124d-4aca-97b6-45dd1274d866", "sighting--050d7e60-c661-4347-bfbb-fc80901614a6", "sighting--10f370f3-5325-46e6-b13d-26a2183228e2", "sighting--abca3103-0a87-4131-996a-143215b59d2c", "sighting--9eb7ebf6-4fec-4132-9d02-a9d5ed8bc640", "sighting--d0ae3243-8487-4211-b21e-7fb8f57ec17b", "sighting--9b87833f-2c90-40da-946f-c72c96d281e7", "sighting--353f68f5-49ac-45f2-b878-08068b214255", "sighting--450c8b66-f98d-4098-8c8f-b9097c1f7a02", "sighting--8e6af7a2-ed42-49d9-970a-92493eafd204", "sighting--58934adf-e3e2-4adb-8f83-c32568ab3931", "sighting--c58f8310-1141-4e02-afee-b8619fafa651", "sighting--fa61453d-d37f-486d-9dbb-8c08452e7be0", "sighting--9f6f6043-b4af-4704-97f2-8efacdf68aad", "sighting--9811bc4e-3a9b-4943-ba38-336bddfbd3db", "sighting--22114f77-7485-4791-b322-5bb76659fb5f", "sighting--4da19e1d-0462-4872-bd40-c9bf84e9c2dc", "sighting--38bec5af-3b3b-4668-8928-c9ea2a38f00d", "sighting--08f3b05f-c7d0-4535-a0d4-437db68d6e4c", "sighting--adc7dfb5-28e6-4af5-9fb7-fb24d1ed744d", "sighting--cfc120ba-de91-47a4-a7b2-f3a3e49fab9b", "sighting--c9f86d53-a76c-4f52-81b1-7a665d38100f", "sighting--d1fb2480-1875-4298-8558-5b2b906523b4", "sighting--adcd6d2a-7060-41d2-a211-56a0197dc14b", "sighting--6fce94c7-2a47-4d9c-a933-187d1332021b", "sighting--0e0e6e0d-6d61-4bbe-9fa9-4aec00ea25bc", "sighting--54854fbd-3cbf-4f97-8ee7-b52ecdb0730f", "sighting--b1a632b4-91da-4743-bc32-c3722e608d38", "sighting--57261232-5d29-4d28-af0f-e54288c6249a", "sighting--4800c260-533d-4fbc-8b8b-6b7b91adea3c", "sighting--53953fdd-b42f-4f86-9aef-ee134192d763", "sighting--f793cf0e-d2ce-4698-9c13-ce8c96915e7b", "sighting--b72dcb9d-1d43-4bd4-9af3-90fcf222d230", "sighting--6db7df32-c547-41e2-bff6-d5d2c66bf99c", "sighting--483a2911-91ca-472e-ad0a-95312b88a7cd", "sighting--1806fadd-8e41-4032-8853-c238a36a3b87", "sighting--bc4f6502-92e5-4f55-918e-cd3751acf83f", "sighting--9dd4eb26-8bd8-4247-b53d-852306ea3799", "sighting--49332d90-5fd7-46d1-bc33-ec3b8e8ca99e", "sighting--fd82ee1d-ce0b-445d-b5d7-71ee4e6c5542", "sighting--9a5fc4b7-1cdc-47d8-a4d3-167f34f00d53", "sighting--adc2adc6-9742-4b86-9248-5aab0c45a1ca", "sighting--08580d2f-d557-4f48-af3a-9dc4925f0096", "sighting--dccc86b2-7a94-4d9a-ab68-4d4b896ab81b", "sighting--7c99f82f-89fb-481a-9afa-0bb733c65b2e", "sighting--5142a00d-3829-4e80-8713-13aed08c84fb", "sighting--9a96e6a4-11fc-4e2f-8284-562b682552ac", "sighting--23963e91-6451-4236-955c-ba8118f712fa", "sighting--529f3b6c-8537-40b5-9fd9-2fac89ed9d7f", "sighting--08cdd331-4fe6-491c-9a60-12bdb07187e8", "sighting--bc055cf0-3356-4acf-a9ff-9b7166927903", "sighting--01e6f4b5-5efe-46a2-aa4b-3db0ae8f0f4e", "sighting--6ea4c257-7e04-403d-a337-e3a0fed77945", "sighting--7acb1a82-022d-455d-a3b6-8da41443d607", "sighting--044d7dbe-c824-45b9-b79b-92e5014114b0", "sighting--5a974399-4260-4f5a-ac3b-97c4c137f1f1", "sighting--8fc61e0b-c0ce-48e5-83c1-e632c3ebedba", "sighting--5af274f7-d91d-4495-b12a-60f4897d850f", "sighting--01ca5df3-5859-4a7d-b814-ae67b07168b9", "sighting--dcbe0fcf-0654-4214-8dea-5fe28a733035", "sighting--76943f19-43fa-41ef-8f49-357744cde4f0", "sighting--62659638-808e-440f-a6b4-7cd0c3ec44be", "sighting--f700ff36-5910-4907-b779-8e31adc88581", "sighting--584248ce-e5c7-423f-8c6f-296239c75396", "sighting--0a9c8378-b799-43f1-9139-b4f5fc08afe1", "sighting--95d9954b-d2a8-49db-ab99-49d599b8b11e", "sighting--80e3c41b-ee9b-4c59-ace8-c33d3d1a5967", "sighting--f54a186f-38a0-4251-b1cd-737164b56a0c", "sighting--a173646a-6f8c-40c0-85f6-f9adbaa2b6f1", "sighting--648cfd0b-138e-4586-8c4f-dbab58c07cbf", "sighting--cd134528-1027-4b21-b146-668977ac85f4", "sighting--9a49af6f-02e5-44f7-b882-92892ca172ed", "sighting--d6a45b26-5836-49f7-bda9-24c6efc1b2d2", "sighting--77eb6149-3f8c-4e1b-9d5c-390b22eaa4f5", "sighting--e8c91f34-db5a-4fb9-ad78-edcd4b329df7", "sighting--1187dd0b-c9cc-4a41-9486-0c0377df0c5f", "sighting--08aa0290-233b-44a6-bb7f-f067e6bd1529", "sighting--6cfa6859-fcb6-42e5-a9dd-1622a811c110", "sighting--60a2e06b-9fbe-498b-b507-b423ba94d58f", "sighting--a1888c41-5734-4280-a930-e3a557eb47b4", "sighting--c9bc3a5f-5c5e-4592-8bd5-10c447bb0d13", "sighting--9e6a6332-6813-4b46-b438-429f4105ff3d", "sighting--c75f198b-b6c5-4630-b55b-fc6b1a16c01f", "sighting--e9fe8965-90eb-446d-8318-aeec310d67fd", "sighting--3d663819-1d11-477f-b1b1-3d62ef71591f", "sighting--6539badd-81ac-471c-9a6e-71f703d7dde7", "sighting--f739fc3d-ae8c-49a1-a78f-c2040788736d", "sighting--81ee55fc-3b3f-4fe0-8751-5c97e812ad94", "sighting--2d58e705-a182-47fd-923c-27774c936de9", "sighting--160c7051-e934-4790-afde-6f9092d7257b", "sighting--20c3a73e-d1c0-4b48-afbf-cad3e960c6a4", "sighting--15b08de0-ca63-46c7-9cc6-6ef86d6be27b", "sighting--07e7d128-16e1-4f05-a8b4-de11de3a77e3", "sighting--a12fcbb0-c8f9-4b98-bb09-9ad97cf2fa58", "sighting--40d7983a-4ff4-4fe2-a33b-da2c340601cc", "sighting--fa4fba1b-3fb4-4990-bdd9-a22714335435", "sighting--ccc60dd9-7bf7-46ee-bcab-63e2b34a0fda", "sighting--a6d8ced8-b0be-4ab0-a4e1-75e5210d95b8", "sighting--2e8f436d-416d-41af-933c-4b150fe4d5c4", "sighting--d8bfc194-a583-4683-8056-26ffb4c57d75", "sighting--25e1f013-10ef-400d-b1b0-cf15fd91939f", "sighting--a43a980e-4e5f-4cc9-9087-5d6de70ed663", "sighting--288d8663-dacf-43f4-8367-5dcd84c74209", "sighting--28b9155b-02a1-4900-ae95-d7e4f207126d", "sighting--619fd031-ce4c-4026-9ef8-bcd59a2a8742", "sighting--34598e5d-e17c-4579-9fa4-b6ffc0839a60", "sighting--b8025b80-a9e5-423c-a5bc-f9334393f5ba", "sighting--a863e3aa-e499-45c8-b166-6f42befe2d34", "sighting--136456be-9e82-4d06-86b6-63c538cfc30e", "sighting--cb3fb24a-f8ef-4a26-aa62-abb2d00ca492", "sighting--1ceb339c-495b-46d7-b831-5b94f6863a1b", "sighting--8ce927d8-d0de-46c3-be47-310543a7414d", "sighting--90aa951a-c135-4d5a-b093-22793d54942e", "sighting--f4866424-de5b-4a18-a0ca-3d2f34300cf1", "sighting--17b8bab9-c47a-4eca-a41d-5f2503d3da7c", "sighting--62037c57-3493-4450-924e-d003f65ea89a", "sighting--84a22f31-b7f3-463c-b364-ac521dc886a0", "sighting--086e67bc-1743-4526-adf0-2dedd2387e93", "sighting--8ffb95e3-1a99-4454-ac28-2ae8cd877818", "sighting--437344c7-7131-47dd-9200-4612aa44b9c7", "sighting--870322b0-b286-486d-b61b-2e2a927c18f6", "sighting--8a18b821-fcb2-4b53-9c16-c3b98dec6ac4", "sighting--5482820a-ce94-4186-b448-634959efd3af", "sighting--a608ade5-2031-48ae-bb51-39351da2de6a", "sighting--3c3282d9-2708-4d6b-82a4-d8fba2ea85f3", "sighting--0598b53d-d405-4cfd-a5df-7874a57d2f86", "sighting--4805c2ad-1d4a-4d64-8a85-452b3d178575", "sighting--a02ac79b-dd43-4ebb-a874-a8b59a29a10b", "sighting--e65b83f9-2c61-487c-81ac-1b43ff528393", "sighting--3535f420-e5f7-4c2d-ab3a-18648f94ef75", "sighting--a56ef0b3-0ee1-4dbf-9638-7c841cf111fc", "sighting--9e97446d-fc9f-43d1-b671-1cdf2e205982", "sighting--2ed2697a-d119-4ab7-81a1-5e21f21379dd", "sighting--a3e30002-5842-4bf2-ba1e-3f00afde9316", "sighting--9f7d9e96-84f8-4574-bdd7-944f1c957f6e", "sighting--ebe789eb-5fbe-4a1d-bdcd-900a626b7182", "sighting--6ab87bc5-2847-4086-87f1-e5769e11c9fa", "sighting--7a5c9dad-8d1b-4182-b0c5-92e4afcf2ab7", "sighting--cb4b3a66-254b-4579-81af-7f4b2c050580", "sighting--bc8e412f-b294-4685-99e2-703c0f45bb67", "sighting--cf7ac3c8-c4b7-4498-905c-b0d2361cd46b", "sighting--41755db4-e1d8-4845-a63c-278b9df57c32", "sighting--2b18cdf1-d863-41f6-b2a0-5c52b39cf257", "sighting--a7a1cdc8-41b0-431f-8557-0ba1ebd753d1", "sighting--8be6d856-f1d8-4a6f-a582-54bc242ccccd", "sighting--c0657292-c8f8-411a-8253-a11d9582f804", "sighting--eb09e307-baad-49cb-b10d-71063a37fa08", "sighting--b61434f2-e9f3-41db-966c-2ddd57e413f0", "sighting--a397eb4a-533f-401c-8b55-7bc78413c880", "sighting--30f505c3-493a-45f3-b988-771dbbf155cf", "sighting--89666418-30db-4009-b657-1f252428a058", "sighting--8f1275ff-94e4-4f8d-9b32-787087cc8e9b", "sighting--77209e56-56c9-44aa-a90c-d1256050fa74", "sighting--412693ac-cd39-4c4f-9abc-1548c371cc14", "sighting--4a6e5cf2-2f5e-4e88-96a6-ffb8a83dbf03", "sighting--c72e2d4e-bdb8-4e49-be13-975fca04817d", "sighting--ee6ec593-15cb-42d2-9dd7-d3c799768abb", "sighting--e69f7fdd-a203-473e-832a-0e4ae988e315", "sighting--bf333ce8-7e71-4d0b-86b3-3e131857739e", "sighting--d8d80f86-849a-483f-b26c-84f12be307a2", "sighting--5a343ce3-8fd0-435f-9e68-83dc5ea130e1", "sighting--99bd376a-fc2a-4f4c-a5a5-2e670ece8818", "sighting--db3cce9d-bc23-4789-b809-0b1b485205e0", "sighting--dfbaf40b-a96e-43f0-886b-010216d9257a", "sighting--cc82bb3a-81c4-4493-963e-91b469843403", "sighting--464885b0-39d2-46b9-824d-76ad97f38c07", "sighting--5320320f-8348-4c1f-95f9-812f77748d36", "sighting--b275545d-6fbd-4883-8704-221da767a4ef", "sighting--5374cbef-448e-455b-a997-82e9c3496943", "sighting--ff2e631e-43f8-460c-b1c4-ab5e72e19fcc", "sighting--8aac8573-8ab0-4b87-b61c-ea55bf131e2c", "sighting--9a432c22-de8c-44cf-b5e0-3f68a16703f4", "sighting--523e2bb4-a2c2-4623-803a-7f5b1315f70a", "sighting--0587f381-42e0-406a-b0d9-984bf53229cc", "sighting--3aa4ab7f-7c79-4cb4-9fd3-b81dd357bc9c", "sighting--d4df4a04-20a4-4475-9212-932b797e4845", "sighting--18f2166d-176e-4422-8f15-2b9ab7e2661e", "sighting--1169ef4f-2fd8-402b-9264-a141b653598d", "sighting--fff02f40-ebdc-4284-ac6f-8e2658a88334", "sighting--a0c7f88f-944a-489f-ac85-49efaf840cc2", "sighting--0602618d-7c4f-4ab4-b183-8a947e5bc0ca", "sighting--f04858f1-c40d-4962-8337-06047b924d8b", "sighting--3f008d7c-ff0f-4dc3-b16b-07ab3fc5679c", "sighting--b771544b-b06e-43b0-b8f6-2ef32e62dd26", "sighting--447dc358-fa9b-444b-9acf-bdfcfb2ae81f", "sighting--d1ad0290-30f7-428e-b63a-9105d9723cca", "sighting--ec15b962-0cc7-4b49-aa24-4a822ddd2f58", "sighting--069a8d82-06f7-4ce3-afaf-76bc5b5b448a", "sighting--cfc7a96e-56d2-4a06-9c7f-0c99eb355af9", "sighting--7c880e9b-c3b2-4e71-a277-8c771537ff6d", "sighting--23254a93-da7a-45ed-97a9-442afd17f4d8", "sighting--4314990b-6851-41b9-810a-187fec8ae27c", "sighting--e9fa0496-c214-4991-8c92-25eea70a36b4", "sighting--55ff4ab1-3747-4a02-b839-77ea419a97e9", "sighting--acc25c5d-26dc-4ab6-ac0a-86709ff00bad", "sighting--64be89d6-7c42-4df6-831d-b469cd0a958d", "sighting--b864b0d7-2f08-4857-a49d-0762d4e91bea", "sighting--349965d3-0b3c-49ed-a409-9c6b64af816c", "sighting--94a614a4-f10d-4d24-af1d-b1e3ae9114ae", "sighting--c2564906-6d31-4a88-a639-abd2bb124e96", "sighting--41640234-a329-4093-be72-1e2679e1ef87", "sighting--56ef0708-0d00-4c76-b47b-3a6ea4a72820", "sighting--bbb11019-6d44-4e17-af6d-9a1c2dc1a2a7", "sighting--4d30abc1-bf42-4f44-ba6b-1d34086986c2", "sighting--a63849d4-c4ff-447d-b657-876448fb3730", "sighting--266733bf-8bbb-4b26-bbc1-4ae2f6db24c1", "sighting--84aab455-755d-47a6-9529-243f08944cc9", "sighting--e67a45a5-3f72-4b49-8165-9907084ee46a", "sighting--a4a77a72-7d51-4130-ad93-a39371718f35", "sighting--64fb9270-6dbe-41dd-a10d-03754b1259da", "sighting--605bcb66-45c8-468c-98dd-8271fee20fcf", "sighting--63c87d34-d19d-4f3b-adf3-421278b337d7", "sighting--a2d3367b-3976-4ffb-b27f-0cacb16776f1", "sighting--5cded772-6355-4ab8-b784-60afacc6a15e", "sighting--5a2d30bd-c4e6-400d-b19d-261755f38a25", "sighting--5bfe59f5-6a88-490c-b740-dcea0f696217", "sighting--b069eec5-6997-43ac-a5e8-91ae56948cf8", "sighting--459d2110-cdce-4752-bcc1-85925c4f8c4a", "sighting--26356885-fe58-45f8-8376-f5acca53d699", "sighting--6f19a155-600f-4f03-bd37-01cbfb0db511", "sighting--16e9b18b-b176-4721-81f0-e74d819362f3", "sighting--44ee19a6-8481-4333-a3af-a54cf8f3adeb", "sighting--32ba3144-f591-4e13-8b3c-061a59ed4503", "sighting--7cc17810-a57e-4fb3-b085-2e61813d1f1d", "sighting--d87e2472-3423-4f8c-80c3-320422dc1b49", "sighting--f2a64086-f834-4c0b-a681-22a0f5434af8", "sighting--98f02291-26b9-42c8-a60a-8a76166c340e", "sighting--328969be-aad5-4f6b-b8d3-fac79d77086a", "sighting--4b7f79f9-a95a-4550-9eab-48ace5aae398", "sighting--5d0d351e-2327-41f6-8641-f3bfe089d920", "sighting--d863d086-b456-453b-9030-533722463847", "sighting--8b1f3bf7-785f-44af-8db3-33eec906f047", "sighting--c31d678e-d6bf-4be7-9ced-e75647ec3300", "sighting--3af98298-e6b9-408b-afe7-30a06acc05a4", "sighting--dea29ac6-6715-4473-92e9-f3af866c54f2", "sighting--622b0890-811a-4801-93b8-3cf1300321f0", "sighting--f565ad65-ff0b-4b16-b715-3885132c57d1", "sighting--c6d48d73-557a-484f-a342-7a73d2adc610", "sighting--e994f346-0c90-4742-b010-30f6250b023d", "sighting--6b56428f-f204-47a4-8505-d35e2cd64d9e", "sighting--83671c75-bc25-434e-a16d-7ccc099eca86", "sighting--9db5343f-e734-41a4-a10b-848318346f76", "sighting--0bdbc712-7e25-412b-a78a-11e433443b91", "sighting--8b6a08cf-c933-46ce-87e8-4562589bab2f", "sighting--9b374712-0746-4c46-a1c0-bc9af9c68c89", "sighting--fbdca374-3328-47fa-9718-e09b05315b22", "sighting--7a40ef7e-7b59-432e-9771-4742b29a6b6b", "sighting--3227f433-1b96-4658-b549-a8a78b198656", "sighting--b27c2e86-0c41-49a8-8597-89c90938ab80", "sighting--1e63cbaa-4a10-4a69-8ea6-30d92083c3d0", "sighting--62fc3730-6671-4b5d-b601-facde4ed4ae7", "sighting--833d9917-2896-4288-bf0b-3953530cf042", "sighting--0c115a57-9608-47cb-8eac-57616fb47be6", "sighting--66e45b3d-fc98-40de-a056-5aa57b6591e0", "sighting--2a13c02a-31a1-49fd-8baf-d65ff02ff0d7", "sighting--a1ebefc7-a8f5-4042-a315-45db3cbc7a97", "sighting--265e30d0-0431-4ec3-bca2-ef00966debaf", "sighting--44847d46-95bf-4919-8f66-f8242407924e", "sighting--07c87df0-c803-4d6e-8eb7-0274fb346eb2", "sighting--a676c8b1-2d8f-4523-b023-4bc157e53336", "sighting--8ecedd87-b365-4f53-85bb-28a7bc2da779", "sighting--d5d5f18b-b695-4aec-bbd6-25694a8ac101", "sighting--1261627d-ed21-4292-8bad-b6e64404527f", "sighting--ca9b6e3b-083d-493a-8b04-8f39b483a4c4", "sighting--9210c6c2-408d-459d-8d19-674cb141eef5", "sighting--7225a353-4a1b-461d-94aa-aafb2d3ebe16", "sighting--967e4ba2-e697-46d2-99c0-d9ca0f6394b6", "sighting--14d9b60a-9789-4a5b-b24f-150ae1b3fc2e", "sighting--337518be-75bd-4798-ac5d-1a7e9b9f4097", "sighting--e17f43fe-a181-4e71-90be-fe0844ab62d7", "sighting--1a75b0a3-5d31-4b6a-819f-b519b51d981e", "sighting--43e1c17d-a1f3-4bef-8026-5dbf76a69842", "sighting--a6df0b2e-0e29-4765-b026-a4419683c974", "sighting--27406e0a-c12d-4efb-8c1e-1679ac335eba", "sighting--6cf3c46f-8705-48a1-bcc7-390279f40344", "sighting--a32ad796-0263-4469-90f2-cf102b6c11a0", "sighting--882d321d-54b5-4a78-8623-0553bc44f7a0", "sighting--6d1b8577-2ea6-4f29-ba42-7ea56336a482", "sighting--f877882f-aeff-4460-b629-1536d8cc920c", "sighting--2632f1ab-6b31-4554-9596-d1c81383d3f8", "sighting--1fd914e5-9afd-451d-83f6-1470ed8bd745", "sighting--38a74bce-21d5-4cd3-bdfb-aabb19c46b22", "sighting--15126b03-3e77-4a5b-9dd3-1eec05f716df", "sighting--aec2a264-c809-490b-b559-7fd6f461c8fe", "sighting--75a05996-8848-4e58-ab87-3438bbccd565", "sighting--26decf7f-74d9-4398-a746-1f51499eeb4a", "sighting--c8c2db6a-4899-4e07-98a8-78800044a15b", "sighting--f41c1676-72d9-4aca-932f-fedb22e4fd0a", "sighting--85e173a8-4c7d-4bad-91cb-d0b61131d250", "sighting--4fc9056f-aa02-4ee8-9728-a604a78f3030", "sighting--854291c8-8fea-4732-b8ad-1cbe425a34e7", "sighting--4afc936f-c2ed-4156-a037-53ee0e41ab21", "sighting--09d5cee8-e45b-4b6c-b407-35cca05f2ce4", "sighting--cbc17ed7-eb76-4c4a-8e55-f18fdd55c58b", "sighting--6d613a48-d278-46af-b5d8-6c2ae788c7c8", "sighting--042f41ca-767a-4cc9-821f-01656a0d0da5", "sighting--366bee4a-ce5b-4178-9d4c-8fc9615edd71", "sighting--d50213cc-fb64-49c0-a05d-3b24eb00969b", "sighting--4d2f9958-44fc-4745-afe4-83fad3a0d263", "sighting--25e50868-e9d1-4cde-9854-6a4d6692788b", "sighting--3521a874-a9f7-4fa6-91ab-2de4359d56c2", "sighting--fdf7bc66-221d-458e-89f8-63f8fa5a2da0", "sighting--047a4d15-ebd5-4155-8541-1a17fea8875d", "sighting--00411428-df43-4c4d-a928-860b3b3e1d2d", "sighting--36890ace-5c16-4a16-bde2-4c7b18baaf17", "sighting--465c32f9-88cc-4e5a-80f9-93526d4077a4", "sighting--b05729aa-e87e-4298-a050-4657a6a99266", "sighting--a9fdb909-739a-4e08-9103-369283cec326", "sighting--d0ed9ae9-5d52-438f-9e1e-28e699452717", "sighting--9931434d-c048-4893-b1a3-eb75f4282efc", "sighting--45ee61be-5cb9-43fd-8a31-daac985e5901", "sighting--ebcfb0aa-923c-46d7-a29c-f9e7893db650", "sighting--8d87f481-c4de-4260-9a74-c5f239cab09e", "sighting--93464371-ef85-4b58-8205-b0f647df6822", "sighting--8fa99e7e-ec78-4a78-8b62-0ac8d5d12410", "sighting--3ae13674-2a1c-40e8-a348-ccc78d760d9f", "sighting--96975f86-f7d0-43db-9dc4-c3be1963ddc5", "sighting--e8830eb8-13c1-4d26-ba0c-c6eddda113d9", "sighting--03f45bb9-9785-4f37-864d-d2cd06aa8aa7", "sighting--d9880077-de59-4778-9b30-cd4f1a80d7fc", "sighting--574c1928-7d41-454d-a542-7638d0117b8f", "sighting--79da808e-b211-4849-af56-58103df5f893", "sighting--5415377f-bf62-4f8a-9647-ebfcfc917744", "sighting--8dc373e0-d017-48e8-85ba-5c955d38002d", "sighting--af41846a-b28d-4ebe-b06b-14b1ae737617", "sighting--babfe6be-1af8-4df5-810e-d39fd62e33fd", "sighting--78a0df27-c255-4d04-b93c-51da50a6a10a", "sighting--24fa7392-868b-4008-9d78-05df4f1923a0", "sighting--59c51720-20dc-490b-903f-8fe71c959e8c", "sighting--6459c1cb-f37b-40f9-a991-6f812ef31d65", "sighting--93cbeac1-24de-43c2-8a69-e4c7669133de", "sighting--5aa60926-53a8-4443-9756-53c8e32f0f5f", "sighting--dba2fc81-ed5b-4d78-835c-0c726f43d71c", "sighting--582772a1-bcd3-4165-9778-cae506266991", "sighting--637349d6-c0a2-4053-b214-d811cfd92c58", "sighting--9cbbbef1-fb1b-4491-bd1e-bc3752e584b9", "sighting--88bcb0e7-b1ea-4c4a-a8a0-647b79269303", "sighting--ad5296d0-3c99-4a76-8afd-0a4b65b51a06", "sighting--d72e5032-2edc-40d4-a272-e63b6f53af8f", "sighting--c84d79be-8537-4193-b3af-6d05aa1dd6a3", "sighting--07a08ddc-eccc-40ac-8716-77d6938bb19c", "sighting--ca4674c3-735b-455f-8c5d-21377b35656e", "sighting--ad05e494-72c1-49eb-9c44-703808dc3c0a", "sighting--db189b7a-6e4d-4f61-af0d-d8d0734d7d83", "sighting--990e5c89-af75-4fd3-a494-aba3385f7f4f", "sighting--ab27687a-219f-445c-a840-afb39895b7b2", "sighting--2639476f-2c18-48c0-bbed-91f744fc3b50", "sighting--94ae7270-f878-417d-a64f-4760cc614172", "sighting--3adcdd66-09ef-4d79-bedf-7d35eb581999", "sighting--39168950-cd21-437e-9773-3abbf249420b", "sighting--a3b68e6c-53c1-4138-96ae-612799cc8782", "sighting--7eb5afe0-72a0-48ce-8ebb-660b5aeb4c5b", "sighting--992d96b6-dfb7-4eb8-b79a-4a32acc3faa0", "sighting--b3be3704-c2ed-40ea-bf9c-0f26a73f1122", "sighting--5a813759-eb17-4eaf-917c-afda8e77f77c", "sighting--d4e6d34a-80e1-444c-b59e-8d170bcd9e56", "sighting--24e1fe0a-c861-4e74-92f2-3f805850c184", "sighting--0e50545c-96d3-47eb-bc89-e499b6fb8ca1", "sighting--f65ab619-f51f-4a4f-9482-44b5caf02864", "sighting--5b74195b-e884-409e-96b7-6d0dcafa8569", "sighting--234ab66b-6c5c-4cfe-9812-b018cb82a78d", "sighting--b0b179e0-6847-4f15-9d87-92bc04453b2c", "sighting--69e3ce0f-b239-4f5a-a8f0-754153a9c319", "sighting--5f5af435-bb21-448b-9b40-60d3b73ae90d", "sighting--5c486df2-9198-4308-ae93-dbed6548514a", "sighting--57957dae-f4cb-4151-8d7d-acbb6fe6fe35", "sighting--fb91b385-0a86-482e-ac2d-e863e7b26841", "sighting--a3d3459b-a630-4b30-80d5-d5936807ebea", "sighting--53b08fc2-0049-46a4-8c61-2620023c5f09", "sighting--2a472907-50e0-4298-9e9f-5dc0e0a15e03", "sighting--c56b2c75-07fd-4c0c-8e1d-5f03270f18b7", "sighting--a63f15bb-d673-4a2e-8845-8ee65f7f6974", "sighting--23cb0d08-687b-4497-a31a-d0def7374136", "sighting--66cf584f-53fc-4518-9cb2-84467fd3f0be", "sighting--3520a337-7717-4f3a-98a2-d9d6d8359876", "sighting--f1961c3f-e9a4-47b9-8045-d5094f69abeb", "sighting--b4c0aa7f-8eb2-4df5-bc9d-9c2f32c1f415", "sighting--4835818e-7e11-4fc5-b57e-eda4e79a4099", "sighting--0f318ae6-06dd-435a-8a6b-b924ba22fc42", "sighting--004ebc7d-f876-4995-801e-ab6f78fab175", "sighting--83d68a07-d19e-4d64-b5f0-bb42fdf3a79f", "sighting--cf99ac9a-bb6a-4c31-862f-6d379e282920", "sighting--e2e21f5b-9613-4a6a-8602-99da4586951f", "sighting--f97aaadc-403a-4273-928a-a4073fb2325b", "sighting--945d52b1-c9df-4acc-ba25-aa9c750e9b01", "sighting--053ea48d-5ddb-4670-98fc-38282c8abffe", "sighting--fcc786fd-8c86-4c86-9ec7-41546befd6cf", "sighting--b82bfa03-9a7a-48da-83c7-9eeb626bd756", "sighting--0e9fd383-cece-4593-84f9-ebec15b610be", "sighting--9f02bec9-1d5f-47b9-9dec-28f52879a7b3", "sighting--cbd83b9e-7db7-4ce6-84ff-4d771d6b4aeb", "sighting--adb11b4d-9179-47f3-87de-8b52c3a23980", "sighting--bbfcfa35-97e7-4fcc-ab5a-99584f82660e", "sighting--d5dbc8cd-4c89-4bb5-92f6-b11a4bdc4777", "sighting--cd6639c0-ca3d-47b5-a1e0-25a1541e8f29", "sighting--d5431f7d-60f6-4d5d-8e78-85d184b2e32a", "sighting--38ca675c-b704-4a4d-b863-a554bc69522b", "sighting--fde1a050-70f3-4f83-b02c-20b9764dd6ca", "sighting--57d51d81-f762-4ff7-8f5b-54c18060a6a0", "sighting--0941dde3-a4a3-41cc-96d8-0fb409a1a979", "sighting--b7a5820f-3f2c-4525-9bcd-ab0f7ef1e30e", "sighting--ec7e498d-4c3e-48a1-a30c-fec3b06d30e2", "sighting--29631682-f86b-4313-a055-4e65051031a9", "sighting--8b9f0544-c3e2-4a2b-b255-99216e60ecd6", "sighting--6640eab7-c66f-418b-aa63-210116b757a7", "sighting--348feba3-5940-41b5-bd3e-125729855529", "sighting--fef6a79f-c8ab-4883-9217-2e875819932e", "sighting--09bd431a-c0fe-4bea-afb2-a7b87bdca787", "sighting--d0455338-3b89-4b52-bb47-9e8fd5247445", "sighting--355f416d-f27f-43e3-bc24-f201b505fd98", "sighting--f7b56ebb-990e-40d4-bad9-5ffd79feaeee", "sighting--83d911c6-d93f-44ca-a1a0-9c90cbd67021", "sighting--26d3dcfa-f653-452a-8421-f4efee92e4ed", "sighting--4b63984c-0c63-4632-9222-140197afcd98", "sighting--bc772991-ec3c-4d89-b7db-b4c902aae7f2", "sighting--f4c2ef17-b6b8-4cd9-8a86-b1bc3cbaec73", "sighting--806d259a-d3e1-4db3-b34c-9249e5980124", "sighting--b9723af7-18f6-4b72-8bb3-c32dfa90aac7", "sighting--290eb2ab-745f-410c-948a-9dcd55acb163", "sighting--4cbb3556-c79d-4d8e-a3eb-cbed9c28849c", "sighting--5f87f5ff-68ee-4f2b-93b6-d4f2f99e9d36", "sighting--8baca855-5433-42ad-a5a3-36145f8df380", "sighting--b2b4cdd0-7d16-45ae-adea-bdb21ebad818", "sighting--4e610c35-00ea-421a-b810-0aea0d980862", "sighting--558eecd4-a146-4703-b33a-b4918a46836a", "sighting--55b05073-d626-4960-876f-5c15f8fcd46b", "sighting--574ccfd5-dda9-460b-b4d8-2fef325baa18", "sighting--a65aa380-fb52-41ca-9667-cf1668febec0", "sighting--22c72241-ed67-42eb-b1e3-c183d420f577", "sighting--36c779d4-6195-448d-a80e-b4295d4fbe05", "sighting--87fae4a1-008a-4003-99e3-e9f47073c243", "sighting--0a0f99c1-ab2c-4687-9665-cb88d699e65e", "sighting--2b9cec67-e797-4eef-8a68-6d7e94b44878", "sighting--fb19be84-d900-4b98-8278-c84e9764e698", "sighting--04927ade-3baa-4d8a-80c8-2e913403c1fa", "sighting--e5620f1c-ec31-4e93-9418-0946c3c07f08", "sighting--d7f20053-32b5-48ae-abc4-8c588245ffd6", "sighting--33d0631b-44a3-4b84-8722-ef76eeea86b8", "sighting--25331371-120d-42d6-b4b7-26bd3f59cfe0", "sighting--ebee44c3-c793-4de7-8c6a-3c77c74f41bf", "sighting--4089ecd9-db90-4a8d-ab8e-439c38ce028f", "sighting--24a88638-7568-4afe-b25d-4ef65adb5ecb", "sighting--46a1c308-e9c5-4e4b-8099-ccff0b406666", "sighting--b4b891e0-5b03-4570-8ea9-559bd7d12891", "sighting--db52c37e-e0bb-4097-bc04-89b8895b87bc", "sighting--7eda5c05-eb29-413c-8c42-9087b5dc32f2", "sighting--95830c31-86c9-422b-9fd4-1b1c87d8823d", "sighting--e490c09b-cfd6-42e9-b7fa-66e0ffbe61ed", "sighting--a3d768da-2290-465c-ba2b-abb225f35b7a", "sighting--5231a8a2-125a-4966-ba9d-0ff3bcffa88d", "sighting--4fe37522-a218-4677-8b9d-c6635ec63f8f", "sighting--61145de2-da90-4a42-b82f-f73efc9c28e3", "sighting--8aeb7355-c350-4c94-a38f-ad4984ff67c8", "sighting--29851303-975e-439f-aeac-d1814d9b50bb", "sighting--d8338fa2-64dd-45e0-a74d-c0217903beaf", "sighting--8d979378-ce05-4514-8c8e-c204bbf3fda5", "sighting--63950f85-b6e5-4b3f-8111-ae570fcf3fc1", "sighting--d36b892f-4537-499c-bf5f-a5bd48859881", "sighting--796cfd5e-06c4-443f-b046-b75a82e10f9f", "sighting--79daf825-08e7-44a0-aff0-1b788ead098e", "sighting--6c8db67a-ebe9-473d-a5fa-dbeccde8ed72", "sighting--26ab4bb3-0012-4ede-9c76-4a75e62f31fc", "sighting--3451184b-7d1c-4974-8a37-c6ee434708bd", "sighting--4d81f742-7089-405d-9b7f-d1451d880968", "sighting--e0e154fb-64d8-4dc2-b93d-71e501cdefd3", "sighting--d33d85e8-3579-46fb-93e5-d5dd658acc99", "sighting--9e3a0f8f-3e1b-493a-b470-755d55d17f08", "sighting--b90ade9d-6ec2-469c-ad83-7dff80520ddc", "sighting--9a3c2359-f1a3-4116-bc77-fdf8fc95a4a2", "sighting--24a0d95d-ecf5-49ae-81fd-080e5339b754", "sighting--1e08b1a9-c142-4c30-b202-2978b68fa938", "sighting--7c339b3f-444d-4230-9a8d-2e9f1d1d1752", "sighting--d30e1679-cd45-415a-8e75-d275f4b9d605", "sighting--1cab4468-b98e-484e-926e-fce6371501fa", "sighting--81454fc3-a183-4ed0-a1c4-b8d4eab1a798", "sighting--2e07fefe-5cd2-4925-87c5-82c568259f74", "sighting--c9ff51cc-0342-4280-8ffb-884fe536abdc", "sighting--c75d5a89-00aa-4dca-a2d6-82b7fe8d9a97", "sighting--8413cc95-35d8-488c-a24f-3d976bc3cae6", "sighting--875da7c3-1a5f-4f60-b50f-c3042c29bdd0", "sighting--a9194ff1-8f1e-470b-854d-69e80a79cb83", "sighting--b5238df0-e86e-456b-bc45-90dc80e0b6cc", "sighting--5b365e27-eb72-4135-a3c1-2a3acad30047", "sighting--fa7e0165-4f36-4a00-805a-bc8add694ad5", "sighting--ff2aafd9-77b9-416b-b2a4-d89c9069cb52", "sighting--69098769-c840-46b0-950d-969fcccf8b52", "sighting--26cd735a-e841-499d-959c-9777d9ba7acf", "sighting--c5e503a9-5029-46a5-a6c0-4b3a6240f2d5", "sighting--fd574f66-679c-42ca-a120-9f592fbaf548", "sighting--1b608bcf-2b96-4503-9559-f77b39c51e75", "sighting--f2d6d537-edff-4501-8039-bd01d4eff8c9", "sighting--8f6da50d-61ce-4a5f-862f-a69631e5e5cf", "sighting--2e7b8768-9c8d-41ff-b572-d660a9204a4d", "sighting--6f1ac721-fef4-4837-af64-abfe9736efa5", "sighting--8e205f7d-b127-4d7b-a865-9a4b4bdea073", "sighting--8dd73e75-3a31-4c82-8844-b9adae5ebaa3", "sighting--20022d10-19b9-40b9-a62c-a81dc017bca3", "sighting--8cb3177e-f1a1-4901-a914-01aa41b017f7", "sighting--c6730c41-0e00-460c-9e0e-474c9a9983df", "sighting--f5972aaa-d69e-426b-b2b9-0b7d52c728c7", "sighting--a892b686-d150-4f07-8b79-78754f44e480", "sighting--0982e041-c778-4ea5-a729-3c4cc45b4d75", "sighting--88ed2bfd-8679-4b09-82d7-6658c0656fec", "sighting--42652cf5-50c6-42e0-b73a-6773a0b68600", "sighting--8e182206-3fe8-41e4-80c0-26591d367c41", "sighting--d6edebd7-9ebc-4be8-9057-5f2445899623", "sighting--9cdc0933-739a-4fd4-9bb8-d68a73c68413", "sighting--16237085-eca7-40ef-819b-bce65e52d033", "sighting--1db098bd-1b3a-437b-9a2f-5693b1059380", "sighting--15c8c11e-b216-4246-a550-18b1c54fcc5d", "sighting--aa7258ca-993d-4849-9a00-1ddb72f2c21d", "sighting--91244a8e-6b1f-48dd-9be1-22f94de30249", "sighting--f52f572f-7287-47db-a632-f15f69baef6f", "sighting--d7f03211-39b2-4d85-a62f-d80b97a513f4", "sighting--52bea46b-b1ee-4b56-b746-0e5e2ac7e29b", "sighting--798a2460-9f4e-457b-b6cc-f95788e6c472", "sighting--6aa58832-235d-48df-999a-26749d7c80aa", "sighting--004b8065-0048-4827-89cf-09173284458a", "sighting--06bc1cfa-6642-4b41-a76d-aa36829dba79", "sighting--961656d6-64a8-487b-89a6-e859ffe9e756", "sighting--6d43735e-47f1-4651-8d78-f95c6ec2859b", "sighting--1430a62c-4a1b-4020-b6b3-3bf6a6438f2e", "sighting--7cc32c41-5788-43be-9ee7-c51e0ca1f523", "sighting--d47054f6-4dad-4971-883c-237f854f6758", "sighting--ac01ff66-323b-4381-a826-3d79bed30742", "sighting--cc2f98ef-59c2-40d4-acb5-d8aa7fa0e9d7", "sighting--9b447c4d-40a8-40bc-aaf9-b5dbf80793dd", "sighting--362b98a3-ecd4-4463-84d5-d0ac3e7640df", "sighting--2f6e0b71-d962-4780-bdd8-c5d05c1c6e04", "sighting--8487e712-3f68-47c4-ab21-01b815e3cf1b", "sighting--3d569504-2eb7-42c5-947d-512ea1947748", "sighting--cc739fe0-e6ea-4b6f-8649-80e08b9be5c3", "sighting--b743bc94-fd03-47a7-88ff-85562d7903b1", "sighting--bcf91ccc-90a9-4765-bc20-c73c787e25ea", "sighting--f466ccfc-f204-4e62-8e3f-63e5397d7e95", "sighting--2ce9b163-f489-4a09-96f0-e39856111b08", "sighting--a5d1d8ff-14f8-4ce5-bb64-7adf84f33a2e", "sighting--696fa561-5abf-43e3-abf6-143a3748a12f", "sighting--38fb0824-e353-448c-9333-fbc7ba2613db", "sighting--a8af17f6-5ef3-4452-b445-1280dfc53329", "sighting--b0f05d6a-1541-4604-8a64-2a5b25c302e7", "sighting--fd186dcc-f9bc-4da2-8fd8-6645f0abf02a", "sighting--31d9ffed-bfe2-423a-8411-e214e86b76d0", "sighting--4d5b145b-6e59-43f2-ab9b-6cfcb735bb7a", "sighting--9462e723-ed7a-4cb7-88aa-b0aff389c30d", "sighting--83063fae-0dff-4659-b82a-8886207ef221", "sighting--0ad5fa58-e45b-4aa9-8c2c-d8df96af153d", "sighting--46dd565a-bd66-493a-8bec-5a22c88822a1", "sighting--ddb4e6ef-f78c-44cb-be48-a649615e1d76", "sighting--6274aca0-2511-46db-9a30-70722fa787bb", "sighting--837ddc18-5272-4eff-ac7c-64d2909e5a65", "sighting--27e0faf4-1c72-4e70-ae84-d587cfe90b85", "sighting--53d09d37-68ae-4528-a901-f2c497fc92d6", "sighting--0d7d0682-f4aa-4170-8053-cc218d8d9acf", "sighting--3959d7fb-d99c-460e-a4b2-8f9894d6739d", "sighting--a016de2d-d724-4e25-8206-897c1baad5e3", "sighting--a791ed8c-b3bd-4497-9d78-87414d45565b", "sighting--a8ff4808-a258-4e68-92fe-b9b1ca427006", "sighting--2226bd64-e563-492b-8e9a-e5efeda20cdc", "sighting--73d27c07-b87e-4f27-9700-015fd512c3c5", "sighting--3127fc20-065a-4e1d-bc70-12c175b5a6ea", "sighting--73e9419c-509b-4869-ad07-a6fcfde80849", "sighting--580c4b82-3678-4966-b834-d3ec957ed540", "sighting--1a9828a4-50c9-476f-a55d-b9a98c730cd7", "sighting--05c350f7-1071-419a-a9a3-62c4e705b723", "sighting--90858963-068b-4782-836b-7ee095b9d5fb", "sighting--3656aa4e-c017-44e1-9183-e2d43c193028", "sighting--a7bb8909-6739-47fe-a099-3b401479de89", "sighting--4d27988c-af01-4ad3-bb95-f1603d339828", "sighting--c3afbc0e-e8a3-46e4-882d-659de6b87fb6", "sighting--6c8b654e-1cc5-420f-8839-8fbc068d956b", "sighting--efdf667e-4d7b-461d-b391-359fa7c3ab92", "sighting--fb7b9d01-4492-49be-bfe9-dbb22758ee82", "sighting--7e9e75d2-8e6a-4e36-a5e7-a05435481bed", "sighting--2492b351-345f-4017-b6a0-51160e0b3455", "sighting--aedeab4f-4ffc-421f-8685-28591f3fb295", "sighting--d3100828-9631-4c2e-b1eb-a9a7bd493649", "sighting--47fef38f-5cf3-4717-a0f0-bbbfb2943219", "sighting--fc7019b8-347d-4683-80d6-bf63e2fcd7af", "sighting--f3c8b2b1-07a9-4498-ace4-e3967c4e6725", "sighting--501c12d9-932a-4b9e-967a-308fea9af98f", "sighting--37f9dcd6-0b72-42f7-8222-707ff1d6cc76", "sighting--23cad387-e79a-4e83-a1d9-71a5bc17c3e9", "sighting--85aaced3-04d7-4870-90d8-b3696056b16f", "sighting--14edaade-9d36-4b30-b90d-37caad04a7d6", "sighting--1444c1b3-b2f6-47c8-ad18-930f60f80520", "sighting--6a0a399d-f2ab-4c8d-8c23-25e6426aa711", "sighting--a9d4eec4-3a53-4e20-a7ae-d3657619aab9", "sighting--cbfac71f-4bda-477d-952f-e5dfd9e061b3", "sighting--295c45b7-69bc-49e1-85da-85c8d731799c", "sighting--f615fb6a-30b9-47f2-a83f-34670840181e", "sighting--1c677248-3550-4e3b-900a-bb4eef919dd9", "sighting--582a71bc-f610-4916-ad33-6cbbf25ecf01", "sighting--9b861c2d-4904-49bb-be8f-87911dd15df3", "sighting--942040b6-790a-4603-8526-fb5a2f2cb5fc", "sighting--93e4e8c3-6ad7-4769-aea3-eda6ab0700bb", "sighting--2bdd152a-b368-4740-9521-f0fbaf5b91d1", "sighting--202c4a8c-e5ac-4c4f-ac32-c2f6e03ddba8", "sighting--d66ec30f-d887-4392-b266-4b97fae2b47a", "sighting--503ca305-e36a-4c78-852e-1505187a73e7", "sighting--37c58ab1-5794-42b7-bee4-73061962c11f", "sighting--abd2bd40-3ede-4061-817e-20beb287cc15", "sighting--34e1f9da-ffbf-4ad7-a914-d517e3219dd7", "sighting--7be3c34b-b58e-4adb-9e80-c604cbe3f6e8", "sighting--db3444dd-b158-4162-b1c6-d4b24f2125ff", "sighting--824f6dbe-27ff-4dca-9349-2b82cc252024", "sighting--cebd1c31-2911-4361-adb5-b1a3e4b5d43a", "sighting--ccbc48b5-b775-4c0c-8d85-9cc64ebf7524", "sighting--542637ad-f04d-4792-b3f6-bd76abe3dccc", "sighting--d68e61ad-49b0-4db6-bbe7-2a69d819d6e7", "sighting--6e2afa62-ba5d-4ec7-b174-81b3f93f033d", "sighting--830579d0-3f63-42cc-9395-f7cbc492b3aa", "sighting--7d0f54cf-24a7-42a8-bd05-74cde401c6d7", "sighting--9e35618c-db64-4521-a193-7be85382be08", "sighting--97bce9a7-76f8-4cec-8d29-a386b124850b", "sighting--42a39ee7-98a5-44a7-a19f-be13f96c2c42", "sighting--0ebc431e-29cc-40a3-81b9-c0487e0aa0a1", "sighting--d44e4bba-951b-4f0c-b989-ab28392ecee8", "sighting--ee1670e6-bbd7-4bf0-a3fe-a68ed90002ef", "sighting--1d72bd54-6903-41ed-9959-d3e86acd830d", "sighting--fe26254e-ed27-4f36-a68d-970d5dd4ba73", "sighting--6a4cf588-2c26-49cc-b77b-54521e85cade", "sighting--a3162223-b24f-4136-a701-b547144e7443", "sighting--130e48eb-14a0-44df-95e7-d31c1c25598a", "sighting--987a9d22-4087-41f6-a763-085d1f7a7a51", "sighting--2e587810-efde-4b2c-b640-39092db42369", "sighting--53d4a6cb-8b41-41c3-8e04-eeb29d69f011", "sighting--06c6f38a-1f79-4b0f-be3b-924540127a8d", "sighting--386d6935-c337-4c8c-83e0-0e5ce5122a76", "sighting--e151d4ba-9318-4ce1-b8bb-c72a8658db62", "sighting--08968fa1-0556-45d6-867b-8c263877909b", "sighting--ffd784c2-5617-437e-a960-96a07478ce31", "sighting--9ad5a7e4-e9ff-4f36-be2e-16db9703b152", "sighting--9e8e9f72-0504-4ed1-b2d7-96268c32095a", "sighting--d8330017-da9f-4ad8-94a6-2b40ad793a9a", "sighting--3398c14f-957b-4d48-9ec8-2551b42be333", "sighting--74988754-24e8-47bc-9579-dca391d74c7a", "sighting--1ae0816e-3df6-4f84-99fd-17e4c72fd088", "sighting--f72d0f86-d0c0-4d23-af13-fba088828de4", "sighting--7f484c16-ad73-43d9-a66d-537fbf1fe9c2", "sighting--7bcc199e-6b46-4661-b97f-2f1c59ff9596", "sighting--5681710c-fc55-42c5-ab79-a3c7d9f0bb24", "sighting--8460a8eb-d5ef-4063-b9c4-81ebed22ff79", "sighting--444ce965-ad04-462c-bdf7-cc74834d3cdf", "sighting--c14045e3-566d-4767-a94c-10e2fd66dcec", "sighting--1a7d4e84-67df-4a9d-95ab-558ee3fc5816", "sighting--b6599c09-47bc-4ac0-b39e-45b21fb71b85", "sighting--dcef4a58-4e8a-40ec-9795-44da82bb1ce4", "sighting--f6b6288d-52aa-4c9b-aa0e-ecff2de6ee02", "sighting--2519fc02-6aa4-4f3d-a1e0-8ab0000ac192", "sighting--779650d7-8551-42d4-b32b-5f302c5fae49", "sighting--31878c07-1135-4780-88d8-4f59115db1ff", "sighting--a1c0ecab-03fb-4f82-b7b0-8085fe12806f", "sighting--315d24d9-933e-4cf5-9577-ee7ad766b048", "sighting--5e2d3e30-2362-4652-bd49-c5d60cfa980a", "sighting--eb9ef1d9-f022-4350-9573-a85a86e4ed6e", "sighting--59e9ad54-eb47-404c-b048-385284d47076", "sighting--2aff35bc-23f6-41a7-838f-9ddbf781f81b", "sighting--c8f3808e-dee5-4297-9e4d-2743ead3c6df", "sighting--6dd0ba08-7c6e-4f7d-b47f-390c5cb7f150", "sighting--b28d5890-e7b9-456c-8317-ba253680ad7e", "sighting--40a8ec62-c4a5-4c3b-88ec-f0f9d83b180a", "sighting--dab51df5-5946-45da-8eb0-91aaafe5226a", "sighting--bdf4608b-cb01-4019-a1d4-01dd75d1a4bb", "sighting--b8bfcec7-2e55-470d-a136-b69ae90f57fe", "sighting--14f5663e-f810-45e0-9ce1-3c463874a26a", "sighting--f96b4b18-687a-497d-9f3a-2f05f12235bf", "sighting--43cb3097-3b29-4682-a73d-159d2d43217f", "sighting--0251f796-8b57-4f99-85f4-39a817521a71", "sighting--7bf29827-4103-456e-ae73-6d86a0aaf399", "sighting--8614f10c-93f3-4f77-9f15-6b6d5b331144", "sighting--4b0f8b36-3ea3-4565-ba90-865e4632d192", "sighting--6f9c5255-f415-4563-8a35-3efd18ed1f62", "sighting--63cd3da1-d27f-4838-b691-6bea20c4bf7a", "sighting--bbea182a-1400-4b12-b23c-7dcd47aed3f7", "sighting--c2b0b1a2-adda-4135-83fe-55556a568994", "sighting--8d0ec495-b819-4571-87b2-7d6f53cb8dde", "sighting--ededc7d1-2efb-4eab-a4ca-d329df40580a", "sighting--c80ccf92-db50-473e-99bd-b675c250fd0d", "sighting--57701960-805c-45bb-b22b-5e0fa0fda92b", "sighting--abc77f9b-6602-4bdd-9a87-f65711b7a793", "sighting--4fa0c7d5-b3e2-40a3-a038-19a4f123e811", "sighting--59d3c407-0b7b-4d16-bb03-3e943d445353", "sighting--337d3266-e788-469f-9c7d-a223e67afced", "sighting--9279989d-5527-4edd-86ee-7682bce0bc5f", "sighting--a174a1e4-124b-4085-9d60-92fc329cc068", "sighting--07528296-a796-4419-9c35-a23d0daec463", "sighting--338c01b1-af70-4daa-840c-4bbe14bfb8ba", "sighting--bf722fce-3285-48c4-9b44-09689ea9bb86", "sighting--d6aa7b5b-ee04-4819-b265-6991e30c6d2f", "sighting--5b96c78c-115a-4994-ac15-9a94f1f3ed73", "sighting--06541d98-f6f7-407d-9007-8567473fd3ac", "sighting--740ce8fe-de10-49a4-a372-c0ecf83babba", "sighting--431257b7-e82f-4cba-91e1-bf8d92f7fe95", "sighting--d6ffffae-7a51-42c2-94c6-cfb39cb2b3a9", "sighting--d6bd62cc-14c2-4e94-820d-25d5d84f1d99", "sighting--2323ccf8-763c-4117-b7c9-3de0f8ad104b", "sighting--7d0f80f3-2732-473d-8443-b4880cf5cc9a", "sighting--8fec63df-d11d-4b05-8b30-0966ecf99b5d", "sighting--77981bd6-ab95-4c43-9b48-87f7bb2d1a47", "sighting--b4f87f80-f671-4fb4-af4f-e84029ceed95", "sighting--e2b36683-e225-4cf0-a1d1-4e7fb634b24d", "sighting--0b741478-3415-4c8e-8cd4-f6ed13c52e32", "sighting--794dc6db-c700-4670-ac99-2272b3d084ca", "sighting--921faef9-12a1-45f8-b5da-9ca9bf042ba2", "sighting--d9670872-254b-41e7-8d16-640c9f3d315d", "sighting--9e3d1c80-0804-4832-9f6b-64f5a8b0a72e", "sighting--fa169695-d02f-4c1b-938b-f6477edb74ee", "sighting--799ace4c-e961-4e7d-9818-b4a04ce525ea", "sighting--2d866c81-1de1-4177-989d-b81c11e9ee95", "sighting--fe7318e5-cfb5-4ff0-a2c2-31f60fba1e12", "sighting--7580e565-b871-4bc6-95a4-1905b3880628", "sighting--1f84b98f-4e7b-47eb-8866-fdef60214297", "sighting--dacbf1f7-ea5f-4b30-975c-17377d62ffd9", "sighting--7e79927a-9ae0-450a-afc0-4055523efbfa", "sighting--c60b40d4-9b94-45dc-9125-123f44a7e64e", "sighting--54a8ddda-72ea-4bac-8d04-c50dd2d92931", "sighting--632878b0-2de6-4ea8-bcbd-4302750a121d", "sighting--74c38fc2-36f3-4247-b072-265e14233a9d", "sighting--b904a311-30c5-404e-80a3-284d61aa8828", "sighting--8fae5d2e-ac87-4059-9f30-ae60a7a61264", "sighting--b184cf22-b98b-435b-9d47-ea443a5c5920", "sighting--f4cf9410-2eee-4346-995f-1047c30efacb", "sighting--ada4210e-c8ae-4c90-87ba-e87bb2baceba", "sighting--a825f704-4851-4c6a-8b7b-2217e43520b2", "sighting--bc4d631c-e25a-48fe-ab0d-622bfd02f33c", "sighting--65f76a9b-0433-44d8-9789-0e77c25d2d1e", "sighting--6632553b-53b6-4a18-9185-d9a8dcd39919", "sighting--6d8d93b5-fd83-45f1-baac-82678ea2d174", "sighting--108db143-0506-4880-9d2b-9855861d9d9f", "sighting--f74ad469-41cf-4511-a020-480ee16c68a4", "sighting--c0dae6ce-af89-435b-ba54-16f56081c83a", "sighting--613358c1-4fb4-4ebf-b290-5431e43620ff", "sighting--76aa925b-db00-436a-b890-aec6db451c13", "sighting--3d7e94da-bfcc-4b76-8b71-ad3df86cbb4b", "sighting--50e8faa3-40ae-408c-96f3-0cf2a71f8b9c", "sighting--6acc38f5-f9c3-4439-888b-ed3a9db286c3", "sighting--c703e154-a86f-4522-8e5c-f3cb0ff4dc5b", "sighting--ba920082-54f0-4292-a6b3-2fdc706e8881", "sighting--d3fc7dbc-98ba-4005-9326-4c94a27620df", "sighting--6b91fbe4-dbf6-479e-8cce-a04469bc3556", "sighting--bef481f2-1fd6-40cd-a8ee-3d9040f612e1", "sighting--8d7c1e9c-2af9-4087-baed-8dfb63a9ce44", "sighting--e980ca4c-cccf-459a-93c1-a43c76b052ef", "sighting--2528c9f5-aef6-4ee2-b9be-5993f2f20514", "sighting--3012c062-3a54-4cf2-a21c-bf6f89d9c377", "sighting--fc60cd97-52d1-4cb6-9696-bebc62a5e9ee", "sighting--9a58c889-17af-482b-8f51-f50838bd1a21", "sighting--dcf8ac65-62aa-4899-906d-91543ce2ff26", "sighting--ba3e55c6-b791-4e17-aba1-c5c8b73c45f9", "sighting--c713fb93-c492-4043-84d2-b97287796677", "sighting--6b33326d-fa38-4624-8c66-89326696c35b", "sighting--43e3dd88-8ab8-4d4f-b921-057806662241", "sighting--e028c87a-8047-41a6-8529-d3cdde8507be", "sighting--b3717a81-b7f9-41c0-9d5f-1599acf35d69", "sighting--8bb68cb8-c6b0-4e12-bf05-2b71bb9b79cf", "sighting--5f161835-b872-4bd3-b4a0-a96ca1fb03cf", "sighting--333d4bc9-57f2-4da2-9832-90a1da2947d9", "sighting--20489a26-5072-4daa-9f8c-32fe771e6565", "sighting--96338ed6-cbd2-4831-adfc-3eafb64c18cd", "sighting--24563f2b-c648-448d-997d-372b637b36c4", "sighting--17e0ba77-398b-4929-92d1-c4fabe3e47e2", "sighting--69eae79d-e8a1-452d-b0cc-b5e29c5158ac", "sighting--2220e250-77c9-40cc-a464-b88ce90cd6ca", "sighting--03f10bdc-1fc0-4e9f-b518-cd71427e2eb3", "sighting--29ce854a-b00b-4624-896c-a813679a34bd", "sighting--544db80e-0261-4bd3-840d-13c2efe889ff", "sighting--9380d369-90bc-4f76-b002-2b02a1960eef", "sighting--6c85acb5-d158-4645-ad82-4ea6a1a4e93a", "sighting--433053da-581c-4adc-b3f6-24e49ccf70d8", "sighting--06c5aa86-3f17-4f19-8e77-43c7c4f53b9b", "sighting--6471d71d-ba93-4b6c-bd06-426ef5ae506b", "sighting--3b48afcd-be10-4816-93fb-0683efcfe961", "sighting--2a672f5a-d337-4a7e-8541-f52b33dc75a6", "sighting--832cd374-5ace-4719-b432-60d71b51aabb", "sighting--436eba1d-ce22-4439-8180-e3c8b08c8fbf", "sighting--9922e3d5-68ce-41bd-884c-9208dcfa961a", "sighting--ba39c570-a556-4f08-9b47-08dc30db61bb", "sighting--282eb678-c1c9-43af-be7c-ff60faf354f5", "sighting--eb436e72-9658-4eea-b494-28e6d2f68f9a", "sighting--dcffafa3-1a0f-4ba3-b221-c78d2e35101a", "sighting--2858d1bd-ceeb-4d3d-9ef1-14dd71b19307", "sighting--4e38d01d-d701-4f13-a2d9-2c0bfc99286c", "sighting--d11bce3b-308b-496a-a6cf-ad46497a086e", "sighting--a6c39628-e409-49a7-b925-8798153828bb", "sighting--e0d5f95f-76fb-4147-a3bb-9d6f1b39603b", "sighting--3f444e52-d43c-459d-9216-3394344041f3", "sighting--2022e7c2-af01-42a9-b580-5a3a8e05fcb5", "sighting--11bf5311-0552-4aca-9c79-8de145fdfbc7", "sighting--e1cc91d3-6d97-41dc-b471-5e91e2964a45", "sighting--d683661e-ec26-4afa-a03a-f2d2a7d15e60", "sighting--f8a8863e-8bc8-40d4-9a31-45e245946ebe", "sighting--fdb65f74-198a-4afe-b250-2b803c0dde84", "sighting--e515fcc3-1d4b-4839-a5d5-be6dc5cd2c39", "sighting--ee7d7548-0e72-48a2-b2d9-ff3ea09c5f16", "sighting--e2d077f8-a7ae-4929-8e00-2df9fe2605d7", "sighting--4e153a48-1ef8-4138-ae92-6791de174ba3", "sighting--950df125-2bb9-4c7c-a70a-4db6644ce762", "sighting--986fda74-5353-4e84-845b-22cec9d5a77a", "sighting--c7645274-dd9b-4c00-853c-7c2c0a88e4a3", "sighting--f630821f-de3d-479a-ad68-cbe3d5e1a194", "sighting--a3fed3c5-1b6d-4783-8032-254f6e4247ca", "sighting--ae7731c9-74fa-4c72-9776-311d528681de", "sighting--3cb00093-9628-4eb7-8c4b-ad45b8966b53", "sighting--c7050e42-3481-4bce-9d2e-16a92076d45f", "sighting--c532034f-dd01-4f90-808a-6adf820e3363", "sighting--d9648499-cf0e-4b51-b522-c2de9803921c", "sighting--96ebe0b7-21c8-47a5-b7f6-d88462e046e0", "sighting--a01a900a-b92c-47ac-8fe9-eb126580f74a", "sighting--99773dac-b655-475b-894d-2af3fba879b9", "sighting--3b956a19-5cab-4cd5-af54-c431330de4a2", "sighting--a731182f-0376-483b-b537-22506d12b968", "sighting--4ad85aab-1233-4a49-9680-c1309ab36678", "sighting--0c4da125-957f-4d23-92b1-68f4c910d4d1", "sighting--e4348980-ac70-4e05-9677-261b857d989e", "sighting--4f4bd861-1ac9-4c2f-8002-5216f35ddf6e", "sighting--24ebe77c-131e-424b-b419-2310e6c06f95", "sighting--13e3be1b-53f2-4e44-a4b7-ffde4eb22b33", "sighting--50c1fbf3-9e1a-4c89-99c5-ca35d1007664", "sighting--8036ec0e-e6bc-4e30-bd32-2bed7c04fdd9", "sighting--d233cad3-0034-44aa-8aa5-2907e3c85bcf", "sighting--e70ef967-7f46-4a46-848d-2056b963eb86", "sighting--806c09a8-f60c-4674-a980-249ea1e65587", "sighting--2b37f9c7-74b9-4f30-8c12-8bb8e8312297", "sighting--de001ec3-3442-4faf-91a6-bbf91697a0f2", "sighting--f1348799-1518-47d4-a186-c02ffd296c2d", "sighting--67bdd94a-ca93-4cce-91bd-cf0119b5f0ad", "sighting--e2a80d85-4c3e-4ce0-8cc0-676d06e328a7", "sighting--64eba42f-445c-4645-8e08-80a46b10dd49", "sighting--349664d1-7729-4b94-99aa-b1418cb322ab", "sighting--6473d71e-e791-4326-b204-17768ab703bf", "sighting--453ccb98-d2ed-448d-8275-92de1b5f4bb6", "sighting--99536ab8-29ac-49a5-9b26-47f1c16c6a74", "sighting--db96a01f-f1de-4298-aa0a-e78fadd87305", "sighting--97c23445-e276-4721-b031-21c88876eb0a", "sighting--a9b307a3-de9a-4b74-9bb4-b3636d98c805", "sighting--5d4145df-3211-4748-8da4-71d004c1b2c5", "sighting--57e26492-07af-41ee-8821-c74d344ee139", "sighting--407e1086-587b-4a2d-b8b3-9257675f9deb", "sighting--15e026d5-201b-47b2-8024-b70c83a5dd8c", "sighting--d29258c8-cc6a-4984-b735-af294b0854ad", "sighting--5bf7d5a2-3f71-4c86-8209-f5e306864851", "sighting--d800e881-6584-4300-888c-bfaa542ff8d8", "sighting--535033d7-1e5c-4310-833f-874cffc264a4", "sighting--56bacfe4-d4c8-440e-9401-64e3d6c6ce99", "sighting--fe3174a6-8e39-4c5c-aae2-6382799e2391", "sighting--a85bc8e5-5367-4247-8700-4683c86aa2eb", "sighting--0ed5a8ba-e630-4252-a729-7fc3b7830248", "sighting--2ea0f487-488e-47cc-b0a4-d82a03c13da5", "sighting--4b329b70-ef39-442c-87d7-55fccfd0d38e", "sighting--1b8a75ac-6ee3-43f0-8449-406a283384a6", "sighting--fda10987-e1c1-457d-83bd-28eac9e99e6d", "sighting--641625e7-9542-44da-b259-62c6f304248d", "sighting--497f37de-3654-4884-a1b7-87e7e05b6a5e", "sighting--8488c1bf-103d-427c-adf6-15def07b8389", "sighting--f7098b42-0548-4706-9342-a0cff67ad94e", "sighting--1354ccbe-b5a8-4356-af98-2e518fffe4ce", "sighting--2147aca5-cad3-4597-a78d-c8b3644943fb", "sighting--939ee549-00e4-45d2-b1ec-b52ecd1ff4a4", "sighting--635400b5-ce78-451f-8b10-3ca730adff20", "sighting--1c21cd02-d93d-48a4-9b3f-42b12b91e46a", "sighting--845297cc-f9b3-4104-84a0-e72c69c57118", "sighting--bb107ca4-0b34-4909-aa71-eb7892652dbe", "sighting--8ab877cb-5780-4ae3-8d23-85ce881e1fd4", "sighting--c7645905-d732-4ce8-ada7-e0e1e55785d8", "sighting--0c3b433a-85fe-4e6f-bbe5-0f267ff07ff1", "sighting--e5aa9a79-be39-453b-b3da-cc57dceefb5b", "sighting--fbad491a-d5d9-435a-bb87-ae30e481f9bf", "sighting--3492870a-f853-4858-bd35-ad4db8c797e5", "sighting--5deb8f87-894b-4912-956d-2ce46e2ce803", "sighting--f7bf962c-e770-4722-ad26-bfe4ad50da56", "sighting--27f8b9eb-a29a-4a08-8945-d1a4c06553c5", "sighting--83cd2135-b250-416c-8383-6317582f2c60", "sighting--494eedff-5ea3-4fc0-a732-6a0fe5f16696", "sighting--72bf6a0c-db2f-47d8-a0b2-50b9bfb83da9", "sighting--9295a699-f9b3-40aa-9812-dd2bb241fa17", "sighting--124590dc-0e87-4f28-9281-5f8569e43949", "sighting--e24a0419-e8c4-4ab5-bd42-3cf30adf10ae", "sighting--5ee5e3cd-0ce7-444c-a9df-cf672e58ee18", "sighting--00d19967-3b6f-4745-ba0f-6cca72ee7856", "sighting--5a8fc321-e337-44f7-b1df-9b7d7b2a8e61", "sighting--23b72953-df0d-4dc8-87e7-d6bc84efc999", "sighting--28eca70d-9a10-4c78-b58d-e99751efe674", "sighting--97fe925f-b35c-4bdc-b0f5-722e57be293e", "sighting--27686796-668d-4b31-bcf8-4a02ecb2f6d4", "sighting--560179df-4893-47cc-aa0a-c533ae0c0ae5", "sighting--3741ee7e-5a97-4cb1-a446-89c14d525e6b", "sighting--3f09ade9-4b88-4d58-9030-fe4be7469fd7", "sighting--b7341aa0-c060-4f80-bdef-1d98a3750400", "sighting--1719e338-83ff-4825-b7cc-4dbaf0becd62", "sighting--a4735039-8a7d-4e90-9e99-ff5ddfeec04d", "sighting--dd6b9178-2e83-4eb6-ba77-f387fecca8d1", "sighting--afa84feb-9187-4b94-9262-9c3bc2a441be", "sighting--818a5b3f-0146-4de2-9d3d-30138379a850", "sighting--434942da-60c0-4aef-a86f-4c0762334789", "sighting--69963847-8b64-4c96-b9aa-589ef0436868", "sighting--9d541313-9920-4cb3-bc85-506ea06cd220", "sighting--ea83660b-5575-4bc8-ab04-4974afab1972", "sighting--d3f5ce56-e96b-4b80-9db5-4a9f61aebff7", "sighting--a22e4944-c613-4fee-ba09-2665c9338b5d", "sighting--3f178050-3573-45b9-95ef-c41109331864", "sighting--e17747da-47cd-4616-a441-93d082eee0d9", "sighting--d420e8d9-75ef-48d8-bb09-6b9e5241156b", "sighting--99a2808c-51fb-49dc-ba9d-d094b3fddfe4", "sighting--9ad6b443-32ff-4cf4-88cf-6d5266e2cffd", "sighting--1e8e8a7b-c3b4-4b46-b8c5-6a5b15e58929", "sighting--eb461716-711d-4433-a5b5-a0b28aeeeebd", "sighting--ff1147d4-1c03-44f6-aef9-8c11d7b5709a", "sighting--6d12db30-1c3a-4f01-a8ed-ab147e098853", "sighting--f85c3782-c1f6-459b-b6b7-04f4ef511133", "sighting--acef263d-e6b6-425f-85b3-bb7ea3cd3750", "sighting--d5ccd779-52c8-4230-92ca-57066fe679b6", "sighting--4c295ac5-926d-425c-9d77-8b6213529c93", "sighting--df658e4c-135b-4c17-b9b6-56ab1bb813c0", "sighting--9a9c9248-7ab6-40b6-a600-a53683b816e3", "sighting--af010505-2be5-48ae-830e-985e0c5cdc73", "sighting--abb5b2c1-5d04-446a-89de-55498fddca83", "sighting--abdc998a-b982-4f9d-b6b8-12f64ffe5413", "sighting--61d95710-6e75-4dae-8746-11f42ccaa020", "sighting--fad7adfb-e28d-4ecc-bc6b-f5d06be3a81c", "sighting--7a827e49-39b2-4640-9603-4e6eb1814895", "sighting--f9f29904-f296-41f2-aa41-15b188a3934f", "sighting--bf41982d-f92d-4aae-b0b9-6eb39ce32bb7", "sighting--47d4b0c9-dd2f-48e7-a66f-e96be919ca8d", "sighting--b6948222-d89a-4c16-8b2e-48efddf1ad54", "sighting--4edddba1-8121-4b1e-b5fe-7f89e112038a", "sighting--f426e20a-e1a3-4d9e-ba1f-8b808d7f374c", "sighting--3b0ce16a-cb63-4a98-bac4-77b1a95229e7", "sighting--7dfadd8c-2c7f-469c-8e3a-4cad202d87e6", "sighting--79290858-5c09-46f2-849b-e85d0f56a6c6", "sighting--23ba5da8-9707-4f40-a873-d7b49434fb49", "sighting--ec254c28-938d-437d-b55b-2e09db787fa9", "sighting--0095cfed-cb45-4e0c-8c38-658b1f33b995", "sighting--2f816bfe-9c93-4260-b682-36151260ee6d", "sighting--a5bade2a-47aa-4fdf-8448-6bfdef7ecafc", "sighting--f285a3e1-3ca2-48f7-91d8-5f99eaf7c3a8", "sighting--e837f3a8-5170-4c6b-a099-a4ca6fa13fd6", "sighting--a8811d86-d6b7-4ec0-9fbe-772c7b507d65", "sighting--a6003250-346d-4976-bb1b-c63e70304e08", "sighting--e664b3c4-24e1-4227-953c-a765663e08f0", "sighting--5e23099b-32ad-4f49-abe0-cf9d166198bf", "sighting--8c4365d2-33fe-40ab-ae22-aa64c72ed39e", "sighting--6dac4b04-4bfa-4e5a-b321-83dd57150bb5", "sighting--d943e075-70df-4825-b719-b1d9a5a50c60", "sighting--2c2e6d74-d814-4573-9dca-44681fce4ccf", "sighting--d1c91118-6bfc-4278-992f-27d7f74bef10", "sighting--96995c07-784d-4329-9d32-6e318488ffee", "sighting--98412e81-5d8a-4721-95a3-7311f2355cde", "sighting--41a0fecd-6652-4d40-9aeb-648339e7ba56", "sighting--11243be9-6da1-449b-af8a-2f5c0f033d9b", "sighting--a69f0962-c3c9-4e05-aeca-78809745753e", "sighting--75b0d6d5-6553-4dbc-9345-63094007e7f9", "sighting--5e0e1227-fa10-413c-83cd-5aaebc55e61a", "sighting--a5d9e1da-d621-44eb-a823-3662a4011d07", "sighting--8b27c186-535d-4c2e-84c4-ce8f55fe12ac", "sighting--82345c0f-cd18-4ee0-8b46-2d60c32ec980", "sighting--b7740774-4d08-4b10-b784-dde5fd1f41b6", "sighting--f014279b-54f1-4bbe-91a1-2c0a552ce285", "sighting--32a35a5e-0731-459c-9067-ba76418c8ea7", "sighting--45937d90-3edc-4357-b36d-4d3fa5c142e7", "sighting--c9ddb92e-b48c-4985-b17b-7dd7f0554ba2", "sighting--cb80e429-ef44-4d65-b792-0af3da5192f1", "sighting--f74e6fb1-013a-410c-9037-0c74adf8c39e", "sighting--f1c4bd5c-887d-4a2b-b0e7-9f0a0df06f40", "sighting--ca012597-ce36-4bd3-9b85-7ee7d7fb0955", "sighting--e79a3296-b38f-4c32-b13b-272f4a9bcb95", "sighting--4bf07d6b-7f14-40bc-92df-0b070b3febfd", "sighting--4a68002a-19cb-471a-aacb-cc996c8fea1f", "sighting--6cdee0ce-dcad-4b7b-b3e4-16d1bf39bd07", "sighting--eb379c30-14af-4bbb-ab93-71af661c4575", "sighting--589ca7fa-3190-4fe1-9a68-798011b0ecff", "sighting--975fb24c-3195-4eb4-9ec9-957e37ce2b92", "sighting--35bb4f36-ba7b-4771-8681-4f885e331834", "sighting--850e4f16-2716-43ee-911e-07ba7fc09c17", "sighting--a8a4510f-8306-406c-87a9-ef2ab100c784", "sighting--e3e83b8f-2f52-4980-a5f2-b085a8684d91", "sighting--a1e3bf13-0f18-43df-83b1-f2a6bae791e6", "sighting--1d7ebff4-626f-4565-8b51-15b810863438", "sighting--b933cc85-b7de-43ba-aca7-ad48e29fe9a3", "sighting--fe5d538e-470d-4b68-8cd2-c179b2b46234", "sighting--c3350481-aba5-444f-a5e8-3af406b34842", "sighting--0992925d-257e-4efb-a357-302477e52a26", "sighting--7804e53f-5c81-4f54-a04f-1d9e67c0cb8e", "sighting--8e6bbdde-8acd-4a0c-bb47-f9a13667e114", "sighting--8fd13c49-4b73-43c1-b567-baf35aeab3cd", "sighting--1c511ca8-442a-497d-9995-7450de47d716", "sighting--711d0fe8-1dfb-4ec0-af5e-37672167198c", "sighting--a9817653-48cd-455d-b53c-63e9c4f7f48b", "sighting--2d35d76c-1cbc-44ca-9413-dc3502660d28", "sighting--84a22bfb-b08c-4bd6-9490-c5e49ecee5c2", "sighting--a867b1e7-a839-470f-9b04-ed7039b2c097", "sighting--e3c7efb0-2114-4f8c-8ce2-61503b70ad5a", "sighting--553af235-fcca-408a-a790-5089a89a6f82", "sighting--0bc42478-20d6-45f3-96c9-b05293f02ab6", "sighting--cb1e0509-208a-4c0d-b6d7-67e33c9dd9f1", "sighting--bc716874-c24f-403c-8a61-393deca383e6", "sighting--d6c33ca1-7ecf-4d61-a4df-89afd78cad04", "sighting--2ad9d906-67f8-459e-b075-142daeca12a8", "sighting--e96cfc4a-3882-4915-bfa0-81ee167d3090", "sighting--2e1e1f1d-7e3f-4943-8b86-5791fa830f3f", "sighting--cb39d6cc-670f-4aa4-801c-da11f7509752", "sighting--ec2b41ac-2f91-436e-8593-cdecf45e54fe", "sighting--e99782b1-274d-4101-868e-c7b376f45ebd", "sighting--99c07aae-0a38-4158-844a-3b1a11109e8a", "sighting--6b4eacde-fcef-4996-85fa-639967c3dd31", "sighting--a768f46c-43e2-42b1-8e34-6ecef183a68c", "sighting--dc3f169b-9462-430c-95f1-8aaeb7177f9a", "sighting--d598e5c2-04ac-4ee8-8fff-fd52048f9b2f", "sighting--22a2f659-35ef-4183-9b71-9a6917c5c3a5", "sighting--1e4d745f-9768-4099-b823-b067095a10a7", "sighting--9702fd60-234b-441b-a79c-08290ecd5d9b", "sighting--632e5eec-6b38-4615-8c35-0343ef15e581", "sighting--bbff6acc-963b-4d7e-8486-2d6696fbb448", "sighting--e2401756-f8c1-4a6f-8429-5c986ab585d5", "sighting--23c31de6-b151-434c-992b-71725e8590a7", "sighting--b1199c25-092a-4756-956f-74712c97a41d", "sighting--098499ab-c2d2-4ca6-a251-1e295edc8548", "sighting--dd71d663-0c95-4420-85c9-3af943424a79", "sighting--e1536936-b555-4445-9b8d-ceb80d1a6fd9", "sighting--74657d13-de96-4ceb-9ee5-a6c93a274278", "sighting--51a5b168-1aee-44d3-b69f-1e321a1f17ac", "sighting--720c5c2b-d596-44c2-ab1b-9974a4aea7db", "sighting--17a82313-bfc6-4ea6-a87d-44887c8cd3ed", "sighting--62542fdd-3b22-4c0a-b32f-55fe507ab4f7", "sighting--645adb8a-390b-4e65-be10-f580c33bbb2d", "sighting--8e7431a0-faa0-4058-aca6-40145b414edb", "sighting--d14b56d2-ab74-41d4-a4c5-5265b698ba8d", "sighting--bd5014d6-2f11-46c8-a055-ea05d4887929", "sighting--e14b0fcb-3a3a-4f01-be47-fddb5953df4d", "sighting--20016b31-9e5e-44da-8973-e10270df930d", "sighting--cfabcaa9-4252-49f9-a43b-5dbc471af94c", "sighting--986e3b19-188f-441f-941c-96eb5f5a6b4f", "sighting--06631bcb-4aae-43dc-9853-cb1bbc444514", "sighting--e17db7dc-aaf5-45e9-8ba6-ff85fc7bce81", "sighting--8690c3b6-9573-4c26-b944-fb4f6c5f9ddd", "sighting--a34904fd-9e70-42f8-ad1e-41eb283ecce3", "sighting--fdae0b64-b3a0-423b-b393-fdba17aa8e75", "sighting--8be838d8-f5be-49ce-ad66-d2e9595f505c", "sighting--2e638c4f-abe0-479a-8e9a-8884733d3d17", "sighting--9d4a4093-4616-40bc-a75f-5ef20ba274e2", "sighting--b3954acf-a8b6-4564-bf24-59457bfd835c", "sighting--5a07fac0-5797-403a-ad72-5fc475f4cc91", "sighting--387a4651-60fc-459a-b942-d4425af2e59d", "sighting--c474ff1b-ed61-4944-9361-001711d2792d", "sighting--b8987e0e-ca3f-4bc7-956d-a0654abda1c5", "sighting--9e51c9ec-4a3c-4d2c-b3a6-73234894625c", "sighting--bcd90787-5749-4393-a97a-cb140e276d81", "sighting--2840cc81-a347-4eac-a370-fedeb15fe1d5", "sighting--9fb1ccb0-bf23-42b7-86ef-de7f3710b14f", "sighting--bcdeb809-d59d-4c26-a37a-9904088f8239", "sighting--ee450920-1575-4b77-9fa9-b40c0f7e1023", "sighting--de8b1c9b-92ca-4704-8196-320ecef321d7", "sighting--e1a2cf2d-3f00-4d35-9dd8-1534499d018b", "sighting--f6cd9bce-1cea-4298-bd42-0b45b27e0e24", "sighting--f6f89490-08c9-46f4-b3d8-69ea7c3dd37a", "sighting--f5f67c95-941c-40f0-aaad-e1a973ac1931", "sighting--32fd0d95-483b-449a-b8d6-b20334a301e8", "sighting--fc009a65-95bd-4e85-9b22-386adbfa7868", "sighting--f9306e71-6a2f-47e0-a493-bda98409bd19", "sighting--3850c7f2-064e-4f61-b692-7374716f39bf", "sighting--cff8300d-f86d-4010-b266-7624788d1719", "sighting--743d9aa8-65ec-4ae5-8e57-c3b88352cc67", "sighting--39c70625-b92d-4487-9b7b-0d61ee5ff2b2", "sighting--36f5fcb1-7349-40d7-9304-0f396ea331ef", "sighting--e63b66d8-b074-4184-b023-5a84ff47644d", "sighting--c5d4df67-f215-4ace-b161-ff125d5bd0e9", "sighting--2e969cae-6a94-4b28-a835-fb637f29f6bb", "sighting--6f6def45-2e06-4597-a780-c1153eb0efb9", "sighting--e4af43bc-c672-49f8-9a00-2b0cbfddd0a5", "sighting--e12bc764-ead4-422e-acd6-e9e591989778", "sighting--65f64ce2-a6ea-4075-80a8-16949db3e115", "sighting--f25c531b-b35c-4821-930e-2df91bd71e41", "sighting--f007fc17-a1ca-4f99-90b0-caf35588119b", "sighting--9eff08b6-c633-4d83-9ca0-e6ff6980e741", "sighting--caebe25f-8810-433d-81c9-8ac39df31fcd", "sighting--140b1ec3-c5ab-4479-9610-4ff2e6c81154", "sighting--467c29cc-ae7d-4883-a157-206bde1fd961", "sighting--c70fa6f4-87ae-46a4-914d-02b5e1d6d937", "sighting--8a49d60f-ca40-4dc7-ac94-8dde040d362e", "sighting--82b01447-2c87-4095-8a1d-2231e568e697", "sighting--1c53476c-151b-4a66-a17a-a6541f4a9ef7", "sighting--9573c7d0-4d63-4590-ba06-5553f578f8e2", "sighting--3c8020b1-8a4c-4811-ba42-d7bb05cb9ee1", "sighting--3a9d6c41-744e-479a-bcf5-c6984b5fdd50", "sighting--378cf0e9-c3c8-478a-a9d1-7927ecb8f492", "sighting--3440f44c-2f87-4aa5-ab15-525342b07955", "sighting--26ab61f3-4c3b-438d-9c05-aa14c915e1da", "sighting--bcc4ecb8-1a7d-4453-a3d2-8842941e5c32", "sighting--8a9ec4ff-1ab6-4e72-9806-bbc1a7328f10", "sighting--8a16cfba-a883-46e5-b83c-c1623c282918", "sighting--e0d47e35-a35a-4013-8c0f-b2f67ec08878", "sighting--b689bd07-21da-4721-b388-e144875bf9b1", "sighting--6089e344-117f-4ab5-b96a-85397029513e", "sighting--5b9c873b-031f-4c37-a318-2eb7923c21a3", "sighting--f77ba568-a2ee-4d13-a32c-a3ead07e9df6", "sighting--1ac928ea-24e8-4cb0-926c-ef88ec7d723f", "sighting--ad284b6e-a792-4774-9cdd-06381c5aa037", "sighting--9d686fc2-4aac-4c69-a59a-1b9e4c231323", "sighting--56367419-9f08-401b-9bcf-4531cd40eea8", "sighting--cb8c36a1-ff36-45a8-a488-30b4a0a43355", "sighting--be0adb27-c86b-41ae-b621-44b54a5c31a7", "sighting--eb16fca7-7219-48f6-8e58-dbb222642f5c", "sighting--bac14622-0671-4bc0-a2f2-b98c36b7590f", "sighting--146bb6cf-f0ac-480e-b332-f1588a0abd40", "sighting--a0d16af1-9edf-4fc9-8838-3802acf41542", "sighting--2cb33b3f-ef95-42f3-9143-a9881ecb6d2a", "sighting--6cd9eba7-627a-431b-a5bc-266bae959c1c", "sighting--5abb8bbd-c285-415c-a23e-bea9df492d13", "sighting--b381eb23-d9a1-4c21-acfc-91a8c0b6697f", "sighting--fe7c02c9-c5c3-43eb-8f69-a5e220f93fb6", "sighting--c9cc3f42-cabb-4e73-b43b-89f8c581534c", "sighting--e790d826-021e-4e13-bec9-ce363f94793b", "sighting--e0dd1bea-8cbe-4ec1-aa47-f3fb74d1edf5", "sighting--fc20ae63-fc57-40a4-be8f-f029e85873b1", "sighting--ebd20f23-7174-46be-887f-eb8b54cb671f", "sighting--a89eb468-3bab-41c1-92d4-c98f70254a9a", "sighting--320551af-611c-4510-bc78-7cb78929019c", "sighting--86daf287-cad7-4f62-a8fc-e51e7f7b6490", "sighting--811e6cca-5e4a-4d37-ad92-d3f64c0e8a12", "sighting--2f25b615-0f60-4d8b-8f32-684e1df4e471", "sighting--0a461829-8b19-43bc-a4f4-98234b1742d1", "sighting--3e36b467-0f62-4d2a-991c-14887e15cbc6", "sighting--e4ff8e33-c9c2-479d-87a1-e7796a4aef04", "sighting--c031129f-51db-4e20-b625-a79925019e28", "sighting--f210c11f-d592-4636-8a4a-5693cef8db2e", "sighting--7ddc209d-28a8-49e1-a102-e3a9f59c3a7c", "sighting--1d21dc63-0e52-483e-ad54-41b6f1ebb9eb", "sighting--09366b19-facd-4299-8f72-e9f5e8ed4f5d", "sighting--f9a421c2-4572-4642-a221-88e287533d2c", "sighting--5954cecc-4d7b-42e5-84a0-67ac4381b48e", "sighting--d58e1d12-2815-4092-b24f-ab61209ced73", "sighting--271db2f6-7c54-4023-ba85-9c903b05ec53", "sighting--a4d6fb24-765a-4f70-a04f-d5c30ba0a188", "sighting--046f57b5-5faa-4498-980a-5278f911e4cf", "sighting--08a9c17f-f49c-42d5-837d-b1b80f613e6f", "sighting--c0223316-5cb1-4846-b0a3-bd99969cc442", "sighting--ec87459b-8580-431e-a286-ebc5c561571c", "sighting--b9a7ece5-2cbc-472c-8402-e16aaf0e470b", "sighting--a321c9d2-846e-4b51-90b9-7174f790395e", "sighting--ac9bfc04-e949-4655-a702-e5b8587feee5", "sighting--6e58984e-db5a-4176-97dc-d0b6c61ab2fc", "sighting--738b788c-57ec-4442-8c4c-a8543fe8e45e", "sighting--6401ad4c-e80a-402c-b817-c145b4670fdb", "sighting--c6fda359-521c-4fbb-8c67-c81ab5a10540", "sighting--f2aa140a-4fd0-48cb-b799-09d9f4f97038", "sighting--440da0d1-2b7e-424b-a312-2f12e235ead3", "sighting--31cc9830-aa85-4bd8-b01f-42612d17898a", "sighting--05423e37-83da-4c9c-8247-5e3fed29af32", "sighting--c84d5053-03a8-4207-94ff-9bc55e5c1bfc", "sighting--70dc59fc-0f8f-44f7-a9c3-7de813f3cd7c", "sighting--50d2ab65-5ce9-4c89-84a7-33e4845c952e", "sighting--c7eb7aa2-7724-4184-83b0-9f068e86f089", "sighting--874b565a-1af6-42f1-9bed-dd65a8abfff6", "sighting--547c4d93-ef9d-4266-a478-884ca7a45f74", "sighting--650130ef-c865-4f79-ab87-4dbee3ba69c0", "sighting--35d4ae98-f3f7-4bfe-af93-ca9feffc32b2", "sighting--71e6e03a-5262-4286-ae88-35ca9b2e4ea7", "sighting--d31f7f18-766e-42b6-807a-2fd139919849", "sighting--456c3762-3447-439d-b3f2-54436b0f1a29", "sighting--dada11cd-10a9-495b-8191-5ace33620096", "sighting--b2bfb73d-062e-4349-8075-8c462a6b42dc", "sighting--97412a19-cb92-4a74-b487-53405d82fd65", "sighting--31cfdb77-b0d0-4c5a-8613-de03a30043a2", "sighting--a42db542-6d9b-4e9e-94aa-baa2a63f4a7e", "sighting--cb06d326-32c9-420c-a889-97cf10d45528", "sighting--1567bcbc-c18e-4bce-8bfd-7c648ddad398", "sighting--69c5e73b-cc78-445b-b5d2-6e472b0fef29", "sighting--2a09566e-878e-4161-ae2f-5e5db498342c", "sighting--700fa848-8bb7-45a9-9045-78234d61ba06", "sighting--92f8dd8f-61bb-4dba-bb52-06ee5ab5af05", "sighting--fa5230f6-5d09-4cab-80d2-a8bbf87ccb57", "sighting--c56487b8-666f-42f6-8260-dd98e4971017", "sighting--fa90bf89-4081-45e0-9afa-ad886326e5af", "sighting--70f30b08-0f09-47c6-9858-8b8375ca7b14", "sighting--67a0b027-3bd8-4927-8c1d-6ad718cc4042", "sighting--8c7bf5c3-019c-4be1-af5f-c98aef365557", "sighting--344fa8a8-a728-4ec1-961d-3e9cc077faae", "sighting--c6b0a1ba-7eaa-4528-b607-8d00f72cee00", "sighting--0e59be85-b853-48c0-bc4a-93e929d8f208", "sighting--9d636247-e420-4434-ac27-ff2bd544886e", "sighting--0d3c278d-8d74-4fbd-8888-f67766091cff", "sighting--1064bc43-e942-4719-ba39-febf8676da6d", "sighting--bb40ab99-d55b-4d18-8ef7-ffdc406becaf", "sighting--3cd5977d-62df-4a98-b377-fad74a872474", "sighting--fb672f74-f8c7-471e-838a-0d98d5970500", "sighting--d77d0594-6918-4cd0-8859-f3d851335944", "sighting--6e11afeb-efaf-418c-965a-9a32fe661550", "sighting--1a76ebdf-5fdd-4143-bcaf-886e71b79fdd", "sighting--9bdb03e7-bce6-457f-8c85-f5855165f987", "sighting--8cb8b20f-2732-4887-8132-52e32fa8a910", "sighting--e00580ed-6ad5-4c73-b47a-914130b15990", "sighting--1bc369bc-fc05-4864-b3f2-6542133f8f52", "sighting--37864061-54fd-4ec3-9872-01c9dc4eefbc", "sighting--3617fa5b-0955-4074-97d9-4ffbee764520", "sighting--9f71e182-7baf-4286-b600-3ce34a55ab1a", "sighting--50e14469-3282-49ad-82cc-80bca4a0f3ba", "sighting--61dc4ea7-40ad-4bd7-8cc3-a82c273897ff", "sighting--fd4be336-3037-44a0-843d-d10bd157ef0f", "sighting--9ffcd252-9e27-4186-9ac9-95b21f0c9a2f", "sighting--d167af40-540f-4ba9-b9ee-930eed558046", "sighting--a2934912-f8c0-470f-9041-9c1d1357842e", "sighting--fac11b23-1f97-4a4b-8873-b6284cbb9c0a", "sighting--5bfecc22-b2b9-46c8-8fb3-fb48592d044e", "sighting--f1edb099-3cbf-490a-9494-384178f8c61e", "sighting--d2f86a03-456f-4d8b-868a-74346f03b6fc", "sighting--48c0e5c0-ae61-4cb8-b883-faac8ac08b10", "sighting--fabbc2a2-c87d-4381-b329-44d0eb12234c", "sighting--9bcf73df-738f-4f75-8f8d-5c1c7bddf7e9", "sighting--ee67dacc-a12b-475d-bec0-feb6a76358cf", "sighting--d7fce463-1e2f-4665-af92-893cb8800775", "sighting--d8cf1ab3-b610-4c88-9eea-a05822249f79", "sighting--6a45a705-836a-436f-a4c0-d9648d11fa70", "sighting--20cafc70-cd34-45ac-ba48-458573c370e3", "sighting--3b9eebd3-f5fb-4e7e-a8b4-d44f14cf508d", "sighting--ca3c7778-dcfd-4f81-a31a-001095920408", "sighting--e874f878-5011-463b-aec8-c7c42b55a4ff", "sighting--21555fd4-082c-4c16-b9b9-3c6712b4e532", "sighting--fa46e028-2c10-4b33-8443-547280ce09ef", "sighting--252bb715-9975-42ea-8927-b62e7b2ffcfb", "sighting--d5ff447c-a05b-4cad-87cb-4b898663effe", "sighting--16812c42-c017-4600-bdbc-ea0bee675026", "sighting--72df7081-26fc-42e4-a822-3f0ab177d4de", "sighting--98b61dfd-379f-42b0-baf8-d66c721e1fb5", "sighting--821f6c08-9801-4445-a9b8-1f408a79f5a3", "sighting--086dc514-4515-4a83-bcc0-fb8732972620", "sighting--12878f24-f849-4c3b-ac69-096976096656", "sighting--81f09c59-72fb-472a-ba83-8dd8867d45dd", "sighting--17abdb9b-e7ed-40c5-b4fc-484990ee5faf", "sighting--6c76c7e0-ed14-453d-aabc-a6ca822110d5", "sighting--da6a37a0-b5ef-430b-9ffe-f71ac24dc730", "sighting--3964529f-8fb9-4803-80c5-20dcb034f8ac", "sighting--bb4f4b91-818c-41c8-9571-fcbe190b00e1", "sighting--08cd521f-9840-43bb-b2e8-bdd33b116767", "sighting--3b264362-0dcb-47c9-bf9d-ff21a4f7a797", "sighting--d967c534-54cc-45b7-9bb3-7fb9e77e7778", "sighting--1312ffa2-d472-49a3-9a8a-14f04a7859f7", "sighting--0e2e9400-07fc-494a-a189-56d484ce3985", "sighting--4b045f5f-1a99-4dda-ae6d-854859d99fa2", "sighting--82e17a16-a1ec-4f86-8597-162db1a9a42d", "sighting--f67aa824-bb8a-4f94-a4f1-77c44325c632", "sighting--ee950383-c5ef-4d33-94f7-83efea3a854b", "sighting--b5e0ed6f-e1a6-42be-8304-e84aeab1646d", "sighting--cfcd9c40-b1fd-4444-9605-db633954a1ce", "sighting--bd8f6845-8151-42e7-9162-1ff2c0988b4d", "sighting--327c30f4-fa49-4bd3-94f7-a79404c3d223", "sighting--79a1819e-d414-4c3b-b978-dc78f4458137", "sighting--f061cea4-48c5-4d74-868c-8596e0a21d2d", "sighting--08f68411-4a6b-48d7-82a2-d5a79748c572", "sighting--fb21052b-13af-471b-b727-20e602e675a2", "sighting--abdd7dd9-00e1-445e-a75f-c7490a17e2fd", "sighting--32508531-e416-4dfc-9422-c35aea20bb9c", "sighting--e68e9313-b7f1-4f36-8a9e-3a95bb7ed45b", "sighting--33744abc-1bff-4e66-89cb-55fc8146a50a", "sighting--6a055193-ee53-4527-8d2e-e4f3224d9e96", "sighting--42e63440-f501-44e2-be71-e92d95ace487", "sighting--194569c1-7894-4638-99a8-75c75c864f4d", "sighting--eb0ab9f6-c7ae-43d8-b283-fe582ac7737c", "sighting--0aa6a8b0-b660-4516-b041-3a9ada68f7da", "sighting--676fec62-8dfc-4a3a-964e-b11ca644aa23", "sighting--9b75a856-5714-403b-8a92-7dd8b6fc2ba2", "sighting--6b815d25-5e47-4a1b-916b-d6d8d91ff7b9", "sighting--00dcd437-e6d3-45db-9479-70c716d0f6c7", "sighting--50ef1dd9-68a5-4844-9006-99494f10cf54", "sighting--8a4d9ae6-f2a4-449f-a4fc-55c257315bb4", "sighting--51fa8dbc-10bd-48fe-94d1-1e1a39163dce", "sighting--463be90f-b948-4e1e-b1f9-a9c6f3e98030", "sighting--da708c38-6bcd-4e3e-8681-6500f56a766c", "sighting--c7627781-7b47-4b36-9c61-247ee5c13a0a", "sighting--38d389b4-3dea-4c74-b218-33cd067c0ee5", "sighting--7b825cea-93ff-4f12-88ac-08eef09a94f1", "sighting--221352fc-1e2a-4f13-9d59-c1caa5051a90", "sighting--935cb02e-06de-473c-a843-6d5f2195f383", "sighting--a67af864-26f9-486b-beae-d012e008366c", "sighting--1d4b2425-9e79-441f-83f6-841221e14a28", "sighting--017fafae-37c1-4586-a01e-44d4df788d9e", "sighting--996af630-d213-4588-b948-cde548d5151c", "sighting--72692ca8-6324-4336-a7e1-f65133120721", "sighting--ca798930-2798-4e0e-a59e-d18272958361", "sighting--e905e236-b237-4d3a-a832-f4007f172dc9", "sighting--0aea1ed7-2811-469d-8c1a-cec8491e170b", "sighting--86ec2e35-c7d9-4ddc-9b59-77ea85c7bb2a", "sighting--1b70f244-66f0-43be-9ed5-b3fd471d0cca", "sighting--fa1cb043-d5d3-4842-8865-dc70a7b06a2b", "sighting--ff60c7e6-c6c0-4364-924a-31a53ff9701a", "sighting--a90d1bd8-920a-4ae4-a040-86b76f0d2785", "sighting--50f2ec03-10f1-4677-a54a-79fcde1d0377", "sighting--ebb40b6c-3a5c-48b8-9c23-029a4959190f", "sighting--b56fd82a-885d-4765-91f0-0e89de30f265", "sighting--ea23ff2c-a4f8-4f55-a58f-134b58906c6b", "sighting--85655ac2-1d3e-4864-bb66-2e6d30691450", "sighting--3d1210a8-66d1-4898-ace8-3a917b649236", "sighting--387ef00d-da3f-4576-b94a-8b380da3a3d8", "sighting--2edc1e73-14a4-41a7-a1a6-128525050b16", "sighting--41ccb652-fd43-4a14-97b7-a4672d87cf74", "sighting--92b800ea-84b1-4980-bbaf-e9abfac32a8a", "sighting--31a04cd9-d815-4a98-8511-423efd9abdf9", "sighting--d6ca5602-2643-4332-ba70-9c0d9cf0c375", "sighting--b2ea0c63-3e48-44d7-9e84-a39670210edd", "sighting--a3db1d98-6c57-40ec-b77e-03b31e4f1bd9", "sighting--f76d1079-27b7-4e38-8c03-f78794fe9df1", "sighting--5f4780b5-2429-45b2-8f1b-4b45a116d928", "sighting--98626862-3cf9-4a6c-b196-22d9952ed72c", "sighting--c53d6575-3018-4b26-bf80-87a8ad50a1fb", "sighting--37b8aca7-8646-4357-99d6-ceb92c44d94a", "sighting--9f6ceb52-af0f-4181-978c-38e5ca8e2feb", "sighting--e20213cb-f759-4bd8-a39e-7c425f0ed75b", "sighting--154e2639-6a22-4d9e-bb0f-3bc14088cd55", "sighting--83db56b1-275a-4656-ba4e-712f629f115c", "sighting--c9fce07e-1853-4ab8-8151-cc001c63cc9f", "sighting--458a2cf6-6069-40d2-9a01-3e62d9a0fd2d", "sighting--141cfc8c-22a8-4624-a5e0-ef4b0df3d681", "sighting--5054c22e-8288-48e7-b5ed-01da596f8581", "sighting--dae80c38-0f18-4b4f-a444-0cca1ea90038", "sighting--e9fd8b76-f84c-4094-93b7-54d385e19194", "sighting--df75749b-1ed0-4cfe-ba05-2b4814437289", "sighting--07ff154e-ec12-4886-af61-a369b5db9554", "sighting--14b77b89-8617-4597-8842-802caf033bfc", "sighting--18161bb9-35d9-467c-b923-58d290bbcb5d", "sighting--518878bb-1d1e-48b5-a079-36378ca48231", "sighting--915cf3bd-ebc6-4d1f-8c9a-9b9a86d923ae", "sighting--5557ded2-9ef8-4211-b3ba-70669d736046", "sighting--bfc8991e-4729-4311-9563-e0d2e49e5433", "sighting--6b8171d5-f50b-4376-a19b-ed7c95357018", "sighting--5fbb619a-5397-413d-8b54-e6860fada3fd", "sighting--5a35bd01-4788-4cf6-853e-ea66efc58bc5", "sighting--43139c48-9806-40ac-99cd-139a441db255", "sighting--69259e95-710b-4f3f-a671-d745bb551676", "sighting--40c4822b-1eec-421f-96fc-fa2afeab08fb", "sighting--cf299cf9-af7e-4d29-9e78-f09d8b7e76f1", "sighting--cc49852b-b3f1-454b-bc96-5633412a8b16", "sighting--2ddd355e-8265-478a-978d-a3146b102fb9", "sighting--703c547b-b4ae-43a5-a73e-5035677d079e", "sighting--4d6545c7-5ee6-4cc6-acfc-c35794ec6c08", "sighting--034b7bc8-becd-4d2c-a440-d6e74cbb47b4", "sighting--17c7edb5-66d9-4992-ac8a-c9215495edce", "sighting--e7709d0e-0ea0-45f9-ac10-0647377d5b26", "sighting--a38385b3-2a58-430e-bf6f-1ee3bf07955d", "sighting--eeabb4d8-26ed-4e46-9c52-14e1aa97674b", "sighting--f5ccce09-c6cb-4e3f-b918-ada24d5577c5", "sighting--6538a2e8-37b0-45dd-8c07-5084265c500f", "sighting--f6c911e3-3543-4c22-9f15-351722425f39", "sighting--8e6c43c2-fbb8-4d65-870b-acf8f04f06e3", "sighting--60e248e3-eadc-4856-ab75-70cda24b609b", "sighting--5cef384e-1363-4653-9c74-9863d5346b93", "sighting--569d6f5a-3457-4d68-8b85-645c8398f458", "sighting--f9e79cae-0e7c-413d-b5d4-74e1eb6247b3", "sighting--1a97227d-8e15-49e7-b40c-19439e05a027", "sighting--9f795073-ba73-40e1-8220-d53cb9913093", "sighting--60313a6f-7c40-4b1e-af32-a5ee93c8b058", "sighting--b0564db5-3768-4c2a-ac6d-2fa75f81d6af", "sighting--975359b7-b010-4a12-8f36-af98a54f336d", "sighting--9be69a42-196d-4a49-8fa8-69d6dfe4c008", "sighting--5f6c9f0a-40ec-4348-a584-109841340cb4", "sighting--12d4751b-ff3a-4574-b525-d77bd53547ee", "sighting--43e84a17-77e5-4f81-b22e-d8b5096b08d5", "sighting--0b654b00-74a4-4c67-a411-94a868e2262f", "sighting--dc00c614-a829-4123-b24f-9cc99520c88e", "sighting--af8c64cd-d768-4346-b1de-48d17eb28335", "sighting--cba8be72-0102-42ce-b919-3d68c40119a9", "sighting--f49876b6-06b1-4c47-b9d0-ab4302190d51", "sighting--8f9fc409-a53e-4a86-b839-c1b4638df41f", "sighting--6a98253c-cf2d-4fc4-977a-077d8f333a65", "sighting--05319dcf-a8f0-498d-b46e-76e25280f658", "sighting--309a6739-0967-46f9-9630-1f920ca0bc42", "sighting--7cfa74e9-2b75-425e-b2fb-9fcd6d339523", "sighting--6ca0c020-60f7-4cf6-93e2-60eb0881cb47", "sighting--a00919b2-749f-4186-998c-39f7d33d8c68", "sighting--62f6e2ca-51f4-49a8-b32a-e7899b09e3cd", "sighting--08cc9e2e-7aa8-4be0-b85b-8113507dee88", "sighting--c556f790-185a-4abf-8887-d43d3358984b", "sighting--054fbd4e-888a-4c4c-b247-2b3c37ccc8f1", "sighting--c6cedcf1-bda9-4674-97b0-53fffe6b09b5", "sighting--b744e857-7e72-4517-9219-e0770f260f56", "sighting--e934338f-121c-4354-aac9-ad464252aba1", "sighting--e9c83fb9-174e-4b07-a1cb-b8dac0ef2a20", "sighting--06f204e8-ba65-4502-8840-d91ebf656eb9", "sighting--045d4551-5b94-4021-a5c2-6534249e9741", "sighting--9ef40df8-8974-41ab-bb37-b51f22dbbadc", "sighting--1c90eec5-67ef-4ce3-94d9-448e2ab0ccb2", "sighting--21e4839e-3284-473d-86d9-ba5303982e37", "sighting--bd7fd741-aa0f-4f2b-81af-cb12131a396c", "sighting--a7823c52-19f3-44e9-9b1d-6c3ddc0e3354", "sighting--cf6c9ead-2e5c-4279-8430-0382aa768704", "sighting--3aa6332b-4834-4b90-a6ce-6e7b1794443e", "sighting--93f2612a-2c28-4e74-8816-63471ac51f22", "sighting--2b0668f8-37c9-44f9-a0ee-ab0376b7ace3", "sighting--166fc270-3518-4762-908d-976818997d7b", "sighting--b461fed1-2a2b-4a84-a936-268ecafd113e", "sighting--8de699a8-ffbb-48b1-bf08-794636d6a6f8", "sighting--d56bbb94-e034-45da-be7e-87753ba2170d", "sighting--7f95f119-9f24-42ba-8da1-d5bb6a37cc56", "sighting--f69fb588-d87f-4ecf-85cf-694b7ca89086", "sighting--736040ab-15b4-4221-9d68-b50b891d2d6b", "sighting--d185e01b-2388-41a8-8819-c39adfc0f589", "sighting--94401e0d-56f2-4df8-b6aa-d1976420a59c", "sighting--74522ce3-2d10-4da4-983e-50a6cd38eb8e", "sighting--917d2239-3eac-47e9-a42d-da575213c2d1", "sighting--85fbf855-3b56-4603-ba2d-5e1d261254dc", "sighting--c592f4e4-2475-4b82-80b2-00aa23baf9f5", "sighting--0f837b92-3781-49d1-bb29-30f8f5e24883", "sighting--0ae13b75-e55c-47b6-97e3-11f99b636c21", "sighting--79abe419-1048-4cef-898f-bb3a413fe003", "sighting--c2a8f805-4ff1-4c08-b96c-d20d6ad97ae1", "sighting--510e9cd9-9ca6-46e8-afc0-2170c95ef775", "sighting--b5e18753-7a82-4d03-821f-0c86d9be81ed", "sighting--17810bf6-2673-43c7-acb7-dbd2dd8b6eb2", "sighting--20a24d3b-7f18-4edf-8bae-3ed97d8c083d", "sighting--db7778d3-9701-4b2e-85d5-9c403e534268", "sighting--d4d0f601-0ac9-4b62-aac0-92ccabd9b599", "sighting--5acb10a0-6be5-4151-b713-26da0dab94b3", "sighting--7bffc257-57d5-44a8-9b07-52fa431f786e", "sighting--66c8d599-86c8-49c5-b730-eda6da9bc3ec", "sighting--87edd733-f572-4941-8b3d-5ce84857c4be", "sighting--5aceaaca-6126-42fa-b6d3-fc6f7627f41c", "sighting--7df6ed7b-89cf-4a51-be23-e8183f059d86", "sighting--58190a0d-823a-4a53-bb5a-8d8f933db07f", "sighting--361fc215-1d9c-4c63-b801-51fcbef9cfc0", "sighting--aa65cec5-3f40-4c1e-9d21-ce9207eb7cf9", "sighting--3e88f3fc-2e1a-4070-88f7-5e47c259e4b3", "sighting--82250367-2d60-4a09-ab20-ef4f1b9dc7c3", "sighting--4d5a7025-1bf3-4ea7-8043-5864f47f96c0", "sighting--b2d556c5-9aa2-421f-a720-47c48d7cb2e9", "sighting--72aa2cf3-8af4-4388-ae46-441eb96f214d", "sighting--129467ec-80e8-48e0-a5ef-2237299d12a8", "sighting--1f2c1d38-711f-4990-9ddd-a320442ff3c4", "sighting--3c80f29d-3c66-4e05-8809-99a33ccfc727", "sighting--437c8837-4816-465b-a645-5ef6ccdf3cc6", "sighting--edb845f3-96a4-4145-9c96-2a235f34b1e8", "sighting--f06f5b23-5d82-4437-8f3f-65954a042797", "sighting--ad49aed5-38a9-4922-93df-18590aa3f3f5", "sighting--60bf300b-8bb3-447d-ab48-33c0792f78dc", "sighting--4c827d11-aebf-4373-a209-97d88bcf3497", "sighting--a17ff843-60e0-48c4-ad26-6efb1423826c", "sighting--0a9f441b-fadd-46b7-9cc6-b939f3228c3c", "sighting--f3a92a7a-4188-4310-bfa7-dc70b5f55ea8", "sighting--692ca6f5-85c2-4aa1-9c4d-bfd75e2de348", "sighting--450e8271-f52d-4c21-bf7a-1e7878d19667", "sighting--24d09c92-3406-4a0b-823c-500403f5a9e5", "sighting--4c96313b-d2bf-48e2-991e-1f7db293ee7c", "sighting--16705785-fb65-40aa-a8f1-38bab61a0087", "sighting--a693d56a-2104-4066-9a76-01055e0adf14", "sighting--18a09d4a-83db-4f69-b573-a52d1ef73246", "sighting--e6e31374-3611-4907-bf6a-187bd3ad27c2", "sighting--0a10b0e2-9700-450e-bef3-16d2a94152d6", "sighting--7dfd1ce5-999b-4f78-8e00-3e2543d1a4e2", "sighting--9c6819cc-5e32-4a51-8a94-b3728c0a39b8", "sighting--099aa202-5389-4713-af90-c1964e33a7e4", "sighting--dd495a36-ef89-4337-8e2f-251f2fa3e62e", "sighting--6f89b164-354b-41c7-b0c6-f9513df4592d", "sighting--74ed6333-c633-4149-ba15-0a0a734c5d97", "sighting--3c37423d-728d-4118-aade-3051e5fd675e", "sighting--5f13b2f7-7a2d-44ac-9f76-14b61572db26", "sighting--819ced04-0dda-4e2f-b475-d7040867ddf0", "sighting--1f7222fc-17d4-40c5-a4f8-001348339469", "sighting--a16a921b-9c1d-4811-9f16-4ae7faa5c6cf", "sighting--bec13d55-1299-4fd5-999b-8a07e1b025bd", "sighting--71c1603c-15b6-438f-99f1-dd609d7e3a72", "sighting--167f4430-7ecd-458a-a9b9-1d79c453a21c", "sighting--17c9a27e-2ed1-46e2-87a7-1fae1c25bfbf", "sighting--1d8032eb-c783-4916-9bcd-67be61d69926", "sighting--a87df889-5c55-4f61-abce-beaf3c75add2", "sighting--8c40ee8d-33b1-4de9-be7e-5044227b7601", "sighting--bcc0f93d-2813-43f6-b8af-c502c22e2132", "sighting--5db94026-187d-45f5-8f7f-4e14819b557a", "sighting--b74d309d-7aab-4983-8dea-84a0b98618bc", "sighting--7eff344b-33dc-4bfc-869a-c54a37bc5e1e", "sighting--14dfbb6f-4189-4c4e-96a8-e91879687e2c", "sighting--8cc03604-536d-4081-abda-5e8472cd99c5", "sighting--25c0b62d-9d98-49dc-9d61-95650a92ce46", "sighting--5bc8564b-1cc4-46d0-bc7e-fbceeafdd118", "sighting--4b57fe85-e522-4a99-886b-f7d2113c6eef", "sighting--497a4b60-e281-4139-8350-11f57992fa8c", "sighting--b2356c61-c2af-43f8-ac2c-5d8522b9faa8", "sighting--48c980e1-d02f-4e9b-8634-7c8e90448e9c", "sighting--0adc330b-d67a-4dae-ae04-29f0cf8de06b", "sighting--c0b23e27-2acd-4478-a8da-de96dbbd88fc", "sighting--32bddd6a-9487-4f5c-bee5-9b5727548ead", "sighting--8a0aba8f-a661-445a-aa01-a5502de3104a", "sighting--4f839778-8230-48a5-8ce8-ba80f75a7625", "sighting--5a687104-ee27-4b30-9fcf-0b290a750894", "sighting--157ceca0-5202-4dd4-a46e-d5280edc1c46", "sighting--753ad7cf-b91f-4550-9888-7963df195bac", "sighting--dc52ca89-e015-4249-97cd-11af6bccb044", "sighting--fa52f0ff-6bb2-416c-b359-f8074ee4bb3f", "sighting--356792d7-12c0-4d77-8581-d48e26e7dd81", "sighting--97d4b18e-55bb-4cc5-b9ec-86bc8a89215c", "sighting--7c8f0196-8697-4b2a-aea9-7a7432e092f0", "sighting--22c4fc3e-e795-4e44-af5b-22b1d01e10b3", "sighting--669b8b99-ee8c-4bb1-956b-2ae6560743c3", "sighting--a49635f0-8458-4d34-9fde-e4dbcfe8990d", "sighting--eeb9e51e-802a-4b9f-b3b7-874d849a3912", "sighting--5ca0910f-3690-4f65-91dc-b9ce4f14aee2", "sighting--9915e1c3-e6ed-478d-b1a5-d393bbdeeda6", "sighting--b7c56582-35ab-44a2-ba4b-0f962e091ae3", "sighting--d2254bf8-0c17-4fa0-a85d-912d2fa2798d", "sighting--7b937d54-c766-40af-9def-74e24a5c3410", "sighting--b6681005-5b6e-4704-9f3c-9104be90e5b9", "sighting--02a214df-7b99-4421-ba09-70acb596a898", "sighting--4c6ea480-926e-43c4-9a18-c238ff865ddb", "sighting--9f4f6ef0-c1bd-4c9a-889a-6345cd9b9d84", "sighting--61166d12-7e50-48b6-83e4-83ef84e645ab", "sighting--512a15e6-affe-42ab-9206-ec1c09ccfd4f", "sighting--2b75bcd6-6264-4b8f-8045-148221503ffc", "sighting--9f6e9923-c9b0-4e6c-ad99-3f023e6270a3", "sighting--68481d04-5a0f-489f-b2f8-5838da137471", "sighting--fc49b049-3b03-4c3b-8eeb-ed166263deb2", "sighting--0468adf4-2c7f-4da8-a9eb-bb32f3625aa7", "sighting--605b579b-98e8-4e81-9d78-adffc289fdb6", "sighting--8cde9474-6c86-4841-a51c-a451e71ae2e1", "sighting--217bdd70-6d35-4518-bc83-8ba6dda93453", "sighting--234b1790-d5d8-40a8-9238-1898edc6f558", "sighting--563dffaf-a333-4796-8978-9f98e4e967d4", "sighting--7818f587-5942-4408-a5b7-84312cfffdfc", "sighting--b7dd1fd5-6140-4ffd-8d76-da284a2cdd6d", "sighting--e6ff6ab2-9916-446d-af7c-3213475b56a2", "sighting--efc9e873-0ac8-4177-afc6-153940c7ccad", "sighting--07b70f5d-4d12-4675-8fa5-49430e322cba", "sighting--31cd3a9f-fb12-4466-94ce-307a4c13c4a8", "sighting--d59ce917-e6a6-4aca-bfbd-60962af31865", "sighting--1224c233-d6f1-46c5-ab7a-1cda52dec6a1", "sighting--356785d4-8fd7-4944-9fe9-353f9fcb5e71", "sighting--e1b262e3-cc63-489c-8ae2-6369be9c9b84", "sighting--06972db1-dd0c-43d7-a5d4-d923556bd658", "sighting--81351365-f811-4861-89d8-af93d34f8537", "sighting--902a3872-d153-4284-a7ac-1fbb3017ca9f", "sighting--2e890ee8-011f-4906-a3ef-2e843bd8907c", "sighting--98caba84-b785-4318-ba94-f69554d08c69", "sighting--683f5951-b4ab-42e3-ad49-1b4755c205b7", "sighting--c477ab04-8c12-4507-a486-90fbd770abc1", "sighting--b78403ce-fd08-4433-9482-7806e46f1fad", "sighting--72732d1b-5485-4073-a16d-f3767091f5c7", "sighting--ddfadeb0-4ff4-4ac9-a3c4-d168e82f11c0", "sighting--dede8797-f1c3-4483-85a8-26a1927d35ae", "sighting--bda9776f-efdf-45f1-af0e-c4a6d3aa0baa", "sighting--5e7ab062-5b93-43a6-b716-37a8fa363ade", "sighting--08dd4827-42a7-4ecb-a26b-ae0b5b71801e", "sighting--acd59629-5322-4466-9609-d781a6f8c234", "sighting--11da2440-358b-4a51-86f9-636c8f33ddaf", "sighting--b1c83984-5f41-46a8-9f95-bd1df29e759f", "sighting--51e1b386-10e3-4c4b-9a39-a9de2a2b6f8c", "sighting--fbb6fc8a-6408-4da5-9901-caa2eb10d91e", "sighting--4e2e5f78-ca34-498b-bf3f-ede40067bfda", "sighting--edb83f35-b730-4f2e-97fb-26c60c951d11", "sighting--209a6d77-5032-405c-a15e-ecfc78e2e905", "sighting--5ccf082f-687d-45e6-b578-2530318f191f", "sighting--b5a6daf3-d6b1-4592-9915-a2f8012b812f", "sighting--fadee963-c11a-45dd-b75e-828c21272cde", "sighting--d2c979ce-f9f4-452d-bbc6-6245da3bdcbe", "sighting--cf6dfb30-de9e-44ff-b52f-6bf12e2e45e0", "sighting--ba65a2a2-fbfe-471b-8f1a-ad51764f4165", "sighting--30d66b39-81a2-409a-ae1b-7f9d98747fd9", "sighting--254a879e-818e-4595-a4e0-86a68be0b988", "sighting--c9df6558-6ee8-4886-959f-8d2473c52160", "sighting--afdea73e-868e-452a-a2df-a814ce75fefe", "sighting--7f2ec54b-140a-49af-ab39-3cac9a36c025", "sighting--33dc08d7-7fcd-4c03-bbe9-f986416f7b08", "sighting--ad6deaa3-e52c-4789-878f-a7ae38f8b855", "sighting--cacf5c21-ba14-41ae-aea6-3e8d0d4d5c5d", "sighting--0828113a-43f5-416d-88dd-3e910f78b2ae", "sighting--992b316b-87b0-4277-86cd-23249edda2c6", "sighting--0b90ec2c-0d87-4ba9-9b72-6b016777b64d", "sighting--2f335953-b4d5-463c-bea5-187c75a4e5b3", "sighting--cb3aaed6-7e26-42e5-a250-31d452629d14", "sighting--176c1819-9c58-42f7-86de-a432e9ea0f6c", "sighting--524fcea3-0901-4550-9b56-52ce6c7f5ee3", "sighting--d0219e2d-b8cf-4b74-b689-5176ba5609e2", "sighting--a2d71d3d-d9fd-42df-8158-04f8a17c779e", "sighting--f6601d4d-97d8-47f2-9e8e-d5ec2ea7df8d", "sighting--0e3b5f1c-325c-4e78-8e07-dbe4e04ce898", "sighting--eb68905c-d093-4d53-9fef-cf3f715b564b", "sighting--46c22900-1a49-48f7-96b0-7cffe44e308d", "sighting--97600a59-5b7e-48be-af6f-59dbfbfa4e65", "sighting--becb3e6e-ab23-4b66-967b-fbca8f2f1f37", "sighting--e337a532-98e6-455f-995a-3e5446aa99fd", "sighting--705322ed-3061-4b0d-8b6b-ca319c25d707", "sighting--f85dfebf-197e-4b61-9dd4-0b2b34cf992c", "sighting--18accd80-f685-4e76-8322-e49e334474cd", "sighting--4742506e-ae2e-4bd3-8c24-b9ef2738453c", "sighting--6bcb49c0-d1d6-4723-8d7f-03f5acfe8a86", "sighting--0b54dd05-8a62-44bf-b95c-e053aaee4c7a", "sighting--521e38ad-7631-449a-90e3-f16cfc6b709e", "sighting--ead315e1-3bc1-4238-aa2f-9baf02a4c534", "sighting--6a817fd8-3f13-4813-a311-e4f61013b5bf", "sighting--e83d34ac-1cef-4840-a02b-3a1675348612", "sighting--5e75e331-e0f0-4101-8659-28898c586709", "sighting--e3bd6624-eb4e-40c0-a7c2-a7445812a718", "sighting--2400d3e3-9083-41a3-a658-70b6e2921860", "sighting--77dd7dab-5bd3-498a-b0f5-f62bfe138795", "sighting--ccc0fa1c-3c43-4684-a3fe-cbfcff95e6d9", "sighting--4288bdfc-51c5-4770-938f-12e2d9609a87", "sighting--266a7b3c-dea3-42d0-bde5-9093a9945b6c", "sighting--1f471371-8d8a-4005-9173-6ebffa88ed16", "sighting--1172c8e8-6729-4709-889f-8e5c72a1e738", "sighting--07a7462a-ccfd-4205-bdc0-815463ae26ab", "sighting--e26534cc-8d75-4a70-8517-429bb96da379", "sighting--3da9d844-180c-430e-8eec-8fb2039cfebb", "sighting--b7302fb3-b2b8-47d5-90c4-f9f78ef6f9a9", "sighting--fc3467fc-99dd-4d27-a665-624892ae3383", "sighting--4be22fac-f4ec-41bd-a8c5-0fcbadfb3942", "sighting--8779b6db-4ebd-4ffe-bce3-641dbc9ebcb0", "sighting--36330e24-3913-4bae-a82d-1ea1a5506eb5", "sighting--b3edecd8-3fa6-4d3f-af22-f126ee598667", "sighting--3443c62e-1fd3-4480-ac4f-cf4e78781fc2", "sighting--5f90386d-ec7b-4293-a14b-c0156f5e0b7c", "sighting--0589616e-3a8c-4948-a5ae-60a3b28614e5", "sighting--72186c1f-f4c8-4f34-a3c9-7d11363d8960", "sighting--8593c1e0-1eb2-4690-a091-afe19b551ce7", "sighting--3c55b785-2b65-4777-a888-b61d17bc1174", "sighting--47d85074-0e2c-4ee9-b9c0-e020f5529b8a", "sighting--2f9f205b-33f2-4b4d-ae0b-56903e0c7997", "sighting--e804540b-2bd8-46f2-9efb-a43442782508", "sighting--03c7ade3-c3b2-46d2-b8fe-969593c9b8c2", "sighting--43481052-62ca-4c4f-9570-896faa9f7d9b", "sighting--b5bfa17a-d774-4c71-9d7f-e223454816be", "sighting--d2705801-336e-4f6b-84d2-4b260b91f73d", "sighting--7e79dc93-a385-42f9-9393-0a8963dfbc48", "sighting--1dfa2da8-2ea0-4e56-bde7-b5907748b56c", "sighting--d3da6c70-91a3-49a5-b073-926030f5f817", "sighting--5e697d41-1455-4fa5-ba0c-d09678d6be9c", "sighting--bb270bf2-1b30-4601-85b4-b21453e2dcb7", "sighting--67501afc-c5f7-4f0e-abfc-f9005e2cadd8", "sighting--74344ac3-cbb6-4968-b03d-c14457034166", "sighting--dd5e7745-3beb-471e-86bd-dc4215110e02", "sighting--1ac01480-f2ce-466f-a0c8-75d7833e8098", "sighting--404ed3ed-c647-4a04-a7bd-4b9b43016bdc", "sighting--ca561fc7-7d49-40f6-b159-d592d7abc508", "sighting--f1f565b2-f635-4bcd-b5cb-f4b05fed79f3", "sighting--575d98a8-9b88-4ea2-8b47-4375abb3951a", "sighting--e1eb2447-f1c0-42fe-be21-990d7cfe7561", "sighting--256c7851-9084-4ddf-8fba-1b0532f35401", "sighting--55daa3b7-1a5d-4e08-8d1f-bf02223ef5fb", "sighting--71ec19e8-0fea-4e4c-9ab2-db6b3d7566d0", "sighting--4eb3b078-c10d-4555-9846-527fb445cd9a", "sighting--de3c8abc-7413-4cbf-85a9-ea72ecc8bb17", "sighting--7fe31050-c001-4a93-92c7-5e132625b505", "sighting--64c8781f-33e7-4657-a5da-0d8a0df53562", "sighting--40c361ea-35ec-4406-b7e7-ae63d743541b", "sighting--7f9428d6-5665-4e06-8ff6-8cc28e1a479f", "sighting--98f6843a-89d6-4c78-a6d9-53af2534e5c0", "sighting--5c80f3cc-6689-4b54-97d5-638bb3777be5", "sighting--55986ef5-aa1e-4a28-b710-d1ee479b32da", "sighting--f9af925f-1169-4b46-a938-2d127dfb5194", "sighting--cdc57c06-561f-47d9-957d-6a4fd21557fb", "sighting--b4c13354-3db8-4eed-b8f9-dad1f20a2dd3", "sighting--599d2e21-95de-4664-a462-3b285fe2f9d1", "sighting--1400632f-0123-4cde-b523-d14b1424b965", "sighting--a6150b31-a470-4438-8173-5fbb0e9df813", "sighting--88ed6eaf-269a-445c-b385-f19f40e13ccb", "sighting--2c639e05-d28b-45ce-98c6-3d74bc207d79", "sighting--2eb01fb0-d572-4448-b38e-e994e0a47a44", "sighting--4e383d7d-f402-4d73-b2c1-e3267e925ac5", "sighting--9843dc73-95dd-4bbf-ba16-6800bc6b8deb", "sighting--7335df3f-cb4c-4988-8e6d-9bdaf698ebcd", "sighting--53bc6552-2e93-4109-991b-d167f9d883fa", "sighting--2bff0c6a-ec90-4ada-b0e7-44b133120702", "sighting--79430f87-5238-4427-b52e-fb54bcf0bb68", "sighting--15deff0a-9f63-4c5a-85d6-3b68bd5461b6", "sighting--935b7cfa-b186-48f2-814a-b2a9ad148b26", "sighting--a4b12726-4ccc-4733-a07d-3c91386756c9", "sighting--01229b95-531c-40d1-9b3d-b8bb5e317d0d", "sighting--60a7ce26-289e-492c-92d1-d6b56a591b39", "sighting--2b0a6627-8140-4077-9f70-30a4f1e4aab5", "sighting--a9f35f78-d68d-44ea-b394-ff39c4558261", "sighting--fecb6d94-f91d-444e-9468-abb2e60bcd9e", "sighting--cc014677-64d3-4048-a0c2-dc47bcef7445", "sighting--0409fe5e-f97d-4561-89d2-6aa8e30c47b2", "sighting--5eaf8a15-7f22-455a-a10d-a627e1e7d03a", "sighting--2e485362-a790-438c-b19d-6be5447db6a8", "sighting--0bd534f6-065c-45c7-8899-d2e480f1eaf4", "sighting--c707db36-8cb2-4cad-85d2-dd7bedf9b5f6", "sighting--5c58cb09-24f1-482b-bef9-77e24513dae0", "sighting--e555a697-0f3a-4886-bad0-76e212180ddd", "sighting--f59708ff-4f1a-4ee4-9c95-8accd993b776", "sighting--1720e444-11c3-4819-90d6-711ccf6ad36d", "sighting--e6fc0283-fa85-41c1-8dac-b28320355b48", "sighting--9ad0de9a-0057-4253-a581-50ae3732adc2", "sighting--32d49fca-8574-445c-b432-c5d3e8b4ce4e", "sighting--d3a24be8-5250-4572-9537-cbb841b98456", "sighting--9cf03ad6-cae5-4980-a846-38d7c979ab2f", "sighting--c6f771fc-eca3-40f4-bddf-3e45d6c026ec", "sighting--61b7f902-ca5b-429c-8209-c91477194b43", "sighting--d517ac0c-6163-4b7e-8075-cac96d1001de", "sighting--3f3d800e-6ee4-47be-b685-7dc4abe45f22", "sighting--3d28e126-3724-478e-8723-76627ff891ca", "sighting--6d9715a2-59ff-433d-8158-c712a3824b4e", "sighting--f91bb159-7bfd-40e9-a94a-b00f2ffd29af", "sighting--e3def2ea-470a-4d62-96ca-679c19e1719b", "sighting--eca2f86b-e8d5-43ab-94bb-85355eae2542", "sighting--6ed0f4a9-9ee3-49d2-8a25-2e5e0ceae6b6", "sighting--9b540a53-02ea-4b15-9de2-f981c120cbf0", "sighting--91efe829-1c20-4020-8227-dc6b11f9501f", "sighting--6a64e4bb-adaf-4c6b-9d57-0db492e10e35", "sighting--a4436952-a17e-4c4b-b68a-52ade84eaf9b", "sighting--3468213f-3a30-4a9c-a0da-ec4d03cadcee", "sighting--f845ba08-38c3-45b8-a782-85e657a8b38b", "sighting--dca9e476-006e-45b4-9078-a24ae36b2696", "sighting--5039bd85-660b-4a4c-ac19-76977d94ba02", "sighting--8527f98e-743a-4f8f-b4b1-4b8731073439", "sighting--ffd70dae-4032-4fd2-87ef-2523f6744b83", "sighting--ac818cdb-0798-4ab8-acff-8333f98b536d", "sighting--c8b76f93-1cd2-4fe9-83fe-a2dc2d88422b", "sighting--cdb74cd3-705d-41f4-908f-43a67387737d", "sighting--113570b2-373e-46b3-b67c-28f497764671", "sighting--885f7294-9ae9-47b2-8318-5c8e86726945", "sighting--d61c77a8-098c-4f52-8d0f-f6769f19c2d2", "sighting--5b509453-11f0-429e-b892-9a72b9c25a16", "sighting--48a57e21-288f-4ed9-9882-0da31d49baba", "sighting--59300569-1e3a-4501-ba55-e79a5428b0f9", "sighting--7112ee4a-e06b-46ef-9d91-43a148d916ad", "sighting--69c4e2aa-4b9a-4921-bcba-b70feb2efcff", "sighting--e0d65d60-d31f-41c0-aefc-6e8bc0185ad8", "sighting--5de5fd80-d66b-4e6f-a083-41daa6001009", "sighting--8624a309-9311-4055-a35c-0e529b0323a2", "sighting--1a6f231b-f579-4d6b-b7e7-b073a26a900c", "sighting--83032183-5bb9-44ee-946e-d461f440ae0e", "sighting--68af585a-559d-414b-b018-4beedc62571d", "sighting--9e4a871a-c3c0-4195-93e0-85229b4b16da", "sighting--69e6a25d-025a-47e1-b71c-3f89cdc1ea5e", "sighting--eaa25d08-7ff7-45ef-aac3-062510dfbd46", "sighting--3513c668-80d2-49b2-b824-cec63eb29277", "sighting--5fe96384-3a7f-4970-bb14-f633fc8ba1ac", "sighting--bffe0e26-b417-4ba1-a224-66c3f67a6cd5", "sighting--1144409d-90f3-419f-bfeb-84bf9ed58c89", "sighting--7912a079-1d36-4fb6-822e-57a2e78bd483", "sighting--50d506a4-83d1-41b1-8ef6-1785220a1c82", "sighting--5f3bc4ba-0431-4931-bd1b-da7907fe544b", "sighting--2a942612-20ac-40b2-aae5-0ada75244e31", "sighting--5bbb3d3f-5835-4b35-8075-0798db8149f0", "sighting--0a8ba6b7-f267-4aa1-b306-2965c87bff70", "sighting--6dbbca49-284b-45ba-9b09-cece87734457", "sighting--92e5375c-133f-49ac-ba7a-c02525b209a2", "sighting--10e45209-9f77-44b9-bc80-8ccc5d206842", "sighting--ca484711-55d5-4fd8-be3b-b3b5961d259f", "sighting--40914496-4c88-4f2b-9921-0f4f2cfe83d9", "sighting--733ac078-c4e1-492d-a9df-40cfc90005ee", "sighting--36c47b93-8d97-4125-81a5-c22e6d2aae9b", "sighting--60f6f0fc-3e33-479f-a8cd-42096f855f6a", "sighting--feb5fc33-8f85-4967-97ff-7d48786ccbff", "sighting--0908e2b5-4bb4-46cb-913f-24fc0bc1bfb4", "sighting--ed19fa3d-d618-4be9-86ed-e077114b8da6", "sighting--67ae56ef-7357-4595-bb2a-9bfb405ce3ec", "sighting--e8385bd4-8361-4a63-9ca2-473825a79d9f", "sighting--89f43749-1dc6-4fe8-b97b-0b0e7c0224fe", "sighting--80cd4813-8e8f-424a-b14c-3764b8297b7f", "sighting--888b3c0d-013c-4d1d-bb72-24ad5381f24a", "sighting--c66d9ce2-54a0-489e-b885-ddca131d94af", "sighting--5d287a0a-beef-4547-b8e5-c0408aa78ca5", "sighting--abe2fada-2b87-4635-b783-4ec17895317e", "sighting--65506877-07bc-43e9-897a-7cdfe347454b", "sighting--70ba2a64-90d3-482b-b115-f81ef5227785", "sighting--1d704e0b-081b-4f1d-97b4-7b01cf4fd4f9", "sighting--9f2db69b-ade2-4814-86dc-7b22c5fe9fcb", "sighting--f874c664-d721-4ed6-b35b-0cb3a98b8429", "sighting--3fdc8b0b-28b0-4774-afe9-ee0dce1e92e0", "sighting--4921ae79-eb29-41ed-a24c-c6b288a2ee34", "sighting--f0bd8760-ab2e-428a-a9b8-895715d09d0f", "sighting--4473327f-d9bc-40b2-924c-86dbbe52c75a", "sighting--7662a01c-a4ca-4455-98f4-bbe59dd0cb64", "sighting--c0fce67e-e816-4306-9c1f-5e08610a6227", "sighting--43b3a742-eeec-495e-8179-8bcfac88ee26", "sighting--e0c9e154-d0f1-452c-b742-5a8f97fc06e8", "sighting--8e8c7859-f186-497c-8a97-04b33852c36e", "sighting--776f7258-c2f8-453b-a08d-f903ca1a9b80", "sighting--01b3458a-670f-46fb-970f-5ac1ac26b03a", "sighting--e281ff3c-b09a-4b6e-b11f-6ca18d5ff278", "sighting--52a834ad-1799-4a5a-bccd-826adb3cff1f", "sighting--278425f5-e1ac-4d1f-9f5d-d6797d064df5", "sighting--b6dd793a-d7fe-4fed-a5dd-c723f4db61f5", "sighting--05a286c8-35bb-4113-a4af-30eddb3bf300", "sighting--7c603af3-e056-49e3-87b6-6da87d197dd2", "sighting--da97941f-1982-4278-9e6d-002299ca8f7d", "sighting--3d830211-b09b-4e70-a477-4653481cd31e", "sighting--12f75626-88d1-4c4f-8438-35e71afa054a", "sighting--da415449-2e78-4d20-b87c-e6e8e3590e17", "sighting--a451de91-99aa-4533-8fe1-9b76c797e25a", "sighting--7a33f7f5-661e-4e48-bc99-5cc3bdd96934", "sighting--d7e59c84-9eaa-404b-ba28-db548e5df1c6", "sighting--a0f323d9-354b-4048-86b1-4759ec0ad709", "sighting--483a4597-1aa5-4aaf-824f-541f296a788a", "sighting--fc1c0e2b-3f5d-4945-a14c-ff7246582bef", "sighting--3bd78095-1e9e-4d52-8c72-b0c723774ee2", "sighting--b5d2d9ff-6574-433c-9a93-5c8609207134", "sighting--79a0a285-e474-4f37-8c6a-3b50f27cd059", "sighting--888f1924-20f3-471a-a47f-da2c32cb312e", "sighting--e312fdbc-b7d7-4b69-aa98-eb474f616a0e", "sighting--8581cbd7-a844-48bc-9c70-3ebaf3f1f06f", "sighting--3be89634-7734-430b-9620-56e2e5176e31", "sighting--e75c6b21-52ec-418e-8e96-bdb9ab46ab32", "sighting--30c5e3af-fabd-4e24-9e57-3415c075d4cb", "sighting--9ea50b2f-c3bc-4163-938e-618941b1f941", "sighting--31171e49-b37a-46b5-ad05-ebd24d7e922c", "sighting--153d9869-91bf-4a51-a91a-aec74c0e6fcd", "sighting--17379231-5486-40d9-b955-97e5efe47c48", "sighting--e57b8ae7-ff01-4dde-9dc6-9cb6e63880cb", "sighting--1fa499ad-23f4-4d9f-af99-e8dd79e90718", "sighting--c2cb2c08-18c0-4001-b9ed-bf5811a372dd", "sighting--ce00775e-a129-472e-b44e-58ef48385c3e", "sighting--5ce23a3c-467c-4771-8e4d-b43607454b7b", "sighting--9fa8d939-fa6b-4aa4-b2c6-22e7c6aa9447", "sighting--218ff1f4-f2c6-4954-b425-a908be239e11", "sighting--39741e2f-827d-4833-a858-0b39115dd653", "sighting--9ec7c835-4f99-45ea-b889-129e07731c13", "sighting--98aa9820-4e76-407c-9f82-93b6ebc6cbdb", "sighting--32b4c1c7-42c2-4d56-b12a-9b15dfee370c", "sighting--3a11cde0-218e-4ad9-ac54-0b502bc33126", "sighting--76f37f8f-95a9-48c7-9ee8-4ebccf97a45b", "sighting--2805318c-2186-453c-82f7-b42069330434", "sighting--463bceaa-0b65-4a8a-bf61-eac954e7f52d", "sighting--65ce7d55-345d-4432-b7c5-44d658eb8845", "sighting--60af28f2-7404-4122-9075-78abecd22cff", "sighting--fa243726-a0a8-468a-92a4-60a322127062", "sighting--c97a0430-ff66-4abd-8437-5f4955d2ced6", "sighting--004efce9-c422-4192-8efe-dcf470021f19", "sighting--364a3ff3-ff28-4c08-8276-fbd2afb2b18b", "sighting--284c51f5-c4d9-4f5c-983b-5551be18894f", "sighting--e152828a-d255-4b09-bff0-a34f21c483a2", "sighting--6f2946b4-35b7-46bb-a747-b88e09e0a71f", "sighting--1dd4fe0f-ae10-4e34-bdde-8ab00808701f", "sighting--863f60f5-f91d-45f1-907d-219e5b87be68", "sighting--a7dba214-c37a-405a-a3f0-3b1d64e65389", "sighting--bc4ec22b-88e0-4c07-913c-bb85d72eafdb", "sighting--17956740-207a-4635-b5cc-b8ef4bb50e24", "sighting--6fda7dcd-c1ae-4345-ba77-fd822775e74e", "sighting--f136a9d2-8e85-4cd3-a59a-3afbba555126", "sighting--ca93c65b-a3d1-412c-baf4-91e764c659ba", "sighting--9fcbb824-1277-4741-9694-cc6c0abf8e31", "sighting--ef2c9be2-1bc6-4205-a00b-4fe6991151f6", "sighting--12efcc1e-9f93-41ce-a4e1-af1d75c16fc2", "sighting--aae412a5-2d3f-44e3-b28f-25acdc035d1c", "sighting--f1cae14f-550a-40a8-a620-490a07a79e8f", "sighting--52b0dd60-61c2-4cc5-9deb-f95841439385", "sighting--9e7ad4d5-3ec7-483a-b8ab-354b9d6a2315", "sighting--dd0a6f52-4769-4c0e-8cba-af22899cfbed", "sighting--3b0218c4-86fe-46de-a497-ebbda65a1aae", "sighting--a049ccb1-cb17-4a9d-be54-2c5604a1bbf3", "sighting--565ead16-eae2-4889-a774-c7d671b46e39", "sighting--d9c98bcb-aa9d-4cd2-8276-120743e4988a", "sighting--a8dad93f-28db-4dbe-9f81-ced43ff0bfb7", "sighting--59e27a29-69cd-48f4-a4ea-bf88f571f736", "sighting--7f9fdb18-a122-4d9f-a9eb-94c4dfed3e06", "sighting--3a081a19-4315-442e-888a-272594fe2a9d", "sighting--a40efd9c-9dc5-4ced-9c00-e24c815e9d14", "sighting--47b1cc29-56ed-4479-80a6-b51640e5bf77", "sighting--add62024-ab25-4672-a4a2-b6765f684016", "sighting--ba60d3cf-dc7a-491e-b51a-c96850487a4d", "sighting--e71587f1-d1e9-4a23-a628-9ef603cf7831", "sighting--1cf03b59-f7da-40ea-b2b7-67f425ded88d", "sighting--cd01d62d-e9f6-41f8-83b3-bf2cce29b749", "sighting--79ef1c1c-a37b-41b9-ab9d-145631f845bf", "sighting--adb97e2b-fd8b-49d1-9270-45f7d3fbde53", "sighting--e4032013-a740-44ff-aa21-084482499b5d", "sighting--f05a2682-545e-44b9-adf5-4bfb72d47156", "sighting--72b2c1d0-3cf7-4956-a77f-8fc9206e976b", "sighting--60722e01-8afd-4634-a30d-647c1549b048", "sighting--51240b4c-fd9b-417b-813e-0a2be29f26f0", "sighting--f14a3a7d-d822-453b-8623-c3c921508eb3", "sighting--65589996-5471-4f48-8e2d-8178685fa0bf", "sighting--4e7815b7-5b1a-4dbe-bc84-72e9c5452417", "sighting--54fdfb98-0cce-4d9d-ab4b-d967bc54083f", "sighting--62cfe25e-e982-4719-92f2-d4dc46fb423e", "sighting--7847da16-0130-4404-beda-09ab43296316", "sighting--8ce20b12-e8e2-4f6f-bae1-55d245e2a56b", "sighting--bfe4689b-4e8b-4a44-8683-35b274bd2d75", "sighting--2235d702-7c05-47dd-b460-a8ca41029448", "sighting--ec8d9517-13c7-472c-b8ca-2941c362dad2", "sighting--503eae45-5538-4217-baac-8832b521a1ac", "sighting--e4bf207b-5f52-4352-b589-a3e4421da5ab", "sighting--7dc59d35-f38b-4d02-89f9-5c06c420fe0a", "sighting--16dc899f-8aa2-4fc4-945a-1880790bc9e2", "sighting--873404ff-a44c-4de5-a925-b8b84fec9745", "sighting--959fa1f7-bb53-4682-9c03-dba3558e8092", "sighting--862b3f2b-c5cf-4002-b463-269cc4729842", "sighting--e5de875b-4f81-43be-affd-2adba50e5ef6", "sighting--ca64c958-e010-4f51-ae73-71ae1540abf0", "sighting--385d57fa-08db-4d81-b98a-0c717b7396f0", "sighting--5d34c688-4eac-4030-ae4f-efcafbb91153", "sighting--69121d9a-6a16-4336-be78-cc8e1b302987", "sighting--f792a521-211d-4aa1-ae47-0085967d0b72", "sighting--429b202f-40a9-4b1e-bfd2-afbabb5a5e69", "sighting--8a5b6ba2-e520-4411-b677-82b09e534a93", "sighting--206a17c7-d902-4c42-b580-34618d80bd9a", "sighting--d5059f18-ddb6-4303-9581-4e7c2ed82748", "sighting--16727ea4-d150-4e11-b9e1-698a50d066d3", "sighting--3161acc9-cea2-43f0-91de-de5c1463e6e3", "sighting--33afd52f-3fd4-4e5f-b98d-008d8b5ccff1", "sighting--4fd8c6e5-8297-4c9d-9934-9fb074854371", "sighting--50de5cfa-ceda-44fa-98eb-cd6c37d53765", "sighting--3868e52b-d26c-4958-8615-b466e35f403d", "sighting--c346ba7d-f500-4db5-9a5c-4a036b3c6f49", "sighting--d6ec77c6-c76e-4625-b5a2-4bbfef6baa86", "sighting--5530b5e2-2829-484f-b00c-050c69942f08", "sighting--f6c3c2b9-c813-4c7c-85e0-8a23e5c68bfb", "sighting--2e3d36ce-f16f-4a4b-958d-27e6cd29865c", "sighting--6971b96e-6408-44d5-a814-db22c299d553", "sighting--fc4562ff-41db-4b60-81b9-f433173021f7", "sighting--706220b6-2857-456e-96fc-472790468465", "sighting--6b60622e-2d97-4348-88cb-6c6d66d6992f", "sighting--5fcbeb60-223c-490b-90e7-ad531c476768", "sighting--f2ed2420-9422-42e3-bd9e-50bb463a2eb7", "sighting--71573bee-d314-4eed-ac0d-3ab7a89ecce5", "sighting--eb76d351-5078-469d-9865-63a485199dab", "sighting--88b56940-b9a8-4f55-a6a1-e5db7059ed60", "sighting--022da50c-5393-4bb2-8b89-24b46224be24", "sighting--a494979c-47bd-4c2b-9b05-0ea17892bdfb", "sighting--f45346c7-8f75-4dfc-96d5-2dae76c4c58d", "sighting--f4ced958-0fe0-44ba-996d-b17332b52632", "sighting--3c9936f3-0d89-478c-b8c1-b512aef5e548", "sighting--3e1bbb4a-e657-4271-b31f-5b96e672d62a", "sighting--43a8174f-2b07-4fd4-8f41-04e218e61357", "sighting--78d4c606-1e38-4764-9083-997f81dd6cc9", "sighting--6f8e0cc2-41ce-4a7a-8956-6dc5d925376a", "sighting--24b06543-ea8e-48ab-8be5-434e7ae863f6", "sighting--0703ff6e-129b-45a2-a5b0-686ba1e72a6e", "sighting--463d83e9-2eac-48b5-bed4-6ceb51877bbc", "sighting--7b3dedd5-47e3-4a32-a6a8-d9c12a73813a", "sighting--e66e869b-891a-4dcc-8bb1-6dc794592e21", "sighting--b5399241-732a-40e3-b7e4-91b065746781", "sighting--90d4d9a5-639c-4163-b1b5-d8001736a178", "sighting--2198aa04-9e76-4a5a-8c8c-65c1bbc32f54", "sighting--1481f9ad-2ff7-4842-a951-fe939ed7c76b", "sighting--cff23ef6-54ab-4296-b2af-3c862fbe7584", "sighting--f6252c78-5dcd-4887-8108-9ec390b37dac", "sighting--f0aa350a-df1f-42ad-a497-d02ee6c6a706", "sighting--06296bf0-2849-46bd-b33a-a150d42e97d0", "sighting--1c500ae9-9dae-42d3-bef7-846441aa5492", "sighting--51a5744d-61ab-474e-9af6-38efb7f55f68", "sighting--687af0b1-cee9-4021-a8db-453006cffed5", "sighting--e30b7ba6-5f73-458f-b076-3201a0e1297e", "sighting--aae35f3e-802d-4a54-b7cf-e6a07db02b5f", "sighting--0cd14faf-6075-4569-8d40-f59d70091ef2", "sighting--c21c4714-0c65-4d9f-a3a2-dcf7cab77e35", "sighting--aaebf8c1-3d9c-459f-b1cd-c247f755346c", "sighting--c946b132-9118-47ff-9d58-c0e8ba7cdee7", "sighting--9bdd4d14-35ac-4f57-a737-5decc7a75bef", "sighting--7074066a-fc10-4910-af8a-19d65fe691ac", "sighting--a465b055-db4e-4909-adac-a11b23ec8408", "sighting--a010bf70-d123-4d0e-86b9-245a6d976a62", "sighting--bf807e4c-8d82-4d9c-87fe-6dbb1d4929f3", "sighting--ea22224d-8aa2-4508-8545-295f59fb3865", "sighting--f29ffd04-0b32-4086-a309-710dd11fef8d", "sighting--74019494-6b85-40e6-bf16-ef4cec593676", "sighting--8833f32e-5ac7-4592-adb4-f9f551e2987e", "sighting--b65da766-4517-49d4-bfbc-455d53dddad5", "sighting--631b2ff5-ceda-43bb-9bf6-6d37ce90be8a", "sighting--08808dcd-4ce2-4c00-a8ca-84f7a4965b8b", "sighting--311a8d1b-2ed6-4c46-8b3d-841c6806ae73", "sighting--94c7f0e6-1a19-47b8-83fd-5acd6edc6f02", "sighting--7a90f81c-fcec-4a6c-93bf-07cb53a1474f", "sighting--5fcfe8c0-b16f-4687-bc7f-486997cef714", "sighting--1756f847-839e-4137-81dd-f5d5dfa65a00", "sighting--3373ed56-0042-4e1b-a94f-a7371c82af35", "sighting--74996e02-3794-46f4-955a-d4932d99c0b0", "sighting--02e25f92-bd94-4582-82f0-116ebc84e2ac", "sighting--58ce4891-07df-4be7-b0d4-f6a5a1432123", "sighting--342e810f-bc6d-4cf0-812b-5968562aee12", "sighting--f752db88-c479-4e29-ac15-bd03cefb94b9", "sighting--2b7288e4-d1ff-4092-bfb3-04ab6a87f452", "sighting--7b790f24-472d-434f-8a25-c10af677b5bd", "sighting--9ea43374-c9b5-4d9f-814a-02082cd2e7a2", "sighting--efe5e1ce-3911-4d18-adcf-274b073b8f01", "sighting--576aa141-2d44-4793-b72f-80d3492d5825", "sighting--6f4a1c56-b8b2-4c1b-b0d8-38ed9fc67e9d", "sighting--694689fa-24b6-46ba-ae5b-51ff162feee6", "sighting--048cd00c-19bd-4a02-b6a3-400d916930a6", "sighting--d6f044dd-8cea-47b1-9e38-006b9b5319b9", "sighting--a27830d5-0a9d-43a7-bb7e-33254eedae2d", "sighting--2ea28ad5-d050-49d6-a9be-401177d87aff", "sighting--5702684c-1582-4485-a546-be333c0285a4", "sighting--808668c1-1437-47a8-b42b-2d8598d21423", "sighting--3119ea0e-181a-47ac-b216-982946e39baa", "sighting--de496460-7b28-4de9-acdf-9c36b238e8ef", "sighting--a18f3254-4299-4323-995a-80238815a53c", "sighting--9beb0a1f-64e1-442b-b3b3-c4ef3f0ff477", "sighting--5a19b600-2fd0-45a3-874b-2cd6eec6950b", "sighting--58671cc6-4f12-449f-a98f-95b29361d046", "sighting--846ba03c-aee0-4f0d-8bb2-781a065b4d7e", "sighting--f7226da7-4475-48b6-a385-0320a02b91a0", "sighting--70c2c2dd-e28f-48e2-bd4f-7a55102e84cb", "sighting--f943d8b5-78ef-4aac-9aa2-5354e64cd1f0", "sighting--d79b468f-2f38-44c8-8afc-33df032cf479", "sighting--b024e4aa-7a2a-46e5-8210-22a5bbceee50", "sighting--5ee506f5-e9bc-4cda-a558-ff9991bca3d8", "sighting--700ced3a-052b-4b89-b7ee-9f5c9edc42cb", "sighting--69f65765-5882-42a3-a7d4-17b0af1e9ef6", "sighting--6343595f-06a4-487b-8168-3873b739731e", "sighting--433d128c-4e54-4da6-8213-3c620c2f3cde", "sighting--0852722b-3ed0-42df-91ab-9dd005f298cf", "sighting--4d22c660-0609-420f-9e4a-11623ad99062", "sighting--6d60579f-438f-465f-9e4a-37e820ef6133", "sighting--8c89b557-14a3-4aa9-95e8-c1213c9ff59f", "sighting--10e98563-496e-4fb2-a031-183e7d0d61ab", "sighting--82149661-aefb-4224-971a-a55141c1cf3f", "sighting--1b51e072-d632-4d9e-9d55-c5ec7e5d02ab", "sighting--9ee3358e-407a-4434-9981-be3e68937362", "sighting--c2513b20-b033-4a02-a6d3-5d7170e1eaf0", "sighting--208ab5d0-b489-4be3-a65d-205c78ee065f", "sighting--1700034a-2a41-4bcf-a67d-605fda1d1df9", "sighting--64e80e93-6581-42e1-9727-db0afca63ca3", "sighting--8ff58b36-13be-4a0e-a622-42061a1c9c22", "sighting--3f0b958e-bc26-48eb-857c-b69612a62077", "sighting--6e7cd636-329e-49e4-bec9-d099c723d0ad", "sighting--9e8d68a9-b9b3-43b0-8910-71d8c2fa0a46", "sighting--075d63c4-12d3-4918-b699-d57adcb8c3f2", "sighting--5ee05032-e49e-4805-8f76-e709a7d8194f", "sighting--71cb11b0-465d-4b3b-81ae-312b0b064911", "sighting--57f2b3c5-be32-4d8f-8d8f-c4673f09b66a", "sighting--805bfb30-8467-4cc1-adac-43ffe6680926", "sighting--b1fccd58-79b3-4cfc-b7f3-e73c4f050828", "sighting--557ad26c-448e-4d06-8975-90a0af19d919", "sighting--83b9f982-c378-4923-a234-b7eb655361f3", "sighting--e8a59337-0ec1-452b-bb70-de30dba1e6c8", "sighting--e4f9e636-ecb7-4788-baca-ec6cc200a629", "sighting--7b6899d1-1312-4df8-9e32-28ed57c6ab19", "sighting--5a569e0c-b1e7-4315-8142-2cd7cb8b4187", "sighting--c8ee2fc1-df62-455e-b920-8d95944ad4e1", "sighting--644c57bc-23fc-4ca5-9b29-c72e3178f3bd", "sighting--1678c23e-5707-458a-9347-cdc54ec61174", "sighting--c42910ad-bad8-4557-99f1-198fa5070fdf", "sighting--9d598fa1-0f19-4426-a997-8c9a726cf5f3", "sighting--39e2cb35-5af4-49dc-af67-305bd53a92d0", "sighting--10cf064c-859b-4a33-8af3-86d5de96272d", "sighting--e933352b-6d5d-42e8-a969-0ed029b58f8b", "sighting--9406c82a-8f4b-4919-9c31-f51d368acc91", "sighting--ab485578-dbaf-489b-99cd-d7d909794cd5", "sighting--7b8bb899-d9dd-4b06-9793-7a7b15474d80", "sighting--abfa6222-4ebd-41c2-94a1-5814cb0eb8f0", "sighting--b6bcdefb-d8f6-4e39-a296-daec83b12fc8", "sighting--b23bf743-7c8c-4c88-8f1f-831024aa19f7", "sighting--4f91f3f5-83c9-495f-b9fa-ea441dd1abf0", "sighting--122c4e4c-2d05-47b0-ad4e-83b4b4916bca", "sighting--a0eea91a-3889-442c-b18d-f6f3f312b917", "sighting--d524ede9-9786-4bf2-8627-f6a04bf26f2b", "sighting--691150ae-a13c-4423-905d-8fe5e7e12e6e", "sighting--f6e2f2cb-e7bb-4c3c-bfcf-7e4ecbaee8f6", "sighting--fdc15683-29cc-48d2-afaa-7dff0afc1f3b", "sighting--f76a8581-9e4a-4c32-ae0c-f82552fafb83", "sighting--cb7f743d-eeb9-4301-92f3-f30d265f5028", "sighting--4342eedf-ea01-4fca-8c7c-e9078cfaa61c", "sighting--b6bd1c87-5a78-4972-945c-38c8b914d4e0", "sighting--95d058a7-f84a-474f-b60e-cc471b5633e5", "sighting--4115790a-1780-4714-a54b-e0ca59cebea6", "sighting--f0e9bdc6-b5ff-410d-83cb-998f829a73a8", "sighting--ac72d3eb-2825-40a0-8ed9-35dc5a43f0da", "sighting--676c50c0-e9f7-484f-810f-50c34702c624", "sighting--42db3d36-b4ee-4c2b-b12c-79a307d83ac5", "sighting--438f8745-c93f-41fa-8a51-9b24a7afae25", "sighting--3a5a2ad0-201b-470c-bb5e-08dc0f615786", "sighting--d2ec86e2-2b2a-48f4-a36d-e3484ae93fb4", "sighting--3a207dea-bd8c-4130-b5af-e030f3ce52d9", "sighting--3b61e636-9cd6-42e4-abaa-e2bdf1d2e02f", "sighting--81efaac4-9f69-4821-a614-1bc97727dc32", "sighting--d98943ac-cf73-429a-a0c6-12f19c20eacf", "sighting--73ae5ec4-8cd9-4f6e-bdb3-4bc679c4f547", "sighting--85118790-34b1-4ccc-8c16-796de5c8f04b", "sighting--96b464e7-b306-4f35-a086-51162bae26fd", "sighting--29fa1a19-5dc2-41a0-877f-7fee0007ff3c", "sighting--e4292ef2-5c19-49d8-800e-70c9e9215199", "sighting--9ec3484c-a311-4150-816e-91aa0ecb38d7", "sighting--a98d9990-0751-4976-8c0a-769e7a0968e4", "sighting--e41119df-5ccd-4a95-8950-49c5f0b9922f", "sighting--1a266929-f32a-49cf-991f-2e0d62b31c3f", "sighting--542830aa-70f2-46de-acd6-634047b5450d", "sighting--c925cef5-b196-4f9d-98eb-f02fe1f44373", "sighting--b6a0dfe0-ad31-4658-b42d-7a11ce5951ab", "sighting--9aec9f86-bf61-4b82-a960-add2603efb06", "sighting--20b5a7df-0414-48da-a04a-929d8d67f923", "sighting--163a0a19-a385-40ca-b833-06aeaa846929", "sighting--49f91c1c-9cf4-4d2e-9bde-9ccbdf988037", "sighting--36debf9d-ce12-4469-8bc6-5d7a77d2a1bf", "sighting--f542c17c-df10-45e4-bb47-0b045ee53bba", "sighting--1846b8c8-d5c2-4154-b277-5239b99f2401", "sighting--8ba2ea0d-4706-47a7-966b-1311e8575f03", "sighting--cbae6ad9-79f2-464b-8f2c-9f9e53455eb7", "sighting--d73230cd-7519-467a-bd24-fa75bdff5c72", "sighting--a7c75c50-1c38-4727-89b0-049552007bf3", "sighting--7e4314ae-1330-4d0c-8aa1-26e6b8c68cf9", "sighting--a5a302a0-581e-49a1-bce3-77191eaed9f8", "sighting--820d5cb3-ddb5-4ad6-849e-348b2c398608", "sighting--5f55c391-b462-4c45-bbe4-a1c51fc9098a", "sighting--62000291-8ece-463d-b359-9d532edcbd9c", "sighting--eb089880-8913-43a3-8599-d57f143e8be9", "sighting--0cb171eb-4313-4454-b2a7-c14b26af5533", "sighting--9e2a796a-5378-47b3-b978-c6f6834d3eca", "sighting--d949125d-edbb-4c81-9f67-b2b91377131f", "sighting--51139e8a-6e66-472c-bdcb-1caa47aa4bd5", "sighting--6da49a81-4b48-43cc-bc69-1e1627eca4d8", "sighting--24f2dbe2-52a0-4454-9cc7-15a237c0a039", "sighting--c87b2635-e71d-4e4f-93f0-527519676889", "sighting--2214463e-007d-4a4b-b4fd-c780d1f56b34", "sighting--6a8d2ff7-e961-4e2c-94e5-8f0d204c7623", "sighting--a1071d7d-fb36-4003-8225-214ba540e1ba", "sighting--be7c3a4c-e82f-4a21-a5db-f2c1b76a9620", "sighting--8f2cc053-f718-4369-a74c-6099c81380c0", "sighting--04b3c6f0-487f-4cf6-9413-bb1b468f7765", "sighting--531f0fa3-7c42-45ca-915b-2a65fbc6cb8e", "sighting--aa46927b-64b8-434c-8958-feabb83bb26a", "sighting--6231e8c8-5d0d-4252-b021-d7dc6091c567", "sighting--1f40d35e-37dc-408c-8eb1-334f75f8fafe", "sighting--6b157c62-8757-4b7c-8835-127fc225def3", "sighting--83a994da-4466-4012-8c94-dc0f36cb0284", "sighting--4555414b-6724-428e-b01f-d2303145789f", "sighting--0c4832b0-cd86-46b6-85fa-a4f467333e0c", "sighting--63933be8-7b63-4253-9ead-4b9c36f3907b", "sighting--39a5b391-8716-45ff-abcd-d3611976d1c1", "sighting--ce9d4269-1c15-46c3-ae05-e39c5333364e", "sighting--7899385e-023b-4ebb-860d-db4bb474a371", "sighting--aacbdc76-192d-4c93-9a4f-0053877d850f", "sighting--ac4c6d37-564f-4c59-945b-41123d21e02e", "sighting--0d541293-ba2f-44fd-8e6b-1cba266c99fe", "sighting--dd450f6f-bea9-4d67-bc1f-803c16c47533", "sighting--7756c74b-a5d6-4e7a-abe1-2125e53ec7c2", "sighting--5f6a5e7a-e839-4c38-acca-9dc7ef81bcad", "sighting--f673f082-740d-4fc3-8242-1a78a87d6e7e", "sighting--f6998395-a7f8-49ea-b7c4-14588fa13352", "sighting--1fbbd077-ec77-40e0-8f32-445836aa135d", "sighting--f1edb24f-ea92-479f-a76d-1cdf977d63c7", "sighting--542ea819-ea26-46d8-b938-3066a74528c8", "sighting--7280c86e-0b82-469c-be6b-887496052003", "sighting--21816004-e3e7-4495-848d-e25723ca3cd7", "sighting--5c6d3387-21c8-4c78-bb8f-c7bd0d1ff0ec", "sighting--53530cfc-dc37-4a65-95cf-5ab196f64d9c", "sighting--6c524af8-63b4-4103-a298-95b70f5d3ed3", "sighting--8c73ddf5-c6ad-40b1-af6b-364c71725af9", "sighting--69772cd0-2d68-4dd6-8f29-3247a3a15a42", "sighting--5a61c182-da72-4fb2-b0d9-8adb2ea81fb6", "sighting--4354b3c8-988a-4679-9b3d-220b48070d6a", "sighting--3aadf2dd-22b7-402d-8849-7338256c1800", "sighting--bfa03cd2-6090-4ed4-9df6-3a4aa9b2f7d1", "sighting--19e4e50f-bb18-4ca5-9bf7-49f12e610c55", "sighting--f6107004-dc14-454e-b3fe-3234e37b3d06", "sighting--3cd82e72-2c3b-44b8-9e68-aa8d9dbb489d", "sighting--f4625f97-f61d-47f1-a5a2-a27428f56c0b", "sighting--d3b19543-2dc3-4a60-97e9-24578a3ca12c", "sighting--10511a41-2c69-4b77-a486-7a7fba609e18", "sighting--b414b641-a1e0-46ce-b144-0dbd31ec99b3", "sighting--895a3d1c-08fe-42b9-bdd4-96e703aabe79", "sighting--4eea88bb-888c-4df4-988a-2d0280d3b32f", "sighting--e7046a42-3234-4326-b536-6dd52460a86a", "sighting--9da31bb4-0162-466e-9348-0717adfae040", "sighting--32022089-e94f-4aed-9fad-52798b5e5385", "sighting--4fe574bf-8d49-4035-87db-c642266e5eca", "sighting--9073fdde-df5a-49d5-99cf-6c5ba36c9f80", "sighting--74171e0f-7a9b-48d4-ab82-31bc42ae03d3", "sighting--c9a524b7-cb17-4083-b797-30872987d4f8", "sighting--0025f331-ec9b-418b-a0a9-0e0862cd0608", "sighting--587c0d09-10a2-41e9-8be7-ceb0574f54a8", "sighting--a84abebc-76df-4828-8a98-7b6b91fafa7e", "sighting--76446fc2-681b-420d-a383-ffc91fc8603d", "sighting--9e960046-f7bd-4de9-a2f5-9da4479d97cd", "sighting--92d3be14-41e2-4781-94a4-7ca9c6f74fe5", "sighting--d36d5aea-ad8e-4465-92ad-8123b6b9d5a1", "sighting--af31ffa8-3d9a-4aae-874d-3a3199580307", "sighting--f9e977af-bc11-4d70-ae97-ce8664deeae7", "sighting--e70ec7a0-d461-4320-bc22-ea93324e6660", "sighting--8b2a5a92-85ee-4b26-942b-4687a42a7ed0", "sighting--d31cd237-65ae-4836-b397-b209b0e473b6", "sighting--ee0dd943-7d0e-4796-bce9-c9521c3c58c7", "sighting--25fa8e6f-17b6-4853-9c53-44eec520deba", "sighting--9b0dbb3a-1d21-48eb-8584-72253ac4664f", "sighting--701275a6-2b84-4ecb-a091-d610e9bc53f9", "sighting--37887c13-8ec9-44cb-854b-efbe8b81df1f", "sighting--4d77dbd2-0eca-450c-8636-cf0ea3a1a41a", "sighting--0ee95dbb-b9c0-4e5e-88f0-c1770d432724", "sighting--87338993-9a0e-48e4-a89c-1607179ed908", "sighting--97c1b1a8-b359-4ed6-bbd9-0bbd5eaa5227", "sighting--33690535-a15b-455d-9676-68327575bdc0", "sighting--67c943e2-b77d-46db-81f8-1e5cbe7c2a8a", "sighting--787a9f55-fc59-4a0e-9215-f242a255c536", "sighting--0dbb6c46-d8e7-4e3f-a351-a76c4b630e6b", "sighting--c374c621-ec33-4cc0-8665-12c6f54a2898", "sighting--e7f0e6df-164e-444b-9f53-28675df07523", "sighting--ac1ab954-ba7b-41a3-9c5a-1a922eb10cd6", "sighting--158b0e37-3509-46da-bc9c-30c161321336", "sighting--19b807e5-eb87-451b-a0d7-80f5037c34af", "sighting--bbbf1309-91d6-4e57-8a05-006dc2e039e5", "sighting--161b91a9-87fc-4471-8aca-5de49280871d", "sighting--f49dea20-9e01-45d8-a28c-5389d09d6814", "sighting--df1fd21e-ecd7-4631-9537-ea60065dbdf0", "sighting--036e9bdc-8924-4585-83fe-3b85b6ba95e0", "sighting--8f4cea89-8e9e-4f4b-8703-d0caa8a63cf1", "sighting--7a0169a3-395d-467a-8ece-d589697382be", "sighting--f688f432-7ded-49d5-bffc-4971080877d6", "sighting--92358b28-2338-4ff8-a7a9-7544ec69c0e3", "sighting--3e391987-0da2-4bf6-b59f-20ce1d9565ac", "sighting--ac7fda7d-fd70-47b4-9830-1487bfc34264", "sighting--919bb16d-4c5e-4856-9cca-64a35c8cb447", "sighting--c178e558-37d4-4cc7-bbda-7e5770a07bf4", "sighting--ab6fa13b-4a16-42a9-b1a0-b4e56ecab1f0", "sighting--205776fb-2222-483b-948a-6f722ad8d4d2", "sighting--b57b1589-06c1-4823-9384-b2d16983ca84", "sighting--64486260-76fd-4461-bf71-3d78e8c462c7", "sighting--a779fde8-93b5-4d2e-9099-f0dace6ab39b", "sighting--15e9e9b5-3e81-4871-8ad5-c550ac480d9f", "sighting--42b8cdef-b26e-40f8-80fb-e5a063a3b8b7", "sighting--9587ad29-d0af-44b8-9595-a1fadb908bd2", "sighting--c755465d-ce57-4e81-9ee4-4e08006239e3", "sighting--8531034e-4569-4ce9-a3d2-42ad48211cc9", "sighting--e9ad364e-d257-4a1c-b824-bd27fba2c842", "sighting--fc96c3b5-17a2-4b79-8b18-0bdd37277b92", "sighting--646067ed-f804-4def-b379-8871fca0ac02", "sighting--7b57220f-0b01-4e33-91ad-66891be32150", "sighting--28fc7b08-e6db-4117-a10f-c91bf821bb3b", "sighting--87804c7e-05e9-4f28-99f7-807e4ba3041b", "sighting--919398ec-b995-420c-b1a6-ad3333dc8afe", "sighting--44f8aea7-f7a6-4a4a-9ac0-4e034f37b878", "sighting--f0b683a9-451d-4a54-bb3f-8f9957a05f62", "sighting--e83ad3ae-a59b-4f38-89f8-9be20eca2d34", "sighting--d8f73ea0-3e8e-42c1-9f80-68cb986d0bad", "sighting--a05cf31c-fd97-40d8-a7f2-767823f7fc7a", "sighting--16ee9005-b235-484e-8499-a32991fba8a6", "sighting--21fd3a45-d6cf-460d-9bea-dadb3e17b9db", "sighting--d814c387-10d8-494f-895d-dc8b1f07e23b", "sighting--60d5ee62-c710-4c6a-a9c2-bf82c39ab6db", "sighting--902dd1ad-eccc-424a-8faa-41bf881d9489", "sighting--28743fd4-6309-4da4-b596-d7e611b7d727", "sighting--56c4e945-3665-429c-9d36-9668518084bb", "sighting--47143f10-d68a-47e6-8328-3435228c5a9c", "sighting--fab24d84-5c2e-4d50-b7f7-9c34f11c273d", "sighting--1f163ac5-88c0-4648-8075-3ecc9b0572cd", "sighting--273cb056-d5fb-44dd-ae13-0766b11b4958", "sighting--3dbd3ed0-7670-437c-bbf4-ca0ce769ec4f", "sighting--54ab4b29-7112-4096-ab32-6ef4064a468e", "sighting--7bbd37be-622b-4f4f-a8f3-f3a5400cad35", "sighting--ddb28f05-a97f-494a-b95f-862b53bac35c", "sighting--1a2f47d0-e904-4ed1-af21-41eaae3e62e4", "sighting--bee08da9-279c-48aa-a02f-3311dea314d8", "sighting--aed32130-543b-4371-8e93-1f31fdff62d2", "sighting--98a4b93c-6672-4fc9-b0c7-eea50e530fd0", "sighting--9726f933-ca3e-47ce-914d-aaa9544d08d3", "sighting--aa0db03c-a6d4-45de-88e3-a30642388592", "sighting--dfc0a37e-cc9d-4461-be53-487a530eb8fa", "sighting--a68bce47-2b65-4f0f-90f7-cdd0060a7201", "sighting--0f482b52-1645-4d6e-82ee-94e99da53f8c", "sighting--005b8ccd-f5ff-4612-bf23-24179d95789c", "sighting--31878094-41a6-4e37-ac4f-2ccc477dd245", "sighting--89379525-f441-4425-a856-8de90266daa2", "sighting--029db7ef-de0c-4189-a922-738806e72813", "sighting--eaff5a62-5836-4c47-88fd-95bdb901c44e", "sighting--5644b180-2c5c-47de-a826-63ad02e67703", "sighting--e98793a2-b498-4870-8bf9-b05550a7989f", "sighting--384f8164-e682-4a90-8490-cc23b311443b", "sighting--4b114167-b3b2-4ed1-8042-d9f343290496", "sighting--577dfe22-2dd5-4676-ace9-d5772e788667", "sighting--50c34385-b2d5-4120-babb-fb85a67f3fb4", "sighting--2dccafc5-1162-40f5-baae-57fb1982a7a9", "sighting--b5652cbe-5f14-409a-a616-70c308831b23", "sighting--17dabb11-38a8-4f24-b7de-8bf3b6e9e653", "sighting--52848391-49f1-4133-91f8-3c7e408d0b38", "sighting--1a50b5d0-f618-4364-b651-fb0814dfe9fd", "sighting--cecd9618-c061-441d-aa07-ec474e9dfc4a", "sighting--6baad496-cdfb-4f4f-b56f-9959ca5957e8", "sighting--a38f7d39-018f-4379-905e-4f6147e9b844", "sighting--35261460-6e5b-4296-b0df-66d62598f1bb", "sighting--ec34453a-bd8b-4900-af56-515831d5dfe4", "sighting--7ec424a9-63de-41d2-8533-1b290c0d737f", "sighting--48c2de5c-e5e1-4233-b7fc-8d773a8589d7", "sighting--50299037-1ec8-4630-b9d8-ba3ceec46f98", "sighting--887c3b43-4ca8-4478-9e8b-9b9a4461caef", "sighting--f699ae74-f924-41cb-b707-a79355de08d3", "sighting--d886ef80-830f-408e-ad49-9ad5950e5d35", "sighting--a548f3d9-a8a7-4470-baa6-f53593bf0843", "sighting--3d0b0c4d-deba-45fd-8229-fd7c2fdeff6b", "sighting--94c5532b-e662-4c6f-92bb-856ae21e967b", "sighting--7509a2b2-5de1-4964-9728-f6bb1effa354", "sighting--b21fc6cb-3bf1-4aa4-83d6-e55c028e8f80", "sighting--5ea15f19-021e-4387-bf60-ecd74b96275b", "sighting--68e931f9-fb72-4914-b79b-9bafdc54fbee", "sighting--7ec8959c-7816-411f-b1bd-e4445978fdec", "sighting--62c42754-7aba-4e16-9904-ea0b3bc495ee", "sighting--a3a4ac4f-82c0-4f00-85be-b6265e579480", "sighting--d5a186a0-1c4d-4f2c-9ccf-c9fd225fc42d", "sighting--788ef157-9061-4572-8821-73f4de91e32d", "sighting--4c0a5381-a884-469a-8ce9-5890070deaf7", "sighting--6cad5aaf-aaf7-4495-a791-d84d994a7697", "sighting--7e517285-12f5-46a6-91fe-d835e0a8fb57", "sighting--ab18405e-30cf-41e3-a8af-0f43f40c7a80", "sighting--c519118e-3458-43d5-af8d-56b3cdca7126", "sighting--24a76a9c-4d43-4901-81cf-4ee8996c5bcd", "sighting--46c9dac3-713c-44dd-bb32-a1bf3b7db336", "sighting--cf51c175-01c8-4be8-a1e0-a72e97187c7f", "sighting--bf318803-df30-4cba-867d-eb352fa40a71", "sighting--d1dda4e1-dad8-4ac4-b3d0-6fb0de97714f", "sighting--6cd34e9d-460a-4e55-bc36-ab9c1d523dbb", "sighting--1a60ba3a-78e4-4f67-b346-df0c6cd5e122", "sighting--6aee82c7-af81-4baa-ac07-93bc69d5226d", "sighting--ac27c734-87e8-429c-8425-b3b3e78d8d13", "sighting--52d98d9c-0386-4cfc-956f-932bdec48999", "sighting--d3320eed-d07c-4d1b-903a-e0e24b50c451", "sighting--7f00ba3e-cfe2-4c50-b583-6a22af5c0852", "sighting--48f4e6a7-5581-43d0-89a2-f9dfc27fef73", "sighting--9f9e0a3b-ad5e-4aed-ba63-6ae64b3a5e7d", "sighting--fb3915ea-0042-4edf-a5cc-c5efb4fafd65", "sighting--acdea4aa-0b56-41be-90a1-bf6c87cdec79", "sighting--ba73eb91-95b3-44b8-93d9-582e87158eaf", "sighting--a30b5796-9cd9-4ce6-86c1-268d0476ca6c", "sighting--34bee0a4-ae1f-44f1-9e47-f484a46b283a", "sighting--e01c57bc-b65f-403e-86f9-5622d0d761b6", "sighting--e1d2f74c-1602-4b9f-846b-b5bc6d66abcf", "sighting--95bb686b-7eb5-4185-89ce-d75f658b1b17", "sighting--d705adaf-29d2-441b-9078-008d36747d15", "sighting--efc423e5-c62a-4991-9583-541c60702869", "sighting--78b632ed-793c-410b-945e-d79c08db98d3", "sighting--e541d87b-4b5f-4322-a947-93b88ce6d54f", "sighting--0f3a25c1-577d-4393-ae55-cca8bc8fc50c", "sighting--00f6c757-7acb-46fe-a0f0-0af95149817c", "sighting--52e674f0-4ecf-4d60-a0e4-44ea4ecee231", "sighting--f931d3b5-7e38-4c9b-b05e-ac77de52ba5c", "sighting--52edad2c-253a-486b-8199-01c8ef07aac5", "sighting--912f4988-e4fe-47d0-9462-2376a7bd92e1", "sighting--efa4ab9b-0d28-4006-9035-d006db91af51", "sighting--e38f09ba-ed71-4d93-9eb4-1ff10c807293", "sighting--547711bb-aa3b-421d-b984-2baa041630ca", "sighting--2eeff095-bb94-4343-90a0-2a0be3edd11a", "sighting--10154dca-a289-43fe-a1d7-d3d4add399fb", "sighting--e15e3b18-e701-4d8f-9e15-f14e6a4d1eec", "sighting--b96bdd79-cc80-485f-99e6-173df96d26cc", "sighting--74cb4332-280f-48e2-bb24-e4af58e318ab", "sighting--bb99d855-80d3-42d4-a30f-5f4b85a78347", "sighting--078cd3a7-575c-4d99-ad49-6ffb9be9a753", "sighting--437481f5-5383-4778-a0b8-62822d70bfe3", "sighting--c6b420b3-e984-439b-8c81-6369a1bba115", "sighting--7d870179-7052-48e5-a77b-fcda035362be", "sighting--c8974e44-d0f3-488e-810b-c234e2dad865", "sighting--b0c20ac0-3cdc-4fed-bda7-92db415339c7", "sighting--c46dc455-1b5a-4c60-b9fc-abe0b4db1a81", "sighting--1cb41060-99af-4058-936f-1607027c04b9", "sighting--3046b3ed-0a3b-4191-8bb5-dc6318eded16", "sighting--6c88182c-33bf-4533-a057-99572152e5b8", "sighting--c8126551-c818-4ad4-bc06-6804f379c0c6", "sighting--33da9775-6314-483d-a852-65d3cea9e368", "sighting--a0193fcc-985f-4c39-906d-c646879c429f", "sighting--ef427a53-3f34-495e-8423-c5349270a706", "sighting--833840d3-54fa-44ac-a5de-6fe64d41764c", "sighting--b22b7ef8-f433-46fd-a519-dfa7a2f0079e", "sighting--440437bd-0500-4272-b1a1-b678c281afae", "sighting--5eac089d-68cd-4945-85e3-abcdcc017a23", "sighting--a49fa067-65b2-4dce-9c5f-e0ec68f8979e", "sighting--6445a783-192b-44d9-bdce-e9fdbad464bb", "sighting--3764c41a-c63c-4110-8fdd-7a95e07103ce", "sighting--0a68940f-6ff5-43f2-a3df-d01282a492d5", "sighting--24cb4e20-4d0b-4c0d-9316-c2a2fe04d32b", "sighting--af574edd-e00d-4264-a69a-9296fc2a36ea", "sighting--d0e60e73-a33a-4f6f-84d2-dbd56930611b", "sighting--856262f6-4d4b-4f85-a702-2fe93076c014", "sighting--eb930813-87ad-4797-b21d-ff7f84e5a1f0", "sighting--3a84789d-ba2a-4fac-8514-5b5a29365cc3", "sighting--6de51861-1095-4708-bf66-425555032491", "sighting--75d42fb3-11c7-48f7-97e4-ddd0166d2333", "sighting--5f99a31d-7cf5-40e0-acf3-fd35e45454ce", "sighting--8253fe35-e1d6-4149-b853-7b75b28d61c3", "sighting--9717d10c-0429-435d-acfc-4a937aa217db", "sighting--d2954137-53ff-4f95-98d8-8c5ca5f2f203", "sighting--f3e7cd7a-9999-43b5-acf5-f8c4433a43c6", "sighting--93524743-026c-4987-bbf6-6c9ba95896c7", "sighting--a61a0057-2c9f-435c-91a9-ba24945d3fc8", "sighting--f5db03bf-aac1-402b-95e8-2b9a6eccaf52", "sighting--f1488b1f-2be0-4d0e-b30f-541c7577f652", "sighting--f5cc17fb-60b8-4cd6-a6b0-d0e6efbff7bd", "sighting--122224b8-fb13-49a8-928c-b77725ef7d6d", "sighting--eca34499-e148-4845-97a2-46690b754775", "sighting--02d3e9f5-e141-42fd-9b39-4ebd0340abec", "sighting--18d0103d-dcd5-493d-a58d-d66be7c20ae6", "sighting--3802bfb8-5063-42ec-99bc-b0e8dc270ed1", "sighting--108bc495-659a-4afd-9e37-c22563d62f8c", "sighting--8ba5937b-5181-48cc-b05e-e7e38fafb330", "sighting--7647193e-7b20-4df7-a5e2-5c272e29a4b3", "sighting--5319b772-c7bb-473f-8257-d15c8f9e08d0", "sighting--49c0c72f-a7b7-4241-8093-04099dbc793f", "sighting--974ffdf9-e338-40be-983e-2d845dc5a8ea", "sighting--24facb6b-e8ce-44e3-9231-8ef8f0135618", "sighting--8011dff5-06cb-4f40-9de9-ab70e621ff0c", "sighting--76a6605b-23a9-4b6d-9ba2-82c75de0b847", "sighting--20fbdb79-7a65-4901-b8d4-cf68d08bb877", "sighting--61f73e85-96d3-4471-bd75-b507b158a36f", "sighting--7ed75eab-0281-444c-a78c-00599d9cd450", "sighting--20b8e9e6-5c4d-4e87-869e-19623267dfcd", "sighting--283786db-5a03-4749-8f50-ae4656964ce4", "sighting--b68c9498-ea6f-43aa-bdc2-33b3ca9020b5", "sighting--c319d5ec-aa45-4146-ba66-a2f869592600", "sighting--8db6727d-d6a7-4024-a83b-aaa60f5f4f79", "sighting--cf8014fe-200f-45be-8c6e-5255b8c87427", "sighting--13778759-f234-4934-b1a8-16b365f2968c", "sighting--0e62b8d9-6054-4149-8687-ef9ce46f69c1", "sighting--91493e86-4d95-4094-b123-667b731c9d2c", "sighting--25461bd4-80b2-4326-b189-ac1a60c785ce", "sighting--30819b7a-938e-4703-832a-3ba2a2b33461", "sighting--3bebe5d3-a9d1-493d-8deb-5f0b773d6a0d", "sighting--897c9948-cae3-41d0-b0bd-9747acc96a35", "sighting--f01e9506-8060-45d6-b766-df15ada6a9ff", "sighting--5f0e7e32-c05a-4fd1-8a74-73fb75e7e038", "sighting--596870d1-3724-4b8f-8a2d-e6eb1ba56d39", "sighting--940b74e4-1c16-424d-9f14-fea09105940d", "sighting--15d95593-e693-42fe-b49c-8e72d94ba7f5", "sighting--7da37445-9d10-4ef3-8ebc-5ccf0f44165d", "sighting--ba91d37c-5bb4-46ff-a680-8989e97a1cd4", "sighting--cf6d034c-042f-421a-8848-081b02585b76", "sighting--d17b0fa1-e337-496c-af9d-5e4db9a46a5c", "sighting--f1965044-0aea-47e0-b5d6-f008631a64ce", "sighting--4f9acfa2-3b86-48bd-bed3-4b1c54e40a07", "sighting--d04d1890-749a-4c62-a10a-3022b91c08f5", "sighting--6699a2fb-d2f3-4796-9121-19fe866057b0", "sighting--7b1e984b-dee4-4c17-afd7-3ac916e05b24", "sighting--cec5f7cc-2686-4341-8f69-e894f3638b17", "sighting--5dd02067-a0c5-495c-9395-80c6a85c4d9f", "sighting--56fb7d2e-4f96-4514-a464-711844f3f268", "sighting--92fdbc20-ad6d-45da-b9ec-2bd214a5f472", "sighting--b4bf6f9f-015e-4a34-adc5-c216b41e2925", "sighting--fec34c9c-de15-4452-b3e8-d83d812eb4ca", "sighting--815358d9-0c33-4656-beaf-e1312877c2d5", "sighting--b059dcc6-27c1-44a2-9ddb-3a19c9337a6c", "sighting--7e47d49a-1fc4-4bb9-8e75-417880fb79cb", "sighting--db0d3d66-397d-4db0-b837-2ed9503e63db", "sighting--beaffb0e-6bc4-4e80-909a-695285ad1fad", "sighting--e94e0cb8-8296-4329-9cc9-dafb1d487675", "sighting--edcea21c-960a-4579-b6e2-0bfdde89de62", "sighting--7a6c8ce4-98eb-41fa-b8fb-e9025b0cb33f", "sighting--4a57358a-05e1-4c79-aad8-0f0469be05e1", "sighting--7655fe3e-d2b8-4e7e-80bb-39de0bc15df0", "sighting--86ef2720-bda2-4901-af7b-9de4231f7d61", "sighting--3ce195f6-b647-4933-8e8f-f1fc942de11c", "sighting--45bc31f5-1433-4be9-9140-b28e4be47735", "sighting--eb9a0ca1-77c9-4ee2-be00-30fbc9e827cb", "sighting--c453ab19-fcb9-4887-a687-cbecf75c5a21", "sighting--2965a1ba-7f2c-4c83-9f2b-3ea527f19f2d", "sighting--e79381c2-efc9-4f10-ab3b-9c4502f5cd0b", "sighting--6586f45f-fab7-4fb8-9a43-9d4a3d9c28fa", "sighting--9bb28135-9608-4e42-8535-582cf5b0d621", "sighting--79dfcb49-c7ee-4afc-b902-fd47880b6e0b", "sighting--5a501b9f-8618-491b-86b0-189c43b68fc7", "sighting--b1002444-6587-457b-a650-1d26099cee24", "sighting--52ac2969-dcd1-42a5-890c-a780e0a4655e", "sighting--1a07e23e-fd4a-479f-b9c7-a2d6131077c8", "sighting--77d2e574-e5e0-4532-b260-fc1482f81278", "sighting--cd43d8d4-59b1-44c1-8a2d-5cd314da5f2c", "sighting--3403d33d-9be3-49a6-903a-1ef3290a62bf", "sighting--e6257fb7-0264-4836-9beb-da78688f7925", "sighting--8d63ec6d-c20e-42b6-bc67-379d59cc53e9", "sighting--ee156318-167b-4c1b-a48c-730a8ee54d8b", "sighting--fa3d7f27-4497-4a08-8184-a701d5cc9380", "sighting--37a73bbf-4eba-42cb-84cb-7866e17da3f5", "sighting--b4d25351-fd5e-4f93-8830-264337649a0f", "sighting--de8504eb-996a-4b4d-ae93-f6f3f3fa0545", "sighting--2dc5d356-4a12-485a-b347-3db9bb9e15d8", "sighting--ac7ce61a-aec4-44e8-8d16-de543643a826", "sighting--12811f3b-bd1e-4eca-8c0c-f9c9b837c736", "sighting--574cadd5-8ee5-43a4-aa39-8018438eb7e9", "sighting--f1180509-ddf3-4c66-9dac-d1e84d32e581", "sighting--300c8448-04c4-4355-bc5f-63fc8b7a5f66", "sighting--a0e953c8-2a18-45cb-a951-d52624ac9cf7", "sighting--f731d1c9-25a6-4438-8edc-238599e8f890", "sighting--0a231aa6-a5a0-46d7-8679-0f4c7516513e", "sighting--b461529b-2c40-435a-91a8-c38801af9459", "sighting--1af4c5cd-4e6d-4d0b-aa83-b65678181cbc", "sighting--67770983-0e83-497a-8796-9ca36cf1bcdf", "sighting--41964db8-915d-486a-b15a-20561cb5818f", "sighting--9eb86f4d-4f0e-4e8e-8d04-c9f1c61086ee", "sighting--8dc71372-6355-4b77-95a0-c4345fb0eb2b", "sighting--ca6a4293-5daf-42a8-8827-386f116e2aa1", "sighting--a30bedb6-7050-4097-9b1c-4b41bec4e67a", "sighting--e2901f3c-e704-4346-b2aa-8e01611e9f6b", "sighting--7542d431-1e95-44f7-980a-a298e30b83fd", "sighting--7e08177a-2cf4-48be-84b0-ca277201cc3c", "sighting--e37fae84-2e64-4ded-8e95-f64199492168", "sighting--84467cab-48a8-4c74-9532-1e230c24b658", "sighting--5baec9af-e9bb-4775-ac48-a5f244084e5b", "sighting--c682b817-f75c-4a8f-9a42-538650033f0a", "sighting--4d9ad30c-3a22-4ecd-898a-0a7fe71197f9", "sighting--80e4bfb0-85a0-43e4-98e0-68d1bef00c90", "sighting--fcb9f6b5-814a-4b0d-b132-234cfcd72f66", "sighting--1f25b21c-992f-4967-9618-f941c8d08a24", "sighting--54927527-85bb-4adf-858a-507910934524", "sighting--80ee119b-b1ec-4987-b18c-bebe944390a9", "sighting--3800f999-9097-4ab4-851e-c14a808f3330", "sighting--9abec822-123a-47a2-b34c-a0976a738cd8", "sighting--a9dcefe3-75c1-4070-91dc-acd8c1556047", "sighting--cf4768e3-9e88-47ac-aefb-05c654f47280", "sighting--bdd28574-e618-47d3-9abf-969c6f13f943", "sighting--53e15c2c-efa3-41b4-bebd-07ca6029d93d", "sighting--91133c0e-7d99-4170-b11f-bfbf9ac52ba7", "sighting--de473f57-710b-433b-925a-d686eaf83c2b", "sighting--92453418-9510-435f-b51b-252a8b4d3da7", "sighting--4c6034ab-d5ad-4222-970b-bbf2a71db2d1", "sighting--428e884b-3bee-4971-b5b1-bb43500e359e", "sighting--81c43e60-3f84-4e42-bd1d-f2623b49673d", "sighting--4934d02c-5d97-4235-b6d9-4fff11b4d067", "sighting--79bb0e9a-1999-43cb-b0cf-0909a770747c", "sighting--4cb2d04e-508d-4112-b02f-22237402b0b3", "sighting--b82d2cac-21de-463c-bdec-8669fd9663de", "sighting--7865449e-dc4a-4515-96eb-4ed189836e77", "sighting--8d3b322c-162f-498c-bdfa-fd080509f325", "sighting--a5377486-866f-4bb3-9e1f-8669a348c6cc", "sighting--930e88f9-f60f-4c5c-b201-219c68382df4", "sighting--695a05ca-46b8-425c-9417-f59e5edc4ca9", "sighting--b034fa18-0a52-477b-a22a-91c578dd4865", "sighting--db2971ef-0c3e-4a1d-9490-bd7d61f1690c", "sighting--2a3e2bc4-723e-47fd-b703-dc62edf6a1ff", "sighting--1b9d2bb8-ea8b-49b9-a2cc-ae04ea3008ea", "sighting--a8074f78-290a-473f-a75a-dd4e9fd128bc", "sighting--9fb3266f-3451-45d7-b1c2-f66974a899b9", "sighting--0f0e86e6-632c-472d-8323-014e82f9f4c6", "sighting--5c80fc55-a954-4c14-8619-b64576ad01a9", "sighting--2155b260-912f-4892-bb47-41d70181db7e", "sighting--228a74e7-4e99-4ff7-8d60-47ee79d237c9", "sighting--4ad2cd13-b40e-4e37-9a0f-9bcdccc20ce6", "sighting--13fbe594-21ae-40d3-999f-ac62a4485f9a", "sighting--f74a5267-08f1-4c1f-ad80-5f28632b2dde", "sighting--157ae529-97ca-4105-958e-2d957f779860", "sighting--c467c30e-fb63-4769-8e1a-61184456c4ed", "sighting--bb902513-d203-42ec-85f2-975942ee450c", "sighting--4edc07b2-0a2c-4907-b16e-cf4ba27c5abb", "sighting--4dd8aea9-c4de-4fae-ba6a-193a0d54c388", "sighting--0b2f5c83-3173-4114-8b24-ad7dc52aa9b2", "sighting--d3154dba-8082-4cd5-b2db-14b53eaeb99f", "sighting--eb88ade2-3030-49dc-94b3-5fdb04e6b6e0", "sighting--cb27b12c-d2bd-4953-93fa-39829258d268", "sighting--27cd47fb-a97e-4709-87e9-73a9298e34f6", "sighting--a34612ce-6fa1-4e72-96bd-e5d57661dfb7", "sighting--aaffd780-cff7-4e03-befa-f510093190ae", "sighting--600b1cfd-0ac2-477f-841d-ca110816d958", "sighting--970a621b-6ce6-4a95-9228-cade7d20d161", "sighting--0fe62b04-0d46-4f13-b296-04a5bcb086b2", "sighting--1b77be26-af2a-4ef1-aa01-d50fba7b60da", "sighting--16893961-98af-4965-bd54-55ac1d130e13", "sighting--0fdf133b-574c-4605-86b1-216144b9cc61", "sighting--a5dbe523-7f2e-43d4-b5b7-f35ed01f9180", "sighting--7c5e54e8-0cff-4ac6-8ce5-02934653bfd8", "sighting--4be3eb0a-3d1a-4d4c-86bb-f5e8e725f80a", "sighting--74d5745b-e8fd-4325-b1f7-47e8157900f7", "sighting--1730e8a6-2d48-4b39-bf1b-de2a77e53800", "sighting--af0300c7-f495-4136-99ae-04dfd77c6074", "sighting--65458da8-904b-484d-ae16-bab6369dcc54", "sighting--739ac659-50b9-458a-a550-1a880e7017fd", "sighting--f71c8841-746a-44fd-8e05-0c0844af90a3", "sighting--e5f33a47-0b58-4035-a8af-bfc3c9514d88", "sighting--75c7be53-caaa-4d23-89b2-131c94bbcfee", "sighting--d7c751a7-db69-4f16-827d-e08401c749a9", "sighting--954c4dfd-aa8a-4b87-8fdc-50ba2c149681", "sighting--04257eb9-4022-479f-9084-67ec8f2434d1", "sighting--61eae3d1-56de-4aa5-ae35-504a43d60a6c", "sighting--8d65602d-2056-424f-9050-ac1374022547", "sighting--d5e44cb0-32e2-4719-b965-6f5369b96141", "sighting--c138d396-b76d-4b06-af6d-859d3b5633a1", "sighting--047e9f0b-cdc7-41d7-b1cc-b2869a216001", "sighting--a78d1a67-c919-4856-8622-ca3a346838fb", "sighting--c2a0e7f7-5ec8-4d24-88b5-ab02d6dc9fb0", "sighting--370e463d-0fdd-428f-9fcb-f16eee8384df", "sighting--ff54095c-ad37-4b4a-a9cf-03aac57c0c8b", "sighting--c5a4c949-c29b-4dd8-9f90-ff8e0d811bcf", "sighting--18d5931c-4458-4d59-8726-8110caf7383e", "sighting--b5a63499-28f8-4622-a106-340cbcae3eef", "sighting--391c0b06-de78-4177-8b2f-c26e28c7e6c6", "sighting--25e6ab24-7db6-4516-9ff8-20f5298164da", "sighting--137b7fc7-76c2-423d-a3d6-01f8b782c2a2", "sighting--c9016039-359b-4926-9634-0f0e141f55b3", "sighting--ff918a63-6a68-4944-9702-a46eade1b8db", "sighting--ca03ffc8-9ea9-4557-82df-f3758e379b49", "sighting--b8bfe8b3-85bf-4f0e-925b-89dbd9f1ffa2", "sighting--c34aaaa0-ce99-4baf-bc9d-2ae209b7e391", "sighting--d0307dac-5f3a-4fa1-be75-60ddb0f318a5", "sighting--679d1779-359f-499c-a0cc-e6a47b384201", "sighting--4be8b91c-cc63-4633-9379-9e0d0419f154", "sighting--bbae0238-928f-49f4-809e-169e9c4f13d3", "sighting--038063bc-fbc7-4ebb-a22b-4eb8b9c424e6", "sighting--ed7a5a47-5c74-4983-85e7-3049d6d52647", "sighting--ed32bcdd-87e9-42bc-bdfd-bdf464759280", "sighting--b6c6d82e-3331-4a33-9619-2f2c7da2b95a", "sighting--e29a37df-a152-4dbb-9ecd-905a839c848c", "sighting--bf3d9b93-4057-4d33-9f6b-86842b507f5f", "sighting--cdfbfd43-8fe6-4046-b4ff-b831cfa83082", "sighting--da87813c-6bbd-45b7-a8a4-66c96641cdf6", "sighting--8d86730b-a55a-4de3-b0c7-e963055836d5", "sighting--aade6617-f150-41bc-8798-a986b278b2a1", "sighting--18ec353e-a980-432c-8926-f3f24f89bc93", "sighting--3bf36887-bb19-4841-a4a3-e01b2c2cf5ec", "sighting--ac703337-44bb-4e03-a683-d4d0c8fa8921", "sighting--c6a7d955-c9be-461f-a641-c4409b3c6c0c", "sighting--400d16b9-92ab-4150-9a72-30fad2e5f1eb", "sighting--628ccc25-9ac6-4102-acce-96e309e62c90", "sighting--3cbd1b67-0853-41eb-a78f-ac29ea791fe3", "sighting--ce0379f5-e6d9-4e54-bdad-2e1ca20a3886", "sighting--cbc7bde3-266f-4822-9763-66682ed983af", "sighting--49c9769e-145b-4030-a0a6-f0bbd41985d0", "sighting--83464bb3-19fc-4c92-a427-c74a0261d95d", "sighting--151e93ef-545b-4953-bf89-fe420ab09b58", "sighting--c83bc477-5300-483a-8d9f-d7cdb8cb837f", "sighting--f0c9ca1f-2307-42cf-82e2-7ec27afb5d23", "sighting--f663e97f-83fe-484b-aa86-541e5bf801ee", "sighting--23f792d1-045d-4d8c-bb5b-46663682d202", "sighting--a7466f41-c83c-4cf2-946f-3c5379ceb0d2", "sighting--e9819b74-de2a-418e-b725-21b12fd698c6", "sighting--4718f8e2-5136-4e9c-bb74-5554d55612b3", "sighting--7c7eac3f-eb67-4051-aaee-e11c679fadbf", "sighting--d9d928dd-2465-48cb-b303-1369f93dbeb4", "sighting--98b73aaa-4092-48a6-8aca-dceeb8a786f4", "sighting--f5e3bc26-7ad8-4206-91d6-73828030cdd4", "sighting--1edf093f-2e1f-4a72-89f4-58e35f531635", "sighting--fef7191f-5fd5-4a3b-a374-a0ae7f35d6b4", "sighting--5473a95a-3899-4dbb-ad75-f126ef366894", "sighting--00880fd7-6622-4119-9ac0-df27f7ada266", "sighting--dfa39de9-2d32-490f-bf9d-4a7ebe4061e7", "sighting--517659d9-f940-4525-a2bc-ced4a08bc50d", "sighting--ed37628a-bdf8-4578-b954-e431d434b133", "sighting--953f15c7-4e8b-4fe9-9271-1821e938f767", "sighting--e90aa5a0-1b40-45c1-986b-bff186c7f37c", "sighting--09602f37-f3eb-4abe-80df-a0a56bce2afe", "sighting--03eddebf-b6a9-4eef-b8f4-7321b960d5fa", "sighting--76845e34-7644-4c02-84c7-050dbdff2987", "sighting--dfeaaadd-c8c9-48c3-b69a-b82ac197b65e", "sighting--4b49d56e-b74c-4085-8c0d-a1b948ce5a26", "sighting--ffae0105-e02e-4d4d-bff3-77c9d1a1228a", "sighting--e8660b90-6db6-4b66-ad71-553dd7e354e0", "sighting--e41398eb-1fd5-4325-8943-7552997ec308", "sighting--a1785d95-e9e2-494b-9afc-0960a914d306", "sighting--92d1d379-4a0c-4eb9-947f-2b5ade47708e", "sighting--68f5d350-5a10-441b-878e-c1ed75e8171e", "sighting--6890d796-c4be-4aa9-88af-1218b6d233c6", "sighting--eec8be50-d203-413e-9ed6-dcabcc74472a", "sighting--a0eee47c-0eba-4b99-82d1-7f014ed9fa91", "sighting--1ba9124c-0f88-4489-8ced-4d83f368e839", "sighting--532edda4-3be0-4cb2-8086-a3ec3e25827c", "sighting--2fe78ed5-0568-4e19-b7f0-973161d7e937", "sighting--c4e699b4-3ca3-466c-8a2f-2fb7a58aacfd", "sighting--27b84cfd-b34d-4476-a296-a1a9a24314e9", "sighting--eb83da6d-675a-4165-9050-96e799050def", "sighting--222235eb-9a05-4ad9-ab66-138984266e8f", "sighting--81e02b6c-e322-4023-b29b-003a2cf2ca1b", "sighting--b27ec05d-94a0-4286-b2d2-8dd6a19790e3", "sighting--e1af8375-7abc-4fce-b3d7-02e0371f0c86", "sighting--8242602c-094c-4eee-b4af-76e015606417", "sighting--3f0f603d-bece-40a5-9532-a6852f9ce904", "sighting--5207aeb7-72b7-4802-8038-e8e3d8c49029", "sighting--d0ee17de-83a0-4f20-af32-c3879721ffdd", "sighting--cc1d7e75-5d8a-4802-a7e3-3322a713bb1b", "sighting--c3a02fe7-76a8-46bc-97cf-6d863c679e63", "sighting--2c532a17-dff0-4c26-9d17-78d7886ee7c6", "sighting--6eb82347-d335-4d59-a66a-b9a11089d744", "sighting--abae87e0-4f9e-462a-bc0a-38eff6ae62e4", "sighting--434bdbfc-c770-4bda-b71c-54004bfe4665", "sighting--be32f30a-f9e6-46d6-8882-781806e3b04f", "sighting--710f5f11-c11d-4537-8900-39e21e4081e4", "sighting--12b5e48e-450c-469b-9955-87d320d6de97", "sighting--7bb62bb6-3b78-4226-af86-3413feb5ef69", "sighting--fc5847a0-567e-4578-a26e-cb977e635045", "sighting--b3770f53-ee2f-43a8-be8f-cf5d9ad0b3f6", "sighting--5119e3da-a6d9-4809-b68f-cf1eb0b57b85", "sighting--f713c9e8-2a1b-4d6e-b912-a899665252a6", "sighting--790beb0e-6460-4c7e-9a03-320f62ba893c", "sighting--eba1edfc-f543-4815-9019-97dc62e7ad9b", "sighting--e6e99f52-3fa0-4b79-83c0-9bcdb23a6f5e", "sighting--daaa05b4-70d9-4c75-8879-da8ed03315ee", "sighting--084c1054-5218-41ec-92e4-9c73135211a2", "sighting--5ba57552-f9f2-4018-b444-83fb710aa707", "sighting--76cb5870-85c8-4547-8195-e2ff407e829a", "sighting--8e31c6df-35ad-48b2-86f0-8e0c329cd6a3", "sighting--3c6ea49a-0c46-4442-b434-864068a61d40", "sighting--6c09997b-0883-4a5c-8e93-8cb682090cba", "sighting--b552b55e-86ba-47ad-b275-e6a7fdf28257", "sighting--efdf43ef-25e0-4d4f-a4f3-cbc341d3d2f7", "sighting--6cdbec4b-b866-4a26-b9b5-dcb4e4b2ad83", "sighting--8150eaf3-9376-4af1-9872-e77715b5c4f5", "sighting--a916812f-9759-4978-8819-11e6c9c924c7", "sighting--5f1bb10e-b1f5-4f50-b0f5-db9d62259ad7", "sighting--e61a127d-a9bb-4024-b8d0-20bc140ea3cf", "sighting--81e6c1ae-cf29-4509-b1d0-fd91a3112e19", "sighting--a233e2c8-1b00-4b13-88c3-279b33bcc89f", "sighting--dd0d9367-ee76-4068-ac12-09848608ad4a", "sighting--bee988e5-697d-48d1-be72-308c9eba2ef2", "sighting--1dd72512-32c2-4063-a318-a308728c968a", "sighting--48847bb0-dacd-4500-afb6-82ab9877f044", "sighting--8d49aed1-44a3-4fe3-bdfa-b88c481c3e99", "sighting--2aefc86e-3cae-4e70-8c2d-2f05ecd0278a", "sighting--03a0fe8f-c046-4a82-8e4c-8bd3f4324928", "sighting--496f3e06-f603-4588-8d7c-9270c023ffc6", "sighting--e9307e53-d4f3-4562-aa30-f7da7b5c2e4c", "sighting--150c32a7-3e0d-496b-a400-896bdf663974", "sighting--a041e331-6aaa-49db-8105-93742cd9d0ba", "sighting--13c6351e-6adc-4fca-8257-fe1528888ccd", "sighting--d97a346e-331d-44a4-a140-60c648fbd06a", "sighting--a25e01eb-f8d5-4494-9693-6b5490cc314f", "sighting--1755a603-e178-4fbb-98e9-d40bd9a069b7", "sighting--c269f6a7-dcf5-4288-a9bf-5b1b5e6e205d", "sighting--b6028286-3078-403f-a17a-3f03791b3050", "sighting--454d3b63-51d1-4b93-a502-fe4f788f3544", "sighting--c60b83fe-9fff-4cef-9a23-24c5f50f44a5", "sighting--4ba52130-da0e-4b3e-8d6b-44703b31d3d9", "sighting--5a8d977e-9a37-4fa0-aa53-c811d09b3123", "sighting--a3ec863a-97af-47c9-80ba-7590648d23dc", "sighting--7bd4c417-dab2-43bc-b58f-5663d288de6e", "sighting--4b428c55-0439-4ce9-9cf1-415831da18fd", "sighting--715ee555-2333-4e06-b527-997b04a3ea9a", "sighting--50e8688f-d987-49ac-89e3-f5f9dd753733", "sighting--21a41fea-8954-4606-9680-7a8acd5988b7", "sighting--9956090b-9999-4529-af73-500d21b28a98", "sighting--a0828be6-6a53-4293-a6e1-6fb3ce37ce77", "sighting--67f189b8-3e4f-46e8-b974-8eb4ed0a8674", "sighting--1af63396-e8ed-41aa-8681-38c6b5b5016f", "sighting--8a241780-8c00-4ef7-950c-b685712fb48d", "sighting--49aca3d3-e7d6-490d-83be-a3bdb17825d3", "sighting--f1cb6218-a5b2-4053-b076-ddf79df8b300", "sighting--9e6a40ed-1232-4e0a-8400-f2ca096b53cc", "sighting--fc195208-5b47-41a5-bfa3-791c9c9ccdcf", "sighting--d126a9af-8afd-4e8a-b362-42152cd082b9", "sighting--a42a7e3c-d1f0-4464-9425-4a154cec57d9", "sighting--e448d04a-05bc-4107-aa50-50ce739d7c53", "sighting--66f0e96c-16d5-4742-8e5c-65078a546986", "sighting--aa7b5144-a5ec-41f0-b254-35b57018a48a", "sighting--a56142c8-ee97-44f3-973a-abcf0fc73085", "sighting--a83597e8-a733-42d5-a545-626e36c22479", "sighting--ef9c2759-90eb-4738-9410-5cfee63208db", "sighting--d5d28b89-9cbf-4934-8e51-b0816b9b2833", "sighting--8baf3fed-7cbf-4bc9-984d-04083e106208", "sighting--a0910425-948f-4f71-96bf-16192ab07dc8", "sighting--4a520cc4-1fce-4ebd-9395-f40c93f9025e", "sighting--9ad959bf-7b1e-497a-aa14-84646456978d", "sighting--b44d2937-2b4a-4fb3-bb53-064fdd2754b6", "sighting--1216b926-48ee-4dd0-9ef4-16f13eaed193", "sighting--24e553e2-2cb7-403c-a7e0-721a683b0a64", "sighting--538c148b-d45a-44f9-b2ec-10a7e4c69b3b", "sighting--8327be1e-a4e0-4f2f-b55f-652e2c7da6ec", "sighting--68540afd-d13f-44a9-8178-5cf8c15aad20", "sighting--f229afd4-5b9b-47ee-8dd4-d32566f30a6d", "sighting--b2f82f29-d2ee-4ee8-a710-6edb51df981b", "sighting--6bcbdbdf-c4c9-4f93-8c29-a97782b3c5c8", "sighting--666c02c5-19e0-467f-b250-1b67ca03ef23", "sighting--d3471244-ee6e-456f-bf72-40f989a50607", "sighting--46c17d66-6cd2-42fc-be25-4ef188c33d52", "sighting--8d4c0a86-93bf-413a-8739-756d9b2a4e7a", "sighting--57b74a2c-bc70-42b7-bec0-e87e02973723", "sighting--c9b0d431-45d9-41eb-b22e-b6dcbbf6df38", "sighting--a69f28c7-2ea5-4f4b-94dd-c467052be67f", "sighting--394ae4b5-5aa7-49b8-8c0b-189f658e61a2", "sighting--242ed595-7637-4d3c-8da1-b36286e1d620", "sighting--ccba5de4-8a89-4f48-8659-2f005e8c9db6", "sighting--137f1683-236b-4181-bdfc-bb532a651d00", "sighting--8c1fdc98-f5ac-48c2-854c-c53542f10845", "sighting--38dc148d-0ebf-49d6-907d-5f44664f8fe1", "sighting--8a5e69b7-14dd-4b3f-bc22-d8e52241bb97", "sighting--8d225893-2c64-4a78-ac3f-1206eb8742ed", "sighting--3fce1c03-dcf1-4a48-821b-71a09eba0c94", "sighting--d7c07f19-ec2d-41ab-9578-23848a81988a", "sighting--5db13ebd-cf4d-4463-bd10-a651f499475b", "sighting--4f41a60c-4518-4073-a97d-be4ff5e3914e", "sighting--e1365a01-0059-4201-8bb1-df46c7511777", "sighting--fbe30ac5-269a-4f39-92e1-2d975a7e6e73", "sighting--717fd596-8cc9-472e-a226-45f26ef0fbd6", "sighting--44f3a182-b932-4dd8-9e7f-b864cd066b81", "sighting--0580aea0-af3a-417d-9acf-4c31d3b3622c", "sighting--a04d6d23-77ea-46b3-94d5-07660e38041b", "sighting--f0072ab5-64b4-47bc-a104-3daff9adb75d", "sighting--ff64cc41-2b07-4ea4-a449-ef7b4d20dda4", "sighting--c5a82b52-92b3-45d0-af1a-749912a0e206", "sighting--8e9415c8-9b20-41ac-b744-2f495cfe7893", "sighting--a9a94c24-99b3-464d-b048-34d227e57f11", "sighting--f4b50a2a-1658-4838-985e-ed6ae5e5d94b", "sighting--f22839df-f51c-4385-b26f-fa0b6204e68e", "sighting--425e30e6-6d86-41e5-8ff1-42b4acb58a58", "sighting--538b8edd-13a3-483a-844f-4eb97e6c164b", "sighting--1051cf3d-66d4-4aa1-8d05-7d7eef2f8bc5", "sighting--b10ced4c-e161-48a3-b800-132a52f046aa", "sighting--c923b015-f716-4488-a31e-efe2191ee17b", "sighting--070a6fdd-00f5-475f-b8d9-f2577acf91f1", "sighting--ea78dbf6-fc45-4818-94ea-1e00c6ddbeeb", "sighting--466063be-884c-422e-848c-fb7d422ad00c", "sighting--09a55043-ed6f-4ddc-9f8b-2cd487bc43de", "sighting--a38b3af5-f79d-497c-a93d-f709d1d2c509", "sighting--7654b476-58dc-403a-b3b5-0051546e7155", "sighting--11b5898c-7cee-4a0b-b23f-f1f67a30f9fe", "sighting--cc48bac5-112a-4b4a-920e-bac397f05219", "sighting--d4b63f7a-2506-4d53-9bbe-4a3e2cbb97f2", "sighting--e5831fec-edd7-43b6-aee8-2d3a30ac3b60", "sighting--eb44392a-3ed4-46c2-a742-d0acc41bf673", "sighting--13a60d82-c57f-4444-b7c7-ff132ed040ef", "sighting--beeceb1a-c0aa-47a5-ac77-a371cc98dcfb", "sighting--addf7b02-5b82-4d5f-9a16-c928096d58ec", "sighting--350e4b66-1f8f-49c2-9b76-1c5b8062a4f3", "sighting--b3a61f2c-341f-4376-943d-b4988e312495", "sighting--edffa06c-41a2-4bd1-bb32-261b37ffe495", "sighting--ae4e60b4-40b9-4c34-b40d-c7f63bea5d38", "sighting--3ce1249b-136c-4627-bf3c-a2c4d9bd55c7", "sighting--9a0fae59-df41-4167-9d92-fa46c1243a80", "sighting--d91156e0-b0cc-4686-954d-1a0761c40185", "sighting--530b66da-0156-4a7b-b7e8-e94e0f715345", "sighting--6c9cd33b-cca6-4c33-ad77-2c05cef249d3", "sighting--70d93937-7556-477a-84f7-78204fd9d57e", "sighting--f70263fd-e453-4021-9535-7f298f59b0f6", "sighting--933044a7-eed7-4590-a08e-e35b66367b53", "sighting--e868c9ff-e71c-4c45-88bd-1a6d56ed54ed", "sighting--a19439db-092b-4590-a0f9-5432de2d4c4c", "sighting--202b0a56-9c17-4b21-839c-95858b012380", "sighting--51dd0ed9-7a1d-4205-b541-72e19be38fc5", "sighting--1bfe0016-2cb0-452d-b450-e3371c1b2f12", "sighting--ad00b41f-03f6-4ba1-bb83-39153bf5e932", "sighting--2014d2bf-7fc5-40b0-8163-908d165b23f5", "sighting--dfec5f72-6818-4f85-95c7-3d240ee639b9", "sighting--84010dd2-ff78-4360-98d6-84b79c6ef0c8", "sighting--9b208bf1-d485-4800-b9a1-d09e46dee00b", "sighting--5b9c2e05-2cc5-4495-af36-dc587de64b4f", "sighting--3257d5fb-cdc2-4e80-8e79-020bbf6e51c8", "sighting--af01acbc-e257-4acb-b608-4a10a27865ad", "sighting--0c991592-0b0c-418e-a8ad-d8ef8d67bb5a", "sighting--065a2757-40e9-4f3e-a729-a33bc9ae6840", "sighting--b0aa4777-f0ca-46c9-ae44-27005fcb7bd9", "sighting--4fb1f1d7-c014-4bc5-9893-a582f049a584", "sighting--47ed148a-ee5b-4f7c-8267-4d0ca35d2b7b", "sighting--eb1287ac-1097-435a-aca3-ffe084cd74cb", "sighting--42130f5b-63b8-4743-8b3c-e12ed77e5410", "sighting--e62bd0dd-b178-4554-a58f-622640b4adf5", "sighting--df2309f8-7216-4005-8ed1-f31c45ff7109", "sighting--dba77283-e2f9-442a-b2e6-58d151f8d76e", "sighting--a327593f-3305-4ac5-83ee-00dc05cff98c", "sighting--4d7986cf-d0c0-46e6-96bf-d0901853382c", "sighting--ab0d7412-6303-4348-af9e-3a8c4b110341", "sighting--0f63746a-0bf8-41af-874b-50b956577af9", "sighting--68913088-2087-4c1c-946f-d1cd228674cc", "sighting--31268992-c92a-4a82-8e15-e749519779a9", "sighting--7eed413c-ea11-42b3-95d4-8823df5160a4", "sighting--afde1714-9cf7-4ef5-a009-64e31c1be0a5", "sighting--63a9dc64-e2fb-41c0-8061-3352a8cee8e4", "sighting--79dc4abd-ed62-44a2-965c-aa83f9f99d90", "sighting--39bca51c-5f15-45a7-af9e-0d0ce50b26a6", "sighting--f3fc672a-7ecf-40ad-925a-421026fd7ec6", "sighting--dc58b57f-5578-4882-bf56-9258722ab4da", "sighting--1c34b51e-0a82-4169-acdd-b5d8722ee7f6", "sighting--6220723f-c566-4471-aa97-0e934d6d0a9a", "sighting--8cafc093-dcda-4375-83cd-ace5869b34fd", "sighting--c1c108e6-6f18-4440-989d-802d13c2a56f", "sighting--df871df1-d8c0-4986-85a4-b8ae45936e94", "sighting--ca576b93-b65f-4146-8976-b6b88269a9d8", "sighting--5231f27d-0efc-4dae-832c-bd4f3b0c9487", "sighting--3c2486ff-df0b-4659-99a2-b0671671f32a", "sighting--23a129ab-9808-48fd-80f4-af36fbe30182", "sighting--4e38b613-24b4-41e1-bb2b-fb11064a4ce4", "sighting--2ce5c4f2-13b8-4df3-bc41-704ef50c17c8", "sighting--10ebc8a4-269a-40d3-994d-a30b8f023714", "sighting--4877cb75-39d9-44ad-a166-5edaa982b443", "sighting--20534b02-7239-4016-b126-0c985bcff3c0", "sighting--b424ea1e-528d-4c92-9bdb-6fc122dda528", "sighting--5392b568-a0a8-4187-8f3a-e0d2fcb7e188", "sighting--f9976917-34c3-410b-b5a0-a8791318fb43", "sighting--7969661a-c280-4c12-884a-ffdf9b8ee86e", "sighting--01776d54-b0a3-4506-8711-ae412ce0acf4", "sighting--d98563dd-e756-4425-a308-4662c79e79bd", "sighting--92a5806c-4fd6-44ce-9c91-67ac3fbbacfc", "sighting--35ffc6fe-c3d8-491a-98cd-604b07c73cf6", "sighting--4eb4526a-83d9-4d39-a848-d8743df1005f", "sighting--e508e3be-9ee4-4837-a28b-4a5440ad0180", "sighting--43101a14-677a-4935-b21d-cf8f85bd228b", "sighting--1580bec5-5449-4e2e-8b67-b1ced8548dd8", "sighting--f5db203b-b0e8-4c30-957f-7716121e7c91", "sighting--7a83091c-7175-4b64-a13a-686d6c34e1ad", "sighting--0ee667be-95b9-4914-94c5-c0bce4a744be", "sighting--7aec5b5a-1851-4395-b7dd-5217b628f7b3", "sighting--aa6ab5f6-1dfe-42fb-96a0-f0c09f06db45", "sighting--82866cc4-a6bc-4020-a195-70363ece673e", "sighting--848d9e5f-5d06-407d-a798-c2a9797970d9", "sighting--e29820c0-dc0e-416d-9d1f-7c6e93e57c39", "sighting--1a54873f-3748-4129-9246-484929251f95", "sighting--aa7e4226-37b5-4c04-96fd-827690e0b779", "sighting--e7848b6f-adc6-4979-b732-eba851c9cc25", "sighting--2bcefafc-74ff-460d-aefd-d15ce9646975", "sighting--82ecfc7a-7658-49e5-b666-054edc3d3c99", "sighting--4876ab12-98ce-4c1f-8c60-0c11e8c84a07", "sighting--628a3f8e-b6f1-4864-b43c-2a19d1123fc7", "sighting--fe078588-210f-4d7f-ac2e-e76dc686b7b6", "sighting--7ec157e7-c5f6-45b1-ae49-9b632cb765f7", "sighting--a75fd551-e908-4a57-ab1c-f0ddc2a62eff", "sighting--5674085f-a0c5-4c9f-9e6f-5c5836172ce0", "sighting--33162ce7-117e-40c4-ab0c-a507c6d639b7", "sighting--54d8efef-491d-4c5e-aca5-2be3ab712320", "sighting--b4370569-e908-4e1d-b46c-6ba900c8b4ea", "sighting--d1e991ed-abe2-4655-abc3-3e949d2068ba", "sighting--8d4f0cf6-e174-4a64-bd17-c15320254c0c", "sighting--e6a2ef0d-3587-476b-8eb2-5d64a9f1fd67", "sighting--9db538a6-aaef-4821-875d-8cff015a14fc", "sighting--41f68c33-ef1f-419a-a96f-23fdc1a04c0a", "sighting--8117990b-2241-49f6-a8eb-34ae1b896512", "sighting--519f413c-a3e9-45c4-afaf-b5d90261a064", "sighting--a8fa401a-76d1-4dab-a424-5ed74bca5a72", "sighting--3e5c59ca-c867-45f9-987d-3cb3d1dd1c1e", "sighting--1ff42449-fec8-48b8-87ad-fd6e3474b145", "sighting--a2eb5542-5db5-45f5-9f0c-dd929aa093ea", "sighting--073a15a6-628a-4518-8be4-ea22daeb91e2", "sighting--ba9126da-63fa-4cf7-8f33-7d8273dbba82", "sighting--89c13832-cb86-493d-88e8-3751a07eee68", "sighting--d8e0d2a7-c913-4d38-ae47-3097484896aa", "sighting--6e7490d3-7568-4e85-8f51-f20dac905f97", "sighting--989f2826-96c3-4aa8-ae2c-c68e760d7a27", "sighting--b3ad24e3-bbf9-4cb1-acdb-6fce3be2bbe1", "sighting--86d5a9bc-4419-45a6-8b55-d10a98d410bb", "sighting--16253cbf-7a34-4d78-8d35-8b38c46b89ba", "sighting--182acb98-bf05-42d2-8b1d-97fc7dd45e38", "sighting--1025c656-464f-4c97-a6dc-d53e9df6c34d", "sighting--7948c7f3-7a6d-4645-9037-86c87eb47f58", "sighting--b37bdafc-d517-43b0-9504-878c736a9dab", "sighting--c73aa80a-ee57-4f1c-aadc-a707db62eceb", "sighting--2a44b39f-8f3b-4bbc-b3e4-cd2671bb80d4", "sighting--d4ce9e7e-7cea-4c94-83c3-f92931271fd4", "sighting--fb0160d1-fd0a-4997-9287-ba8259ac24e6", "sighting--84e1f73b-b192-4afc-934f-69a6d519e317", "sighting--de92f07a-1ee9-4906-bc15-1dabae6a2289", "sighting--b14d28ad-ff2b-479c-a3e1-c872c39ef9f4", "sighting--936f2af0-8010-4548-9b9a-287c9f5da9aa", "sighting--e5c7023a-16d4-434b-8720-fb62af61b08d", "sighting--05365dcd-dea5-48df-83d8-b1ab39a96e24", "sighting--2967b569-914b-46b7-a7cb-4af08ca6fa37", "sighting--ddea6c0b-b6c3-4517-a864-f3a16300fc62", "sighting--59d3b76b-3013-4066-9b35-85b9d1a35265", "sighting--0768619b-4545-421f-acc9-10f979396e9c", "sighting--377c1e25-a2df-4f5e-b1b4-92adf7062d0c", "sighting--a70af6b9-e0f4-4ed1-acce-6833018969f4", "sighting--977f91b7-bbbb-4bab-be14-65c6e6430d97", "sighting--fcd5e0e1-3c63-498e-825e-d8a04841a0ee", "sighting--12fdd46a-c571-4e04-956f-a7b8782c76b0", "sighting--6675fcdd-dedd-49bf-8acb-b22e78af0eb2", "sighting--63918929-dfb2-424c-afb3-1cf872e06d0a", "sighting--624e8103-5bea-4062-8b02-2728e6783f14", "sighting--61c9e957-531f-414f-a950-535aedaaa431", "sighting--19242af9-5573-4fed-9e49-db7d707fad2e", "sighting--508d7fb8-a0c0-4d33-ba40-c5a94169ab82", "sighting--c3169794-40e2-44c2-b7f0-c44cc5ea37b3", "sighting--c5204541-d477-4b10-9c9e-e6a5e6767c76", "sighting--8eaee2e1-8993-4ad8-a69f-fdca5e2faa2e", "sighting--0f12ed37-a506-4bfd-868d-1a949e6376a9", "sighting--58cee44e-45f2-4a4b-a8ba-306cbcc339e2", "sighting--167d5074-bdcd-47a6-8d07-8bb8b5a1b617", "sighting--36757ba5-59aa-4377-a2b1-98d303244c96", "sighting--92a941b9-03e1-47c1-afba-e26fc4b13584", "sighting--3444ac9f-5e1f-4e9b-8c88-043f1ebc3d6e", "sighting--c9db6999-124d-4ec8-b908-549296c2d930", "sighting--fd99f9e6-cbda-4628-9c66-b3e05c583612", "sighting--a92eee7e-dac3-4e05-9bfb-04fbb65a21a6", "sighting--12fc502d-bfe6-4588-a2de-0b03e640bbcc", "sighting--b87517a3-35a3-4ad7-ae32-88cd95b73227", "sighting--34388706-a714-4ffa-832b-47fe64f92dc3", "sighting--25debf30-b853-4847-b183-d1bfd52577c1", "sighting--ea4ed361-6b4e-4393-8f30-dcf153a234f0", "sighting--91a8193c-b00d-4641-8f81-63d4fb886b00", "sighting--fda9f78e-91d1-4345-8aa2-c1c2679e4615", "sighting--69f72e85-fd96-44d5-871f-e246d767a541", "sighting--92c529d1-442a-49d1-aa70-56a206ffbfc2", "sighting--9cb10edf-eaff-4386-9a4f-4b52e94c3d8b", "sighting--94cd9e9d-1f20-4433-9028-acdf6bb17b9a", "sighting--8122836b-423c-428b-9a04-56cbb5aafff3", "sighting--b3b2b432-d4b7-4ed4-9269-547803509ff7", "sighting--eca3b5c2-d852-4391-965b-0f413a6e74f3", "sighting--07affe17-0a34-48a7-9897-a394ce726848", "sighting--bee5298a-a003-426b-bebc-95d70406380b", "sighting--3a0db54e-c8a7-40d0-ac53-4b5d82780100", "sighting--5b34942a-1ecc-489d-b26b-81b6514f6f7a", "sighting--16c6bd28-8d5d-481c-9a60-7061bbc746bf", "sighting--84805cc0-8edc-4bd3-ae84-14503fc681d6", "sighting--a543a662-23a1-44ec-a87e-3b1536eee88e", "sighting--48c3abaf-3345-4ecc-95bf-664784520f47", "sighting--e2e1dea3-c736-42f7-83f2-656b3f69a1ae", "sighting--c5705692-8742-4d64-ae92-cc935fcd05d3", "sighting--0f0de548-ab6e-46da-8632-b2b6a010b6f1", "sighting--5da0e18c-5f77-4797-ae15-dddfdd1b0375", "sighting--cbb19893-0273-4169-8475-b6c39b21f870", "sighting--fb6b33f8-164d-4d77-a455-46d4caf96b1a", "sighting--dc8133c9-76e9-472f-b1cd-57db2fe61c03", "sighting--028f1a13-7ced-48e9-a84c-9741f7e978b6", "sighting--3b00f95e-f174-4443-8d3a-6a4a0946d304", "sighting--88a3f34a-dc1a-47fc-8360-d5743209c814", "sighting--bfcd4bc5-816b-4e8e-82c9-279d69305063", "sighting--80732e30-100b-4f83-9c86-e02cc23df4f1", "sighting--238a7f9a-9498-4d88-9de1-a5a2bc2d7cae", "sighting--150fc493-ff94-4e48-8079-4a2146fad45a", "sighting--873f7652-14d0-465b-9e53-466afb5b59d2", "sighting--944e2f8a-914a-476f-a896-99fba5329a5c", "sighting--3f1dcf41-b879-4eb5-81e6-c43d5d612482", "sighting--cbbd21b8-ae11-4f76-bd85-0c5f084f4d62", "sighting--8c447a64-9eb9-45ee-8e01-a21624b2d64f", "sighting--70ee1e50-7475-4111-b2df-14415f4c13c2", "sighting--23222abb-d0b0-4661-845e-29b830a9c126", "sighting--593aecef-e69e-447e-aa52-8b58c9a09ade", "sighting--7db0d526-69d1-409f-afe5-0422eb1859e8", "sighting--da664a76-abee-4453-ba6b-690ca6f28d9b", "sighting--e2b85fb9-d8f0-4c57-9f39-7e4c6044a85a", "sighting--e5652c0b-93a1-499b-9134-3d5d524b2488", "sighting--8a769a23-6c29-42bd-97c2-957ee54b4b54", "sighting--82eff49d-f40b-43e7-a98a-17890c325918", "sighting--50367366-38e8-4fc1-95ed-bb63f827b6bf", "sighting--586781cb-46c6-494e-abc5-ab7f7c16763d", "sighting--e5bc1be2-f68b-41e0-a2b2-629f72a5c1a9", "sighting--002b0bcd-0b7c-42fe-a3fc-967726ccba01", "sighting--a720622a-f7fa-4828-9705-09dc47e934c7", "sighting--19cff3aa-74bb-4526-bf8a-1d50691ff60f", "sighting--b31fc2d3-5b17-4f4e-9bc9-f29d53585e49", "sighting--892d357b-3b6f-4fa0-88a6-93eb84772699", "sighting--d345c957-c2a1-4958-9edf-99b4d6cc1c65", "sighting--11503c5f-ffd5-4887-a462-337347644f44", "sighting--e7b8a96b-2407-43a4-8b0e-8e3c18c2fc92", "sighting--dc749241-42a7-4066-91df-cc7823552697", "sighting--c0d44e0c-2d36-45f6-bc6a-8602021eb183", "sighting--61a9b523-4394-4e2a-a436-d121e3086122", "sighting--345e550c-e419-43ac-b470-11ff11d5672c", "sighting--f73d2128-bba5-48e6-8b73-ca05ac4773f3", "sighting--5c894e1d-002e-4c1e-8be4-fbc46cede2a0", "sighting--d88ac9c1-7872-4251-a9fc-5b2c1d14cd72", "sighting--13f6705b-eb2d-49c0-9c10-49454cef98a8", "sighting--2bee01f0-c394-438b-b31a-6b19847169fa", "sighting--a1696cab-bf1b-4637-afd1-3b71e77b73ff", "sighting--01db804c-ed82-4115-ad1b-12d6039d5bd6", "sighting--16e44e73-fceb-425a-8f6b-e1dcffd1d1aa", "sighting--10920e98-e4e6-40a6-9618-d73c7e2b2043", "sighting--6d6b9c88-e54d-45ab-9920-855eecf87f3d", "sighting--cbee1aae-fa4a-4e8f-8e59-6d0611132232", "sighting--d427230f-1377-4c97-a4f1-2a5806120258", "sighting--eed0d516-d15d-48cd-b904-4a85303ee54a", "sighting--3e124925-a527-4dec-9b20-ac0ec9125689", "sighting--a7c56589-dc58-412f-9d0c-80330bea08ec", "sighting--355b62c5-9c05-4a74-8828-78bdd4dc78b3", "sighting--5aa19ecb-6a73-4109-993f-64907e06cd43", "sighting--f29c81cd-385b-42bc-b2fb-19026eec6332", "sighting--9790fdf4-30a7-4208-a7b8-192b8d2ea4a0", "sighting--75442bb9-f6e5-4c57-8a0a-1ea94d56db54", "sighting--2fb58498-8bd5-4821-9dfd-f0fde39025f8", "sighting--1237e3a1-c23a-4f2a-88dc-fb2b85cdb162", "sighting--0d62ea07-843c-4ed1-802d-c4770517c91c", "sighting--a77c3ba5-e911-433d-9cde-c793fda16ee0", "sighting--1315e2b0-e58d-4d28-90cf-458153e2468a", "sighting--8a48c975-cddc-44d9-b02e-5cff8a70dde9", "sighting--408be819-882b-4b1b-affa-25fcd005fd70", "sighting--3ad0ecfd-580f-4079-82fe-b98816e6c5e3", "sighting--76ac35a9-19ea-4f37-87bf-01c36ef5fbd6", "sighting--59f91ddf-bae4-4fe4-a98f-5e3ffced5c81", "sighting--8d572988-6628-43a6-b8f4-a7da76ecba78", "sighting--70e59efb-024e-4a22-a392-0ad774f05c63", "sighting--d031351b-c658-47d2-907d-341e3db626fe", "sighting--c28c34bf-5b3c-4daf-96f3-cae54e5bdfbb", "sighting--ba273f92-bec1-476d-bc68-e90dbfac57c6", "sighting--65ff3021-7fad-4640-8fac-9da78cd8b6f1", "sighting--426e8cf5-9f84-4e7f-b8fb-5e1cc52a5cf9", "sighting--b234aa1e-4346-4cab-9986-a8b9b59727b1", "sighting--831520cc-2bac-46ad-a1d1-368cb8d3e9ca", "sighting--375eb800-e46a-4bc7-a8b1-59217f7fa676", "sighting--a65d8a4f-da30-46b7-bb65-6b063f076ba3", "sighting--15b772e3-f0a2-45b8-a109-b48fffbcb105", "sighting--f6179b7a-3c31-4670-a690-fc7a2281ea97", "sighting--f5d11ba9-211e-4f8d-ab9f-f36168c41053", "sighting--b3d3b0cc-4e7a-4bcc-9f2b-33f14cf8af91", "sighting--f336bccb-702b-4050-9f43-89d8db647cfb", "sighting--3257b3df-6f43-4ff2-a5a6-972414d69c50", "sighting--aac4014f-fe13-4465-a129-197c55570989", "sighting--8ca74a88-3871-4cec-a318-1b0048faebe7", "sighting--3fcea604-2fa1-4dc1-9d32-1e1590a1a4ec", "sighting--6ef77f00-09f9-4106-8961-67ff1de812b6", "sighting--a136a166-d96c-4b21-8aab-e5a22f4b98e8", "sighting--452b6fe3-3ba4-460c-9dca-01b27c65cc17", "sighting--ebe96720-b728-41df-a42a-20afe6de2cfa", "sighting--1555ce47-d3c0-4301-939d-844f043af2fe", "sighting--1469528f-9d4f-41d8-8bbc-041975311c4d", "sighting--239d9bc5-c4b9-4709-af22-7ab3cc384616", "sighting--fc9971f5-439b-47d8-b837-73922a0585d5", "sighting--c4cce440-b47a-4c3d-8f65-67df06d2aee7", "sighting--0ce9288f-e848-42ac-a344-83862171aecd", "sighting--0926fc28-53d1-4fe7-ae91-0b1982f6bcf0", "sighting--f4c0930e-7441-4863-bcde-b40fffb69c44", "sighting--65a01305-ac88-4a06-a041-ca1bffad7476", "sighting--35365de8-98bf-4fb4-b700-1dfe9fccd227", "sighting--034eeb42-45bf-468b-9c31-dd9316371bb9", "sighting--d651a610-5b9b-4ac6-a4bb-a3692972889c", "sighting--5db5c5ec-6818-44f6-a606-1a814af84c0c", "sighting--fb491f42-11aa-4f24-a8a4-f259a1a4329c", "sighting--854e7fc5-5916-4d90-bb48-390ec902d029", "sighting--14bd3077-8fe3-4499-94d4-a46e71d9978c", "sighting--c127aa03-27ed-4cc5-9630-430239298c9e", "sighting--1a7d8532-7e17-47b4-b701-90af75eeef22", "sighting--659052f4-1dbd-4536-8c44-8bb628ebcdcf", "sighting--9da214b0-381e-4a24-b248-1e21450c98cd", "sighting--648b3fb5-c51e-4055-a529-b612da4f3b3a", "sighting--b0e2a19b-34b6-4a1e-8e4d-22a2ad5ffc58", "sighting--00979b30-d9c2-409b-9d00-3cd3960d86a2", "sighting--e832f297-e74f-4005-9d8b-fae2ed35d3d2", "sighting--9fab0b5e-adf1-42a8-baab-4c0e2e15188e", "sighting--969d304e-edf4-4029-bbe9-e60614390dbf", "sighting--728adf4c-fdbc-45da-ae7f-985f685d5f21", "sighting--c865f6c2-f46f-4585-87ca-141147068851", "sighting--914d4d73-1f7a-4614-a597-33b92a28a9ef", "sighting--f9fbdbf2-1d25-467d-9dbc-e7f7daa01201", "sighting--7c1834ed-13da-4999-8284-f3c155bdac7b", "sighting--52e17223-414d-477d-824e-820815fac920", "sighting--68ffd176-aca8-47e7-bd89-b8d4729e1608", "sighting--2e1441a3-314e-4e45-a7d9-64f3aab0e4f1", "sighting--6d5bf48c-1396-4ee8-8fd6-90f13d9aa6b3", "sighting--df23264f-ef20-408c-9a4c-da5a7a81d3dc", "sighting--67912832-b473-421b-bc11-694f3e26db5e", "sighting--0a43d100-bfb8-4dea-b1e5-d1813a62331a", "sighting--fc946c8e-adb7-4b0e-b968-17ad777275fd", "sighting--e9e358a8-912e-4a5d-a4df-9088a38ecd73", "sighting--214b7604-8c60-4fc3-96a2-156d7c39c6c9", "sighting--1524f982-3940-499b-9ec4-7181184173ed", "sighting--ac6d9553-66bc-4e07-bfa3-bb8fc3d4027e", "sighting--175a3ab6-1f55-46b8-92f6-e6512ed36df0", "sighting--ff48efa0-c7be-49cc-94c0-38b115856451", "sighting--499427c9-6f78-4960-b92d-148bca0494d7", "sighting--684e867e-c55d-4e10-ab80-3159f1d489bf", "sighting--7d2ff69e-cad7-4c3c-a11d-5427298b75cf", "sighting--2d9703ff-8dbf-4923-96e5-66441627c354", "sighting--7396723f-7ade-4f12-baca-4ed56c76c12c", "sighting--a6cecbee-7617-4c6f-9244-ef074b4aa40d", "sighting--27e63e78-5122-4da6-ad32-4cdce59c96dd", "sighting--c491292d-5f73-40bc-83a4-24c2e98d3633", "sighting--cc425cf6-15d6-43c5-a484-f6f66e663c2e", "sighting--6bbab53f-9fa3-471f-a1dd-7f765bf3c991", "sighting--ce02b3ed-098c-4b1b-a09b-57b0513509e4", "sighting--8cb767bf-9be4-4581-a753-50a7e518cf73", "sighting--4ac2dc01-ac34-44d0-a4f3-84c31648b699", "sighting--53dc6003-f7e2-4a2d-aeb9-0e0d206fc927", "sighting--3201eb23-43e1-45f9-8848-5e94d4b009b4", "sighting--6a558de9-27e9-48a9-b319-9e4dc5e1c050", "sighting--2b3683f8-8235-4bc1-9e61-60ccdd28ca4d", "sighting--479cbe2d-21be-4f00-b99f-dc35bba225b0", "sighting--b7374742-669a-4207-baa6-8b6f9ff87fec", "sighting--e037d5cb-cd40-48e1-971a-67396f986719", "sighting--845f82f3-4978-4cd1-bf30-d8a6d66ff694", "sighting--1cbf4684-eddf-48b6-9865-6dab06c7454a", "sighting--9cb6a479-51cb-4b6d-8902-87b1c944527a", "sighting--1f1c0b06-17e8-439b-8269-f0931230744a", "sighting--973766e8-d5b5-43eb-a9c2-55842e36f803", "sighting--78856240-f412-4272-8c27-d30c00637b65", "sighting--f050a8b9-729b-44f6-a7f2-160674fa47b1", "sighting--c9efa502-faf6-4954-832b-88c85bc961b3", "sighting--53590197-2d2a-476c-b516-5436f15f6326", "sighting--5c1dba75-93fb-46d8-81d1-d97deed3667d", "sighting--66078f91-128c-4c62-b626-58353e54482a", "sighting--fc26fdb3-43a8-442f-8506-19f0fb29a69c", "sighting--d07df6f8-57cf-436e-ab24-dcab9c99c163", "sighting--f8ee1867-0159-4c3f-bee2-9d8bf769f035", "sighting--9464c138-9026-4ab2-a8df-8ef109a5055f", "sighting--3114f184-a184-4da9-963d-81f109a14c8b", "sighting--d737ac68-8a05-404c-81f8-39cfe465a175", "sighting--38a7d025-358b-447e-9f65-d4a1437c0093", "sighting--69af137e-aa61-4c4f-b38b-07cd5218baa8", "sighting--fd948139-8a1d-48de-ab50-af8aedb05441", "sighting--1f470552-c3e3-4ff7-8946-8ba283f531a4", "sighting--4ae6897e-6486-4aeb-8e17-7f76796c478c", "sighting--38cec197-7caf-48d0-82f4-442784de8fff", "sighting--1d248018-708d-43d0-bc46-f942eeab873e", "sighting--6a98ebc5-2739-4754-ae2c-234b4e388f60", "sighting--4ea7c00d-6e34-41cb-b9ab-d9d99aabaaaf", "sighting--a7f82c1c-7deb-448c-b180-65b259040adc", "sighting--c1b077e4-d560-4834-89ca-ef4a793264f6", "sighting--74837c70-bfc0-4ec0-8ce6-5ad506aa1120", "sighting--b559f367-89ea-4b3c-b24d-f89efbff6b3c", "sighting--4d1fe1e3-3d70-4159-a792-fdbad9ccc00b", "sighting--70b136ca-939f-4e98-9729-22b17fd25009", "sighting--4c6ec4c5-fe2f-4457-b9af-6918b12e2dd7", "sighting--2d1b6928-1599-4858-a6c2-44a38a2c37fe", "sighting--c1bd43b8-3025-4568-8ff4-51774afa8d2b", "sighting--df4c46a8-bab2-49a0-8a13-372a407f8c96", "sighting--48320971-243d-4add-ba20-48f9619418dd", "sighting--bbb1d8d7-63e0-4aed-a713-75109be5f89c", "sighting--c70f4825-f99f-42c6-87f5-31e09f2f8260", "sighting--627c9fa5-c5a8-4a1d-ae3e-318e6c84a109", "sighting--1b5a1065-10af-4b05-9f66-82c689d54af5", "sighting--b2a3a032-f980-4bfe-b64c-74e71abc6ab1", "sighting--181bf37e-27bf-4828-878c-a6e0a09f6137", "sighting--7b677a54-81f2-48bf-a9cb-6610892c2225", "sighting--a5ac367b-a8ae-4094-96c8-843a99510684", "sighting--b8dc896a-f300-4bdb-88ad-26a2e5094a10", "sighting--b9cca50b-6c96-4c8d-ae91-3537c5cc0f2a", "sighting--4a895e2d-0063-40cc-8b2b-9499f448d446", "sighting--19dba7fa-7fa6-4bda-958b-291231d06f3c", "sighting--2cd856ee-8407-41d0-b827-e5e5034c3be1", "sighting--763c631f-a8ab-4376-834d-34af420317e7", "sighting--c9fd5932-c725-4fe3-b2e9-310a76d6ecb5", "sighting--bf273f75-43e2-44d4-b65b-6861391a9c1a", "sighting--6df2e606-f04e-4775-828f-9b4fc6a9bbe1", "sighting--d2a77ce5-7325-433f-b6b2-f07a40949981", "sighting--b58e289a-1146-4896-ae87-dfe5305ebb9e", "sighting--40c6bf04-6318-4892-9af3-e03883bd9615", "sighting--80539fd3-cc66-44da-a8e5-b4f66823dfb5", "sighting--db30db51-b8de-47fb-8762-a945f8bf8d07", "sighting--c4597eff-38a4-41cd-8bda-59fcf6128b44", "sighting--cb411a84-17fb-49c3-bf76-d36fc78e357f", "sighting--8d3785b3-e3b8-42e5-a402-53f40c3c3af0", "sighting--ae73d47d-9102-4c2f-8b92-eea8462cdd0f", "sighting--20a3390e-93c4-4811-a52d-0d3c51d27e60", "sighting--0359b285-2ce1-4390-91d0-135f2a04f808", "sighting--c7c3284d-4b31-4917-b30b-332cbafa2555", "sighting--d2fb32fa-1b44-4d76-80a1-e6a663ee34fc", "sighting--19ba837b-54e9-4288-81f6-240c8a71883b", "sighting--c9a06835-29f5-4ee0-ad90-45b986b7d3e6", "sighting--013225f0-0ade-4171-862f-ffa6b2ab9d69", "sighting--fc1d6d71-daf1-4218-a422-b78fd431d5a6", "sighting--b7235846-6ebb-495b-8d6e-84eeac7b6a2a", "sighting--da828fac-17ee-45df-993f-a810b998c337", "sighting--0b8b8124-22e8-4a97-a130-ba4e6d43e6cc", "sighting--90fe5d01-c3c0-40e7-a7ab-63a313d0e089", "sighting--0bd72c4c-af0a-4871-9d65-fcd0dc14212b", "sighting--4fd88c15-d556-420b-bc03-caecbfaed15f", "sighting--cd245d46-a3fe-4b38-b11b-b66d86787c1d", "sighting--1e5bbca8-e8b7-4bcd-bfca-6177d6d57b27", "sighting--5b076633-f0a5-473d-bc09-3f513ee9c9a8", "sighting--da3c3ce8-9033-4543-8de6-c3f63bb316d4", "sighting--76f83e4f-c086-4c35-a64d-3341f7b90c02", "sighting--39ef5481-cc5c-4353-9993-56e42c930cc0", "sighting--54e449ce-813f-4786-896c-e1d606174873", "sighting--5adfd94a-82bc-44a1-9e3c-237a2eb7b5d7", "sighting--62a2198c-219d-498b-a86f-804af85f64d2", "sighting--b68ec954-3e7a-4091-b574-f4ef12e68537", "sighting--7b3a2abe-599e-4bbf-836c-abb20c56246e", "sighting--30dc321d-0e8d-40bd-9061-8c4d24f7f8e0", "sighting--9a1a925f-6aad-4860-ae9d-e56ebe554425", "sighting--51508483-7616-45a5-95a9-181331dba887", "sighting--6e0cb499-834d-4263-924c-b3fbe1420a57", "sighting--b9b45d8a-a06f-4a5a-8328-81fd2c65cdf2", "sighting--a1d5c35f-c573-49b1-a024-f5194775a8a9", "sighting--38e48cff-2cdb-43b1-8a86-b85564d7ab08", "sighting--14c5406e-31b0-41e2-9278-73b3e0794b1a", "sighting--ad87debd-1760-47d1-a30d-7f6e33346714", "sighting--077d140e-15d0-403c-95b5-555509847f34", "sighting--cb47d4bc-2322-491b-95b4-e93197e7987b", "sighting--914d2a07-c79b-408a-9e4f-5a21ce197c20", "sighting--3e4fc634-a916-4cd4-a1dc-d2b05a9694d4", "sighting--a0397ffc-aea9-4c11-98bd-14bdf98ece65", "sighting--984866b0-8d92-4de7-a2ea-4b0e263abe35", "sighting--68bf423f-7a14-49d5-8928-b2c4decfa47c", "sighting--d284c10a-3df4-4869-aee8-3e71d5fd3aeb", "sighting--6164689c-6acc-49f4-bd55-71cfa8152d6f", "sighting--c561be40-63ad-4fcb-b319-3c613a9f36ee", "sighting--a5cb1d2b-c8f3-4297-92da-3158a6cfeb85", "sighting--b2390e6e-5f69-426c-8549-fe9c3ecfa0a9", "sighting--6f48fb07-4349-4a48-b942-125542423462", "sighting--959d7eda-a0c8-4a68-b5f2-1ea4d506aca3", "sighting--25fe921d-3059-4398-aa0f-61b07bae191a", "sighting--3ba4ce85-2129-4afd-877d-14dda3e25ec1", "sighting--5f333b97-4144-444a-8da2-d07b1d8ee9cf", "sighting--9ab7df4e-02f6-4666-9cd0-806f48b6bca1", "sighting--7f5c604d-b3e5-45a6-94d3-c55a88e44cd2", "sighting--1243569b-b703-4dfd-b8f7-78a9ac98e011", "sighting--28aa397d-89b0-49b1-8e92-6a0f0b8f9a59", "sighting--ef201627-3425-4431-ba11-a6237f1a729c", "sighting--489a7873-5126-497d-9348-349f88cc6402", "sighting--40dc9d40-cf21-4e2f-91cf-f378be228ea9", "sighting--78a93f46-d4bd-43f0-9160-7e3738c8842e", "sighting--fa375849-7809-499e-b0e5-1590c1ba0fa9", "sighting--fce2ee01-688d-45e9-bb63-2ce34cacce6f", "sighting--960ecf82-adc4-4541-8733-5d67f53e4b39", "sighting--1a9a7a21-50c0-4d4a-a0ec-ec674bdc979f", "sighting--1169e6d0-4da4-43c1-a42c-e5ae68a9db17", "sighting--4f326165-d4fc-4d69-9721-3312bd975bc7", "sighting--8297cb17-d2de-43d4-abbb-8df127d46a78", "sighting--ebb55d8a-17be-4e76-95db-e40a7a9d01cf", "sighting--53a0aa04-2371-4591-b230-d3f2b48c009f", "sighting--c6289013-f718-4fbb-ac2f-df0b5cd04295", "sighting--a4cb5ca3-ef25-4ec6-be78-8c0a0442bd13", "sighting--839c71bb-304c-4006-9b6e-a07bfb436fac", "sighting--2700c862-d9eb-4062-9526-26369ae6d5aa", "sighting--26208c79-239b-4d38-ab78-71e8d9d015a7", "sighting--b0b1007a-23f2-4cf7-ab0f-248295c9197f", "sighting--0996e68c-1c07-4a76-8077-f5484b647312", "sighting--3e64d9a6-5d39-4985-a1b3-d6791c721958", "sighting--eb797767-5e31-433f-bda6-dca94c42c934", "sighting--c9dd9b8d-306b-41dc-bf59-222744080f58", "sighting--24594567-5f8c-420b-abd2-b0d8051d4328", "sighting--7a2fe2c2-ae55-4469-97d1-21878e92d0fa", "sighting--03eb9c27-02ef-4b9b-89b8-2b0af22d90e1", "sighting--90658744-dd49-4752-9a53-b675f3a15b23", "sighting--a0938c18-1698-4fcd-b82c-86c92597d7b3", "sighting--6ac9955d-e115-408f-b2d4-2d2ac034b2c1", "sighting--77e1e491-c99f-419e-adaf-d39c46a45465", "sighting--cc429454-d4e1-4111-b44d-de450d8dff3d", "sighting--358f95d9-2dc5-4f07-aee9-60c0f015eb38", "sighting--3ddceb97-946b-4d31-9be5-73a9bfdb3387", "sighting--cbf11e14-4a94-43f9-b121-9595d8b1b921", "sighting--0bfa196e-4faa-4da2-a20f-f69e3266eb15", "sighting--8f6cb15c-3970-4c62-a06b-1eb42e943f0a", "sighting--35a4cfd2-3380-490f-bad1-44d4f2fc6c37", "sighting--185bfb9c-1db9-4844-8122-0b5b0b292c18", "sighting--50175b84-3568-4b2e-b6a0-5b1f0c63c3d9", "sighting--aa1040ab-0e37-48cf-83f7-2de90893281d", "sighting--fd736079-ff2d-462a-a621-dd95a42f5459", "sighting--018d5fd4-2ce4-486b-ba92-0b94feb8dd03", "sighting--b58b63b1-88bc-405c-a5dc-28e30ac48a8c", "sighting--5990facd-7504-4c9a-b695-0932053ed671", "sighting--4b76164a-aee7-4b96-970a-a776ac7fa6e9", "sighting--4362d53c-2243-4328-9b2d-4751004e2100", "sighting--71e0e98b-9ecc-4fcb-ba75-2e85f7c91d62", "sighting--58047a93-6ecd-456f-8f7f-c522f1c25436", "sighting--1ec060f5-3cb6-485f-b17b-4455f8efc8af", "sighting--58b55608-6bdb-43a6-a89f-d715c4338dc2", "sighting--ad4b59c0-5974-44fe-a6cc-4ea7f0ac5236", "sighting--190fb9e3-174c-4af0-ab70-f90bcdf45698", "sighting--8e97389d-5c78-4fd6-8687-5453254e60c4", "sighting--3a390c72-e32b-49a8-9539-e30186fb944b", "sighting--46238460-ce97-4091-adaa-9266aa638fa5", "sighting--65e062e9-64c9-4cdb-94a9-e73976752727", "sighting--80018cf1-4e4e-465b-a0e6-3257cc1d5260", "sighting--f84f100c-2c20-4a99-8427-8b1d6a826e99", "sighting--ef331782-0bc6-437a-872b-90c0ad39b712", "sighting--5819541b-b3ac-44a4-ba28-27ff27fd4f96", "sighting--4c6c0ba0-03cf-412f-8f1c-737bfe8a09d1", "sighting--a5ffbd5b-c056-4ba1-ae41-08b2bd2be2a8", "sighting--238f07ae-89a1-4946-9c56-b833df614453", "sighting--a0507503-63c4-44b8-856c-55b8a9e31484", "sighting--76d87253-9b33-4325-be89-f36e17b5a3fd", "sighting--d93963f3-facc-427a-887f-9cf689f24bd0", "sighting--ac81c995-fe89-4dd6-b1f4-a11204589ea4", "sighting--4a1adee7-8dc4-4823-a05b-281b033ff631", "sighting--fef37d13-24d9-4299-9156-c89ebded4e44", "sighting--6eb39ca0-f724-4b74-b4ea-0b1942aa5f8c", "sighting--4886484f-bb9a-4279-b42d-613257a1cfda", "sighting--34f697f4-ce99-41b7-b9cf-7f61e83d460e", "sighting--51a99608-f672-4c60-8ff5-44630f6e1a0d", "sighting--92929855-8faa-408d-bb01-84c8688fdd8d", "sighting--bafef8a4-c637-4bfa-a1f1-c8963ba90cf8", "sighting--7714b754-6f92-456d-b370-d5811c5de715", "sighting--815b762b-bb4c-410d-b4f4-e395cfcbba72", "sighting--431f69ea-3d7d-43da-af7e-ae883f217b9c", "sighting--ae7799ee-0dbe-4d08-a314-06f40e81040a", "sighting--f8638d8e-6773-4d7e-89b7-88c8ac7deafe", "sighting--0bc87b57-92ac-4e4f-9819-29deec054e57", "sighting--d17c06da-ac79-4c93-a413-8eaaf4bbbf86", "sighting--6ca0a915-ce5d-4f33-bc36-ec33628d772f", "sighting--ff903b11-961e-439d-99cf-6a09fb4f744f", "sighting--bd83a321-556d-42bb-855d-39b1719c7525", "sighting--15f04e9e-9bcd-43a6-b8d2-9c3363f589a3", "sighting--c3f87f12-3629-45cb-8e1e-5b562b442188", "sighting--ba250912-56e7-4f9e-8f1a-9fd6512f2f12", "sighting--295aa873-af51-4bd6-b8a9-b9a511c2bc4d", "sighting--4de8580b-e5ca-411e-948b-8e7be39f65d3", "sighting--07a88512-fee0-476c-9907-b9f77a4ef6fa", "sighting--ca69f458-05d3-4352-b979-7213c57da2d9", "sighting--1b524fd4-6213-4629-bdd6-bd38ee7f7b94", "sighting--d530a08c-da29-42ce-bf51-aa9fb54baee6", "sighting--3f2cefe6-6045-4f8c-bbdc-e539902d8fc6", "sighting--2cb8db70-dd7f-489c-8af6-cd5ed6acf63e", "sighting--770286b5-a830-435e-9074-7ce7de59d74a", "sighting--385f53e5-004e-48aa-adcf-f77b94540a68", "sighting--a2142d7c-fca4-4983-9307-3938732d5eda", "sighting--f1664211-5347-4714-964f-29da92db3677", "sighting--905216d0-71fa-4d54-8a08-2e79a71d9735", "sighting--9d53fada-1ec5-4ad9-9a34-11a56ea56b3d", "sighting--c901cff7-a9d7-49d8-9a9f-1912d5928dd1", "sighting--18a6bfdd-e138-4460-98be-3b9c69f91622", "sighting--5c8b92cd-8af6-4135-9357-27cb456481e8", "sighting--deb7a03b-c19e-4897-aa33-3c57a187554b", "sighting--b3f12bf6-a299-452a-b321-c1844aa0a977", "sighting--7a71c3e0-0af3-4f7e-8508-276c9b20f7d6", "sighting--90d2ca83-d6b3-4446-9e8d-2f822dc00398", "sighting--688da153-c4de-4d8b-963e-cec1e31124c3", "sighting--e009c495-8251-4faa-9777-008889715af0", "sighting--c7242b46-71b2-42e7-b25d-6eb19c283bbc", "sighting--c4db7b8a-3c68-45dd-9b86-0665a2295a80", "sighting--d28a1a6a-f3bb-4b3e-acb6-95baea0dea9a", "sighting--77d1f932-89f4-4a0d-a82c-72d199141d6a", "sighting--a2240d15-a07a-4f5c-8ae9-2f6d83f78db4", "sighting--8c6e1a68-0894-4f01-8cef-004744961473", "sighting--63471d81-f52f-4f4f-a074-47c65b9f9f94", "sighting--93a9aa89-3546-4a99-b43f-589ba62a26ce", "sighting--0643fb69-7beb-4304-b64c-59f546dcc3ba", "sighting--aeddd36c-6a81-4272-8817-11819a371ac0", "sighting--8eead145-4a01-42c8-ba91-e69ccd6d6daa", "sighting--708b4afb-6e61-41d2-95a9-a2eb20c79402", "sighting--7951305c-d77c-4767-85b6-98a725ab5013", "sighting--bbe1dd8e-c599-4b7c-a4ac-0c5753a0811a", "sighting--eeb9328f-5a5b-4aad-9487-fcaae479c5c7", "sighting--20e77e32-25d0-4414-9257-eccc24b09d68", "sighting--f39c3cfa-b1c8-460d-a10b-1cbb7f16709e", "sighting--4bd8b432-7818-4450-9d7a-27343dcd3ce3", "sighting--d4348449-80d2-4285-b9ca-b2dc8fc0289b", "sighting--9d2359e9-6d0d-45d2-9c46-5c422b3fc465", "sighting--828530fe-059c-4bf2-ac16-d099eaa2bcbd", "sighting--4ccf8b1a-7c15-41af-a806-2ab413b75caf", "sighting--2731d8ca-efa7-4f07-921f-b0a448703aa1", "sighting--25b03865-784b-4b72-9e2e-5e7576f37dab", "sighting--b501677a-6ab0-4784-81ea-15dd99136bf8", "sighting--c39a88a5-ae43-4c9e-87b8-25f65404b48b", "sighting--b5c44845-962f-4c7f-b962-b8a4ef0791de", "sighting--d50eea18-5ac1-4479-8ad8-26cffaae2f84", "sighting--47c80c71-6812-4041-84ab-9d9a41139338", "sighting--63cd5351-d770-4a87-b5f9-7ff47bb27996", "sighting--f64573cc-9fe2-485e-ba91-0b9a533d2ebf", "sighting--cedbe031-968e-4166-890e-92311103f00d", "sighting--bc06bfde-3433-4b49-9bbc-9fb5b44b7daf", "sighting--c93058a5-5813-43c6-b365-f5b593af94ce", "sighting--4163227c-fb35-48a8-91dd-c0ea2466cd8b", "sighting--b2e74ab5-ec4b-44ec-ba86-e4ae8bfe891d", "sighting--31de649e-88e7-463d-bcc9-b7f5f9bff93a", "sighting--ae549f4d-ed0a-4978-8b36-3596d02035d1", "sighting--1027456f-88e1-44bf-92c7-02650a782b02", "sighting--cd3df926-c63a-432a-bc18-f88956b08b92", "sighting--33fc99fd-36b8-47a1-b226-d627d38e045b", "sighting--5cbca53f-965e-4374-b7e1-8b97d105f121", "sighting--fc2a7580-1d09-4fb9-9ec0-5cdf6ab20060", "sighting--0e5cfe2f-720c-4f45-b715-4e78cbe223b4", "sighting--936aee8f-5b83-4482-92e4-8a280bfde0b3", "sighting--4d10f205-d233-4fa5-848e-6dc5d9e6a68e", "sighting--e9325ae6-96d6-4d74-b333-f636bcb86002", "sighting--6431bab0-27b9-47a6-9d30-f8f392efa595", "sighting--f4028080-ffc2-42fc-a4e8-f7e60ca93708", "sighting--5e89436a-7022-4ba6-b741-7960afac80ba", "sighting--3b888424-ff06-4964-8ea3-941c70f4dad0", "sighting--0634c503-4f29-49cf-8eb1-80e2e727f1fa", "sighting--bbdd9a34-d59b-40ae-9159-e43e14568635", "sighting--b07ff844-c515-4489-a298-6082bb8db3eb", "sighting--6a9f0cdb-1a56-4fb4-8d8d-02b554a47b3c", "sighting--53b792aa-3474-442f-8a70-7f9f9eb73629", "sighting--31a14d0a-da8a-484c-8cb0-0a5417b573cf", "sighting--acb6b1e9-734a-4aa6-a1af-5b52507843ef", "sighting--b60c77bc-bb6c-43aa-bf4a-3da462f1b327", "sighting--157a98b4-5bdd-497d-bca9-77f051a7b1dd", "sighting--78415cfd-3358-49bb-90a9-d8ffd2f136fa", "sighting--24c707c5-98b2-455b-9e23-9a1a1a6bcd30", "sighting--7ef2b7c8-7322-4907-bcad-888dae9ebbd8", "sighting--c0a2fd34-fceb-4c6b-be55-f99a43d2afe0", "sighting--d2f0ec55-2dd5-4b5c-9d47-6a2b200a1cc5", "sighting--d5953dd3-f53c-4207-b8f6-668aa369da15", "sighting--6deee6ef-4286-4c07-89dd-f5c4d0b4e2d2", "sighting--bad7b0fe-e835-4404-bb96-3a4f2658774f", "sighting--5a5f4bed-45bc-47f8-8c25-d857d718647a", "sighting--08d9212c-1515-4532-bdf6-d3610ad7cab6", "sighting--63d467d4-6a1f-47c0-9f76-438b463d2964", "sighting--9d602f92-0452-41ca-b057-53a300575ff1", "sighting--cae59242-db76-4ae0-b558-90c2f4a9b2d6", "sighting--058b707b-1372-41a4-b25a-6251e04ea6d1", "sighting--16507104-2e89-413b-bf8f-88fe1034bd49", "sighting--7da65991-5570-43b5-837a-6c38355b3a9d", "sighting--139a4100-7b62-476c-ac5f-a054bc34cf92", "sighting--79dc9138-1a0a-4206-b4e2-9340f069b353", "sighting--8186b359-44f6-4a2a-af9d-2cad046952a2", "sighting--400053fe-aa1b-4ab6-b9c9-9a693f635fad", "sighting--7f8ad652-7321-4b29-97e2-0d8a1bc60404", "sighting--2ca269df-dd4d-4fd1-930c-e1af9c2f7db9", "sighting--93bb0d29-5407-4e90-95a3-2f8bd3e9c973", "sighting--53fb7f56-00ae-48af-be35-65434dc2d29d", "sighting--069f75aa-8fd8-436f-9268-27d5c4254091", "sighting--53e4ddae-d25d-4850-95c1-2702132441ad", "sighting--2bddc1e6-ab65-4bd5-8dfd-33ecbcdefa79", "sighting--c4dc56aa-e921-4925-8093-c2aa7c35c8f2", "sighting--f96afa79-111a-4f23-ae3a-9e3b66966316", "sighting--4856614c-d1e4-474f-a798-518c7ca2051c", "sighting--6f265bd2-9c21-4cac-86f6-2d18d6738fd3", "sighting--1ab66bca-24b6-45bf-a956-297fe91f7672", "sighting--25a8e8f8-010b-4606-899c-a458feaa39d8", "sighting--86ce9b74-d48a-4e0d-a108-71db9ffcdd17", "sighting--c019056d-9975-41eb-95f9-bb2276b4e4e1", "sighting--5ac023ec-327a-4060-81ee-e1c39f2140a1", "sighting--2cfdc176-72ad-4bfa-b00e-ef5200279388", "sighting--0c94b521-3c2c-4832-a968-ff82823af9c4", "sighting--884d89ea-0072-41aa-8eb1-8faa47c01ddc", "sighting--36bc8ace-cd47-4d6c-9bdc-1553c2f5dc3a", "sighting--564e358e-50b6-4350-b291-d9abb814bc73", "sighting--de9d821e-2712-49ef-8a66-82c2b5d38952", "sighting--b2b7a09e-6aa2-494d-b590-f2e98763092f", "sighting--7a325298-94d0-480d-83f8-9de382ed0531", "sighting--9126bd29-8a7f-4bcf-a877-5f0cc047cc19", "sighting--e0afb97e-31bb-446d-97f1-94c1dc44eddf", "sighting--209b5a0e-767c-498f-9add-428bd76e2536", "sighting--a7cd5223-be12-479d-b247-d61e08762cae", "sighting--bb08e161-2080-4b23-8b0f-b9e0e9b7664e", "sighting--dceb3c61-ecae-4323-bbb8-60948f1bc102", "sighting--0cba43fa-467d-4285-b49a-e2eac95599f6", "sighting--d0ed3845-6060-45b2-8a7e-3b1d247a6157", "sighting--f59bf3d5-f312-493a-a0e4-f87c1b3ed852", "sighting--fadc7a11-ce0d-40e7-8b9f-6409ad8d8899", "sighting--8e387e97-024f-4229-b741-911b9e465c0f", "sighting--69c027df-c8a9-4015-a455-581cd8b90f4a", "sighting--f5ecb374-c831-4bc1-bef3-bbe5d89868d0", "sighting--5cde38af-5a89-4217-bc06-679031b7c230", "sighting--8a0b861b-3cca-4b27-ac34-db9d69194b69", "sighting--44aa5da3-f1a2-4087-8c46-815c307c327f", "sighting--64cedc4d-c13e-46fc-9a06-1c3115ce53f0", "sighting--c46d0c93-890f-415b-a3c2-bd3deeb2b703", "sighting--ede2d1b4-b6fe-4aed-8b65-aa8153f2b9ef", "sighting--3f0852d3-dd7b-4f58-9e48-eabc3beb366f", "sighting--715b50ef-09c6-43de-b181-acc5ef9cd1e8", "sighting--56e99858-011d-4a26-9291-b23e4175ddfb", "sighting--e7915764-45eb-4716-84b7-47f1ca5bf48d", "sighting--608dfe16-99c9-4958-9a6e-0f25bd031b13", "sighting--3ae58f8c-f00d-46ad-a3fe-b3a656d56545", "sighting--56c50902-98c6-456b-8fcf-4b367613a309", "sighting--77bfa0b3-9c40-40c6-bfed-84b00b7d0192", "sighting--5185cadd-da9e-4d07-a9c7-4b92ad9bf04a", "sighting--6df1abfe-36b1-4f98-8855-b671836a946e", "sighting--c8b22235-d444-48a5-bdc6-8b749b8c0104", "sighting--1c367d94-43a0-4200-b8e5-d7ece1ad98a7", "sighting--51ce8c4d-e530-45f1-975f-142f3fc0b8f8", "sighting--bc37648a-0eb6-40cb-82b8-fd412482c864", "sighting--901225e7-1d63-422b-a3a6-ea7e9b33d05b", "sighting--609702fa-03f7-463b-b2bf-1ac777eb41ef", "sighting--d244ce40-f34b-475d-8931-af6389db0b81", "sighting--35b1c0e5-1d8e-4d36-87a6-8e33dd12bd34", "sighting--0109789c-1076-4137-a9b9-4a544b0b4b49", "sighting--3338973d-07fc-42b1-a235-d081f55508db", "sighting--dbc2c011-a9dc-456b-8d86-a969b88a8fe3", "sighting--3494d847-9d19-42dc-817f-b61ffc4fc30b", "sighting--15fee11d-7d58-4599-8d7e-fc0bdb495061", "sighting--32e72f89-a5bd-4396-a01d-8d5f6d1638d2", "sighting--520aedfe-1eb9-4656-af5b-6549812e58ed", "sighting--67fd902b-09ae-4a77-8a6b-1e884bf84b0d", "sighting--c3b60e6c-0fad-419b-b807-8c8165a8e018", "sighting--d57d7542-91f0-466b-acdf-9e3beab0ca26", "sighting--a3bb34c4-5fad-4fcc-bb72-cb1953f2c559", "sighting--18c20727-2e10-4261-ae9e-84934e23dc65", "sighting--eafd2ab2-0b21-45e8-831b-10157f8ed422", "sighting--08c66c54-4a3f-4f85-83ae-b49b0ae8a9a4", "sighting--dceeaafb-8210-42a7-8512-3d69b68b6399", "sighting--053a46bf-0f44-4605-bee5-4c04f13e41fb", "sighting--e840c54e-ccba-4258-86a9-908041cd4349", "sighting--9fe82276-efc8-40a7-b0fb-ecb03c223464", "sighting--eddd0795-7cf1-4563-9b3b-5548cf820afb", "sighting--b114ae6c-d076-4869-9b2c-70183bda6ece", "sighting--be6e9995-3b5e-4030-876a-1f91169d5e34", "sighting--e24574ac-6ece-4792-81f2-f795dab33447", "sighting--292593cc-55f4-4fab-988e-e8ac89440b74", "sighting--5c7a2e4c-758e-464c-b567-d5c37419ab60", "sighting--520a3231-b8eb-4763-bdfc-c97675981d2a", "sighting--07dce8c5-f892-4a97-9c07-a414d7a4cb4e", "sighting--b6ded626-05c4-4917-b533-63ebe56e27df", "sighting--5b9e8141-c692-47bf-9a19-95015ecb66f7", "sighting--8e43c67c-178c-4bb6-baf2-3b8f74e60a92", "sighting--7acf3453-804f-49d1-9241-d54c4fb9ddf7", "sighting--408e5b66-d28a-432a-bccb-6d34701b5f04", "sighting--3bc887d8-e16d-445e-b74a-195098e21a05", "sighting--67352a63-03c6-4e6f-9b19-17708f94f444", "sighting--4c355d7b-ee7a-4cae-805a-97d0ae65db7b", "sighting--dbc1ae3d-ac49-4148-a357-7d99b29b4988", "sighting--b457a5ff-c90f-444f-8cc5-3823c63a4867", "sighting--7b4101dd-8d32-4d0d-b130-94f54b725b64", "sighting--dc23df4e-56c7-4778-860b-751d306acecf", "sighting--26e198b2-b674-4fa3-9899-a7264bac945d", "sighting--dd19bd00-aeed-458d-816b-a33f541ddf0a", "sighting--7a5281ca-385e-4ba8-9229-baa4c71b4953", "sighting--57eacc98-6c60-4111-ae63-af874492f711", "sighting--58b12d7d-70a4-4182-80f5-f255a1e447bf", "sighting--b455dae0-1512-40fd-8125-7d26f3d6f568", "sighting--08cdcb15-445e-4619-bda6-dbfb0f9cd75b", "sighting--87ac640f-9333-4aa3-9dab-f9168933b2cd", "sighting--108fb329-bc79-409d-a3ab-78f9f266d540", "sighting--a48c1419-12c6-4fd0-a215-4c6c1ea63a43", "sighting--ddecbb96-13e8-4932-a341-7f12f07eda34", "sighting--420038ce-d246-42e5-9e66-f7d0f8bcf6fc", "sighting--1777a719-6c7e-41cc-96b7-78f622b1bfc4", "sighting--680072d8-33d4-45ba-a774-40aebdaccf3e", "sighting--bc8e834e-deae-4ac2-84d0-4006870ed58d", "sighting--63ca3557-66ba-46a9-8a8b-ae5788adbe14", "sighting--0846d490-7fe6-4f87-9885-3cd95a14b8f5", "sighting--a199f137-f590-4342-9007-631bd4c3e417", "sighting--7fa8e9c8-1bb5-492e-8079-22325b92f989", "sighting--1ef531f4-0ac1-4492-abb0-ff63cb03ad91", "sighting--dd78240c-103d-43ab-8304-c322d2bb68d7", "sighting--9e55219a-9271-4708-9574-340ab0b21958", "sighting--96ca4dd9-c9d5-4f48-8acf-8e8b94de385c", "sighting--4ca8c40e-80ea-4813-9b27-1e187dab4252", "sighting--65fa6b5a-2773-4627-8efc-62e8485f07e7", "sighting--999b9a06-5915-4912-9286-899bb1707993", "sighting--3c9a0681-8789-43fc-bcef-44d7dee5aefb", "sighting--2c954b60-d5f1-4e42-b064-649902eba83e", "sighting--ebd9cfad-daf9-43de-9a50-3b50ef7c2c8e", "sighting--a9ad7c21-4b85-434b-8e44-e6fa0e5717d6", "sighting--acfdf3f4-64c8-459a-aaa5-28fc055cbf99", "sighting--361da013-b3f3-4825-83e2-2e55484131be", "sighting--3565caab-edb5-42a2-80ac-6cc681b7df87", "sighting--5cd9b9d5-7fab-4f57-8b8e-2464bed4ab4b", "sighting--fa1a618d-f646-4f93-b72f-de9b5e03c53f", "sighting--08b58f1f-e815-411b-ba7f-c386b87064eb", "sighting--9d25059c-53b9-4a54-bf91-7378f5e0221a", "sighting--eed2fd56-b6e5-4c67-921f-d8e2bba2699c", "sighting--c6d66508-666d-434d-9870-efe5994d7750", "sighting--6ace7eae-17a9-45f8-98e6-ebb2dca1c77e", "sighting--017be4f7-35e9-4d15-82e8-fdb1066f736b", "sighting--6a1e3232-4b25-459b-b109-987258e51fec", "sighting--41328fdd-38a1-4e67-bc1b-210a5cbdf21b", "sighting--478108d2-e480-4ed2-8f43-9fc559b5167f", "sighting--68c14b26-3b66-4f3b-97c4-4fca527658ec", "sighting--407ff812-c98a-4cbd-9b33-2c84d0e8cbde", "sighting--90c60722-9263-4204-8a8f-e37526a66331", "sighting--049d320d-7670-487f-bbc8-c67217c182cf", "sighting--dd847909-d450-4bbd-b2f3-a66512aa27d4", "sighting--b9f470b2-97f1-4de9-9db7-60e9424e2832", "sighting--4a843a96-49c0-4df4-b3a1-2d7c3a9fe5d7", "sighting--ad093ad8-51db-4ac4-91e8-45fab2c82a1a", "sighting--b7c94250-82aa-4f51-ad13-e4c7f5c146b0", "sighting--4888fe63-0cfc-4787-811d-44e55c36cc36", "sighting--8520f8a6-5c8a-4541-b218-7823b13779d4", "sighting--cc079f1e-b291-4e7a-b7dd-334316def1e2", "sighting--8c38d1a2-a827-4e03-8c01-940317213597", "sighting--05a3e31a-ff13-4045-9733-81ec402a90fe", "sighting--4aeef350-38ed-4c08-9ce9-f44492af768b", "sighting--9631a7fa-ab8c-4362-b08a-68209c4782dc", "sighting--98e3e3c6-e4f5-4a45-a61a-d7daa05e0351", "sighting--1260a70a-13c7-426d-b13a-3164b4a35620", "sighting--6dde68e8-9df3-4a4e-8de0-ed886d724954", "sighting--ff69b965-8714-42f2-a295-b1d8649daaeb", "sighting--57eb88ed-8d01-4886-b027-dae5e9a92af3", "sighting--615f19e5-45f2-4ea6-8edf-aab7ca76a66a", "sighting--a71b3f3b-7a9d-424f-b912-2f504050309a", "sighting--6d60e67b-7d1b-43e2-9d87-5f09af7c2313", "sighting--5b5a1c75-b160-43fe-9277-e5d8247b5b43", "sighting--bdee3c75-a0ca-43e3-8fd2-eb43ec223c43", "sighting--014c7df6-b578-4633-9591-38d0f4b9f459", "sighting--21a9a5a3-8c47-4546-8dfd-dd7254270139", "sighting--1d52a5f0-761d-494b-ba2b-ea2647b0ee5c", "sighting--53cf5217-44b6-425e-aaee-50aecf576719", "sighting--0928b18c-de52-42ed-a492-1bfe464f0590", "sighting--607b2e30-2f14-4184-a0ad-913b5eb65ea0", "sighting--d8919f8c-ef94-4c63-9a99-bc1c0b0d6721", "sighting--581f1dba-2a41-465a-8fde-24162c2a8dea", "sighting--863aa45f-1178-4659-8698-7a141baa8be5", "sighting--b92564d9-6325-4455-941c-8d6d60f34909", "sighting--6f57bd0e-867c-4040-b1b0-629a520bfa30", "sighting--82ca1f7b-d6d8-498b-81dd-c1927b265838", "sighting--e0059a22-5d7c-4e61-9e83-3f310da94ba6", "sighting--1da8353c-6825-4cb2-b50d-e6833d35ee48", "sighting--8c38e210-7671-4d33-a0a9-4111639320cc", "sighting--63311b6f-1770-4c0a-8bcf-35d2f171e136", "sighting--fe95ff99-0376-43d0-a684-4b836f372b1e", "sighting--c5fb997a-cfe7-4cca-981f-d0acab415060", "sighting--858a6d99-54a3-49f3-b33f-be7260aa389d", "sighting--472fedad-84f7-41fe-afc8-f59a0316c5e8", "sighting--5b0f8c1a-475e-43fd-82e2-0a13eb578ed1", "sighting--eccc0e2e-475f-4809-adc3-7fc0e1a0c4f1", "sighting--ef6f5f57-314e-413c-bc23-2197920591bc", "sighting--2155b70b-4c58-4fab-9666-8a9d7733d698", "sighting--6cfb8c71-aa72-42f5-84ed-547f4833a8df", "sighting--d650e92c-986f-469f-92cd-fb6b88507fc9", "sighting--f4262b63-5be4-406d-9d86-68cba7c33a1e", "sighting--bd2b11ea-0d65-4282-b84c-02e2ceb94a0c", "sighting--5e8c6d7b-62f4-4ec9-bfe1-4036fcec489e", "sighting--12e6a835-6812-4655-9bc7-e2e861bc588a", "sighting--ea3cba88-6f4d-4e5e-b73b-838487323e84", "sighting--60384f98-bbc2-433c-917a-c3cce4b2d23f", "sighting--1fe1339e-2c4f-49ed-a2d9-a32505f9a73b", "sighting--167a5304-474a-444b-8609-fb5ad7283abb", "sighting--27561ed5-4130-499f-953d-e2d55c8cfaec", "sighting--fe0e2163-3efa-4dfb-8ea1-09722e0e1a4b", "sighting--2cebfa54-5104-47c4-b336-68c4b28d331e", "sighting--1d80c65f-730d-4bf6-8a6b-d873bbaa5d72", "sighting--5fcd5500-2476-4973-8066-74fdb5b7f552", "sighting--9c33c381-ae80-42e2-ab34-b903e4545942", "sighting--c4b9d32c-b111-43c6-87f4-4b3d929d32de", "sighting--0f72b746-f57b-4929-8a65-bd43c40720b9", "sighting--1cc6e564-d0df-4bb3-8c31-f79d4b72f8cb", "sighting--b26c9718-e5fd-4f07-8d2e-cd208bb28783", "sighting--f4fcefe3-fd0d-446d-af48-643581f5799d", "sighting--fce9ed73-8724-4bb2-b2d5-5bcb511fc157", "sighting--8141dbb8-717e-4711-8510-9d56db04ed52", "sighting--b9c3a9ed-b81a-45a4-9688-aa1874997d4b", "sighting--b41986c9-5c17-45d4-8364-bcda27fe1cf3", "sighting--91bf1ef0-bc38-4b3a-9845-4f7e99e031ef", "sighting--a58b39a1-e7a6-4035-86f8-f899f637fdf8", "sighting--57a012a6-5ed5-487a-aeac-a8720025738d", "sighting--c7ca75fc-29ee-45cc-a851-f020d8c5cc7b", "sighting--09cdac81-2461-471f-a030-ea2a9dabf889", "sighting--bdd8401f-3ae5-4e42-86f3-d1c0c18d88a6", "sighting--c375df0d-8b6a-436e-b208-933fd9fe00e8", "sighting--9d152f02-fa8e-4984-832e-687c2361dbc0", "sighting--c5e14e22-bdd3-4d8f-aa8c-cfb2f5c6d1bc", "sighting--1240a7c9-c8d1-4b53-a1c9-0baa64d71ca2", "sighting--3099afa3-212d-4df1-9e98-6f7ef517acdd", "sighting--3dec5eac-f8a5-4440-a543-3b7a589fa007", "sighting--9b8d016f-1c9f-4daf-8510-69faa2ee9e33", "sighting--8f4c299e-b450-4cbf-b1ec-9553f6c3eb0d", "sighting--207732c7-2f75-4694-968b-5c32dc407015", "sighting--39b7d476-589c-4c4f-9e5d-be25bf6b879f", "sighting--eef01638-cc84-44f8-8309-56d32ef1ad21", "sighting--4bdbab33-e4d7-45ba-8099-a6ce2f3b73ca", "sighting--51bf1712-9501-4386-b96e-eeb7398045da", "sighting--5c0956fc-663c-42b5-95d9-0e7e85897324", "sighting--955ba74f-d366-48e0-9da6-7e2213f9d92a", "sighting--e74f0e9f-9da9-4d08-a6ae-71ffa41bf951", "sighting--37f73efa-6520-40d6-be5e-2116d2a9db3b", "sighting--6970ca87-d5e0-4fb4-a340-9a44f57cc671", "sighting--8266f88d-95b0-42ff-8615-58f3c800dc11", "sighting--ce838154-343f-4901-b6d0-cb0e998b1392", "sighting--e74160a1-0046-4de9-b973-4847093e68cd", "sighting--c17247a5-082b-407f-8c94-094b7e81792a", "sighting--7edd14b7-e018-4b9a-ba10-a37cf81fc4d6", "sighting--81ebe3c9-a96e-4d25-9f1c-45137079b26c", "sighting--811a7a17-1534-4006-8b04-18862f612014", "sighting--11d49117-8b71-4a28-8893-95e1236182c7", "sighting--7acd6654-87ad-4511-b59d-51effb556e59", "sighting--7fbbb68a-48bd-4fd1-b760-ad89ae5f4edc", "sighting--778188d0-a8b0-4394-a8a4-c0177f18d51a", "sighting--7c3c2f74-663f-4c79-8faa-88f4bfef7e3e", "sighting--b7f37d94-447e-4bd3-9d05-23e7480deaaa", "sighting--34fdcf5d-6642-4c88-8093-12a966cf5321", "sighting--8486f1db-0875-49d8-9498-632fc0d47486", "sighting--617c8a58-3a97-4d52-ad9f-742479de9ed7", "sighting--61e079ca-a265-4fed-a4ff-db61e959dd53", "sighting--b8d35c51-ddbc-4800-b163-5553b42b0c54", "sighting--9ea49000-9447-47b4-8cef-4a272650ed40", "sighting--60929a2f-7fec-488a-80de-1be0f380e874", "sighting--033e2c4d-eb21-4ab4-ab0c-e428347dde33", "sighting--e6440853-7673-426e-beb2-979e1367f438", "sighting--69679ae8-54ba-4021-8c36-150fdf02ae9a", "sighting--33af8836-f2a9-436e-aaf6-69a8e2cf420b", "sighting--3182f2b9-4040-4a83-bba6-132c7bebdd57", "sighting--d012098c-29b5-4210-9f0d-727789d8fa16", "sighting--479b8b2a-771b-4b7c-806c-832da0022f43", "sighting--d1d4e1a5-04cb-45dc-8889-55ffd836d5d0", "sighting--056d6195-6150-4ffb-90bf-ed7e27e53df2", "sighting--9ed47d49-de0a-4041-9444-d33d1884aba5", "sighting--aab39c6f-b003-4095-b4be-51bcd1678826", "sighting--f690bbe6-2266-4973-9624-be83544aba91", "sighting--86ff6aa7-8b8d-4dfe-a66b-6829050befe0", "sighting--9088402e-2a1f-442b-9222-99db97debf31", "sighting--6c2e84ca-ec39-4b9c-9df6-7b15397df070", "sighting--96f8e30b-c36b-4e3f-a221-b957cabe20ab", "sighting--877a29de-581a-4dcd-9dce-eab95323bd3a", "sighting--c7c2c61d-6a51-4833-8114-ea6528db2394", "sighting--14d32d7c-1e5b-455b-973a-c35e72bf941b", "sighting--b08fa607-91ae-4bf8-8887-1be3548ac3e2", "sighting--73113e55-366b-4130-a359-f1eebceeffd9", "sighting--afee881c-9960-45e2-9b6f-cfbcc2036832", "sighting--5ea803d5-d1c8-4485-8e5d-022bd0e71bac", "sighting--9c012f17-23bb-4f67-bfe0-8161c505dbc4", "sighting--843f9462-16ce-472c-b520-94f0f95c404c", "sighting--16e7e69a-629b-4745-825c-3a4bd4203d3b", "sighting--fc59f8d8-a679-4f47-82b7-380d2048a49f", "sighting--193bd3e6-2c3b-455a-9592-9ffff9de8c2b", "sighting--7c4b67c9-411c-4307-9cb7-c7f5a0b06fa5", "sighting--2dacf7f6-d0d2-4fb5-b7fd-561e93e32377", "sighting--adc66098-58e4-4486-a44d-0fc7a665ece1", "sighting--df82a7b1-e3e6-40cf-b9c8-6d88456774c4", "sighting--120cee7b-4055-43dd-b2bd-83e61a3365c3", "sighting--59c3d5ef-5ec1-4658-8c00-71ffffd81528", "sighting--e333567d-987a-4b4d-9f35-b5a5ba0f7403", "sighting--81f5ee96-f336-4f76-8473-ec9f7d9fdb2c", "sighting--2d771d55-fe53-4eed-b5c9-c0e754b5ef49", "sighting--5ff0b3ff-b9b1-483f-9387-a374c46fa40a", "sighting--f8d904d3-b08f-413d-a416-3956135b1dea", "sighting--d8ca7213-e8e1-4e5e-aab5-b9b040e8ef55", "sighting--a4c4fa74-7352-4513-ba16-f9493383c1cc", "sighting--665547c2-2801-4633-98b9-8bf0675515ac", "sighting--a1118334-b95c-4dda-9a5b-0720ee40eb58", "sighting--fd6fb3d3-6f46-4098-b6e7-e24f0638dbc4", "sighting--ba8e95ee-fa91-4a6d-9a21-12900e7502c3", "sighting--f9a7f19d-5a51-4f5d-8808-708468c216e8", "sighting--2b89b76c-9400-4101-94dd-c03eb011a253", "sighting--09439682-46cd-42c1-8aee-d496a577ce56", "sighting--93948009-2344-467f-b7aa-909af6ddc41a", "sighting--9b17befb-9fed-44ff-8fc8-2184556ced29", "sighting--c43f6c61-c143-4e3f-8035-5dba8b98d930", "sighting--ad2c0d05-26e9-4297-8df2-e83ccf6bbf69", "sighting--31c8abdc-2b1c-4439-995a-b2a844d37c96", "sighting--d9733b61-e582-4ef4-ad28-eb6146211f7c", "sighting--cf02ccfb-fb8d-406c-97eb-5be5a92f6998", "sighting--9fcea52d-70bd-45be-8772-3dfc7abd4ca5", "sighting--6dd02da0-7f2b-4e31-8b3a-9058be7570f8", "sighting--472ede5b-d6af-4827-90af-ddff39c98e7b", "sighting--610a90c2-e582-4ece-81c6-1a1723424691", "sighting--820d7316-1645-4bdb-a5b2-0651e72b9d16", "sighting--4cb64cbc-002e-414f-a00b-81b78d9bf596", "sighting--f8f9360e-c800-4305-9fa5-27ddf130f744", "sighting--aef46e1f-08ae-4f0f-869e-ba70c4043210", "sighting--a8a93beb-a310-448d-a88b-bdaadedcd067", "sighting--94c9636d-ed25-4284-96cc-230f82f9e07c", "sighting--ae138369-4765-4d80-8648-42d0ff716b26", "sighting--6ee1909c-2ea1-4a64-a1bc-61139a953055", "sighting--d3d548fe-26de-4289-8ef6-d0213a4450e6", "sighting--454d6f8d-782a-4956-a5f0-d1f9e2347e90", "sighting--34405603-b71f-4956-9641-1b48377a2a51", "sighting--2bdbfd0a-b2ac-4643-998f-102fa4592f08", "sighting--1b9300a0-0a0b-485e-8c0f-ff02907be2f9", "sighting--71215f67-b65f-4404-8b9e-58cf82bcd602", "sighting--89c76f1f-d7d9-4018-a8b3-3fd307640c4a", "sighting--c31e3eee-fb36-45e7-a1dc-af2972868647", "sighting--1680c370-53b6-4da8-b5e9-c3c1787bb844", "sighting--024a1f6a-429b-466e-bffb-903f336290af", "sighting--cb5b0159-4611-4560-86ad-390bde23ded3", "sighting--b64e6ecc-8982-40ce-88eb-163c2c82eeb7", "sighting--34f42026-f2bb-4753-9f72-fec1bc9fb566", "sighting--3bb4fa21-6c51-4e60-b7e1-e24c50e9b182", "sighting--8e5181e0-19de-448b-8449-b50825f10f81", "sighting--f1e6c097-ad4a-4450-b375-c8b4ac936c1a", "sighting--e3d1fd8e-7035-4bd6-8c2f-ee4e6446bbdf", "sighting--c5b91ffc-5d80-4a14-a6ac-816e23211cd5", "sighting--ea59ccf2-fe92-4d03-a26b-e9f6dc3c67b4", "sighting--a04c88eb-75b5-4dc9-a08d-98f1ae636847", "sighting--880adf26-0508-4baa-9e71-888bfe2f72b2", "sighting--93ed33de-dfd1-4232-8dbe-542adf113af0", "sighting--45c515ce-ce37-44ef-855a-d0beb6a1b8ee", "sighting--ef91164b-9b0f-49ec-93fe-1c5af620d936", "sighting--10866ff5-ea5b-43a1-963e-3350d109ff7d", "sighting--d04857fa-0305-4055-a4db-aa80c7876eb4", "sighting--24a94f10-9264-4047-ab63-b709fbfa6290", "sighting--67d19a66-98cf-4f73-bb0e-503f89bd640e", "sighting--c26f67de-3831-4353-970c-75cc0143d05d", "sighting--53ea46d1-969f-41e1-8ed8-59a39494407c", "sighting--247936bf-e925-4884-89f7-ab9e717b4b2f", "sighting--8973a853-1b81-4efa-bdcb-c767a4bd6561", "sighting--f2846226-8399-4759-a052-d936402a543f", "sighting--7b476391-dea1-496c-8ff1-c03500c6784c", "sighting--01664154-4eb9-4e6f-b8b9-2f8cba630944", "sighting--911a3b9d-18c1-473f-b8ba-aeb2d5bae754", "sighting--68cbb7c3-0970-4bb1-b24c-5141c389438e", "sighting--ad1f3305-4dba-4050-b851-504f98bcb662", "sighting--60c94d92-6e5d-4ee6-8f27-53975af2be7a", "sighting--a479755b-8e14-48eb-866a-a3b2be36cbfa", "sighting--41ea0917-0bd9-43fc-a271-7a9267b71d69", "sighting--6a3efbd9-5ba7-4cf9-acd2-d8447b40e67f", "sighting--0f41bf9b-f619-425b-a8dd-5a95feeb9c5d", "sighting--4c7d229d-d6e0-4a72-8da4-e2f838e45db6", "sighting--71a922f1-a912-4a41-8143-9e5a8640c534", "sighting--287c3baf-0b30-4f72-8dad-47d821ccb504", "sighting--5b256f46-e4fe-4273-8ada-74fd2e82557c", "sighting--e0494b6f-0f7e-418d-b818-ea2b90cdc8f3", "sighting--79419380-627e-4eea-9163-fdbed9929ad3", "sighting--f3e12889-d98e-4c4c-8638-253aa609633e", "sighting--2d772c47-0620-4999-a90f-ae450006b75d", "sighting--3d8d06f8-1613-4b6e-9335-19fdb10b124a", "sighting--8b31dc96-ca7a-4f16-997e-58c8784a8567", "sighting--3ec560cd-fd56-41eb-8b80-5607913f95f5", "sighting--b2d5cb45-01b8-41e0-8aa9-ca7ce4e57fab", "sighting--201f2708-722e-4ae0-bf4f-05b390bc5d9e", "sighting--f29e50cc-08a1-4085-a30e-2a8f2554a63e", "sighting--f5631c8b-89e2-4e3e-87ac-9b13c47c30be", "sighting--e461d9fb-7683-4974-9aae-4eee12fc8df9", "sighting--3aab1b72-f017-4f8a-9026-dc3d9085ede4", "sighting--5c6f0048-0c42-4f4d-9d95-a2473b236281", "sighting--528fb3d5-30a1-4c23-a336-a5ff8c6a831c", "sighting--6ec08a0c-fcbd-4ce9-ba3f-00b876a2fb00", "sighting--93ab286e-28a8-4cc3-9d2c-13263fc16846", "sighting--62145118-57a5-47de-97de-3403dd2d3b55", "sighting--69605a73-f216-485c-9c38-024523875161", "sighting--ebce1bcc-e006-427b-b96c-34fa15bbc1f6", "sighting--68e8293e-bbb9-4bf4-b322-3aa88e6c32f5", "sighting--85d0cabf-feec-46f6-9557-6daae9aa6a61", "sighting--e01f40de-c4e3-44fe-978c-f1e803672c61", "sighting--c17b19c4-0ae9-494f-828d-f2eafbf6717a", "sighting--9ed22111-ccbb-48c7-b612-de5531b0912e", "sighting--b634dc5f-c833-4b47-87a0-fe90cbf7963b", "sighting--c9912aa3-b1be-41c1-b172-5ed903c50bfc", "sighting--688c5c81-41d4-410a-b856-98b8634fbf12", "sighting--223a4fe0-ea00-40bf-8d48-f91a627626de", "sighting--80ba4f1e-323c-456f-ad61-7d8412f17c38", "sighting--4b1ec477-6e99-42a3-9f0f-d6f95a1c84a2", "sighting--e1665bba-cf30-419a-a870-f110ac91bfe6", "sighting--6e4c5eb3-154b-4c12-90ab-57c62df3095d", "sighting--215cfda6-19aa-4c52-ba53-b595fd7343ae", "sighting--bc1cec9c-830b-455a-8d9e-41694fcaca51", "sighting--95828aea-5af8-476d-a176-7c37eed5f622", "sighting--b35d1eab-ebdf-4cd7-8dec-1b1f40e18c99", "sighting--43952636-359d-4625-bd4e-d6805719b60b", "sighting--d1a9ab25-b7c0-4138-958c-3a3a5ad677e6", "sighting--bd8bb761-1d6c-4a83-a2ce-6edb5d704e2f", "sighting--e92cf969-3da1-4676-aa83-eb1af74ed941", "sighting--1541477d-4591-44c8-9e4e-3d6163308672", "sighting--396c0a04-9020-421c-805c-4f2ea2d54f0c", "sighting--8a8173f9-b44e-40fa-93ca-82de8c6b3f0e", "sighting--96ec6024-2db3-44cb-8e92-828fce4150e3", "sighting--5a79d0dd-ee56-48e7-bdf6-24af56905b66", "sighting--e86f16e8-3d61-4f18-8623-cab41749ecf8", "sighting--b9cb29a0-8cac-4ed4-b59b-423b966a1161", "sighting--af1d563e-9027-40b2-b704-2fe030873cf9", "sighting--6852cf5e-1409-4b9e-bcd5-9c5ca5fd3378", "sighting--3812278e-f061-4fcd-aff3-bc935b35edd4", "sighting--b91f9ef6-42f8-44ae-a9d4-b1c6ce2208d7", "sighting--2e4f5131-7f1a-4e83-968a-f1adaa4f438a", "sighting--29c325df-228e-454c-b0ef-6ff71092ac0c", "sighting--aa66c6cf-17a0-417a-8d3b-6a8563fe56de", "sighting--19aa31bf-debe-4d67-843e-c0656298e7e0", "sighting--4e67a46d-0d74-4465-ba3b-7bc53d0b8ee5", "sighting--c24e444f-e463-4729-8a10-e63a10952015", "sighting--97f87824-ec49-4392-91f1-3e8efb5db4e8", "sighting--42997fa3-8536-44bc-adbe-9b0ded81f667", "sighting--516f7468-c813-4782-9a90-cfcf89670816", "sighting--def452e4-f93b-4796-b851-a1ce15a7e450", "sighting--64029eb1-6492-4a73-829e-4cfebc6dc879", "sighting--e0361382-7c0e-4775-8ff5-b5a255be88d2", "sighting--7a411cfd-1e94-4a94-b021-b13380810934", "sighting--11b665f6-952f-442d-af8d-d0509f8eaeaa", "sighting--a648b76e-1bd8-46b4-a1f1-3586ad310339", "sighting--87755ace-e65e-43ff-975e-ca3b2505d67a", "sighting--5a73d004-71e7-4eab-8b57-d05cc1b217ea", "sighting--8dd0068b-b5fa-4462-8317-3e6d3a1918f7", "sighting--2ad277e6-94aa-48d0-8d15-f9e4ba33612d", "sighting--d8547e86-fd13-4c8c-af6a-c766ce857d61", "sighting--f38dc814-0b40-4bc7-aaa8-a53454a32295", "sighting--4fe86d3e-75c1-4dfb-89c9-23c939c7627f", "sighting--2279eb24-c8ef-4f36-9133-1b3273a6d95c", "sighting--49f8df2b-2ee6-4851-8880-55dc48a31662", "sighting--267148b1-707e-4270-b4e8-228e837ae483", "sighting--27196dc8-da5e-4fd8-8018-a695774581d0", "sighting--8b326e7b-e282-4864-b63e-f14679bc1ac5", "sighting--5f679e87-fcbd-46c5-9ba4-066c34b388a6", "sighting--6aa9294e-cbd5-4b7a-b842-da2344b8eb87", "sighting--2bf6c908-8350-4d2a-ba99-52b1a1a88e96", "sighting--b4128183-5cab-4f5b-807f-b1010a09d7d7", "sighting--eeb9e82f-137a-4ea8-857a-6811b2cd59ab", "sighting--0926c2cd-bac3-4258-a87f-54649c52d410", "sighting--85aff8e4-144a-4846-997e-3fcd399e044f", "sighting--5e6d6ba0-6d46-4b90-9bd5-cd9cd7ae389a", "sighting--92339693-69db-4406-8743-08e61adb7d9e", "sighting--8e760eee-c66c-412b-a6c9-84bcc07fa5e9", "sighting--09bacee5-0b98-485e-8749-a76212944f77", "sighting--6c7bef93-3c7c-472b-8cb8-445a26536a23", "sighting--af1ceff5-d766-49d9-8dd2-cb4e4002c0e5", "sighting--b1ee7f0a-e1b3-4529-8282-7321cebfe1f9", "sighting--d8a32554-d957-4114-bb2a-0c43dea2881e", "sighting--b4679b60-67da-4084-8825-226f822b3acf", "sighting--e4139fb3-5bb8-4c03-b97b-f1af32e01104", "sighting--b42f8060-ade6-4ceb-a9b2-84e6b5969e16", "sighting--258218b8-d773-4a27-8016-233d7149c02d", "sighting--1aa7de19-3aaa-4fa0-87a7-f61648308dfa", "sighting--c890465c-fb60-4d33-af56-d634c4bf8958", "sighting--1201ca29-0f97-4fb1-994b-7f986611c4d2", "sighting--f9f98369-f6c8-4915-9c64-ea9943841271", "sighting--b6a33a14-5fce-4481-b1e7-5e769fd05aca", "sighting--767ef455-99e6-4eeb-858f-5413c6ef901a", "sighting--120066bf-350e-41ec-8f7e-623af42235db", "sighting--4a6142e0-9dcd-46a3-a29c-d3873f8fa82b", "sighting--745b02c9-c65b-4856-9da7-910ba672403b", "sighting--218ff85e-54ac-4caf-8631-665750ac8cb5", "sighting--811b6105-42a7-4fdc-ad37-b3caeb6c1be0", "sighting--25c89cd1-b2ef-42e0-bfb8-6ff444ef2fc4", "sighting--b0703ce1-eb28-4ed6-a11d-f8ace8640836", "sighting--bcff433c-7257-4924-81cc-2115d8d8e38c", "sighting--2959d9e7-9988-4814-babc-0cfa745903f7", "sighting--e94deaf3-0c00-4d16-a8b7-de76512ecc72", "sighting--2b5fb363-0604-4f14-9c2f-d2ea67996924", "sighting--43ef2639-3058-4e4b-af8b-da9b48c32674", "sighting--da1be8a4-f709-46a7-9354-da8bb4fd462a", "sighting--47b25a23-ee4d-4a35-92e7-633c490f1fe9", "sighting--4be02ec4-a45b-46f3-af3b-8ca1a4b66eb1", "sighting--46d10c92-3175-484c-baf7-63c737a49e1c", "sighting--bbe7fc32-b5d5-4861-8bd2-5647f3e166da", "sighting--5e142c64-1e47-4c7e-a941-fe48264c3136", "sighting--b51dee97-9769-49e6-972a-ecf51b3bac61", "sighting--c4258f77-216c-4595-a01d-b79498bd7155", "sighting--9c4599b8-871b-485f-96ae-503fb2f4c60d", "sighting--20474b98-3db4-4195-99b3-b370447e057d", "sighting--0e97c809-0b2f-4873-9760-6a1afa9f95c7", "sighting--48af2a90-b392-4cdd-b26a-c967e5db661b", "sighting--49933a7c-4aa6-4509-8180-e82686d53a91", "sighting--8fc8006d-d91d-4da1-b6af-adc00b46d7da", "sighting--6cebf975-0852-4b26-8c83-cb1decd519ac", "sighting--0233b240-edaa-407d-b5a5-147e8db5c0da", "sighting--db4f81d9-9598-4ceb-86ad-bc798e5fda18", "sighting--490f0ec1-cfa4-46fb-81c8-c288bac10fe0", "sighting--937d8ffb-ff60-4d59-81a2-33c346fb41c4", "sighting--b5822994-ca9b-4327-acad-d91108b69ddf", "sighting--4dae988b-bf5b-4cf3-ba90-92166ea9b413", "sighting--2a468afc-5b66-4385-b0fd-58c1acb73250", "sighting--c2cfaf0a-d4e5-4c2f-ab5a-1ca3bdd7d308", "sighting--0d13dc52-473c-47f3-bae9-b016483d5f17", "sighting--a29cbe65-78d6-48fd-81a3-384be889a7cc", "sighting--829acdbb-8fa9-4e58-8861-5f99c862ebe3", "sighting--55f54241-2610-4584-a36b-82553a2b6711", "sighting--3295ddc9-0928-4f2d-a4e7-ffab00b549cc", "sighting--ef52d3e4-c0e2-4502-b3d7-6fc8a17e1e95", "sighting--adfd46e4-3179-4c44-b19c-b2b9073f82c0", "sighting--42ff0635-a753-4128-b335-205ed665ce55", "sighting--5bfc6a99-6c2e-4274-aa49-885a22ff1e21", "sighting--75a86b1f-9c4c-4da3-a9e6-74ec82a5363c", "sighting--9bad2b83-bb54-4cc8-9a91-923771e9b330", "sighting--643cba09-6cbd-4008-85d5-91fef0caa418", "sighting--540a2547-1e4b-4a88-800a-77ec3349d56c", "sighting--91a15175-05fd-4ba7-9ec3-ea744bd0cc4e", "sighting--685290af-2404-41b1-951c-471d4331cc3a", "sighting--3cf530f4-978c-4e00-a3b0-074446a4ad4f", "sighting--244f6bc6-440e-468c-8771-f85d794bb11a", "sighting--f814644b-bfe3-4bc0-8abc-1603c0e39db2", "sighting--35ad2745-a287-45bd-86c5-984b4aa0d304", "sighting--0620cccf-bcc7-4b80-97f3-4cc57f962569", "sighting--c223ad30-5b3d-410a-8bc9-08d7b9a67f37", "sighting--03750fa1-9b2b-40fc-8df0-7258b682c0f4", "sighting--424a24c3-d812-45a1-9c60-50b17d8252da", "sighting--0afa5ef2-1371-46b1-a978-89d7ac171276", "sighting--9fb630d0-d6b6-4ee5-8722-247092d1b197", "sighting--b8ec012c-ab65-409f-83a2-df5227b07bae", "sighting--1f22f768-4f18-408b-a817-f878e511d806", "sighting--ad58d68f-a63b-4ad6-886d-613ef234216a", "sighting--c736d7cf-03bc-48ff-b275-59ae6b51c69a", "sighting--a7dcdb48-31ef-45d8-9cf8-b40f108b6883", "sighting--5b2a0631-4a79-46b2-815a-e7c63f043114", "sighting--605cd0fd-b22d-467b-a839-73e4e01377ed", "sighting--9a00a453-f5f2-490e-af9e-7cd155ac27e5", "sighting--ae59f783-c700-40aa-82f6-2f2888691000", "sighting--01c29b74-7c9c-4052-a580-3809b7143fcc", "sighting--59c8f321-3022-4c4c-97ae-68d87ed7cb3c", "sighting--89745eb8-e23c-4f14-a0fa-a4507531bba4", "sighting--c3c8384f-4bb3-46ae-91fd-d2f199888969", "sighting--2df78f57-41b9-4919-be4f-bb4b14b417be", "sighting--40bc028c-6f93-4a13-b06a-9abde0233d80", "sighting--118295e6-b7d1-4596-9fbc-dd6ad61d1704", "sighting--b8deb8c9-043d-4fbc-8354-544fcf270f89", "sighting--7922ad1a-1dec-4901-aac2-7db23571fe75", "sighting--c45e73e2-3d7c-4bd2-b402-a0a0797ffbda", "sighting--353c6609-4faa-4e30-9578-e51711e73fe7", "sighting--6d2b383a-1a39-413a-b631-ce8277cbb9f1", "sighting--b7fcb9c6-6085-4183-b5ee-377040a5aacd", "sighting--df3b2d30-d59b-4b3a-99a3-14ef2c7d7179", "sighting--9c9d2529-a8e1-4e62-9fcd-182bf8373c6e", "sighting--a7ae0335-b5d1-480d-8dbb-56501b45d042", "sighting--49e0aeb3-4d1e-4009-82ef-0da2abd2fa69", "sighting--ef12339a-2af4-415a-9d94-753a6290dd70", "sighting--ef844a9f-cced-4ce8-8c7f-2ed7f41ee42a", "sighting--f8a284c9-bd9d-4b7e-a404-62d612461ab6", "sighting--adf035b6-4ae7-4a64-b436-214751aa5b63", "sighting--4a044ab2-32a1-4165-a150-0ec3151195cb", "sighting--609bf19c-6c08-4b88-b8cb-10304d1024f9", "sighting--fd3fade2-4902-43b4-8562-53140fcd2e11", "sighting--28b90196-e57c-4b26-aaee-d9b989d1bfa4", "sighting--b2c4c53a-3cd3-4776-a9a6-2e80bb257e0f", "sighting--988c6bba-7314-44a3-8c89-c7bea93a193b", "sighting--fe3db4b1-4467-4ac3-975d-54810e29acce", "sighting--74c2e11a-31e4-4f8f-b0c0-193a657bbccd", "sighting--ce2dc7b3-9cef-4432-8501-85ca5ff7965d", "sighting--69b85e2b-bee6-465e-8206-537f8940dda4", "sighting--a74f9709-90d9-4bfe-9d12-661c5718be29", "sighting--27c7fd5c-b31d-4720-b8f3-8b2da2776bbb", "sighting--b7ceefea-e56d-476d-bc26-4d044aa88caf", "sighting--000c7acc-0603-48c1-a7a1-ca162aa71864", "sighting--d9f064e4-eedb-438d-86ca-1f6fffccb722", "sighting--f9cc4fa4-d7b8-49aa-8dfb-e058c09e01e4", "sighting--a25122be-d607-4aa2-a188-cc049df00112", "sighting--4faf12fb-7e91-481b-801f-d626e2ad4a16", "sighting--b2992c26-a348-4a0d-ace4-b9e50d328c5a", "sighting--c9aed5c2-ba1b-4b4a-9c9e-f28f504c7e6e", "sighting--756b1468-8743-45a9-a59d-3d81babbd4ca", "sighting--bbed7cc2-425f-4938-bbd4-b0699f3c4ec7", "sighting--42914ed5-7653-4a5d-9550-9acecb590384", "sighting--e91826ba-dd9e-4aca-91d8-5640efe2cac7", "sighting--588d1011-b39f-4bc7-b585-c892c2b2190a", "sighting--c5b5ab1f-9ef5-423b-b0ec-4ea241f87be6", "sighting--9b0aee67-63e0-4626-9c81-41104cd9121d", "sighting--cad9ac53-3f73-4e21-9a93-cc07aaf297b9", "sighting--42054df2-2a5a-463f-bfe0-33eda1b61d1f", "sighting--9d63fe74-7841-4b2e-930f-8617721b2cd5", "sighting--ee7e4369-36e2-46aa-8ee4-21e5a17ae36c", "sighting--24cb1d26-fa2b-4845-b9a2-d777c63e3570", "sighting--278918bb-3783-4da6-b190-9d123665c15f", "sighting--8e1303e3-9d58-49b6-be59-88c173f33020", "sighting--1c6b39c8-c842-4f19-bc14-b9485ca9f9c6", "sighting--e67096bc-45c3-48ea-a74a-ae2dd2a229eb", "sighting--007980f1-8995-4657-a220-25bb1221f513", "sighting--5ff7ba49-ee3f-4b95-a44b-5f9e4843f712", "sighting--7cd267fa-c237-4131-8d6b-786bd66791df", "sighting--82250897-8dee-4a3e-8f0b-55e685e7e875", "sighting--56df6e6e-c98b-452b-848f-5e646f09dbb0", "sighting--e491be9e-de1b-4468-a3b0-6b6bec206251", "sighting--1720bd90-196b-45cd-b57f-ec752be020b9", "sighting--6bb02332-ffbf-43cf-a392-b00f058dc9f1", "sighting--423f466b-6087-4874-bc58-3a561ee59d19", "sighting--c4097b6f-1021-432f-ba0d-9c170f071762", "sighting--630b5e2c-95c0-492d-a2cf-3760c1fe3672", "sighting--eabe03b5-40de-42eb-9a5b-ec2b533ffc4b", "sighting--4d9bf3f5-4912-48cd-aaf9-c1df38209b0f", "sighting--540fdb68-62e9-43bc-bfee-c24066580c74", "sighting--dd421f96-50ec-429c-b0cc-fa78ced4929d", "sighting--b428f6ff-2d8c-41e2-a4b1-dc3d56b1ba4b", "sighting--dc44c2f7-a970-4518-9897-51a13fa0eb36", "sighting--2e9b869d-08df-4f6a-a55d-3d8bff350d58", "sighting--a0c659c3-936b-4736-9383-5087b2b560c0", "sighting--5ce40631-272b-4c23-a5fd-3a2ac3414d39", "sighting--1beeba3a-d66a-46e7-9fd0-248ec433e759", "sighting--66ca5091-349f-41c1-a31f-12e00a52b3dc", "sighting--7e666d76-4911-4b09-ae7e-52a59f5c3bd4", "sighting--80b3d13a-4093-4f60-8216-881036fea148", "sighting--de11dac4-ee57-41cb-b75a-c2ec8e366dd4", "sighting--3080e9e7-7d25-4bd8-bfda-4c54d016ed21", "sighting--b03aa513-7944-48d6-bdc7-bb93d1d8efd2", "sighting--dd56d00d-2496-4b91-a9c2-c6242154dd8f", "sighting--f821a0fc-ee56-4102-9f3d-f9ba14882fae", "sighting--29f44fea-549f-47de-a549-8a7134c01071", "sighting--87da0c03-637b-4190-883b-eb8359bde473", "sighting--fee1b32e-de76-4414-aa3c-7d76150053d2", "sighting--8489f013-5cd8-45d5-85e3-cdb90d63a6df", "sighting--38b0f1b0-7819-4cb6-98b0-22ec699f8913", "sighting--957647cf-d781-4ccb-b821-1dfef2fc8f4f", "sighting--ae5139d9-27fd-4d7c-b1c8-4913cf608ef1", "sighting--49d02d92-1e8e-40be-8654-3eb33957c0c7", "sighting--64949fd1-2e37-4697-8a9f-0953e8e9a6eb", "sighting--c2357550-38fc-49fa-aea2-247ad8572b5e", "sighting--c80a087c-e8d3-4b1c-a28e-06c5377a74cc", "sighting--fbc45f64-d59a-45f9-a252-4049bb740f09", "sighting--abfacde8-7ee9-40bd-89db-1a29e75785c2", "sighting--c3455ebe-6a80-4e09-8a0e-862c4af39bfe", "sighting--70f08ae1-173d-4363-8f7b-83aa54805c23", "sighting--653ad1d0-5c3d-4753-8570-4f22bf50b36c", "sighting--dfeb28f5-36a1-4710-b66c-13ffa02d34ee", "sighting--fe269faa-51b2-4e83-ab51-46f639af057a", "sighting--3f6fd8f0-e98c-42e3-8ef8-447a878cd968", "sighting--5d10b07f-1d61-4f0d-af8f-a14299dd8f7d", "sighting--96086e39-9530-4230-a756-c463b75e1941", "sighting--93873077-590f-45d0-8337-f1c7fb35e4c5", "sighting--1d388007-1ccc-4398-967f-bbc8cd614efd", "sighting--dec93dd9-b168-4077-b369-f5aa06d29898", "sighting--1ff4d0ed-b25b-4ee8-a6f0-20d54494b66a", "sighting--17cc242c-2435-4dc6-ad71-8daf37a346ee", "sighting--37825174-0528-4f48-8d00-63f916d5cbfa", "sighting--936d3a18-16ef-4e15-84da-05cec716e4ba", "sighting--d92ab9ad-166d-47f8-b4b8-5273672c03b5", "sighting--dc057c99-88be-4835-abad-c5e8f1fc0fd4", "sighting--6c9fbf5c-aca7-4a43-85a7-087fe5468fed", "sighting--6d9618bf-1767-444d-abf6-0067957f8648", "sighting--dc85d295-e15e-462e-9de7-10a74c8ea97b", "sighting--1f83dffa-885c-4f19-9caa-a71230cfa4b6", "sighting--76a1116f-427c-4807-bf31-beeaa4246c38", "sighting--a2b38dcc-78be-4d93-a564-bc2a9ebad50e", "sighting--f5f0028b-e8a7-4872-8b08-04535039d780", "sighting--5b8cccc4-034a-4d44-9fed-7ffafa685a4d", "sighting--7bf26b79-c649-4371-b478-d3151355ead4", "sighting--313c233f-5723-4650-8adf-aee1fd00fc94", "sighting--f1b3c429-71e9-4f74-ad1e-cb8522f8eaa3", "sighting--16ed8aca-caa0-4363-bb45-7dbde6bbe978", "sighting--ceceb601-4577-412b-845f-d23a431509b4", "sighting--43c884ac-ca61-458a-8d30-860178516126", "sighting--74d0ccf5-ff3d-4d39-bea5-c87022c8efc4", "sighting--896877ab-c214-4758-b9d3-d8fcab4958b5", "sighting--8c6105e7-aa74-4d37-aaf1-c90f6af36f12", "sighting--685d6f12-190f-4d29-beae-8e540e0f86c6", "sighting--272e27e0-c07b-40fa-b563-3ca40c1cbd13", "sighting--4b6e2149-ad4a-471d-bea2-6cd97470b287", "sighting--931f82c0-a9b8-4567-928a-e38c4c33730f", "sighting--d2a9db32-40f8-4f85-8507-f6a29a083cbf", "sighting--00461141-95da-4bc2-8dc0-19752e990b05", "sighting--aa04cbe2-57ba-4429-8385-f169ea401a1a", "sighting--00038525-bd2a-432a-944c-97f599ce014b", "sighting--4831229b-e75e-476c-906d-dccc5967c3bd", "sighting--1fc4d2cc-2485-4fa0-94c9-242a01868f15", "sighting--457ecac5-58ca-4c88-bdf4-d01620b59a1b", "sighting--ff7db067-42f1-4deb-977d-735e98ed8250", "sighting--4a18285d-21a5-4fea-a55a-cc4340b24a19", "sighting--0dfa07e6-1459-458f-9b4e-520e7eff6320", "sighting--76281ed0-1172-49f6-ab09-6c72da944d50", "sighting--5d0df1e3-7a5f-4804-ac8f-33e512dc75cb", "sighting--2478fa41-da05-4907-a623-474771b48894", "sighting--6e7a4609-9842-4556-aab2-aba2404b3802", "sighting--e85c8a0c-dc4e-4de0-b820-e7cc5e8688c0", "sighting--9e448a3c-105f-4da5-8e11-dc3f81a10261", "sighting--1fea04ae-ee09-45d7-8471-5084a6251a3f", "sighting--1ffcc5d2-98af-4460-a36a-c1990e70a4fb", "sighting--c5ba3c12-6de5-404a-81fd-7b792bb41eef", "sighting--63c0c2cb-15e3-4fd2-b28a-b473d66c2f80", "sighting--42f44c1b-721d-4df1-b1fc-177274d500b3", "sighting--1280944b-3698-49b2-a4e5-d99335692b0f", "sighting--aa508fe8-ca37-4f09-94c1-e4675c5b3af3", "sighting--deee8f6f-2d96-4130-8d24-7999cf28709f", "sighting--ff590891-dfe9-4733-9ea3-edee95c8d6f8", "sighting--381b1b79-f30a-488f-ab8b-a1590c8da6d3", "sighting--f2ea9cea-686f-4043-b064-3b51be5ddc87", "sighting--4fb02f07-ec9c-40f2-9861-ded601305cb8", "sighting--9e43de01-0b32-42c9-bdbb-72f013b83b38", "sighting--77440128-e5bf-43d4-8c7f-ddbd2f38de3b", "sighting--4cdeb7f4-4c5c-4e1c-bde1-756c945a43ea", "sighting--62784529-f273-4368-83b2-5cd3c52d346a", "sighting--20e438d8-5471-453f-9cb9-cf045588aa11", "sighting--8604379c-d89e-4ab0-8282-031d4b8a8cba", "sighting--5ec71267-3ee6-45ea-abc9-7934ac56788f", "sighting--99eef887-742b-4d73-a62d-8d42c9ad617f", "sighting--f816cd80-3ba0-4316-b385-57bdf1d98a80", "sighting--9bbed645-dc28-455c-b5c1-66fe45448924", "sighting--59627c38-91aa-4ea8-8a46-fddc1ec4ba63", "sighting--4c37ccba-a915-45be-a71b-f280076f4857", "sighting--78eb8152-de9d-4bc8-9613-a139ba5d7a57", "sighting--068d0f97-7f90-4a82-a3ab-e2f99f40d083", "sighting--b30bb42a-cefa-4b35-92d3-137a4058b828", "sighting--c94a2f7d-164f-4bb3-9e2a-ef5869f8c3b2", "sighting--ba27413d-9c87-4f7f-869a-f4c6ffd7e647", "sighting--063f9246-7970-4362-a8f1-1028a496b3e6", "sighting--15b18b36-7add-4563-b5cd-8bdb9346585a", "sighting--837a97cf-7ccb-4ade-8c05-a0be3c673a5c", "sighting--887938b5-fedd-482d-8b5e-b5afa5c6392c", "sighting--c1fd5899-bf79-4cb7-8ebf-81588e40cc4e", "sighting--6bd8ab4e-4126-4f76-ba3f-0cef37d180b1", "sighting--9e46c4a4-387b-484d-b355-f98c1981345f", "sighting--0ee90bed-6055-4281-a7d2-83f4a52e52c9", "sighting--601708dc-b2a4-499c-b536-6d3949a5eb7c", "sighting--434addc9-9aea-449f-8f3d-0e644ed93cf1", "sighting--31eabd52-87dd-4952-b172-d15e095ffae5", "sighting--ac8be227-afa5-4811-8edf-49ad6db19c56", "sighting--e46fa209-155a-47db-bf3e-c4baead2855b", "sighting--61b96ed0-fec8-4af1-95f9-05abfbbbd24e", "sighting--d51f3395-a3b1-4cf2-b67b-2ff17b59deb3", "sighting--3d061edf-fbaf-402f-90b5-0b024ab374b7", "sighting--e8be027c-e40d-40dc-b2ca-19541b8467ac", "sighting--db548a37-6b9e-4d97-9155-aab1ae199e03", "sighting--468ab78c-4125-4803-82fc-d3445196261b", "sighting--c8e95a1d-160a-4fde-9d6c-28505854abe9", "sighting--20413062-de47-4712-ba0d-049aa226fc05", "sighting--566aae65-bf40-4d1f-a6d4-23e691df221f", "sighting--98817d69-46c7-4f68-9472-62d8d0392b7a", "sighting--2f4aab97-21bc-43ef-9e26-a72e04b950f1", "sighting--9c4042b4-db1a-4239-9aba-1781342be1c1", "sighting--1c917be2-ade8-4137-aef1-2ab42d483c9b", "sighting--fda5428a-4dcd-4a6a-8c52-c734c506367f", "sighting--f4746168-10a8-465b-af2f-7926cad028db", "sighting--307ccb2f-730b-4f14-a4af-ecf686460311", "sighting--e71bc6e6-2afa-4418-a24f-f9e35814fdb6", "sighting--ac049666-f7c8-4d5a-a41e-d7164902a18b", "sighting--d429b4ac-1858-47ea-9e65-27b7e3b6d25a", "sighting--f6b34536-ce8f-409c-b86b-770fb724d7cb", "sighting--42684783-a840-4140-b0da-fd2f905ea34c", "sighting--fa3d6d17-e561-4da2-b54b-a6073e4a9bbd", "sighting--bdc0168f-de06-409d-93fa-5c109d23f710", "sighting--902bd32d-aa8a-4779-bb84-219b05c29d99", "sighting--9377ffd2-59b3-4142-b417-778c21bf2aee", "sighting--1fbfab0f-cb8a-47a6-a355-66fd0ad84e95", "sighting--8fcc4e07-68c3-4b69-a0a8-bccc84e42f5f", "sighting--fe186ace-1c49-41a1-a490-4ebc402e753d", "sighting--71f08d6a-a811-43c1-b72a-c7038098721b", "sighting--7d0847a0-b5a8-4f93-b0ee-31fb0d0f562b", "sighting--418a1787-0cc0-44ea-beb6-4c4ca04fd840", "sighting--64a91619-c701-4adc-839d-f4aa1be30031", "sighting--dbc18734-186a-4823-83b5-14dc2a61da8b", "sighting--3a930ae4-04fc-46dd-87a9-d5011ea34c20", "sighting--278ae42e-4abf-48a5-a9bb-ed520f5f3a8c", "sighting--873b925d-4dc8-40d0-9cb7-bec81e27cd5b", "sighting--823ca8c4-c9d9-4642-81a2-cc09107e957e", "sighting--ed36b5ed-db87-4016-a62a-984f892889a9", "sighting--15fb3906-6d0e-4d57-85f8-b142429cf535", "sighting--6fcf1414-6538-45e0-9342-034e6889fb9a", "sighting--a83c4641-0c47-43d7-8635-b03673ab6803", "sighting--9a951225-35ff-44b9-af72-57ce9e3362b5", "sighting--3ef69127-3eeb-4ff9-825b-adf3d66a5638", "sighting--40dd34df-f0c4-49c8-9be0-f64af3aa9bd1", "sighting--b5b5758a-f743-4e5b-8cb4-ba1b9181da59", "sighting--2e18c6e7-54ee-4d79-b6d2-b588866c31c4", "sighting--0cbde060-89ba-4f43-91e6-364693af75dc", "sighting--02a5c971-a6fc-4da9-b4ba-4c7ce90d182d", "sighting--1405ebd2-4bff-4050-bb67-86b28765654f", "sighting--9115c287-a380-4d64-9fbc-98afba424c30", "sighting--d20cd37b-e08f-4575-8560-e8595399ae25", "sighting--eab40040-714f-4358-8c9a-170b67386db6", "sighting--88cc70ed-bfb3-4203-9d95-1d957e167fd6", "sighting--d87a4009-4cc6-4593-9362-ec05fb1e67db", "sighting--109caf5b-91d7-45a0-8bc4-51624ea588f6", "sighting--0fed3613-5c27-46e3-b2cf-775fd13d34d1", "sighting--4bd1bc9d-8bb2-4a39-a354-ea1a0548d5ac", "sighting--7399fa6f-5a39-484e-b9b7-3c9d0bfd17e7", "sighting--65f4e9ca-c712-49fd-81d0-6e81adae684f", "sighting--ec506ff0-6191-43ab-a522-0fc033014b1f", "sighting--e8157277-f41b-4202-8488-44259d48c18d", "sighting--c4907f9b-c9d7-4b64-84f4-713cf40d99a1", "sighting--8f3b06d0-639a-4583-a34b-30f7d7fb6457", "sighting--d45b7d7d-11ad-486a-80c4-fa5f574e58ff", "sighting--e85ee63d-f9c9-4d89-9a43-a00c8cea9606", "sighting--e969e986-d21c-4d07-9818-5c5fecba6842", "sighting--f711f5d3-71bc-4763-85ec-f18eb8740c97", "sighting--a05dea8f-1e68-4ddb-a5bf-6ada78ffebb4", "sighting--887e7ea5-120d-47b8-91d9-eed147e60f6f", "sighting--7938d1b1-f2b2-43e1-9126-221fdfecd5d2", "sighting--5dc3680a-eb36-43cb-a8bd-9c4c8fbe301d", "sighting--45919d54-857a-4d83-8755-1415144927fb", "sighting--b1df9265-b15b-4e63-9c47-6e4a04b3cc17", "sighting--59b7f059-e728-4c17-b49d-3577d73db125", "sighting--e995af30-4115-4db3-8579-c961b2c13db5", "sighting--7fd791d2-b07d-4bf8-98ea-585a4edcf368", "sighting--6b079b80-a368-4190-b592-3b4c0c9a8767", "sighting--3871eb4c-7567-474a-b91d-0c1383da6c17", "sighting--eb6c1fe3-ce85-4ad1-aa17-6d07e67954bc", "sighting--a318abd6-dd2c-434e-b5bb-b11f5ab34d45", "sighting--6b143049-cf78-4072-a47b-bc873e5a275a", "sighting--e15f3df1-d3f1-48db-9219-6ec1e5a96f4c", "sighting--a8c004e5-af97-451f-8fec-702d576287ae", "sighting--0f18a21e-014d-41f7-bcf7-c5edea44a15d", "sighting--58d8eaa9-dfd2-4cb7-b78e-6e33ce926b47", "sighting--7c60f70e-6e4d-4804-9812-dccf3a0286e2", "sighting--63ec81a6-166d-4365-9431-13aec7ffc4ef", "sighting--0b98094d-9309-46c2-9fed-cc036965433c", "sighting--4fd02dd1-e322-490c-8884-e8507ddec58e", "sighting--bda2bb46-045e-43bc-b54e-feeb8167c74f", "sighting--923e37b3-0f6b-42bf-b1f5-7fa540318a69", "sighting--fc62aad9-cfe9-4531-ba39-f1f7ff5934ea", "sighting--c0f9614c-424c-40f6-81b2-71976b448390", "sighting--92faba40-2afe-4302-a6bd-9b3d5f5f2e9d", "sighting--808ce01d-7e94-48d9-8619-d54222c84c58", "sighting--adf8f384-185e-4c09-8fe4-eaeaf7246aa7", "sighting--5951ab30-4610-4358-a85f-240ddf881c9b", "sighting--67ebc3e7-0111-4272-885b-bfdebf8b0cca", "sighting--4adee966-47fa-460b-86fa-78e531b00bfc", "sighting--4472c64b-f747-4842-a5e1-98734ec62ff0", "sighting--e4de73c3-8410-4e74-86d3-4d174b21b04d", "sighting--f31a8a4c-903a-4f7b-9a0e-f48ac1d43601", "sighting--48480b90-a923-4c37-87d3-e852a7f80f22", "sighting--d3a7d36d-af1f-4ff3-99a2-7456c11b8163", "sighting--179990b8-03c6-4d1f-bbc7-2b2e96783dc2", "sighting--7db609e9-367d-4ec1-bd88-bf5e1efd3ece", "sighting--1d7e19cc-34fc-49dc-9a4f-c7ae21bc3e1d", "sighting--e89f58cb-7d62-4fd2-a597-f72d5a316d15", "sighting--8bb6e85b-e6c9-424d-b449-7ff67fc2f824", "sighting--72d8ba91-dd63-479c-89e2-2b1126f594b8", "sighting--158af402-cae8-489e-974e-fb9998f5b46c", "sighting--fe335003-98ec-46c0-bb55-965521e1fc83", "sighting--8a8812f4-b791-41e0-8fed-dcca59d68569", "sighting--a008d3da-fe2c-4d27-91ae-7e8d06441fcb", "sighting--d809f27c-0173-4a6a-b112-be7c87360319", "sighting--eb3418b7-9f69-4ada-84d6-6751804220ff", "sighting--8c3c1210-50b8-4c96-96d6-e22e90468091", "sighting--aebc8b93-26fc-43b8-8bc3-8d7adabe4e8f", "sighting--49192aa8-251f-4e57-b0c8-5bb7cd2ef5d4", "sighting--f04e67df-f2c8-4278-b5eb-6b65299fa4f2", "sighting--fb452543-d947-4647-9533-eb36bfddbf44", "sighting--24ec0fa9-f620-4b51-8bca-b5af3c878df5", "sighting--0287b431-4c56-4135-b8de-47311ff80572", "sighting--b6f23905-a27b-4545-9e17-f253dd08b8d2", "sighting--bbd90c51-ba2f-4ad4-bb59-539e44b9d5c9", "sighting--c4ef3070-1c2e-44d0-a712-76f4693a5955", "sighting--ed8ddc0e-3d35-49c6-ac21-0e62353a1434", "sighting--61b2cfa0-73f3-4136-b000-433ae1000c97", "sighting--73b402eb-e81b-4886-9d22-14eacf948cae", "sighting--643dc479-057d-458a-92ac-45c674c55321", "sighting--abeef649-8332-4f4b-b5ce-91f9cde240e7", "sighting--0ef8cdaf-84a4-4728-8087-1e8da1e3d21d", "sighting--1bbe6cdc-ffed-4ccb-ac20-f13fa7e4948c", "sighting--44ac465d-f2b5-496b-a893-017076ab2181", "sighting--1b450878-09cb-4e0c-93f4-3f412fdf49e7", "sighting--349e5fd0-b152-4c94-bbb9-20f087f55f6f", "sighting--221437b8-c2a1-4aba-837d-9e92779dcdac", "sighting--0122cc16-4179-4410-8439-7deab0ec3d94", "sighting--6e1a9dcf-72a5-467f-84c7-d6646260c77f", "sighting--77dcef88-a17f-429c-8fc1-20a0f2245524", "sighting--62365c6b-f4aa-4b33-bf8d-d0365689d95b", "sighting--753c06a0-9cec-405f-935d-6cf12cb14c05", "sighting--0e4c0b12-01bd-4bfd-9fea-1ff30e0773f5", "sighting--408c0ab9-749b-43c3-9624-d511f69c3f14", "sighting--5eabc591-ddf1-4e9f-8d9d-728af53a726a", "sighting--191bb0bf-76bd-4d39-b5b7-9ffe27b8b607", "sighting--d13ac077-c198-4fa9-920e-6fb20adf83fb", "sighting--c7c683bd-7222-4734-abf7-3fec2e451c80", "sighting--f17a4bfb-3355-4613-a8de-8ee72e53f49b", "sighting--3977c2ae-5d07-4fc6-b4b7-5882adb24808", "sighting--627b5880-25af-4df1-9031-d655999254ff", "sighting--affdf851-6d23-4e9f-a065-e457eff2c286", "sighting--16d13c8f-a466-4a37-b0c7-2d9cdae68022", "sighting--36ad350b-8e8a-41dc-95fc-ece720cc33c0", "sighting--ff395a0c-c258-4099-bb33-754cf65456c7", "sighting--d259468e-c9ec-488b-9ba0-99e3daaf112a", "sighting--dca51180-dd34-4285-902e-f8e87bd7cb76", "sighting--82301d1b-85df-418e-82d4-6172bc91bdd6", "sighting--73b76bc7-32e5-4e94-8cd9-f0d8b4e0209b", "sighting--742cc42c-e576-4549-9528-069aa8f0ccf5", "sighting--1ae74fff-f2eb-4c42-a1d1-dc117dabb823", "sighting--8bd14023-1c3f-472b-9580-32ec566fa949", "sighting--9f1c601a-115b-49fe-9131-dafd840272ff", "sighting--f79aa7e6-ba19-4367-ba0d-192312b53c15", "sighting--6605dd57-4f73-47ca-90e9-1666f29be96a", "sighting--1c4e5ed5-dc0c-4e49-a009-196ed47e92ca", "sighting--ade27901-b906-4e0c-9770-025cf70d5390", "sighting--49eb6e1c-2e16-426b-a098-284dcfa768d2", "sighting--2389a70c-b3c8-450b-bd9b-c904c3f1d689", "sighting--d131c748-eb4c-4acb-ade4-bf6798dfed78", "sighting--46a5d5ec-cfca-4003-8be6-d6489c738fb8", "sighting--ce568800-dd3c-4f35-b4af-db901c45d179", "sighting--d5d0d3f5-2714-46fd-9494-f35ff5252955", "sighting--f1601c7c-04d3-46ff-8bf9-78c98a390216", "sighting--951ced40-f53c-41cb-b538-c84141e1b180", "sighting--c0ddf1c6-ea7a-468d-ab7b-29a0d5804ed6", "sighting--4c652ebf-1499-453a-9c87-f1962b6fe10e", "sighting--e28c59ee-c339-4215-aa31-ec34fbeda7a0", "sighting--25950a40-7722-4aa0-81b6-3df5850e0cc1", "sighting--758ca362-69ab-468d-a792-299c871c4db4", "sighting--ec9f461b-eac5-4890-b923-4d3d87f4f72c", "sighting--6cbd6774-0f68-4c94-83bc-f43afee43606", "sighting--52f661aa-78d1-4d10-9da2-cd2242566829", "sighting--3233298a-ab46-4927-9f61-0a12aa0f0183", "sighting--ea57ba1f-8190-4670-ae54-c408491d3fe9", "sighting--c8810675-dff7-4211-be2a-33658106fa3a", "sighting--7866cd59-1b7d-45da-bc6c-30fd9b688499", "sighting--785d46d3-d5a9-4c69-a9f0-9d91250a42a3", "sighting--29bca61b-60a8-41ba-9571-4b8b377d383a", "sighting--c908f19b-5833-4413-935e-d42668ad3a5f", "sighting--744f6900-bc77-48b7-8e4c-aab00c0bcb93", "sighting--465f35fa-663a-41f7-b633-bb744d7c16b9", "sighting--3079f69f-1b70-42ed-8dae-1cc769027bdb", "sighting--07f49c82-8ad9-4c09-a950-b6a08f858ede", "sighting--8af43af9-d160-41ae-a562-f2358b2e33ed", "sighting--eaa5a252-b7b7-403c-8e62-8739377de2db", "sighting--ccdacc72-439d-49f7-a320-3891b3bc870a", "sighting--975e819d-a783-40cf-a2ed-32971d312f3e", "sighting--eb132df0-0ec1-4042-8391-18ae7cf54bc8", "sighting--7e461936-9727-4dc9-a47e-843eedf990ff", "sighting--046077e1-a9b1-42af-988c-44bc487b9356", "sighting--e98330d8-7458-435f-a120-18b3b58def61", "sighting--39e58f9f-ba78-446b-8bae-3d3dac346893", "sighting--319f9317-3a82-4570-be5c-78e0f72d7f70", "sighting--9eea1daf-cdaf-4600-8005-0797e8bb9c45", "sighting--f9487e12-eee2-4ec1-a3f3-b60c99090e8d", "sighting--81a0141a-69a3-424a-a258-7a7877b51892", "sighting--4c533482-3902-4637-af71-5c7445ddffaf", "sighting--8228c25e-dd67-4972-b74f-169f52516c31", "sighting--2850ce00-9aaa-4d85-9299-6b6fd83f0e80", "sighting--54e94626-4da3-4b51-b5c2-b3a8d0378897", "sighting--0d9cbd02-ccfc-4843-8bcb-3bc4c997cca4", "sighting--514fdafe-ef33-408b-97f3-bf3b74690bb7", "sighting--a230bcc9-5bf7-4d9f-80f3-9b9511e23b10", "sighting--01cacf35-4f61-4434-bf16-10a94ad1c4a6", "sighting--803f76c1-1a16-4f04-b404-cc27f98482c7", "sighting--80ab58d6-ae35-4c42-9f82-1e932e1aaad9", "sighting--bd43c6b9-b652-4173-9a9d-bd5e750e1dee", "sighting--ae4dd7fb-0ca5-4150-91b5-41e7a971cb11", "sighting--463dd896-51f1-4a65-a427-b5368277f3b5", "sighting--60690a9f-e54c-40a7-87fb-cdc4894e37f5", "sighting--d68e655a-1e7b-466f-8678-a6c92e95bc38", "sighting--2100ba5a-38e7-43a1-b2dd-9dda1a66a95d", "sighting--6afcbd53-b087-4eac-8e7b-5476c6491ab6", "sighting--a2f68b9e-a3d7-4d64-898c-55d62b7b43fd", "sighting--d48c8ffe-ff04-4657-925a-7cf58a037a91", "sighting--5f2df3d2-5be8-4263-8aa9-9b484dbaf508", "sighting--89d349e5-0a3d-4b43-93bc-3fe20e1da91f", "sighting--feae94fa-3cc8-40b3-a98d-714132c666e8", "sighting--288b75d7-adda-4e46-85ad-ac173882e563", "sighting--a5efa950-fa51-4aac-9e62-cc6494266bb3", "sighting--2b10cfd2-5f97-43f5-b81f-11fd4bca663f", "sighting--398e9521-642a-4029-acab-a3ac2b09dc49", "sighting--2b4634af-8bdf-41d2-84a7-7861415d7d9c", "sighting--fcfdc505-a941-40d0-89e9-6926459cbab0", "sighting--f666332c-aa38-454c-8535-996a2226fdfa", "sighting--6378ec6a-2609-4781-9c90-4fabb0d07bdf", "sighting--4a9c22d3-a55c-4a8c-ac34-602984fb894c", "sighting--bbefa2dc-b946-4d15-aeaa-1dfd1110b499", "sighting--efdbf302-53da-4da8-a6a7-dd1c6e6ebb77", "sighting--098167a7-aced-4c3d-b3ff-357f0a23b0a9", "sighting--ddd2f2a3-0524-4afe-aa7a-a2439b2ac752", "sighting--a6bdc03a-f0f9-45f3-b2da-9001d1baf1be", "sighting--9d1168bb-6711-4aef-9f27-c6228019225a", "sighting--038db893-5f53-4bdb-a5b2-cc3414b33b7f", "sighting--e7fbc44b-d438-48e3-9b7d-d1cbec42165a", "sighting--e6e11d1f-d71e-4e7d-a49e-32062791dd09", "sighting--75ef92da-9ae7-4e61-8c15-c48938d49d92", "sighting--d708c8f1-e85c-42a4-be8c-1dfc618baec4", "sighting--694c40d1-3bb1-449f-99f7-a049fdc136dd", "sighting--b8d2f678-e69b-410b-90c5-b7a15cc5d4a4", "sighting--eabaf788-f611-43f9-a188-f3cc8ab36ad0", "sighting--350f0a19-0f47-4328-b00c-11b9b3a233fc", "sighting--93d8fd96-b1f8-4dcd-8869-28d7bd1d0c63", "sighting--5971c500-5746-47ab-9609-8e309b91c74b", "sighting--8aaa64ef-4d22-46f1-9c6e-862b24518968", "sighting--2b8d3b0f-0472-4796-9bcf-2f2b55781e5c", "sighting--e726498f-da68-440e-86bf-af75cdec07d7", "sighting--3c9dd896-67ab-4992-8591-97c4123867a8", "sighting--cfb1b066-2bb1-47f3-a129-243114646907", "sighting--4b999eb1-7c2e-4712-83b0-0b98c83b70f7", "sighting--c436e0e3-daa9-4294-bde7-71d07a2a8e00", "sighting--beea59ef-5b90-4efc-9309-a423675e3760", "sighting--aaa603ca-ec05-4205-9766-a18568dfe717", "sighting--1ff44636-f892-4aaf-8042-d5b24ffbcf0d", "sighting--56338c47-4506-47f8-84f8-de5e35100930", "sighting--d0a53008-8945-4fc8-a45b-d440ec0dc141", "sighting--7ff129f2-7151-445f-b885-a59c63b51ec3", "sighting--40509314-e69e-4a4e-8be3-3a8c1bfe9dbf", "sighting--435cd8e8-6c75-4a9a-8ad7-b744a0cd6a96", "sighting--5ed658e3-82fb-4ace-a21c-6e634863d2ce", "sighting--cc884e12-3939-4929-b5ad-1e599df23b79", "sighting--8ec9957d-2dcc-490a-ba1a-d1bbebc6903e", "sighting--417ef7d7-91af-406f-98af-58e82dace9a0", "sighting--62014c01-9818-4c16-89bc-76c66e12ba02", "sighting--6b4319f6-15bb-446c-94fa-67c7b11ccfe6", "sighting--7e41e0b5-492c-4773-8f37-443dcf99a379", "sighting--9057c546-1ada-429c-8c03-9852bae211ff", "sighting--62643f7f-b862-4d2b-8a0b-02f7488b359c", "sighting--996279cc-299f-47a1-9055-97e980d5a722"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-04T11:00:02.207Z", "modified": "2026-06-04T11:00:02.207Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}